Sunteți pe pagina 1din 30

Welcome to use EchoLife WiMAX CPE!

Online Help

Issue 03

Date 2009-08-10

Part Number 00415519

Huawei Technologies Co., Ltd.


Address: Huawei Industrial Base
Bantian, Longgang
Shenzhen 518129
People's Republic of China

Website: http://www.huawei.com

Email: terminal@huawei.com

Huawei Proprietary and Confidential


Copyright © Huawei Technologies Co., Ltd
Copyright © Huawei Technologies Co., Ltd. 2009. All rights reserved.
No part of this document may be reproduced or transmitted in any form or by any
means without prior written consent of Huawei Technologies Co., Ltd.
The product described in this manual may include copyrighted software of Huawei
Technologies Co., Ltd and possible licensors. Customers shall not in any manner
reproduce, distribute, modify, decompile, disassemble, decrypt, extract, reverse
engineer, lease, assign, or sublicense the said software, unless such restrictions are
prohibited by applicable laws or such actions are approved by respective copyright
holders under licenses.
Trademarks and Permissions

, HUAWEI, and are trademarks or registered trademarks of Huawei


Technologies Co., Ltd.
Other trademarks, product, service and company names mentioned are the property
of their respective owners.
Notice
Some features of the product and its accessories described herein rely on the
software installed, capacities and settings of local network, and may not be activated
or may be limited by local network operators or network service providers, thus the
descriptions herein may not exactly match the product or its accessories you
purchase.
Huawei Technologies Co., Ltd reserves the right to change or modify any information
or specifications contained in this manual without prior notice or obligation.
NO WARRANTY
THE CONTENTS OF THIS MANUAL ARE PROVIDED "AS IS". EXCEPT AS
REQUIRED BY APPLICABLE LAWS, NO WARRANTIES OF ANY KIND, EITHER
EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO, THE IMPLIED
WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
PURPOSE, ARE MADE IN RELATION TO THE ACCURACY, RELIABILITY OR
CONTENTS OF THIS MANUAL.
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO CASE
SHALL HUAWEI TECHNOLOGIES CO., LTD BE LIABLE FOR ANY SPECIAL,
INCIDENTAL, INDIRECT, OR CONSEQUENTIAL DAMAGES, OR LOST PROFITS,
BUSINESS, REVENUE, DATA, GOODWILL OR ANTICIPATED SAVINGS.
Import and Export Regulations
Customers shall comply with all applicable export or import laws and regulations and
will obtain all necessary governmental permits and licenses in order to export,
re-export or import the product mentioned in this manual including the software and
technical data therein.

Huawei Proprietary and Confidential


Copyright © Huawei Technologies Co., Ltd
Safety Precautions
General Requirements
z Before you install and use the device, read these safety precautions carefully and
observe them during operation.
z Keep the device dry during storage, transportation, and operation.
z Ensure that the device does not collide with other objects during storage,
transportation, and operation.
z Do not attempt to dismantle the device by yourself. In case of any fault, contact the
designated maintenance center for repair.
z Without prior written consent, no organization or individual is permitted to make
any change to the structure or safety design of the device. Huawei Technologies
Co., Ltd. is not liable to any consequences or legal issues due to such changes.
z While using the device, observe all applicable laws, directives, and regulations, and
respect the legal rights of others.

Environmental Requirements
z Place the device in a well-ventilated place. Do not dispose the device to direct
sunlight.
z Keep the device clean and free of dust.
z Place the device on a stable platform.
z Do not place any object on top of the device. The weight of the object may deform
or damage the device, or the device may become too hot.
z Maintain a distance of at least 10 cm between the device and the closest object for
heat dissipation.
z Do not place the device on or near any inflammable material, such as something
made of rubber.
z Keep the device far away from any heat source or fire, such as a candle or an
electric heater.
z Keep the device far away from any household appliance with strong magnetic field
or electromagnetic field, such as a microwave oven, a refrigerator, or a satellite dish
antennas.

Operating Requirements
z Do not let a child operate the device without guidance.
z Do not let a child play with the device or any accessory. Swallowing the
accessories may be fatal.
z Use only the accessories provided or authorized by the manufacturer.

