Huawei eA380-123 Скачать руководство пользователя страница 48

Страница: 48 / 61

eA380 Series LTE CPE
User Guide

4 Configuration Introduction

Issue 01 (2017-08-31)

Huawei Proprietary and Confidential

4.5 Security Settings

4.5.1 Firewall Settings

These sections describe how to enable the firewall function and filtering functions. IP address
filtering, MAC address filtering, and domain name filtering are supported only after the
firewall is enabled.

To enable the firewall, perform the following steps:

Step 1

For details, see section 4.1 "Log in to the WebUI."

Step 2

Choose

Settings > Security > Firewall

. On the displayed page, select

Enable firewall

Step 3

Click

Apply

----End

4.5.2 LAN IP Address Filtering

Step 1

For details, see section 4.1 "Log in to the WebUI."

Step 2

Choose

Settings

Security

Firewall

. On the displayed page, select

Enable IP address

filter

Step 3

Choose

Settings

Security

LAN IP Filter

Step 4

Click

Add

In the

LAN IPAddress

text box, type the original IP address segment you want to filter.

In the

LAN Port

text box, type the original port address segment you want to filter.

In the

WLAN IPAddress

text box, type the destination IP address segment you want to filter.

In the

WAN Port

text box, type the destination port address segment you want to filter.

Set

Protocol

Step 5

Click

Apply

----End

4.5.3 MAC Address Filtering

Step 1

For details, see section 4.1 "Log in to the WebUI."

Step 2

Choose

Settings

Security

Firewall

. On the displayed page, select

Enable MAC filter

Step 3

Choose

Settings

Security

MAC Filter

Set an MAC address filtering mode from the filtering mode drop-down list box.

Disable

: disables MAC address filtering

Содержание eA380-123

Страница 1: ...eA380 Series LTE CPE V100R001C00 User Guide Issue 01 Date 2017 08 31 HUAWEI TECHNOLOGIES CO LTD ...

Страница 2: ...e customer All or part of the products services and features described in this document may not be within the purchase scope or the usage scope Unless otherwise specified in the contract all statements information and recommendations in this document are provided AS IS without warranties guarantees or representations of any kind either express or implied The information in this document is subject...

Страница 3: ...ument Overview This document describes the hardware functions installation configuration operation and maintenance OM of the eA380 series customer premises equipment CPE Product Version Product Name Product Version eA380 123 V100R001 eA380 135 V100R001 Intended Audience This document is intended for System engineers Product engineers Technical support engineers ...

Страница 4: ...10 1 6 1 Network Security 10 1 6 2 Application Security 10 1 7 Device Ports 12 1 7 1 Web Port 12 1 7 2 USB Port 14 1 7 3 TR 069 Port 15 2 Hardware 17 2 1 eA380 Hardware 17 2 1 1 Appearance 17 2 1 2 Panel 17 2 1 3 Indicator 18 2 2 eA380 Cables 20 2 2 1 PoE Network Cable 20 2 3 Mounting Parts 21 3 Installation 23 3 1 Site Preparations 23 3 2 Installation Preparation 24 3 3 Installation Procedure 26 ...

Страница 5: ...Domain Name Filtering 44 5 Update Introduction 45 5 1 Local Update 45 5 2 Online Update 45 5 3 TR069 eSight Update 46 5 3 1 Firmware Version 46 5 3 2 Upgrade Management 46 6 Maintenance 48 6 1 Maintenance Preparation 48 6 2 Fault Diagnosis 48 7 FAQ 50 7 1 What Do I Do If the Web UI Fails to Be Opened 50 7 2 What Do I Do When Power Indicator Is Not Working 50 7 3 What Do I Do When the Data Service ...

Страница 6: ... local area network LAN The eA380 series can connect to external concentrators and Ethernet switches or routers to set up a LAN with multiple computers When terminal devices on the LAN connect to the eA380 using network cables the terminal devices can provide data services Security services The eA380 series supports the firewall and PIN password which protects your computers when you access the In...

