Huawei V100R001C00 Скачать руководство пользователя страница 95 | Manualshive

Страница: 95 / 191

background image

10.6.2 Security Considerations

NOTE

Incorrectly configuring the firewall may block valid access or introduce security risks to the LTE Device
and your protected network. Use caution when creating or deleting firewall rules and test your rules after
you configure them.

Consider these security ramifications before creating a rule:

Step 1

Does this rule stop LAN users from accessing critical resources on the Internet? For example,
if IRC is blocked, are there users that require this service?

Step 2

Is it possible to modify the rule to be more specific? For example, if IRC is blocked for all
users, will a rule that blocks just certain users be more effective?

Step 3

Does a rule that allows Internet users access to resources on the LAN create security
vulnerability? For example, if FTP ports (TCP 20, 21) are allowed from the Internet to the
LAN, Internet users may be able to connect to computers with running FTP servers.

Step 4

Does this rule conflict with any existing rules?

----End

Once these questions have been answered, adding rules is simply a matter of entering the
information into the correct fields in the web configurator screens.

LTE CPE B2368
User Guide

10 Firewall

Issue 03 (2019-01-31)

Copyright © Huawei Technologies Co., Ltd.

87

«
...
93
94
95
96
97
...
»

Содержание V100R001C00

Страница 1: ...LTE CPE B2368 V100R001C00 User Guide Issue 03 Date 2019 01 31 HUAWEI TECHNOLOGIES CO LTD ...

Страница 2: ...s document may not be within the purchase scope or the usage scope Unless otherwise specified in the contract all statements information and recommendations in this document are provided AS IS without warranties guarantees or representations of any kind either express or implied The information in this document is subject to change without notice Every effort has been made in the preparation of th...

Страница 3: ...chnology and Denial of Service DoS Change History Changes between document issues are cumulative The latest document issue contains all the changes made in earlier issues Issue Date Description 03 2019 01 31 Updated descriptions in 15 2 The SIP Service Provider Screen 02 2018 03 31 Add 30 Personal Data Description 01 2018 03 22 This issue is the first release LTE CPE B2368 User Guide About This Do...

Страница 4: ... 9 2 1 Overview 9 2 1 1 Basic Setting Information 9 2 1 2 Accessing the Web Configurator 12 2 2 The Web Configurator Layout 16 2 2 1 Title Bar 17 2 2 2 Main Window 17 2 2 3 User Account 17 2 2 4 Navigation Panel 18 3 Connection Status and System Info 19 3 1 Overview 19 3 2 The Connection Status Screen 19 3 3 The System Info Screen 20 4 Broadband 28 4 1 Overview 28 4 2 Broadband Screen 28 4 2 1 Edi...

Страница 5: ... 5 5 5 4 Limitations of WPS 55 6 Home Networking 57 6 1 Overview 57 6 1 1 What You Need To Know 57 6 1 1 1 About LAN IP Address 57 6 1 1 2 About UPnP 58 6 2 The LAN Setup Screen 58 6 3 The Static DHCP Screen 61 6 3 1 Before You Begin 61 6 4 The UPnP Screen 63 6 5 The UPnP List Screen 63 7 Static Route 65 7 1 Overview 65 7 2 Configuring Static Route 66 7 2 1 Add Edit Static Route 67 8 Network Addre...

Страница 6: ...all Technical Reference 86 10 6 1 Guidelines For Enhancing Security With Your Firewall 86 10 6 2 Security Considerations 87 11 MAC Filter 88 11 1 Overview 88 11 1 1 What You Need to Know 88 11 2 The MAC Filter Screen 88 12 Parental Control 91 12 1 Overview 91 12 2 The Parental Control Screen 91 12 2 1 Add Edit a Parental Control Rule 92 13 L2TP VPN 95 13 1 Overview 95 13 2 The Setup Screen 95 13 2...

Страница 7: ...Phone Services Overview 130 16 LTE Status 134 16 1 Overview 134 17 Logs 135 17 1 Overview 135 17 1 1 What You Need To Know 135 17 2 The System Log Screen 136 17 3 The Phone Log Screen 137 17 4 The VoIP Call History Screen 138 18 Traffic Status 139 18 1 Overview 139 18 2 The WAN Status Screen 139 18 3 The LAN Status Screen 140 18 4 The NAT Status Screen 142 18 5 The VoIP Status Screen 142 19 User A...

Страница 8: ...de 162 25 1 Overview 162 25 2 The Online Upgrade Screen 162 25 3 Online Upgrade Types 164 25 4 Online Upgrade Procedures 165 26 Backup Restore 172 26 1 Overview 172 26 2 The Backup Restore Screen 172 27 The Reboot Screen 175 28 Diagnostic 176 28 1 Overview 176 28 2 The Ping TraceRoute Screen 176 29 Troubleshooting 178 29 1 Overview 178 29 2 Power Hardware Connections and LEDs 178 29 3 LTE Device A...

Страница 9: ...er l B2368 22 and B2368 66 support LTE bands B38 B40 B41 B42 B43 B1 B3 B7 B8 B20 l B2368 57 supports LTE bands B40 B41 B42 B4 B7 B28 See Figure 1 1 computers can connect to the LTE Device s ETHERNET ports or wirelessly Figure 1 1 LTE Device s Internet Access Application 1 1 2 VoIP Features You can register one SIP Session Initiation Protocol profile with one account for that profile and use the LT...

Страница 10: ...nnect to the LTE Device to access network resources You can set up a wireless network with WPS WiFi Protected Setup or manually add a client to your wireless network Figure 1 3 Wireless Connection Application 1 2 The WLAN Button You can use the WIRELESS On Off button on top of the device to turn the 2 4 GHz and 5 GHz wireless LAN on or off You can also use it to activate WPS in order to quickly se...

Страница 11: ...gularly to make the LTE Device more secure and to manage the LTE Device more effectively l Change the password Use a password that s not easy to guess and that consists of different types of characters such as numbers and letters l Write down the password and put it in a safe place l Back up the configuration and make sure you know how to restore it Restoring an earlier working configuration may b...

Страница 12: ...Behavior Status Indication Off Power Off Red Steady ON Error malfunction or no SIM Blinking Upgrading Green Blinking Booting up Steady ON Strong LTE signal SINR 10 dB Blue Steady ON Medium LTE signal 10 dB SINR 4 dB Orange Steady ON Weak LTE signal SINR 4 dB Blinking No LTE signal searching or disconnected LTE CPE B2368 User Guide 1 Introduction Issue 03 2019 01 31 Copyright Huawei Technologies Co...

Страница 13: ...1 5 2 IDU The following graphic displays the Labels of the LEDs Figure 1 5 IDU Front Panel LTE CPE B2368 User Guide 1 Introduction Issue 03 2019 01 31 Copyright Huawei Technologies Co Ltd 5 ...

Страница 14: ...esting or there is a device malfunction or no SIM card Blinking The LTE Device is upgrading the firmware Off The LTE Device is not receiving power PHONE Green On A SIP account is registered for the phone port Blinking A telephone connected to the phone port has its receiver off of the hook or there is an incoming call Yellow On A SIP account is registered for the phone port and there is a voice me...

Страница 15: ...Blinking The LTE Device is sending or receiving data to from the LAN at 1000 Mbps Green Fast Ethernet On The LTE Device has a successful 10 100 Mbps Ethernet connection with a device on the Local Area Network LAN Blinking The LTE Device is sending or receiving data to from the LAN at 10 100 Mbps Off The LTE Device does not have an Ethernet connection with the LAN Refer to the Quick Start Guide for...

Страница 16: ...you will lose all configurations that you had previously and the web access password will be reset to the default LTE CPE B2368 User Guide 1 Introduction Issue 03 2019 01 31 Copyright Huawei Technologies Co Ltd 8 ...

Страница 17: ...Windows 7 and up The recommended screen resolution is 1366 by 768 pixels In order to use the web configurator you need to allow l Web browser popup windows from your device Web popup blocking is enabled by default in Windows 7 l JavaScript enabled by default l Java permissions enabled by default 2 1 1 Basic Setting Information Do the following before you start to use the LTE Device Step 1 Click St...

Страница 18: ...ep 3 Click Properties Figure 2 2 Connection Status Step 4 Select Internet Protocol Version 4 TCP IPv4 and click Properties LTE CPE B2368 User Guide 2 Introducing the Web Configurator Issue 03 2019 01 31 Copyright Huawei Technologies Co Ltd 10 ...