Huawei Proprietary and Confidential


Copyright © Huawei Technologies Co., Ltd
z The power supply of the device must meet the requirements of the input voltage of
the device.
z Before plugging or unplugging any cable, shut down the device and disconnect it
from the power supply.
z While plugging or unplugging any cable, make sure that your hands are completely
dry.
z Do not step on, pull, or over-bend any cable. This can damage the cable and lead to
malfunction of the device.
z Do not use an old or a damaged cable.
z During lightning storms, do not use the device and disconnect it from the power
supply.
z If the device is not used for a long time, disconnect it from the power supply and
unplug the power plug.
z When smoke, abnormal noise, or unpleasant smell is emitted from the device, stop
using the device, disconnect it from the power supply and unplug the power plug
immediately. Contact the designated maintenance center for repair.
z Ensure that no objects (such as metal shavings) are entering the device through the
heat dissipation intakes.
z Do not scratch or abrade the surface of the device. This may affect the operation of
the device. The paint scraps shed may cause skin allergy.
z The antenna(s) used for this transmitter must be installed to provide a separation
distance of at least 20 cm from all persons.

Cleaning Requirements
z Before cleaning the device, power off the device and disconnect it from the power
supply.
z Use a soft cloth to clean the device.
z Keep the power plug clean and dry. Using a dirty or wet power plug may lead to
electric shock or other accidents.

EU Regulatory Conformance
z Huawei Technologies Co., Ltd., hereby, declares that the product complies with the
essential requirements and other relevant provisions of Directive 1999/5/EC.
z The product is compliant with the Registration, Evaluation, Authorisation and
Restriction of Chemicals (REACH) Regulation (Regulation 1907/2006/EC).

z The declaration of conformity can be found at


www.huaweidevice.com/certification.
z Observe the national and local regulations in the area where the product is to be
used. This product may be restricted for use in some or all countries of European
Union.

Huawei Proprietary and Confidential


Copyright © Huawei Technologies Co., Ltd
Online Help Contents

Contents

1 Configuring the Network.................................................................................... 1-1


1.1 Functions..................................................................................................................... 1-1
1.2 Logging In to the Web-Based Utility .......................................................................... 1-2
1.3 Configuring a WAN .................................................................................................... 1-2
1.3.1 Configuring the Routing Mode ....................................................................... 1-2
1.3.2 Configuring the Bridging Mode ...................................................................... 1-4
1.4 Configuring a LAN ..................................................................................................... 1-4
1.5 Configuring a WLAN.................................................................................................. 1-5
1.5.1 Configuring Basic WLAN Parameters............................................................ 1-5
1.5.2 Configuring WLAN Security Parameters........................................................ 1-5
1.6 Configuring VoIP........................................................................................................ 1-7
1.6.1 Configuring Basic VoIP Functions ................................................................. 1-7
1.6.2 Configuring advanced VoIP functions ............................................................ 1-7
1.7 Connecting and Disconnecting Network ..................................................................... 1-8
1.8 Connecting the External Antenna (Optional) .............................................................. 1-9
2 Configuring Advanced Functions ..................................................................... 2-1
2.1 Configuring NAT ........................................................................................................ 2-1
2.1.1 Configuring the ALG ...................................................................................... 2-1
2.1.2 Configuring the DMZ ..................................................................................... 2-1
2.1.3 Configuring Port Mapping .............................................................................. 2-2
2.1.4 Configuring a Port Trigger.............................................................................. 2-2
2.2 Configuring the ACL .................................................................................................. 2-3
2.3 Configuring SNTP....................................................................................................... 2-3
2.4 Configuring the Security Function .............................................................................. 2-4
2.4.1 Configuring the URL Filter............................................................................. 2-4
2.4.2 Configuring the MAC Filter............................................................................ 2-4
2.4.3 Configuring the IP Incoming Filter ................................................................. 2-5
2.4.4 Configuring the IP Outgoing Filter ................................................................. 2-6
2.4.5 Configuring the Firewall ................................................................................. 2-6
2.5 Configuring WiMAX Security Parameters ................................................................. 2-7