Страница 7: ...and wired Ethernet data services The eA380 is intended to be deployed in wISP Wireless Internet Service Provider network They can also be deployed in industrial public security and enterprise network if the performance is acceptable to the network operator Figure 1 1 The eA380 deployed in wISP network The eA380 provides a variety of data services such as LTE TDD wireless routing and converting LTE...

Страница 8: ... and Confidential Copyright Huawei Technologies Co Ltd 3 Figure 1 2 The eA380 deployed in industrial private networks The following example describes how to use the eA380 for video monitoring 1 Use a power adapter to supply power for the eA380 or video camera as shown in Figure 1 3 ...

Страница 9: ...nnected to a video camera 2 Use a network cable to connect the eA380 to an external device If the eA380 connects to a single device connect the power adapter directly to the eA380 If the eA380 connects to multiple devices connect the power adapter to a Hub or switch and then to the eA380 as shown in Figure 1 4 Figure 1 4 The eA380 connected to multiple devices ...

Страница 10: ...LTE TDD 2300 MHz to 2400 MHz LTE FDD 2500 MHz to 2570 MHz UL 2620 MHz to 2690 MHz DL eA380 135 LTE TDD 3400 MHz to 3600 MHz LTE TDD 3600 MHz to 3800 MHz WLAN 2400 MHz to 2483 5 MHz External interface 1 Ethernet and voice interface RJ45 10 100 1000Base TX Ethernet PoE combined 1 USB interface for local maintenance only 1 SIM card slot LED indicator One POWER indicator One LAN indicator Three LTE si...

Страница 11: ...ter works 25W when heater off 9W Power supply PoE should be powered by IEEE802 3at standard PoE adapter AC 100V 240V DC 54V 650mA Weight 1 5kg The power supply adapter is not included Water and dust proof IP65 Temperature Working temperature 40 to 55 Storage temperature 40 to 70 Humidity 5 to 95 Installation Mounted on poles or walls Please deploy the device to make it power on in three months aft...

Страница 12: ...500 to 2570 MHz Band 7 UL 2620 to 2690 MHz Band 7 DL 3400 to 3600 MHz Band 42 3600 to 3800 MHz Band 43 Gain 12 1dBi 13 1dBi Input impedance 50 ohm SWR 2 Polarization Dual cross polarization Radiation pattern Directional antenna Table 1 3 WLAN antenna specifications Item Description Frequency 2400 MHz 2483 MHz Input impedance 50 Ω Standing wave ratio 3 efficiency 50 Gain 2dBi Polarization Linear po...

Страница 13: ...HCP server The default DHCP server address ranges from 192 168 1 2 to 192 168 1 254 The default gateway address is 192 168 1 1 The default DHCP lease is 24 hours The DHCP server can be enabled or disabled The DHCP server s address pool can be configured The DHCP lease can be configured IP address status such as the hostname Media Access Control MAC address IP address and remaining DHCP lease can b...

Страница 14: ...uthentication 64 128 digit WEP encryption 256 digit WPA PSK WPA2 PSK encryption AES ciphering algorithm TKIP and AES ciphering algorithm synchronously MAC address authentication Up to 10 MAC address items Support MAC address whitelist Support MAC address blacklist Ratio adjustment Automatically Manually STA management Supports limit of access users up to 32 users Support STA status query Upgrade S...

Страница 15: ...lic key To verify that a user is legitimate SSL requires digital authentication during data exchange in the SSL handshake procedure Connection confidentiality Data is encrypted before transmission to prevent data from being hacked by malicious users SSL uses encryption algorithms to ensure the connection confidentiality Data integrity Any tampering on data during transmission can be detected SSL e...

Страница 16: ... software Software integrity protection implements the Hash algorithm or adds a digital signature to software including mediation layers and configuration files when releasing software and then uploads software to the target server or device When a target device downloads loads or runs software the target device performs the Hash check or authenticates the digital signature By doing so software in...