Страница 19: ...matically and Obtain DNS server address automatically and click OK and then Close and Close Figure 2 4 Internet Protocol Version 4 TCP IPv4 Properties End LTE CPE B2368 User Guide 2 Introducing the Web Configurator Issue 03 2019 01 31 Copyright Huawei Technologies Co Ltd 11 ...

Страница 20: ...he Web Configurator password screen displays l For user access type user as the default username and LTE Endusr as the default password Click Login If you have changed the password enter your password and click Login Figure 2 5 Password Screen B2368 22 Figure 2 6 Password Screen B2368 57 LTE CPE B2368 User Guide 2 Introducing the Web Configurator Issue 03 2019 01 31 Copyright Huawei Technologies C...

Страница 21: ...n displays if you enter the password wrong three times Figure 2 8 Login Blocked Screen B2368 22 Figure 2 9 Login Blocked Screen B2368 57 LTE CPE B2368 User Guide 2 Introducing the Web Configurator Issue 03 2019 01 31 Copyright Huawei Technologies Co Ltd 13 ...

Страница 22: ...ave not yet changed your password It is strongly recommended you change the default password Enter a new password retype it to confirm and click Modify alternatively click Skip to proceed to the main menu if you do not want to change the password now Figure 2 11 Change Password Screen Step 6 The Connection Status screen appears LTE CPE B2368 User Guide 2 Introducing the Web Configurator Issue 03 2...

Страница 23: ...ction Status B2368 22 Figure 2 13 Connection Status B2368 57 Figure 2 14 Connection Status B2368 66 LTE CPE B2368 User Guide 2 Introducing the Web Configurator Issue 03 2019 01 31 Copyright Huawei Technologies Co Ltd 15 ...

Страница 24: ...Configurator Layout Click Connection Status System Info to show the following screen See 3 3 The System Info Screen for more information Figure 2 15 Web Configurator Layout B2368 22 Figure 2 16 Web Configurator Layout B2368 57 LTE CPE B2368 User Guide 2 Introducing the Web Configurator Issue 03 2019 01 31 Copyright Huawei Technologies Co Ltd 16 ...

Страница 25: ...t After you click System Info on the Connection Status screen the System Info screen is displayed See 3 3 The System Info Screen for more information about the System Info screen If you click LAN Device on the System Info screen A in Figure 2 15 the Connection Status screen appears See 3 2 The Connection Status Screen for more information about the Connection Status screen 2 2 3 User Account Use t...

Страница 26: ... Panel Use the menu items on the navigation panel to open screens to configure LTE Device features LTE CPE B2368 User Guide 2 Introducing the Web Configurator Issue 03 2019 01 31 Copyright Huawei Technologies Co Ltd 18 ...

Страница 27: ...register and unregister SIP accounts 3 2 The Connection Status Screen Use this screen to view the network connection status of the device and its clients A warning message appears if there is a connection problem Figure 3 1 Connection Status Icon View If you prefer to view the status in a list click List View in the Viewing mode selection box You can configure how often you want the LTE Device to ...

Страница 28: ... name and Info Figure 3 3 Connection Status List View Info In List View you can also view the client s information 3 3 The System Info Screen Click Connection Status System Info to open this screen LTE CPE B2368 User Guide 3 Connection Status and System Info Issue 03 2019 01 31 Copyright Huawei Technologies Co Ltd 20 ...

Страница 29: ...Figure 3 4 System Info Screen B2368 22 LTE CPE B2368 User Guide 3 Connection Status and System Info Issue 03 2019 01 31 Copyright Huawei Technologies Co Ltd 21 ...

Страница 30: ...Figure 3 5 System Info Screen B2368 57 LTE CPE B2368 User Guide 3 Connection Status and System Info Issue 03 2019 01 31 Copyright Huawei Technologies Co Ltd 22 ...

Страница 31: ... update this screen from the drop down list box Device Information Host Name This field displays the LTE Device system name It is used for identification You can change this in the Maintenance System screen s Host Name field Model Name This is the model name of your device LTE CPE B2368 User Guide 3 Connection Status and System Info Issue 03 2019 01 31 Copyright Huawei Technologies Co Ltd 23 ...

Страница 32: ...e in the LAN IP Subnet Mask This field displays the current subnet mask in the LAN DHCP Server This field displays what DHCP services the LTE Device is providing to the LAN Choices are Server The LTE Device is a DHCP server in the LAN It assigns IP addresses to other computers in the LAN None The LTE Device is not providing any DHCP services to the LAN WLAN Information Channel This is the channel ...

Страница 33: ...AN LTE Status Status This displays 4G LTE if there is an LTE connection otherwise it displays N A SIM Card Status This displays PIN disable if SIM card needs PIN or PUK to unlock it displays PIN required or PUK required Signal Strength This displays the strength of the LTE connection that the LTE Device has with the base station which is also known as eNodeB or eNB Service Provider This displays t...

Страница 34: ...s enabled or Down when WLAN is disabled Rate For the LTE WAN interface this displays 4G LTE if there is an LTE connection For the LAN interface this displays the port speed and duplex setting For the WLAN interface it displays the maximum transmission rate when WLAN is enabled or N A when WLAN is disabled System Status System Up Time This field displays how long the LTE Device has been running sin...

Страница 35: ...d your IP address or domain name l The second field displays Registered If the SIP account is not registered with the SIP server l Click Register to have the LTE Device attempt to register the SIP account with the SIP server l The second field displays the reason the account is not registered Inactive The SIP account is not active You can activate it in VoIP SIP SIP Settings Register Fail The last...

Страница 36: ...the LTE Device s LTE connection 4 2 Broadband Screen Use this screen to lock a band frequency or cell tower for the LTE Device s LTE connection Click Network Setting Broadband to open the following screen Figure 4 1 Network Setting Broadband Broadband The following table describes the fields in this screen LTE CPE B2368 User Guide 4 Broadband Issue 03 2019 01 31 Copyright Huawei Technologies Co Lt...

Страница 37: ... section Cancel Click this to restore your previously saved settings in this section Internet Setup The index number of the broadband connection in the list Enabled This shows whether the broadband connection is turned on or off Name This shows the name of the broadband connection APN This is the name of the LTE network to which the broadband connection connects NAT This shows whether NAT is activ...

Страница 38: ...ervice provider gave you MTU The Maximum Transmission Unit MTU defines the size of the largest packet allowed on an interface or connection Enter the MTU for this WAN interface in this field NAT Enable Select this to activate NAT on the WAN IP Pass Through Select this to allow the ISP to assign IP addresses directly to the LAN devices This disables NAT and DHCP server configuration Network Setting...

Страница 39: ...s Through Lease Time Specify for how many seconds the LAN client can use the ISP assigned IP address Apply Click Apply to save your changes Back Click Back to return to the previous screen 4 3 SIM Screen If your LTE Device has the SIM screen you may use it to specify the PIN for your SIM card Click Network Setting Broadband SIM to open the following screen Figure 4 3 Network Setting Broadband SIM ...

Страница 40: ...IN to use the SIM card Select Disable if the 4G service provider lets you use the SIM without inputting a PIN Input PIN If you enabled PIN verification enter the 4 digit PIN code 0000 for example provided by your ISP If you enter the PIN code incorrectly too many times the ISP may block your SIM card and not let you use the account to access the Internet Remain attempts This is how many more times...

Страница 41: ...card New PIN Enter the new PIN code for the SIM card Confirm New PIN Re enter the new PIN code for the SIM card Remain attempts This shows how many more times you can try to enter the PUK code before permanently damaging the SIM card Apply Click this to save the change in this section Cancel Click this to restore your previously saved settings in this section 4 4 LTE Setting Screen Use this screen...

Страница 42: ...Setting Label Description LTE Setting Select Enable to set the LTE Device s LTE connection to use a specific band frequency or cell tower Select Disable to let the LTE Device s LTE connection automatically select a band frequency or cell tower to use LTE CPE B2368 User Guide 4 Broadband Issue 03 2019 01 31 Copyright Huawei Technologies Co Ltd 34 ...

Страница 43: ...If you do not want to reselect and handover please tick Disable inter frequency reselect or handover Select LockCell to set the LTE Device s LTE connection to use a specific cell tower Then select the LTE band specify the downlink EARFCN 0 65535 and specify the cell tower s PCI Physical Cell Identifier on the right 0 503 Apply Click this to save your changes and to apply them to the LTE Device Can...

Страница 44: ...hem access the network l A bridge is a radio that relays communications between access points and wireless clients extending a network s range Traditionally a wireless network operates in one of two ways l An infrastructure type of network has one or more access points and one or more wireless clients The wireless clients connect to the access points l An ad hoc type of network is one in which the...