Issue 03 (2009-08-10) Huawei Proprietary and Confidential i


Copyright © Huawei Technologies Co., Ltd
Online Help Contents

3 Managing the CPE ................................................................................................ 3-1


3.1 Managing the User Account........................................................................................ 3-1
3.2 Rebooting the CPE ...................................................................................................... 3-1
3.3 Upgrading the Software............................................................................................... 3-1
3.4 Restoring Default Settings........................................................................................... 3-2
4 Maintaining the CPE............................................................................................ 4-1
4.1 Checking Information About the CPE......................................................................... 4-1
4.1.1 Checking the Device Information ................................................................... 4-1
4.1.2 Checking the Information About the WAN Side ............................................ 4-1
4.1.3 Checking the Information About the LAN Side.............................................. 4-1
4.1.4 Checking the VoIP Information ...................................................................... 4-2
4.1.5 Checking the WiMAX Information ................................................................ 4-2
4.2 Detecting the CPE ....................................................................................................... 4-2
5 FAQs........................................................................................................................ 5-1
6 Abbreviations ........................................................................................................ 6-1

Issue 03 (2009-08-10) Huawei Proprietary and Confidential ii


Copyright © Huawei Technologies Co., Ltd
Online Help 1 Configuring the Network

1 Configuring the Network

1.1 Functions
The EchoLife WiMAX Customer-Premises Equipment (CPE) (hereinafter referred to as
the CPE) is a next-generation gateway used in a Worldwide Interoperability for
Microwave Access (WiMAX) network. The CPE provides you a new service experience.
With the CPE, you can enjoy wireless broadband services. With the CPE, home and
enterprise users can easily set up a wireless network and enjoy the services over the
network.

Wireless Broadband Services


z Supporting wireless Internet access
z Supporting seamless connections through which you can access the network anytime
and anywhere
z Guaranteeing network security with reliability

VoIP Service
z Supporting the Voice over IP (VoIP) service based on the Session Initiation Protocol
(SIP)
z Supporting the voice compression technology
z Providing high-quality voice services

Enhanced Throughput
z Supporting the downlink bandwidth of up to 15 Mbit/s and the uplink bandwidth of
up to 5 Mbit/s
z Supporting multiple-input multiple-output (MIMO)
z Supporting Orthogonal Frequency-Division Multiple Access (OFDMA), which
increases spectrum utilization

Various Services
z Providing a Web-based utility with a user-friendly graphical user interface (GUI)
and abundant help information
z Supporting both local and remote upgrade of the CPE

Issue 03 (2009-08-10) Huawei Proprietary and Confidential 1-1


Copyright © Huawei Technologies Co., Ltd
Online Help 1 Configuring the Network

1.2 Logging In to the Web-Based Utility


Before configuring the network, log in to the Web-based utility. Take the Windows XP
operating system and the Internet Explorer 6.0 as examples.
To log in to the Web-based utility, do as follows:
Step 1 Configure the IP address of the computer. Ensure that the IP address of the computer and
the IP address of the CPE are in the same network segment.

z By default, the IP address of the CPE is 192.168.1.1 and the subnet mask is 255.255.255.0.
z It is recommended that the IP address and DNS settings be obtained automatically.
Step 2 Start the Internet Explorer, enter http://192.168.1.1 in the address bar, and then press
Enter.
Step 3 Enter the user name and the password in the login window that is displayed, and then
click Login.

Both the initial user name and password are user.


Step 4 After the user name and the password are verified, you can perform operations on the
Web-based utility.
----End

1.3 Configuring a WAN


When you configure a wider area network (WAN), the CPE can function as a routing or
bridging device. With the CPE, a terminal on the local area network (LAN) side is
connected to the network.
z In routing mode, the CPE functions as a routing device to connect to the network.
Based on packet information, the CPE searches for a route through which the packets
are sent to the destination IP address.
z In bridging mode, the CPE functions as a bridging device to connect to the network.
The CPE only transparently transmits packets.
Three modes of obtaining an IP address are available for the CPE:
z Dynamic Host Configuration Protocol (DHCP) mode: The IP address is obtained
from the Internet service provider (ISP).
z Static IP address mode: The ISP configures a static IP address.
z Point-to-Point Protocol over Ethernet (PPPoE) mode: The IP address is obtained
through a PPPoE dial-up connection.