Страница 17: ...he original message digest Then the NE recalculates the message digest and compares the new message digest with the original one If the two message digests are the same the software package passes the verification and can be used If the two message digests are different the software package fails the verification and cannot be used The public key used to decrypt digital signatures is stored in the...

Страница 18: ...After three login failures the WebUI login page is locked and will be unlocked after one minutes The lockingduration is incremented by one minute each time the WebUI login page is locked later When the WebUI login password is forgotten contact the device agent or maintenance center to restore factory defaults refer to the AT command manual to restore factory defaults by yourself or contact the dev...

Страница 19: ...nd newPwd the new password and newPwdConf the confirm password newPwd must be the same as newPwdConf otherwise the password cannot be changed NOTE The default unlock password is Zls123Q To improve security change the default USB unlock password at your first login and regularly change the password It is recommended that users do not set an empty password or a simple password A password must meet t...

Страница 20: ... run commands to lock the USB ports You are advised to change the password timely after first login and regularly change the password to improve network security 1 7 3 TR 069 Port Personnel in the central office can manage the LTE CPE remotely using TR 069 The management functions include device configuration configuration query running log exporting and device updating The account used for connec...

Страница 21: ... the update package size An update package is generally smaller than 100 MB and updates are triggered by the central office management equipment When TR 069 network management is enabled the LTE CPE regularly connects to the central office management equipment and the connection cycle complies with TR 069 Amendment 4 The LTE CPE supports the reporting of the following alarms High temperature alarm...

Страница 22: ...scribes the hardware and cables of the eA380s 2 1 eA380 Hardware This section describes the appearance ports and indicators of the eA380 2 1 1 Appearance Figure 2 1 shows the appearance of the eA380 Figure 2 1 eA380 appearance 2 1 2 Panel The panel of the eA380 provides the Power over Ethernet PoE port SIM card maintenance window and indicator Figure 2 2 shows the panel of the eA380 ...

Страница 23: ...80 Name Description PoE PoE port SIM card maintenance window Consists of the SIM card slot and USB port A SIM card is inserted into the SIM card slot The USB port is used for internal commissioning 2 1 3 Indicator The eA380 indicators are located in the SIM card maintenance window and are used to indicate the running status of the eA380 The four indicators from top to bottom are POWER WLINK and Si...

Страница 24: ... eA380 Table 2 2 Indicators of the eA380 Identifier Status Color Description POWER On Red The power supply is normal Off Gray No power is supplied LAN Steady on Green The eA380 is successfully registered to the network Off Gray The product fails to register to the network 4Hz flashing Green The network port has data transmission Signal lights 3 NOTE The identification Green Strong signal Green Med...

Страница 25: ...ble is an unshielded network cable that is used to connect the PoE port of the eA380 The PoE network cable connects to an RJ45 connector at both ends The appearance of the cable is shown in Figure 2 4 Figure 2 4 Network Cable Background Information The PoE network cable transmits data signals to the eA380 and provides DC power for the equipment Technical Specifications Table 2 3 lists the technica...

Страница 26: ...ial Copyright Huawei Technologies Co Ltd 21 Name Description The actual maximum operating voltage 54V The actual maximum operating current 650mA 2 3 Mounting Parts Describes the mounting parts that need to be used when installing the CPE as described below Figure 2 5 Installing the adapter board ...

Страница 27: ...eA380 Series LTE CPE User Guide 2 Hardware Issue 01 2017 08 31 Huawei Proprietary and Confidential Copyright Huawei Technologies Co Ltd 22 Figure 2 6 Pole mounting Figure 2 7 Wall mount ing No Adjusted ...

Страница 28: ...nts Keep the site away from high temperature dusty location poisonous gases explosive objects and unstable voltages Keep the site away from any electric substation industrial boiler and heating boiler Keep the site away from any radar station large power radio transmitting station and other interference sources The field strength of interference sources cannot exceed that of unwanted radiation tha...