Страница 45: ...so protect the information that is sent in the wireless network Radio Channels In the radio spectrum there are certain frequency bands allocated for unlicensed civilian use For the purposes of wireless networking these bands are divided into numerous channels This allows a variety of networks to exist in the same place without interfering with one another When you create a network you must select ...

Страница 46: ...ces manually although this is somewhat more complicated to do l What advanced options do you want to configure if any If you want to configure advanced options ensure that you know precisely what you want to do If you do not want to configure advanced options leave them alone NOTE The following sections show the regular 2 4 GHz wireless screens The 5 GHz wireless screens work the same 5 2 The Wire...

Страница 47: ...Figure 5 2 Network Setting Wireless General LTE CPE B2368 User Guide 5 Wireless Issue 03 2019 01 31 Copyright Huawei Technologies Co Ltd 39 ...

Страница 48: ...n this screen Table 5 1 Network Wireless General Label Description Wireless Network Setup Wireless Select the Enable Wireless LAN check box to activate the wireless LAN Wireless Network Settings LTE CPE B2368 User Guide 5 Wireless Issue 03 2019 01 31 Copyright Huawei Technologies Co Ltd 40 ...

Страница 49: ...k l 802 11b g n allows IEEE 802 11b IEEE 802 11g and IEEE 802 11n compliant WLAN devices The transmission rate of your LTE Device might be reduced l 802 11g n allows IEEE 802 11g and IEEE 802 11n compliant WLAN devices l 802 11b g allows IEEE 802 11b and IEEE 802 11g compliant WLAN devices The transmission rate of your LTE Device might be reduced l 802 11n allows only IEEE 802 11n compliant WLAN d...

Страница 50: ...tly being used by your AP Security Level Security Mode Select More Secure to add security on this wireless network The wireless clients which want to associate to this network must have the same wireless security settings as the LTE Device When you select to use security additional options appears in this screen Or you can select No Security to allow any client to associate this network without an...

Страница 51: ...onnection This type of encryption while robust is not as strong as the newer WPA2 PSK Click Network Setting Wireless or Wireless 5G to display the General screen Select More Secure as the security level Then select WPA PSK or WPA2 PSK from the Security Mode list Figure 5 5 Figure 1 1 Wireless General More Secure WPA 2 PSK The following table describes the Labels in this screen Table 5 3 Wireless G...

Страница 52: ... set to AES to enable Advanced Encryption System AES security on your wireless network AES provides superior security to TKIP If the security mode is WPA2 PSK and WPA PSK Compatible is enabled the encryption mode is set to TKIPAES MIX to allow both TKIP and AES types of security in your wireless network 5 3 The More AP Screen The LTE Device can broadcast up to four wireless network names at the sa...

Страница 53: ...s device is associated This field displays the name of the wireless profile on the network When a wireless client scans for an AP to associate with this is the name that is broadcast and seen in the wireless client utility Security This field indicates the security mode of the SSID profile Modify Click the Edit icon to configure the SSID profile 5 3 1 Edit More AP Use this screen to edit an SSID p...

Страница 54: ... access point AP must have the same SSID Enter a descriptive name up to 32 English keyboard characters for the wireless LAN Hide SSID Select this check box to hide the SSID in the outgoing beacon frame so a station cannot obtain the SSID through scanning using a site survey tool Wireless Isolation Select this to keep the wireless clients in this SSID from communicating with each other directly thr...

Страница 55: ...Protected Setup WPS on your LTE Device WPS allows you to quickly set up a wireless network with strong security without having to configure security settings manually Set up each WPS connection between two devices Both devices must support WPS See 5 5 5 WiFi Protected Setup WPS for more information about WPS NOTE The LTE Device applies the security settings of the SSID1 profile see 5 1 2 Before Yo...

Страница 56: ...similar to the WPS button on this screen Note You must press the other wireless device s WPS button within two minutes of pressing this button Method 2 PIN Use this section to set up a WPS wireless network by entering the PIN Personal Identification Number of the client into the LTE Device Register Enter the PIN of the device that you are setting up a WPS connection with and click Register to auth...

Страница 57: ...or an attacker s software to guess for example a twenty letter long string of apparently random numbers and letters but it is not very secure if you use a short key which is very easy to guess for example a three letter word from the dictionary Because of the damage that can be done by a malicious attacker it s not just people who have sensitive information on their network who should use security...

Страница 58: ...ther a wireless device is allowed to use the wireless network You can make every user log in to the wireless network before using it However every device in the wireless network has to support IEEE 802 1x to do this For wireless networks you can store the user names and passwords for each user in a RADIUS server This is a server used in businesses more than in homes If you do not have a RADIUS ser...

Страница 59: ...itations of distance interference and absorption Problems with distance occur when the two radios are too far apart Problems with interference occur when other radio waves interrupt the data signal Interference may come from other radio transmissions such as military or air traffic control communications or from machines that are coincidental emitters such as electric motors or microwaves Problems...

Страница 60: ...nt BSSs but have the same keys they may hear each other s communications but not communicate with each other l MBSSID should not replace but rather be used in conjunction with 802 1x security 5 5 5 WiFi Protected Setup WPS Your LTE Device supports WiFi Protected Setup WPS which is an easy way to set up a secure wireless network WPS is an industry standard specification defined by the WiFi Alliance...

Страница 61: ... to make sure that WPS worked check the list of associated wireless clients in the AP s configuration utility If you see the wireless client in the list WPS was successful End 5 5 5 2 PIN Configuration The PIN method ensures that the connection is established between the devices you specify not just the first two devices to activate WPS in range of each other You need to log into the configuration...

Страница 62: ...uter connecting to the WPS enabled AP via the PIN method Figure 5 12 Example WPS Process PIN Method End 5 5 5 3 How WPS Works When two WPS enabled devices connect each device must assume a specific role One device acts as the registrar the device that supplies network and security settings and the other device acts as the enrollee the device that receives network and security settings The registra...

Страница 63: ... The WPS connection process is like a handshake only two devices participate in each WPS transaction If you want to add more devices you should repeat the process with one of the existing networked devices and the new device Note that the access point AP is not always the registrar and the wireless client is not always the enrollee All WPS certified APs can be a registrar and so can some WPS enabl...

Страница 64: ...om the moment you press the button on one device to the moment you press the button on the other device when any WPS enabled device could join the network This is because the registrar has no way of identifying the correct enrollee and cannot differentiate between your enrollee and a rogue device This is a possible way for a hacker to gain access to a network You can easily check to see if this ha...

Страница 65: ...rms and concepts may help as you read this chapter 6 1 1 1 About LAN IP Address Similar to the way houses on a street share a common street name so too do computers on a LAN share one common network number This is known as an Internet Protocol address Subnet Mask The subnet mask specifies the network number portion of an IP address Your LTE Device will compute the subnet mask automatically based o...

Страница 66: ...rk will appear as a separate icon Selecting the icon of a UPnP device will allow you to access the information and properties of that device Cautions with UPnP The automated nature of NAT traversal applications in establishing their own services and opening firewall ports may present network security issues Network information and configuration may also be obtained and modified by users in some ne...

Страница 67: ...etting Home Networking LAN Setup DHCP Disabled The following table describes the fields in this screen Table 6 1 Network Setting Home Networking LAN Setup Label Description LAN IP Setup LTE CPE B2368 User Guide 6 Home Networking Issue 03 2019 01 31 Copyright Huawei Technologies Co Ltd 59 ...

Страница 68: ...sing Values IP Pool Starting Address This field specifies the first of the contiguous addresses in the IP address pool Pool Size This field specifies the size or count of the IP address pool DNS Values DNS Server 1 3 Select From ISP if your ISP dynamically assigns DNS server information and the LTE Device s WAN IP address Select DNS Proxy to have the LTE Device send its own address to the LAN clie...

Страница 69: ...que MAC Media Access Control address The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters for example 00 A0 C5 00 00 02 6 3 1 Before You Begin Find out the MAC addresses of your network devices if you intend to add them to the Static DHCP screen Use this screen to change your LTE Device s static DHCP settings Click Network Setting Home Networking Static DH...

Страница 70: ... or select the check boxes in each entry to have the LTE Device always assign the selected entries IP addresses to the corresponding MAC addresses and host names You can select up to 128 entries in this table Apply Click Apply to save your changes Cancel Click Cancel to restore your previously saved settings Refresh Click Refresh to reload the DHCP table If you click Add new static lease in the St...

Страница 71: ...PnP to display the screen shown next Figure 6 5 Network Setting Home Networking UPnP The following table describes the Labels in this screen Table 6 4 Network Settings Home Networking UPnP Label Description UPnP Select Enable to activate UPnP Be aware that anyone could use a UPnP application to open the web configurator s login screen without entering the LTE Device s IP address although you must ...