1.3.1 Configuring the Routing Mode

Configuring the DHCP Routing Mode


Step 1 In the navigation tree, choose Basic > WAN, and then click the WAN tab.

Issue 03 (2009-08-10) Huawei Proprietary and Confidential 1-2


Copyright © Huawei Technologies Co., Ltd
Online Help 1 Configuring the Network

Step 2 Select Route from Mode.


Step 3 Select DHCP Auto get IP address from ISP.
Step 4 Select a network address translation (NAT) type.

The NAT function is enabled to facilitate the translation of IP addresses. Through NAT, the
host IP address of a LAN can be effectively hidden. Thus, the security of the intranet is
ensured. Two NAT types are available:
z Network Address Port Translation (NAPT)
z Cone NAT
Step 5 Click Apply.
----End

Configuring the Static IP Routing Mode


Step 1 In the navigation tree, choose Basic > WAN, and then click the WAN tab.
Step 2 Select Route from Mode.
Step 3 Select Static Get static IP address from ISP.
Step 4 Select a NAT type.

The NAT function is enabled to facilitate the translation of IP addresses. Through NAT, the
host IP address of a LAN can be effectively hidden. Thus, the security of the intranet is
ensured. Two NAT types are available:
z Network Address Port Translation (NAPT)
z Cone NAT
Step 5 Enter the IP address in the IP Address text box.
Step 6 Enter the subnet mask in the Subnet Mask text box.
Step 7 Enter the default gateway in the Default Gateway text box.
Step 8 Enter the IP address of the primary domain name server (DNS) in the Primary DNS
Server text box.
Step 9 Enter the IP address of the secondary DNS in the Secondary DNS Server text box.

IP Address, Subnet Mask, Default Gateway, Primary DNS Server, Secondary DNS
Server are provided by the carrier.
Step 10 Click Apply.
----End

Configuring the PPPoE Routing Mode


Step 1 In the navigation tree, choose Basic > WAN, and then click the WAN tab.
Step 2 Select Route from Mode.
Step 3 Select PPPoE Get IP Address by using PPPoE.

Issue 03 (2009-08-10) Huawei Proprietary and Confidential 1-3


Copyright © Huawei Technologies Co., Ltd
Online Help 1 Configuring the Network

Step 4 Select a NAT type.

The NAT function is enabled to facilitate translation of IP addresses. Through NAT, the host
IP address of a LAN can be effectively hidden. Thus, the security of the intranet is ensured.
Two NAT types are available:
z NAPT
z Cone NAT
Step 5 Enter the user name and password in the text box.
Step 6 Select the dial-up method.

Two dial-up methods are available: Auto Dial and Manual Dial. If selecting Manual Dial,
you need to click Manual Dial set up a dial-up connection.
Step 7 Click Apply.
----End

1.3.2 Configuring the Bridging Mode


The configuration of the bridging mode is similar to that of the routing mode.
Step 1 In the navigation tree, choose Basic > WAN, and then click the WAN tab.
Step 2 Select Bridge from Mode.
Step 3 For the details on how to set parameters, see section1.3.1 "Configuring the Routing
Mode".
Step 4 Set whether to enable the virtual local area network (VLAN) function.
Step 5 Click Apply.
----End

1.4 Configuring a LAN


To configure a LAN, you need to set DHCP parameters. After DHCP is enabled, the CPE
allocates an IP address pool to the network device on the LAN side.
Step 1 In the navigation tree, choose Basic > LAN, and then click the DHCP tab.
Step 2 Enter the IP address in the IP Address text box, for example, 192.168.1.1.
Step 3 Enter the subnet mask in the Subnet Mask text box, for example, 255.255.255.0.
Step 4 Click Apply.
Step 5 Select Enable DHCP Server.
Step 6 Enter the start IP address at the LAN side in the Start IP Address text box.
Step 7 Enter the end IP address at the LAN side in the End IP Address text box.
Step 8 Select the lease of the address from Lease (unit).
The system automatically leases the address in advance according to the specified lease.
Step 9 Click Apply.