Страница 29: ...nt an eA380 at least 600 mm higher than the record flood stage Requirements for Installation Space To facilitate O M adhere to the following space requirements as shown in Figure 3 1 Figure 3 1 Space requirements for installing an eA380 unit mm Requirements for Operating Environment For details about operating environment requirements see1 3 Hardware Specifications 3 2 Installation Preparation Bef...

Страница 30: ...egrees below a surrounding high rise building In outdoor environments LTE CPEs may be vulnerable to the following attacks interception power removal and physical damages Please ensure the security of installation locations Ensure that there are no obstacles facing the LTE CPE and enable the LTE CPE to face the base station Installation Tools Table 3 1 lists the tools used for installing the eA380 ...

Страница 31: ...10 mm 3 3 Installation Procedure 3 3 1 Mounting on a Utility Pole Context Figure 3 2 shows the flowchart for mounting the eA380 on a utility pole without an angle adjusting component Figure 3 2 Flowchart for mounting the eA380 on a utility pole without an angle adjusting component Procedure Step 1 Open the SIM card maintenance window of the eA380 and insert the SIM card as shown in 0 ...

Страница 32: ... slot to ensure that the SIM card maintenance window is waterproof Do not fasten the screws until the SIM card maintenance window has been correctly installed When fastening the SIM card cover press the rubber washer into the slot to avoid that it is exposed Do not twist the rubber drop proof chain Step 2 Insert the hose clamp to the wall mounting frame as shown in Figure 3 4 Figure 3 4 Inserting ...

Страница 33: ...slightly kink the protruding part and insert it into the other square hole on the front of the unit Step 3 Install the hose clamp with the wall mounting frame on the utility pole and use a M6 hex key to rotate the screw on the hose clamp to adjust the length of the hose clamp until it is correctly connected as shown in Figure 3 5 If the hose clamp is too long cut off the extra part Apply anti rust...

Страница 34: ...on Issue 01 2017 08 31 Huawei Proprietary and Confidential Copyright Huawei Technologies Co Ltd 29 Figure 3 6 The installation is complete End 3 3 2 Mounting on the Wall Context Figure 3 7 shows the flowchart for mounting the LTE CPE on the wall ...

Страница 35: ...and Confidential Copyright Huawei Technologies Co Ltd 30 Figure 3 7 Wall mounting flowchart Procedure Step 1 Open the SIM card maintenance window of the eA380 and insert the SIM card Step 2 Remove the sheet metal mounting Bracket and install the wall mounting frame as shown in Figure 3 8 ...

Страница 36: ...tall the wall mounting frame Step 3 Hold the wall mounting frame tightly against the wall use a level to adjust the horizontal position and mark the fixing points with a marker as shown in Figure 3 9 Figure 3 9 Marking the fixing points Step 4 Use a drill with 8 mm drill bit to drill holes in the fixing points Then remove the dust from the holes and install the expansion bolts as shown in Figure 3...

Страница 37: ... 32 Figure 3 10 Installing the expansion bolt Step 5 Align the four fixing points with the bolts on the wall and tighten the expansion bolt s screw nut to fix the wall mounting frame as shown in Figure 3 11 Figure 3 11 Fixing the wall mounting frame Step 6 Fix eA380 to the wall mount frame using the dovetail groove as shown in Figure 3 12 ...

Страница 38: ... Copyright Huawei Technologies Co Ltd 33 Figure 3 12 Fixing the LTE CPE Step 7 Tighten the wall mounting frame s screw End 3 3 3 Cable Connection This section describes the procedure for connecting the eA380 cables Procedure Step 1 Make the crystal connector to PoE network cable as shown in Figure 3 13 ...

Страница 39: ... connector When making PoE network cables follow the international standard EIA TIA568A or EIA TIA568A to arrange the cables Make sure that the two ends of each network cable use the same standard Step 2 Connect the PoE network cable 1 Disassemble the PG head screw cap and air proof block on the PoE port and pass the network cable through them as shown in Figure 3 14 ...