Страница 72: ...particular UPnP enabled device or software is using on your network Destination IP Address The IP address of the UPnP enabled device or software External Port The external WAN port that the LTE Device uses for the application Internal Port The internal LAN port that the LTE Device uses for the application Refresh Click Refresh to save your changes LTE CPE B2368 User Guide 6 Home Networking Issue 0...

Страница 73: ... A connected to the LTE Device s LAN interface The LTE Device routes most traffic from A to the Internet through the LTE Device s default gateway R1 You create one static route to connect to services offered by your ISP behind router R2 You create another static route to communicate with a separate network behind a router R3 connected to the LAN Figure 7 1 Example of Static Routing Topology LTE CP...

Страница 74: ...is static route is in use A gray bulb signifies that this static route is not in use Route Name This is the name that describes or identifies this route Destination IP This parameter specifies the IPv4 IP network address of the final destination Routing is always based on network number Gateway This is the IPv4 IP address of the gateway The gateway is a router or switch on the same network segment...

Страница 75: ...host use a subnet mask of 255 255 255 255 in the subnet mask field to force the network number to be identical to the host ID Gateway You can decide if you want to forward packets to a gateway IP address or a bound interface If you want to configure a gateway IP address enter the IP address of the next hop gateway The gateway is a router or switch on the same network segment as the device s LAN or...

Страница 76: ...el Description Apply Click Apply to save your changes Back Click Back to exit this screen without saving LTE CPE B2368 User Guide 7 Static Route Issue 03 2019 01 31 Copyright Huawei Technologies Co Ltd 68 ...

Страница 77: ...rs to the IP address of a host when the packet is in the local network while the global address refers to the IP address of the host when the same packet is traveling in the WAN side NAT In the simplest form NAT changes the source IP address in a packet received from a subscriber the inside local address to another the inside global address before forwarding the packet to the WAN side When the res...

Страница 78: ...ion about port numbers NOTE Many residential broadband ISP accounts do not allow you to run any server processes such as a Web or FTP server from your location Your ISP may periodically check for servers and may suspend your account if it discovers any active services at your location If you are unsure refer to your ISP Configuring Servers Behind Port Forwarding Example Let s say you want to assig...

Страница 79: ...hich the service is forwarded WAN Start Port This is the first external port number that identifies a service WAN End Port This is the last external port number that identifies a service LAN Start Port This is the first internal port number that identifies a service LAN End Port This is the last internal port number that identifies a service LAN IP Address This is the server s IP address Protocol ...

Страница 80: ...rwarded WAN Start Port Enter the original destination port for the packets To forward only one port enter the port number again in the External End Port field To forward a series of ports enter the start port number here and the end port number in the External End Port field WAN End Port Enter the last port of the original destination port range To forward only one port enter the port number in th...

Страница 81: ...ur network DMZ if you have one for the LTE Device All incoming packets received by this LTE Device s WAN interface will be forwarded to the default server you set Click Network Setting NAT DMZ to display the following screen NOTE The configuration you set in this screen takes priority than the Network Setting NAT Port Forwarding screen Figure 8 4 Network Setting NAT DMZ The following table describ...

Страница 82: ...nges Cancel Click Cancel to restore your previously saved settings 8 5 The ALG Screen Use the ALG screen to enable or disable SIP Application Layer Gateway ALG on the LTE Device Click Apply to save your change The SIP ALG allows SIP calls to pass through NAT by examining and translating IP addresses embedded in the data stream When the LTE Device registers with the SIP register server the SIP ALG ...

Страница 83: ...ILA is the IP address of an inside host in a packet when the packet is still in the local network while an inside global address IGA is the IP address of the same inside host when the packet is on the WAN side The following table summarizes this information Table 8 5 NAT Definitions ITEM Description Inside This refers to the host on the LAN Outside This refers to the host on the WAN Local This ref...

Страница 84: ...6 3 How NAT Works Each packet has two addresses a source address and a destination address For outgoing packets the ILA Inside Local Address is the source address on the LAN and the IGA Inside Global Address is the source address on the WAN For incoming packets the ILA is the destination address on the LAN and the IGA is the destination address on the WAN NAT maps private local IP addresses to glo...

Страница 85: ...they don t know your IP address First of all you need to have registered a dynamic DNS account with www dyndns org or www no ip com This is for people with a dynamic IP from their ISP or DHCP server that would still like to have a domain name The Dynamic DNS service provider will give you a password or key 9 1 1 What You Need To Know DYNDNS Wildcard Enabling the wildcard feature for your host caus...

Страница 86: ... to go to all other networks l Blocks traffic that originates on other networks from going to the LAN and WLAN The following figure illustrates the default firewall action User A can initiate an IM Instant Messaging session from the LAN to the WAN 1 Return traffic for this session is also allowed 2 However other traffic initiated from the WAN is blocked 3 and 4 Figure 10 1 Default Firewall Action ...

Страница 87: ...rnet and the LAN The LTE Device s PoE Power over Ethernet Ethernet WAN port and Ethernet LAN ports physically separate the network into two areas The WAN Wide Area Network port attaches to the ODU for the Internet connection The LAN Local Area Network port attaches to a network of computers which needs security from the outside world These computers will have access to Internet services such as e ...

Страница 88: ...from the LAN to the WAN All traffic sent or access from the WAN will be blocked Select High to have the firewall only allow Telnet FTP HTTP HTTPS DNS POP3 and SMTP traffic sent from the LAN to the WAN Other traffic will be blocked Apply Click Apply to save your changes Cancel Click Cancel to restore your previously saved settings 10 3 The Services Screen Use this screen to view the configured serv...

Страница 89: ...e service Click the Delete icon to delete the service Note that subsequent rules move up by one when you take this action Deleting a service rule also deletes the related ACL rules which are configured in the Security Firewall Access Control screen 10 3 1 The Add New Services Entry Screen Use this screen to configure a service that you want to use in an ACL rule in the Security Firewall Access Con...

Страница 90: ...s use to receive the service traffic Select Single if the service uses one and only one source or destination port then enter the port number Select Multiple if the service uses two or more source or destination ports then enter a port range For example suppose you want to define the Gnutella service Select TCP type and enter a port range of 6345 6349 Apply Click Apply to save your changes Back Cl...

Страница 91: ...is rule applies Please note that a blank source address is equivalent to Any Dst IP This displays the destination IP addresses to which this rule applies Please note that a blank destination address is equivalent to Any Services This displays the protocol type and a port range that define the service to which this rule applies Policy This field displays whether the rule silently discards packets D...

Страница 92: ...ic characters not including spaces underscores and dashes You must enter the filter name to add an ACL rule This field is read only if you are editing the ACL rule Source Address Type Select Single or Range depending on whether you want to enter a single or a range of source IP addresses to which the ACL rule applies Select Any to indicate any source IP address Source IP Address Start Enter an IP ...

Страница 93: ...Single or Range and then enter a single port number or the range of port numbers of the source Select Any to indicate any source port Destination Port This field is displayed only when you Select Service in Select Protocol and TCP or UDP in Protocol Select Single or Range and then enter a single port number or the range of port numbers of the destination Select Any to indicate any destination port...

Страница 94: ...10 6 1 Guidelines For Enhancing Security With Your Firewall Step 1 Change the default password via web configurator Step 2 Think about access control before you connect to the network in any way Step 3 Limit who can access your LTE Device Step 4 Don t enable any local service such as Telnet or FTP that you don t use Any enabled service could present a potential security risk A determined hacker mi...

Страница 95: ... modify the rule to be more specific For example if IRC is blocked for all users will a rule that blocks just certain users be more effective Step 3 Does a rule that allows Internet users access to resources on the LAN create security vulnerability For example if FTP ports TCP 20 21 are allowed from the Internet to the LAN Internet users may be able to connect to computers with running FTP servers...

Страница 96: ... MAC address is assigned at the factory and consists of six pairs of hexadecimal characters for example 00 A0 C5 00 00 02 You need to know the MAC address of the devices to configure this screen 11 2 The MAC Filter Screen Use the MAC Filter screen to allow wireless and LAN clients access to the LTE Device Click Security MAC Filter to change your LTE Device s MAC filter settings Select Allow option...

Страница 97: ... Device MAC addresses not listed will be denied access to the LTE Device Select Deny to block the devices with the MAC addresses you list and select as Deny from accessing the LTE Device MAC addresses not listed will be permitted to access the LTE Device Select Disable to not filter traffic by the source MAC address Set This is the index number of the MAC address LTE CPE B2368 User Guide 11 MAC Fi...