Issue 03 (2009-08-10) Huawei Proprietary and Confidential 1-4


Copyright © Huawei Technologies Co., Ltd
Online Help 1 Configuring the Network

If the CPE is working as a bridging device, you need to perform only Step 1 to Step 4 when
configuring a LAN.
----End

1.5 Configuring a WLAN


A wireless local area network (WLAN) is set up based on wireless communication
technologies without any cables. The setup of a WLAN is simple. With the WLAN
function, you can use the CPE to access the broadband network anytime and anywhere
within the WLAN coverage in addition to the provisioning of the legacy-wired LAN
services.

1.5.1 Configuring Basic WLAN Parameters


In the navigation tree, choose Basic > LAN, and then click the WLAN tab.
Select Enable Wireless to enable WLAN.
Parameter Used to Specify …
Regulatory Wireless standards of different countries.
Domain
SSID Index SSID index.
SSID SSID name.
Max Associate Maximum number of wireless devices to be connected.
Device Number
Hide SSID Whether to hide the SSID broadcast.
Note:
SSID = service set identifier

1.5.2 Configuring WLAN Security Parameters


On the WLAN tab, Security Configure provides four security modes: Wired Equivalent
Privacy (WEP), Wi-Fi Protected Access-Pre-Shared Key (WPA-PSK), WPA2-PSK,
and Mixed WPA2/WPA-PSK.
You can select one of the following according to the network configuration:
z WEP: indicates that the data transmitted wirelessly is encrypted according to the set
encryption parameters.
z WPA-PSK: indicates the simplified WPA authentication mode. The special
authentication server is not required. To encrypt data, enter the secret key only.
z WPA2-PSK: indicates the simplified WPA2 authentication mode. It supports the
IEEE 802.11i Wi-Fi standard.

Issue 03 (2009-08-10) Huawei Proprietary and Confidential 1-5


Copyright © Huawei Technologies Co., Ltd
Online Help 1 Configuring the Network

z Mixed WPA2/WPA-PSK: indicates that both WPA-PSK and WPA2-PSK


authentication modes are supported.

z No matter which security mode you select, ensure that the security mode of the wireless
access device is set the same as that of the CPE.
z It is recommended that you use the driver and configuration utility delivered with the
wireless network adapter.

Configuring the WEP Security Mode


Parameter Used to Specify …
WEP Encryption Whether to enable the WEP encryption:
z Enable: indicates that all the data transmitted over the
wireless LAN is encrypted according to the encryption
parameters defined by users.
z Disable: indicates that the open authentication mode without
encryption is enabled. All the data transmitted over the
wireless LAN is not encrypted.
Encryption key Length of the encryption key.
Length
Current Encryption key index used currently.
Encryption Index
Encryption key Encryption key.
1–4

Configuring the WPA-PSK, WPA2-PSK, or Mixed WPA2/WPA-PSK


Security Mode
Parameter Used to Specify …
WPA Pre-Shared Pre-shared WPA key for authentication.
key
WPA Encryption WPA encryption mode. Three options are available:
z TKIP
z AES

z TKIP+AES

Note:
TKIP = Temporal Key Integrity Protocol
AES = Advanced Encryption Standard

Issue 03 (2009-08-10) Huawei Proprietary and Confidential 1-6


Copyright © Huawei Technologies Co., Ltd
Online Help 1 Configuring the Network

1.6 Configuring VoIP


As a voice service based on SIP, VoIP enables users to make Internet phone calls and fax
data.
As an application layer protocol, SIP is used for setting up, changing, or completing a
multimedia session.

1.6.1 Configuring Basic VoIP Functions


Step 1 In the navigation tree, choose Basic > VoIP, and then click the SIP User tab.
Step 2 Enter a new ID in the SIP ID text box.
Step 3 Enter the user name and password provided by the carrier respectively.
Step 4 Enter the port number in the SIP Local Port text box.
Step 5 Select the correct caller identification display type from Caller Number Display Type,
for example, Display.
Step 6 Set whether to enable message waiting in the Select Message Waiting Indication
Service area.
When you enable the function, you need to enter the Uniform Resource Identifier (URI)
in the Message Waiting Indication Service Subscribe URI text box.
Step 7 Click Apply to save the settings.
Step 8 Click the SIP Server tab.
Step 9 Select the server type from Server.
Two options are available: Primary server and Secondary server.
Step 10 Enter the server address and the port respectively.
Step 11 Enter the domain name of the SIP service in the text box.
Step 12 Click Apply to save the settings.