Страница 40: ...s Co Ltd 35 Figure 3 14 Passing the network cable through the PG head screw cap and air proof block 2 Connect the network cable to the network adapter and manually rotate the screw cap to ensure that the lock block adheres to the network cable as shown in Figure 3 15 Figure 3 15 Installing the PG head screw cap and air proof block ...

Страница 41: ...necting the PoE adapter 1 DATA port connects to the computer network cable 2 PoE port connects to the PoE network cable End 3 4 Installation Check After you install the eA380 perform a hardware installation check and a power on check Prerequisites The eA380 hardware has been installed Procedure Step 1 Check whether the eA380 hardware is correctly installed When performing the hardware check for th...

Страница 42: ...he LTE CPE must be attached 3 When the eA380 is mounted on the wall the installation hole on the fixture must be aligned with the one on the expansion bolt In addition the fixture must be tightly and firmly attached to the wall and must not wobble when you shake it When checking the cable connections of the eA380 check the items listed in Table 3 3 in order Table 3 3 Cable connection check of the ...

Страница 43: ...d in Table 3 4 must be checked during eA380 indicator check Table 3 4 Indicator check No Check Item 1 When the eA380 powers on the power indicator is on 2 When the eA380 powers on The signal strength indicator is on If the signal strength indicator is off no signals are available If an indicator is steady green the signal strength is weak If this occurs check whether the power supply is normal End...

Страница 44: ...allation of the eA380 is complete The eA380 starts correctly based on default parameters during power on Procedure Step 1 Start the IE browser enter https 192 168 1 1 in the address bar and press Enter Connect the eA380 from the near end using the Web management page Use Internet Explorer 9 0 or a later version Step 2 Log in to the web management page with User name set to default value admin and ...

Страница 45: ...ting Behind MS are mutually exclusive features On the LTE CPE s web interface select NAT Enable under NAT Settings and click Apply to enable NAT Enable or deselect NAT Enable under NAT Settings and then click Apply to enable Routing Behind MS Procedure Step 1 Log in to the WebUI For details see section 4 1 Log in to the WebUI Step 2 Choose Settings Security NAT Settings Deselect NAT Enable under N...

Страница 46: ...le APNs in use cannot be deleted The default APN cannot be deleted or edited An APN cannot start with rac lac or rnc or end with gprs Step 2 Click Apply Figure 4 2 Profile management 4 4 TR 069 Setting TR 069 is a standard for communication between CPEs and the auto configuration server ACS If your service provider uses the TR 069 automatic service provision function the ACS automatically provides...

Страница 47: ...able the LTE CPE to send inform packets to the ACS at predefined intervals set Periodic inform to Enable Step 3 If you set Periodic inform to Enable set Periodic inform interval Step 4 In the ACS URL box enter the ACS URL address If you want to disable ACS function please set ACS URL to loopback address 127 0 0 1 Step 5 Enter ACS user name and ACS password for LTE CPE authentication To use the LTE...

Страница 48: ...ction 4 1 Log in to the WebUI Step 2 Choose Settings Security Firewall On the displayed page select Enable IP address filter Step 3 Choose Settings Security LAN IP Filter Step 4 Click Add In the LAN IPAddress text box type the original IP address segment you want to filter In the LAN Port text box type the original port address segment you want to filter In the WLAN IPAddress text box type the des...

Страница 49: ...the client s MAC address is in the MAC address list Deny denies a client s access to your device if the client s MAC address is in the MAC address list End 4 5 4 Domain Name Filtering Step 1 Log in to the WebUI For details see section 4 1 Log in to the WebUI Step 2 Choose Settings Security Firewall On the displayed page select Enable domain name filter Step 3 Choose Settings Security Domain Name F...

Страница 50: ...owered on and you have successfully logged in to the WebUI A commercial software release for the LTE CPE is obtained Procedure Step 1 On the WebUI choose Update Local Update Step 2 On the displayed Local Update page click Browse and upload the file Step 3 Click Update to complete the LTE CPE upgrade End 5 2 Online Update Prerequisites The LTE CPE is powered on and you have successfully logged in t...