Страница 98: ...ireless station and LAN devices that are allowed or not allowed access to the LTE Device in these address fields Enter the MAC addresses in a valid MAC address format that is six hexadecimal character pairs for example 12 34 56 78 9a bc Apply Click Apply to save your changes Cancel Click Cancel to restore your previously saved settings LTE CPE B2368 User Guide 11 MAC Filter Issue 03 2019 01 31 Cop...

Страница 99: ...ental Control Screen Use this screen to enable parental control view the parental control rules and schedules Click Security Parental Control to open the following screen Figure 12 1 Security Parental Control Figure 12 2 Security Parental Control After adding a new PCP The following table describes the fields in this screen LTE CPE B2368 User Guide 12 Parental Control Issue 03 2019 01 31 Copyright...

Страница 100: ... This shows whether the network service is configured If not None will be shown Website Blocked This shows whether the website block is configured If not None will be shown Modify Click the Edit icon to go to the screen where you can edit the rule Click the Delete icon to delete an existing rule Apply Click Apply to save your changes back to the LTE Device Cancel Click Cancel to restore your previ...

Страница 101: ...le 12 2 Add Edit Parental Control Rule Label Description General Active Select the checkbox to activate this parental control rule Parental Control Profile Name Enter a descriptive name for the rule LTE CPE B2368 User Guide 12 Parental Control Issue 03 2019 01 31 Copyright Huawei Technologies Co Ltd 93 ...

Страница 102: ...ow a screen in which you can add a new service rule You can configure the Service Name Protocol and Port of the new rule This shows the index number of the rule Select the checkbox next to the rule to activate it Service Name This shows the name of the rule Protocol Port This shows the protocol and the port of the rule Modify Edit and Delete icons appear when you add a new service Click the Edit i...

Страница 103: ... Click Security L2TP VPN to open the following screen Figure 13 1 Security L2TP VPN Setup The following table describes the fields in this screen Table 13 1 Security L2TP VPN Setup Label Description Add New Tunnel Click this button to create a new L2TP tunnel This shows the index number of an L2TP tunnel LTE CPE B2368 User Guide 13 L2TP VPN Issue 03 2019 01 31 Copyright Huawei Technologies Co Ltd ...

Страница 104: ... the LTE Device to use the L2TP VPN tunnel This shows a user or user group that can use the L2TP VPN tunnel Modify Click the Edit icon to go to the screen where you can edit the L2TP VPN tunnel Click the Delete icon to delete an existing tunnel 13 2 1 The Add Edit L2TP Tunnel Screen Use this screen to create or modify an L2TP VPN tunnel Click the Add New Tunnel button or an Edit icon next to a VPN...

Страница 105: ...nel Clear it to configure the L2TP tunnel but not use it Tunnel Name Enter a descriptive name for the L2TP tunnel L2TP Protocol Layer Select Layer3 L2TP to have the LTE Device tunnel OSI layer 3 protocol over a network Select Layer2 L2TP to have the LTE Device tunnel OSI layer 2 protocol BCP tunnel over a network LTE CPE B2368 User Guide 13 L2TP VPN Issue 03 2019 01 31 Copyright Huawei Technologie...

Страница 106: ... tunnel status Click Security L2TP VPN Monitor to open the following screen Figure 13 3 Security L2TP VPN Monitor The following table describes the fields in this screen Table 13 3 Security L2TP VPN Monitor Label Description This shows the index number of the rule Select the checkbox next to the rule to activate it Status This shows the status of the L2TP VPN tunnel Tunnel Name This shows the name...

Страница 107: ...e CPE A uses WAN IP 172 23 40 48 and has a LAN PC with IP 192 168 1 51 connected The L2TP server uses WAN IP 172 23 40 25 and has a LAN PC with IP 192 168 2 2 connected The LAN PC IPs must be in different subnet domains User can set the Layer 3 L2TP VPN by L2TP Web GUI Figure 13 5 Layer 3 L2TP VPN Configuration Example Add Edit L2TP Tunnel Both CPEs will bring up ppp0 interface and the L2TP server...

Страница 108: ... 168 3 2 Figure 13 6 Layer 3 L2TP VPN Configuration Example Add Static Route 13 5 A Layer 2 L2TP VPN Configuration Example This is the network structure used in this example Figure 13 7 Layer 2 L2TP VPN Network Structure Example CPE A has a WAN IP 10 10 50 205 and connects to a LAN PC with IP 192 168 1 58 In addition L2TP BCP Server has a WAN IP 172 16 9 3 and connects to a LAN PC with IP 192 168 ...

Страница 109: ...through the L2TP BCP tunnel bcp0 Users can send packets from one LAN PC to another 192 168 1 58 to 192 168 1 214 Configuration Figure 13 8 Layer 2 L2TP VPN Configuration Example Add Edit L2TP Tunnel LTE CPE B2368 User Guide 13 L2TP VPN Issue 03 2019 01 31 Copyright Huawei Technologies Co Ltd 101 ...

Страница 110: ...another router over an IPv4 network At the time of writing the LTE Device only supports GRE tunneling in IPv4 networks 14 2 The Setup Screen Use this screen to view and manage GRE VPN tunnels Click Security GRE VPN to open the following screen Figure 14 1 Security GRE VPN Setup The following table describes the fields in this screen LTE CPE B2368 User Guide 14 GRE VPN Issue 03 2019 01 31 Copyright...

Страница 111: ...WAN interface tunnels traffic GRE Local IP This is the local hosts IP addresses for which the LTE Device tunnels traffic sent to the remote gateway GRE Remote IP This is the remote hosts IP addresses behind the remote gateway to which the LTE Device tunnels traffic Modify Click the Edit icon to go to the screen where you can edit the tunnel Click the Delete icon to delete an existing tunnel 14 2 1...

Страница 112: ...SI layer Layer2 GRE or Layer3 GRE protocol the GRE tunnels over a network Use layer 2 when both of the LAN PC IPs are in the same subnet domain Use layer 3 when the LAN PC IPs are in different subnet domains Server IP Address Enter the IP address or domain name of the remote gateway to which the LTE Device s WAN interface tunnels traffic GRE Local IP Enter a local host s IP address the LTE Device ...

Страница 113: ...Layer 2 GRE VPN Network Structure Example CPE A uses WAN IP 172 23 40 46 and has a LAN PC with IP 192 168 1 51 connected CPE B uses WAN IP 172 23 40 48 and has a LAN PC with IP 192 168 1 33 connected Both of the LAN PC IPs must be in the same subnet domain To configure CPE A input a tunnel name set the GRE Layer to Layer2 GER and set the WAN IP of CPE B 172 23 40 48 as the Server IP Address Config...

Страница 114: ...IPs must be in different subnet domains Configure CPE A as follows Figure 14 6 Layer 3 GRE VPN Configuration Example Add Edit GRE Tunnel Both CPEs will bring up the tunnel interface and set a GRE IP to the interface After setting up the Layer 3 GRE VPN you also need to configure static route in the Web Configurator to decide which Internet traffic goes through the GRE tunnel By default the CPE doe...

Страница 115: ...Figure 14 7 Layer 3 GRE VPN Configuration Example Add Static Route LTE CPE B2368 User Guide 14 GRE VPN Issue 03 2019 01 31 Copyright Huawei Technologies Co Ltd 107 ...

Страница 116: ...outing path second APN Add a static route that helps route traffic to the media server ex 204 11 12 32 in the example at the right through the Voice interface in the Network Setting Static Route Add New Static Route screen see 7 2 1 Add Edit Static Route for more information After adding the static route you can wait until the register retry interval timeout expires to let VoIP automatically conne...

Страница 117: ...mber you dialed to take part in the call SIP Accounts A SIP account is a type of VoIP account It is an arrangement with a service provider that lets you make phone calls over the Internet When you set the LTE Device to use your SIP account to make calls the LTE Device is able to send all the information about the phone call to your service provider on the Internet Strictly speaking you don t need ...

Страница 118: ... 15 6 Technical Referencefor more information on SIP 15 1 2 Before You Begin l Before you can use these screens you need to have a VoIP account already set up If you don t have one yet you can sign up with a VoIP service provider over the Internet l You should have the information your VoIP service provider gave you ready before you start to configure the LTE Device 15 2 The SIP Service Provider S...

Страница 119: ...Figure 15 2 VoIP SIP SIP Service Provider LTE CPE B2368 User Guide 15 VoIP Issue 03 2019 01 31 Copyright Huawei Technologies Co Ltd 111 ...