z Select the SIP ID to be changed, change it, and then click Apply.
z Click Register to register the selected SIP ID with the server; click Unregister to unregister
the selected SIP ID with the server.
z Select Remove to delete the selected SIP ID. After a SIP ID is removed, if you want to use
the SIP ID, you need to create it again.
z If the SIP server is the secondary server, you do not need to configure the parameters of the
proxy server.
----End

1.6.2 Configuring advanced VoIP functions

Configuring a Port
In the navigation tree, choose Basic > VoIP, and then click the Port tab.
Select a port ID to check the port information. Modify the port attributes, and then click
Apply.

Issue 03 (2009-08-10) Huawei Proprietary and Confidential 1-7


Copyright © Huawei Technologies Co., Ltd
Online Help 1 Configuring the Network

Parameter Used to Specify …


Internal Number Short number of an internal VoIP call.
Note Information Note of the corresponding internal short number.
Associated SIP ID SIP ID bundled with the phone port.

Configuring Speed Dial


In the navigation tree, choose Basic > VoIP, and then click the Speed Dial tab.
Parameter Used to Specify …
Dial Number Speed dial number.
Note Note of the speed dial.
Real Number Real phone number of the speed dial.
Modify the attributes of the selected speed dial number and then click Apply.
Select Remove to delete the selected speed dial number. After it is removed, if you want
to speed dial the number, you need to designate the number to speed dial first.

1.7 Connecting and Disconnecting Network


Connecting to a Network
To connect to a WiMAX network, do as follows:
Step 1 In the navigation tree, choose Status > WiMAX, and then click the WiMAX Status tab.
Step 2 Click Connect To Network.
The CPE will connect to the network automatically.
----End

If all the cables are correctly connected, when powered on, the CPE searches for the WiMAX
network automatically.

Disconnecting from a Network


When you do not use the Internet, you can disconnect the CPE from the network
manually. After you disconnect the network connection, you need to connect the CPE to
the network again before accessing the Internet.
Step 1 In the navigation tree, choose Status > WiMAX, and then click the WiMAX Status tab.
Step 2 Click Disconnect From Network.
----End

Issue 03 (2009-08-10) Huawei Proprietary and Confidential 1-8


Copyright © Huawei Technologies Co., Ltd
Online Help 1 Configuring the Network

1.8 Connecting the External Antenna (Optional)

z Do not use the external antenna outdoors.


z During lightning weather, stop using the external antenna, and disconnect it from the
CPE.
Two external antennas can be connected to the CPE at a time. If only one antenna is
connected, connect it to the main antenna interface labeled with . Otherwise, the
CPE may fail to work normally. To connect an external antenna, do as follows:
Step 1 Power off the CPE.
Step 2 Connect the external antenna to the CPE.
Step 3 Put the external antenna in an open space without any obstacle surrounded, to ensure
good reception of network signals.
----End

Issue 03 (2009-08-10) Huawei Proprietary and Confidential 1-9


Copyright © Huawei Technologies Co., Ltd
Online Help 2 Configuring Advanced Functions

2 Configuring Advanced Functions


2.1 Configuring NAT
NAT is used to convert an IP address and a port so that the device on the LAN side uses
an IP address of the same public network to access the network on the WAN side.

2.1.1 Configuring the ALG


An application layer gateway (ALG) is used to convert the specified data carried in IP
packets, thus supporting LAN applications in the process of transmitting the packets on
the LAN side and the packets on the WAN side.
In the navigation tree, choose Advanced > NAT, and then click the ALG tab.
Parameter Used to Specify …
Enable L2TP ALG Whether to enable the L2TP ALG.
Enable IPSec ALG Whether to enable the IPSec ALG.
Enable H.323 Whether to enable the H.323 ALG.
ALG
Enable RTSP ALG Whether to enable the RTSP ALG.
Enable SIP ALG Whether to enable the SIP ALG. After the SIP ALG is enabled,
enter the SIP port number.
Enable PPTP ALG Whether to enable the PPTP ALG.
Note:
L2TP = Layer 2 Tunneling Protocol
IPSec = Internet Protocol Security
RTSP = Real-Time Streaming Protocol
PPTP = Point-to-Point Tunneling Protocol

2.1.2 Configuring the DMZ


A demilitarized zone (DMZ) is used to forward the packets from the WAN without a port
mapping to the host defined in the DMZ.
In the navigation tree, choose Advanced > NAT, and then click the DMZ tab.