Страница 51: ...is displayed upload the version file and set version parameters a Click following the Firmware version file and select the version file b Optional Click following the Signature file and select the signature file c Set default firmware version NOTE If the default firmware version of the product model exists on eSight and you have enabled default firmware version a confirm dialog box is displayed To...

Страница 52: ...duled Task to ON set Scheduled Time manually If you set Scheduled Task to OFF eSight performs the upgrade task immediately c Set Same Version Upgrade If you set to OFF eSight will not perform the upgrade task when the target version is the same as the current version of the LTE CPE If you set to ON eSight performs the upgrade task when the target version is the same as the current version of the L...

Страница 53: ...ired maintenance items and prepare related tools Learning About the Site Information Gather the following site information before going to the eA380 site to perform maintenance Persisting faults and alarms Hardware configuration Natural environment Selecting Maintenance Items Select suitable maintenance items based on the eA380 site conditions Maintenance items must include the following aspects N...

Страница 54: ...agnosis page 5 Set Diagnosis Method to Ping 6 Enter the domain name in the Destination IP address domain name box 7 Click Apply 8 Wait until the operation is performed The command output is displayed in the Result box Timeout indicates the timeout period of each reply and ranges from 1 to 10 seconds When the LTE CPE does not run properly the System Check can be used to preliminarily identify the p...

Страница 55: ...erly connected Step 3 Check whether the IP address is entered correctly Step 4 If there is no problem after the above checks try to restart the LTE CPE from the near end Step 5 If the problem persists please contact Huawei technical engineer End 7 2 What Do I Do When Power Indicator Is Not Working Problem Description Power indicator is not working Solution Step 1 Check whether the PoE cable is cor...

Страница 56: ...ccuracy 5 Input or output cable connector C8 RJ45 GE End 7 3 What Do I Do When the Data Service Is not Provided Problem Description Data service is not provided Solution Step 1 Check whether the LTE CPE is powered If the Power indicator presents red light the power supply is provided Step 2 Check whether the SIM card is correctly installed Step 3 Confirm whether the LTE CPE is connected to the net...

Страница 57: ...Security Maintenance Software components used by this device may report vulnerabilities This device will use the software upgrade mode to fix these issues You can obtain specific software packages from the device agent 8 3 Performing Default Security Configuration After a WebUI login users can check the online help to perform default security configuration Change the WebUI login password keep it s...

Страница 58: ...awei Technologies Co Ltd 53 Change the USB port password keep it secure before installation and regularly change it subsequently optional The USB port provides maintenance and repair functions and allows you to set device parameters Please keep the password secure to prevent device parameters from being modified or exposed ...

Страница 59: ...artnership Project ARP Address Resolution Protocol CPE Customer Premises Equipment DHCP Dynamic Host Configuration Protocol DMZ Demilitarized Zone ICMP Internet Control Message Protocol IP Internet Protocol GRE Generic Routing Encapsulation LTE Long Term Evolution MAC Media Access Control MDI Medium Dependent Interface NAPT Network Address Port Translation NAT Network Address Translation RTU Remot...

Страница 60: ...ation between the equipment and receiver Connect the equipment into an outlet on a circuit different from that to which the receiver is connected Consult the dealer or an experienced radio TV technician for help FCC Radiation Exposure Statement This device complies with FCC radiation exposure limits set forth for an uncontrolled environment and it also complies with Part 15 of the FCC RF Rules Thi...

Страница 61: ...utilisateur de l appareil doit accepter tout brouillage radioélectrique subi même si le brouillage est susceptible d en compromettre le fonctionnement ISEDC Radiation Exposure Statement This equipment complies with ISEDC RF radiation exposure limits set forth for an uncontrolled environm ent This transmitter must not be co located or operating in conjunction with any other antenna or transmitter R...

Результаты поиска

Содержание eA380-123

Отзывы:

Бренды по названию

Популярные бренды

Huawei eA380-123, Руководство пользователя

Результаты поиска

Содержание eA380-123

Отзывы:

Бренды по названию

Популярные бренды