Страница 120: ...LTE CPE B2368 User Guide 15 VoIP Issue 03 2019 01 31 Copyright Huawei Technologies Co Ltd 112 ...

Страница 121: ...ferent ports than the LTE Device s SIP local port Main SIP Server Address Enter the IP address or domain name of the SIP server provided by your VoIP service provider You can use up to 63 printable ASCII characters It does not matter whether the SIP server is a proxy redirect or register server SIP Server Port Enter the SIP server s listening port number if your VoIP service provider gave you one ...

Страница 122: ... the message is received If you select Supported the peer device supports the option tag 100rel to send provisional responses reliably If you select Required the peer device requires the option tag 100rel to send provisional responses reliably Select Disabled to turn off this function DNS SRV Enabled RFC 3263 Select this to have the LTE Device query your ISP s DNS server for a list of any availabl...

Страница 123: ...s You should use the same mode your VoIP service provider uses RFC2833 send the DTMF tones in RTP packets PCM send the DTMF tones in the voice data stream This method works best when you are using a codec that does not use compression like G 711 Codecs that use compression like G 729 and G 726 can distort the tones SIP INFO send the DTMF tones in SIP messages Transport Type Transport Type This rea...

Страница 124: ...ets a SIP session remain idle without traffic before it automatically disconnects the session When two SIP devices start a SIP session they must agree on an expiration time for idle sessions This field is the shortest expiration time that the LTE Device accepts Dialing Interval Selection Dialing Interval Selection Enter the number of seconds the LTE Device should wait after you stop dialing number...

Страница 125: ... to transfer an incoming call that you have answered to another phone Unconditional Call Forward Enable This code is used to enable unconditional call forwarding Incoming calls are always forwarded to a specified number without any condition Unconditional Call Forward Disable This code is used to disable unconditional call forwarding No Answer Call Forward Enable This code is used to enable call f...

Страница 126: ...the Labels in this screen Table 15 2 VoIP SIP SIP Account Label Description This is the index number of the entry Active This shows whether the SIP account is activated or not A yellow bulb signifies that this SIP account is activated A gray bulb signifies that this SIP account is activated SIP Account This shows the name of the SIP account SIP Service Provider This shows the name of the SIP servi...

Страница 127: ...Figure 15 4 SIP Account Edit LTE CPE B2368 User Guide 15 VoIP Issue 03 2019 01 31 Copyright Huawei Technologies Co Ltd 119 ...

Страница 128: ...pression Type Secondary Compression Type Third Compression Type Select the type of voice coder decoder codec that you want the LTE Device to use G 711 provides higher voice quality but requires more bandwidth 64 kbps l G 711MuLaw is typically used in North America and Japan l G 711ALaw is typically used in Europe l G 729 only requires 8 kbps Select the LTE Device s first choice for voice coder dec...

Страница 129: ...ional Forward Select this if you want the LTE Device to forward all incoming calls to the specified phone number Specify the phone number in the To Number field on the right Active Busy Forward Select this if you want the LTE Device to forward incoming calls to the specified phone number if the phone port is busy Specify the phone number in the To Number field on the right If you have call waiting...

Страница 130: ...rprets a hook press longer than this as hanging up Hook Flash Detect Lower Bound Specify the shortest hook press to count as a flash Apply Click Apply to save your changes Back Click Back to return to the previous screen without saving 15 4 The Phone Region Screen Use this screen to maintain settings that depend on which region of the world the LTE Device is in To access this screen click VoIP Pho...

Страница 131: ...his to set every field in this screen to its last saved value 15 5 The Call Rule Screen Use this screen to add edit or remove speed dial numbers for outgoing calls Speed dial provides shortcuts for dialing frequently used VoIP phone numbers You also have to create speed dial entries if you want to call SIP numbers that contain letters Once you have configured a speed dial rule you can use a shortc...

Страница 132: ...y Click the Edit icon to copy the information for this speed dial entry into the Speed Dial section where you can change it Click Add when you finish editing to change the configurations Click the Delete icon to erase this speed dial entry Clear Click this to erase all the speed dial entries Cancel Click this to set every field in this screen to its last saved value 15 6 Technical Reference This s...

Страница 133: ...der com then VoIP provider com is the SIP service domain SIP Registration Each LTE Device is an individual SIP User Agent UA To provide voice service it has a public IP address for SIP and RTP protocols to communicate with other servers A SIP user agent has to register with the SIP registrar and must provide information about the users it represents as well as its current IP address for the routin...

Страница 134: ...P User Agent A SIP user agent can make and receive VoIP telephone calls This means that SIP can be used for peer to peer communications even though it is a client server protocol In the following figure either A or B can act as a SIP user agent client to initiate a call A and B can also both act as a SIP user agent to receive the call Figure 15 7 SIP User Agent SIP Proxy Server SIP Proxy Server A ...

Страница 135: ...eived back from the redirect server Redirect servers do not initiate SIP requests In the following example you want to use client device A to call someone who is using client device C Step 1 Client device A sends a call invitation for C to the SIP redirect server B Step 2 The SIP redirect server sends the invitation back to A with C s IP address or domain name Step 3 Client device A then sends the...

Страница 136: ...g SIP the RTP Real time Transport Protocol is used to handle voice data transfer See RFC 3550 for details on RTP Pulse Code Modulation Pulse Code Modulation PCM measures analog signal amplitudes at regular time intervals and converts them into bits SIP Call Progression The following figures display the basic steps in the setup and tear down of a SIP call A calls B LTE CPE B2368 User Guide 15 VoIP ...

Страница 137: ... digital samples G 711 provides very good sound quality but requires 64 kbps of bandwidth l G 726 is an Adaptive Differential PCM ADPCM waveform codec that uses a lower bitrate than standard PCM conversion ADPCM converts analog audio into digital signals based on the difference between each audio sample and a prediction based on previous samples The more similar the audio sample is to the predicti...

Страница 138: ...ices from your VoIP service provider The Flash Key Flashing means to press the hook for a short period of time a few hundred milliseconds before releasing it On newer telephones there should be a flash key button that generates the signal electronically If the flash key is not available you can tap press and immediately release the hook by hand to achieve the same effect However using the flash ke...

Страница 139: ...h key and then 2 to switch back and forth between caller A and B by putting either one on hold Press the flash key and then 0 to disconnect the call presently on hold and keep the current call on line Press the flash key and then 1 to disconnect the current call and resume the call on hold If you hang up the phone but a caller is still on hold there will be a remind ring European Call Waiting This...

Страница 140: ... three way conference into two individual connections one is on line the other is on hold press the flash key and press 2 End USA Type Supplementary Phone Services This section describes how to use supplementary phone services with the USA Type Call Service Mode Commands for supplementary services are listed in the table below After pressing the flash key if you do not issue the sub Command before...

Страница 141: ...he second party answers it hang up the phone End USA Three Way Conference Use the following steps to make three way conference calls Step 1 When you are on the phone talking to someone party A press the flash key to put the caller on hold and get a dial tone Step 2 Dial a phone number directly to make another call to party B Step 3 When party B answers the second call press the flash key to create...

Страница 142: ... 1 Overview Use the LTE Status screens to look at LTE related signaling status Figure 16 1 System Monitor LTE Status LTE CPE B2368 User Guide 16 LTE Status Issue 03 2019 01 31 Copyright Huawei Technologies Co Ltd 134 ...

Страница 143: ...n red and logs display in black Syslog Overview The syslog protocol allows devices to send event notification messages across an IP network to syslog servers that collect the event messages A syslog enabled device can generate a syslog message and send it to a syslog server Syslog is defined in RFC 3164 The RFC defines the packet format content and system log related information of syslog messages...

Страница 144: ...r left drop down list box Figure 17 1 System Monitor Log System Log The following table describes the fields in this screen Table 17 2 System Monitor Log System Log Label Description Select the type of the logs that you want to search in the first drop down list box Types All Logs WAN DHCP System Maintenance Remote Management TR 069 NTP ETHER DDNS NAT Attack ACL LTE Level Select a severity level f...

Страница 145: ...this screen to view phone logs and alert messages You can select the type of log and level of severity to display Figure 17 2 System Monitor Log Phone Log The following table describes the fields in this screen Table 17 3 System Monitor Log Phone Log Label Description Select a category of logs to view from the drop down list box Select All Logs to view all logs Level Select the severity level that...

Страница 146: ...s screen Table 17 4 System Monitor Log VoIP Call History Label Description Select a category of call records to view from the drop down list box Select All Call History to view all call records Refresh Click this to renew the log screen Clear Logs Click this to delete all the logs This field is a sequential value and is not associated with a specific entry Time This field displays the time the cal...