Issue 03 (2009-08-10) Huawei Proprietary and Confidential 2-1


Copyright © Huawei Technologies Co., Ltd
Online Help 2 Configuring Advanced Functions

Parameter Used to Specify …


Host Address IP address of the host
Enable DMZ Whether to enable the DMZ

2.1.3 Configuring Port Mapping


Port mapping supports the mapping between the interfaces on the WAN side and the
interfaces on the LAN side.

Adding a Port Mapping Rule


In the navigation tree, choose Advanced > NAT, and then click the Port Mapping tab.
Two port mapping modes are available:
z Custom: indicates the self-defined mode.
z Application: indicates the mode provided by the system.
When selecting Custom, you must set the following parameters.
Parameter Used to Specify …
Mapping Name Mapping name.
Protocol Interface protocol.
External Port External port number.
Internal Port Internal port number.
Internal Host IP address of the internal host.
Source IP Address IP address of the source host.

When you select Application, the system displays the values of all parameters. You can
keep the default values or change them.

Deleting a Port Mapping Rule


Select the name of the mapping to be deleted, and then click Remove.

2.1.4 Configuring a Port Trigger


During remote access, the specified port of the firewall on the router must be enabled for
certain applications. A port trigger is used to set up a new connection between the remote
applications on the WAN side and the applications that require the use of certain ports on
the LAN side.

Adding a Port Trigger


In the navigation tree, choose Advanced > NAT, and then click the Port Trigger tab.

Issue 03 (2009-08-10) Huawei Proprietary and Confidential 2-2


Copyright © Huawei Technologies Co., Ltd
Online Help 2 Configuring Advanced Functions

Two port trigger modes are available:


z Custom: indicates the self-defined mode.
z Application: indicates the mode provided by the system.
When selecting Custom, you must set the following parameters.
Parameter Used to Specify …
Trigger New rule name.
Description
Trigger Protocol Protocol type.
Trigger Start Port Start port number.
Trigger End Port End port number.
Open Start Port Open start port number.
Open End Port Open end port number.

When you select Application, the system displays values of all parameters. You can
keep the default values or change them.

Deleting a Port Trigger


Select the trigger name to be deleted, and then click Remove.

2.2 Configuring the ACL


By using the access control list (ALC) function, you can enable or disable the Hypertext
Transfer Protocol (HTTP), Telnet, and Secure Shell (SSH) services.
Step 1 In the navigation tree, choose Advanced > ACL, and then click the ACL tab.
Step 2 Enable or disable the ACL of a service.
Step 3 Click Apply.
----End

2.3 Configuring SNTP


The Simple Network Time Protocol (SNTP) is used to synchronize network time.
Step 1 In the navigation tree, choose Advanced > SNTP, and then click the SNTP tab.
Step 2 Select the Auto Synchronization Network Time Server check box.
Step 3 Select an option respectively from Primary SNTP Server, Secondary SNTP Server,
and Time Zone.

If Primary SNTP Server and Secondary SNTP Server drop-down list boxes do not contain
the required options, enter the server names in the text boxes.

Issue 03 (2009-08-10) Huawei Proprietary and Confidential 2-3


Copyright © Huawei Technologies Co., Ltd
Online Help 2 Configuring Advanced Functions

Step 4 Click Apply.


----End

2.4 Configuring the Security Function


The security function is used to control the rights of sending and receiving packets and
the duration for accessing the network.
Two options are available:
z Black: indicates that a blacklist member does not have the corresponding rights.
z White: indicates that a whitelist member has the corresponding rights.