Страница 147: ... The WAN Status Screen Click System Monitor Traffic Status to open the WAN screen You can view the WAN traffic statistics in this screen WAN VoIP displays when you enable dual APN Figure 18 1 System Monitor Traffic Status WAN The following table describes the fields in this screen LTE CPE B2368 User Guide 18 Traffic Status Issue 03 2019 01 31 Copyright Huawei Technologies Co Ltd 139 ...

Страница 148: ...This indicates the number of frames with errors transmitted on this interface Drop This indicates the number of outgoing packets dropped on this interface Packets Received Data This indicates the number of received packets on this interface Error This indicates the number of frames with errors received on this interface Drop This indicates the number of received packets dropped on this interface 1...

Страница 149: ...d on this interface MBytes Received This indicates the number of megabytes received on this interface Interface This shows the LAN or WLAN interface Sent Packet Data This indicates the number of transmitted packets on this interface Error This indicates the number of frames with errors transmitted on this interface Drop This indicates the number of outgoing packets dropped on this interface Receiv...

Страница 150: ...screen Table 18 3 System Monitor Traffic Status NAT Label Description Refresh Interval Select how often you want the LTE Device to update this screen from the drop down list box Device Name This shows the name of the client IP Address This shows the IP address of the client MAC Address This shows the MAC address of the client No of Open Session This shows the number of NAT sessions used by the cli...

Страница 151: ...s to register the SIP account when you turn on the LTE Device or when you activate it Inactive The SIP account is not active You can activate it in VoIP SIP SIP Account URI This field displays the account number and service domain of the SIP account You can change these in the VoIP SIP screens Message Waiting This field indicates whether or not there are any messages waiting for the SIP account La...

Страница 152: ...IP call through a phone port Peer Number This field displays the SIP number of the party that is currently engaged in a VoIP call through a phone port Phone Status Account This field displays the phone accounts of the LTE Device Outgoing Number This field displays the SIP number that you use to make calls on this phone port Incoming Number This field displays the SIP number that you use to receive...

Страница 153: ... your password regularly 19 2 The User Account Screen Use the User Account screen to configure system password Click Maintenance User Account to open the following screen Figure 19 1 Maintenance User Account The following table describes the Labels in this screen LTE CPE B2368 User Guide 19 User Account Issue 03 2019 01 31 Copyright Huawei Technologies Co Ltd 145 ...

Страница 154: ...ystem password up to 30 characters Note that as you type a password the screen displays a dot for each character you type After you change the password use the new password to access the LTE Device Retype to Confirm Type the new password again for confirmation Apply Click Apply to save your changes Cancel Click Cancel to restore your previously saved settings LTE CPE B2368 User Guide 19 User Accou...

Страница 155: ...eed to Know The following terms and concepts may help as you read this chapter 20 2 The Remote MGMT Screen Use this screen to decide what services you may use to access which LTE Device interface Click Maintenance Remote MGMT to open the following screen NOTE Only admin users can configure Remote MGMT when they log on The user users do not have remote administrative authority and cannot configure ...

Страница 156: ... settings 20 3 The TR069 Screen TR 069 defines how Customer Premise Equipment CPE for example your LTE Device can be managed over the WAN by an Auto Configuration Server ACS TR 069 is based on sending Remote Procedure Calls RPCs between an ACS and a client device RPCs are sent in Extensible Markup Language XML format over HTTP or HTTPS An administrator can use an ACS to remotely set up the LTE Dev...

Страница 157: ...ic Inform Select this to set a time interval in seconds at which the LTE Device sends information to the auto configuration server Periodic Inform Interval Enter the time interval in seconds at which the LTE Device sends information to the auto configuration server Connection Request Port Specify the port number the ACS uses to request a connection to the LTE Device Connection Request Username Ent...

Страница 158: ...key for secure communication between the IDU and ODU It is recommended to refresh the encryption key of the product when the device is first used 21 2 The System Screen Use the System screen to configure the system s host name domain name and inactivity time out interval The Host Name is for identification purposes However because some ISPs check this name you should enter your computer s Computer...

Страница 159: ... left idle before the session times out The default is 5 minutes After it times out you have to log in with your password again Very long idle timeouts may have security risks ODU LED Light Control This switch turns the ODU s LED indicators on or off Select Light On to turn on the ODU s LED indicators Select Light Off to turn them off Apply Click this to save your changes back to the LTE Device Ca...

Страница 160: ...te Step 4 Wait for the LTE Device to reboot Figure 21 4 Maintenance System Encryption Key Update Restarting End 21 3 2 New ODU with Old IDU Do the following if you replace the ODU but still have the old IDU Step 1 Press the IDU reset button over 10 seconds and release and wait for the device to reboot LTE CPE B2368 User Guide 21 System Issue 03 2019 01 31 Copyright Huawei Technologies Co Ltd 152 ...

Страница 161: ...tem Encryption Key to open the Encryption Key screen 2 Click Update to update the encryption key 3 A popup screen asks you to confirm Click OK 4 Wait for the LTE Device to reboot Step 2 Log in to the web configurator choose Maintenance Backup Restore Back to Factory Defaults select Reset and wait for the IDU to reboot Step 3 After the restart the Wi Fi user name and password can be found on the la...

Страница 162: ...e Time Setting The screen appears as shown Use this screen to configure the LTE Device s time based on your local time zone Figure 22 1 Maintenance Time Setting The following table describes the fields in this screen Table 22 1 Maintenance Time Setting Label Description Current Date Time LTE CPE B2368 User Guide 22 Time Setting Issue 03 2019 01 31 Copyright Huawei Technologies Co Ltd 154 ...

Страница 163: ... late spring to early fall when many countries set their clocks ahead of normal local time by one hour to give more daytime light in the evening Select this option if you use Daylight Saving Time Start Date Configure the day and time when Daylight Saving Time starts if you selected Daylight Savings The o clock field uses the 24 hour format Here are a couple of examples Daylight Saving Time starts ...

Страница 164: ...day November and type 2 in the o clock field Daylight Saving Time ends in the European Union on the last Sunday of October All of the time zones in the European Union stop using Daylight Saving Time at the same moment 1 A M GMT or UTC So in the European Union you would select Last Sunday October The time you type in the o clock field depends on your time zone In Germany for instance you would type...

Страница 165: ...records in the Log Setting screen 23 2 The Log Setting Screen To change your LTE Device s log settings click Maintenance Log Setting The screen appears as shown Figure 23 1 Maintenance Log Setting LTE CPE B2368 User Guide 23 Log Setting Issue 03 2019 01 31 Copyright Huawei Technologies Co Ltd 157 ...

Страница 166: ...the categories of logs that you want to record Log Level Select the severity level of logs that you want to record If you want to record all logs select ALL Apply Click Apply to save your changes Cancel Click Cancel to restore your previously saved settings LTE CPE B2368 User Guide 23 Log Setting Issue 03 2019 01 31 Copyright Huawei Technologies Co Ltd 158 ...

Страница 167: ...ce 24 2 The Software Upgrade Screen Click Maintenance Software Upgrade to open the following screen The upload process uses HTTP Hypertext Transfer Protocol and may take up to five minutes After a successful upload the system will reboot Do NOT turn off the LTE Device while firmware upload is in progress LTE CPE B2368 User Guide 24 Software Upgrade Issue 03 2019 01 31 Copyright Huawei Technologies...

Страница 168: ... file you want to upload Note If both the modem and router need firmware upgrades update the modem firmware first and then the router Upload After you select the file click Upload to begin the upload process This process may take up to five minutes After you see the firmware updating screen wait a few minutes before logging into the LTE Device again Figure 24 2 Firmware Upgrading Warning LTE CPE B...

Страница 169: ...ystems you may see the following icon on your desktop Figure 24 5 Network Temporarily Disconnected After two minutes log in again and check your new firmware version in the System Info screen If the upload was not successful an error screen will appear Click OK to go back to the Software Upgrade screen LTE CPE B2368 User Guide 24 Software Upgrade Issue 03 2019 01 31 Copyright Huawei Technologies C...

Страница 170: ...nline Upgrade to open the following screen The upload process uses HTTPS Hypertext Transfer Protocol Secure or HTTP Hypertext Transfer Protocol and may take up to five minutes After a successful upload the system will reboot Do NOT turn off the LTE Device while firmware upload is in progress In the Periodic Online Upgrade field select Disable to turn off remote automatic detection and automatic up...

Страница 171: ...Upgrade Check Software and notify In the Periodic Online Upgrade field select Check Software and autoupgrade to have the LTE Device periodically check the server and automatically upgrade when there is new software Figure 25 3 Maintenance Online Upgrade Check Software and autoupgrade When you choose Check Software and notify or Check Software and autoupgrade you can choose when to check Check Time...

Страница 172: ...ware for the LTE Device CPE but not for the LTE module Figure 25 4 Maintenance Online Upgrade CPE Firmware Only There is new firmware for the LTE module but not for the LTE Device Figure 25 5 Maintenance Online Upgrade Module Firmware Only There is new firmware for both the LTE Device and new firmware for the LTE module In this situation the LTE Device upgrades the LTE module s firmware first LTE ...

Страница 173: ...grade Set Periodic Online Upgrade to Disable Fill in the firmware server URL click Apply and click Check Now Figure 25 7 Maintenance Online Upgrade Enter URL Step 2 A popup window shows if there is new firmware Figure 25 8 Maintenance Online Upgrade New Module Firmware Popup LTE CPE B2368 User Guide 25 Online Upgrade Issue 03 2019 01 31 Copyright Huawei Technologies Co Ltd 165 ...

Страница 174: ... firmware click No or the X button to close the popup window and skip the firmware upgrade Figure 25 9 Maintenance Online Upgrade Firmware Upgrading Warning Figure 25 10 Maintenance Online Upgrade Firmware Upgrading 25 Figure 25 11 Maintenance Online Upgrade Firmware Upgrading 50 LTE CPE B2368 User Guide 25 Online Upgrade Issue 03 2019 01 31 Copyright Huawei Technologies Co Ltd 166 ...

Страница 175: ...fails the LTE Device will go back to the previous firmware version and state Step 5 Log back into the LTE Device and use System Monitor LTE Status to check if the module firmware version is correct Figure 25 13 System Monitor LTE Status Checking the Firmware Version End To upgrade both the LTE Device and LTE module firmware Step 1 Click Maintenance Online Upgrade Set Periodic Online Upgrade to Dis...

Страница 176: ...the LTE Device firmware Figure 25 15 Maintenance Online Upgrade New CPE and Module Firmware Popup Step 3 Click the Yes button to upgrade the firmware During the process you will see a popup window to show the system is upgrading If you don t need to upgrade the firmware click No or the X button to close the popup window and skip the firmware upgrade Figure 25 16 Maintenance Online Upgrade Firmware...

Страница 177: ...19 Maintenance Online Upgrade Firmware Upgrading 100 Step 4 The login page appears again after the upgrade is complete Log back into the LTE Device and use System Monitor LTE Status to check if the module firmware version is correct LTE CPE B2368 User Guide 25 Online Upgrade Issue 03 2019 01 31 Copyright Huawei Technologies Co Ltd 169 ...

Страница 178: ...de the LTE Device firmware Figure 25 21 Maintenance Online Upgrade New CPE Firmware Popup Figure 25 22 Maintenance Online Upgrade Firmware Upgrading 40 Step 6 The login screen appears again after the upgrade is complete Log back into the LTE Device and use System Monitor LTE Status to check if the firmware version is correct LTE CPE B2368 User Guide 25 Online Upgrade Issue 03 2019 01 31 Copyright ...

Страница 179: ...Figure 25 23 System Monitor LTE Status Checking the Firmware Version End LTE CPE B2368 User Guide 25 Online Upgrade Issue 03 2019 01 31 Copyright Huawei Technologies Co Ltd 171 ...

Страница 180: ...ted to factory defaults backup configuration and restoring configuration appears in this screen as shown in the following figure Figure 26 1 Maintenance Backup Restore End Backup Log Step 1 Backup Log allows you to back up save the LTE Device s logs to a file on your computer Once your LTE Device has unusual behavior it is highly recommended that you back up your LTE CPE B2368 User Guide 26 Backup...

Страница 181: ...on Restore Configuration allows you to upload a new or previously saved configuration file from your computer to your LTE Device Table 26 1 Restore Configuration Label Description File Path Type in the location of the file you want to upload in this field or click Browse to find it Browse Click this to find the file you want to upload Upload Click this to begin the upload process Do not turn off t...

Страница 182: ...lick the Reset button to clear all user entered configuration information and return the LTE Device to its factory defaults The following warning screen appears Figure 26 3 Reset Warning Message Figure 26 4 Reset In Progress Message l You can also press the RESET button on the back panel to reset the factory defaults of your LTE Device Refer to Section 1 7 on page 6 for more information on the RES...

Страница 183: ...need to do this if the LTE Device hangs for example Step 1 Click Maintenance Reboot Click the Reboot button to have the LTE Device reboot This does not affect the LTE Device s configuration Figure 27 1 Reboot End LTE CPE B2368 User Guide 27 The Reboot Screen Issue 03 2019 01 31 Copyright Huawei Technologies Co Ltd 175 ...

Страница 184: ...e Ping TraceRoute Screen Ping and traceroute help check availability of remote hosts and also help troubleshoot network or Internet connections Click Maintenance Diagnostic to open the Ping TraceRoute screen shown next Figure 28 1 Maintenance Diagnostic Ping TraceRoute The following table describes the fields in this screen LTE CPE B2368 User Guide 28 Diagnostic Issue 03 2019 01 31 Copyright Huawe...

Страница 185: ... ping in order to test a connection Click Ping and the ping statistics will show in the diagnostic TraceRoute Click this button to perform the traceroute function This determines the path a packet takes to the specified host LTE CPE B2368 User Guide 28 Diagnostic Issue 03 2019 01 31 Copyright Huawei Technologies Co Ltd 177 ...

Страница 186: ...2 168 1 1 Step 2 If you changed the IP address and have forgotten it you might get the IP address of the LTE Device by looking up the IP address of the default gateway for your computer To do this in most Windows computers click Start Run enter cmd and then enter ipconfig The IP address of the Default Gateway might be the IP address of the LTE Device it depends on the network so enter this IP addr...

Страница 187: ...he problem continues contact the network administrator or vendor or try one of the advanced suggestions Advanced Suggestions l Try to access the LTE Device using another service such as Telnet If you can access the LTE Device check the remote management settings and firewall rules to find out why the LTE Device does not respond to HTTP l If your computer is connected to the WAN port or is connecte...

Страница 188: ...Step 1 Check the hardware connections and make sure the LEDs are behaving as expected See the Quick Start Guide and 1 5 Hardware Step 2 Turn the LTE Device off and on Step 3 If the problem continues contact your ISP End The Internet connection is slow or intermittent Step 1 There might be a lot of traffic on the network Look at the LEDs and check Section 1 6 If the LTE Device is sending or receivi...

Страница 189: ...hat use the Internet What wireless security modes does my LTE Device support Wireless security is vital to your network It protects communications between wireless stations access points and the wired network The available security modes in your device are as follows l WPA2 PSK recommended this uses a pre shared key with the WPA2 standard l WPA PSK This has the device use either WPA PSK or WPA2 PS...

Страница 190: ...ter Step 2 Re connect the Ethernet cable End The Local Area Connection icon for UPnP disappears in the screen Restart your computer I cannot open special applications such as white board file transfer and video when I use the MSN messenger Step 1 Wait more than three minutes Step 2 Restart the applications End LTE CPE B2368 User Guide 29 Troubleshooting Issue 03 2019 01 31 Copyright Huawei Technol...

Страница 191: ... data collected by CPE You must handle the personal data on the CPE according to the laws and regulations of your country for example GDPR General Data Protection Regulation of European Union LTE CPE B2368 User Guide 30 Personal Data Description Issue 03 2019 01 31 Copyright Huawei Technologies Co Ltd 183 ...

Отзывы:

Нет отзывов

Похожие инструкции для V100R001C00

Leroy-Somer R180

Бренд: Nidec Страницы: 20

Бренд: Yudian Страницы: 26

Бренд: UNICORECOMM Страницы: 32

Бренд: UNICORECOMM Страницы: 7

Бренд: UNICORECOMM Страницы: 26

Бренд: UNICORECOMM Страницы: 25

Бренд: Watts Страницы: 4

Бренд: YOKOGAWA Страницы: 150

Бренд: YOODA Страницы: 3

Бренд: YMGI Страницы: 8

Бренд: V2 Страницы: 12

NORA-W10 Series

Бренд: u-blox Страницы: 56

Бренд: z21 Страницы: 2

ArtNet-DMX Mux16

Бренд: DMX4ALL Страницы: 21

Бренд: tell Страницы: 11

Бренд: Dejero Страницы: 24

Бренд: WINDY NATION Страницы: 16

Бренд: Kaba Mauer Страницы: 10

Бренды по названию

0 1 2 3 4 5 6 7 8 9 A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Популярные бренды

Загрузить еще бренды