2.4.1 Configuring the URL Filter


The Universal Resource Locator (URL) filter is used to prevent a network device on the
LAN side from accessing certain Web sites on the WAN side.

Adding a URL Filter Rule


Step 1 In the navigation tree, choose Advanced > Security, and then click the URL Filter tab.
Step 2 Enable the URL filter.
Step 3 Select Black or White.
Step 4 Click New.
Step 5 Enter an address in URL.
Step 6 Click Apply.
----End

Modifying a URL Filter Rule


Select the URL filter rule to be modified, modify it, and then click Apply.

Deleting a URL Filter Rule


Select the URL filter rule to be deleted, and then click Remove.

2.4.2 Configuring the MAC Filter


The MAC filter can filter data frames according to the defined filter rule. The filter takes
effect only when all conditions of the filter rule are met.

Adding a MAC Filter Rule


Step 1 In the navigation tree, choose Advanced > Security, and then click the MAC Filter tab.
Step 2 Enable the MAC filter.
Step 3 Select Black or White.
Step 4 Click New.
Step 5 Set the following parameters of a MAC filter rule.
Issue 03 (2009-08-10) Huawei Proprietary and Confidential 2-4
Copyright © Huawei Technologies Co., Ltd
Online Help 2 Configuring Advanced Functions

Parameter Used to Specify …


Filter Name Name of a MAC filter rule.
Source MAC MAC address of the source host .
Address
Destination MAC MAC address of the destination host.
Address
Start Time Effective time of a rule, in the format of hh: mm.
End Time Expiration time of a rule, in the format of hh: mm.
Day Effective date of a rule.
Enable Whether to use this rule.

Step 6 Click Apply.


----End

Modifying a MAC Filter Rule


Select the MAC filter rule to be modified, modify it, and then click Apply.

Deleting a MAC Filter Rule


Select the MAC filter rule to be deleted, and then click Remove.

2.4.3 Configuring the IP Incoming Filter


When the firewall is enabled, the IP incoming filter can be used to receive certain
specified IP packets on the WAN side.

Adding an IP Incoming Filter Rule


Step 1 In the navigation tree, choose Advanced > Security, and then click the IP Incoming
tab.
Step 2 Select Enable IP Incoming Filter to enable the IP incoming filter.
Step 3 Click New.
Step 4 Set the following parameters of an IP incoming filter rule.
Parameter Used to Specify …
Filter Name Name of an IP incoming filter rule.
Protocol Protocol type.
Enable Whether to use this rule.
Source Start Start IP address of the source host.
Address

Issue 03 (2009-08-10) Huawei Proprietary and Confidential 2-5


Copyright © Huawei Technologies Co., Ltd
Online Help 2 Configuring Advanced Functions

Parameter Used to Specify …


Source End End IP address of the source host.
Address
Source Start Port Start port number of the source host.
Source End Port End port number of the source host.
Destination Start Start IP address of the destination host.
Address
Destination End End IP address of the destination host.
Address
Destination Start Start port number of the destination host.
Port
Destination End End port number of the destination host.
Port

Step 5 Click Apply.


----End

Modifying an IP Incoming Filter Rule


Select the IP incoming filter rule to be modified, modify it, and then click Apply.

Deleting an IP Incoming Filter Rule


Select the IP incoming filter rule to be deleted, and then click Remove.

2.4.4 Configuring the IP Outgoing Filter


The IP outgoing filter is used to prevent the LAN side from sending certain IP packets.
The configuration of an IP outgoing filter rule is the same as that of an IP incoming filter
rule. For details about the parameter settings, see section 2.4.3 "Configuring the IP
Incoming Filter"

2.4.5 Configuring the Firewall


The firewall is used to prevent the protected network from the unauthorized or unverified
access from the Internet. Users of an intranet are allowed to access the Internet.
In the navigation tree, choose Advanced > Security, and then click the Firewall tab.
Select a security level of the firewall from Security Level.
The meanings of options are as follows:
z Off: indicates that the firewall is disabled.
z Low: indicates that the firewall functions as a state firewall. The firewall prevents
port scanning and IP address spoofing, but allows both ping operation and Internet
Control Message Protocol (ICMP) redirect packets on the WAN side.
Issue 03 (2009-08-10) Huawei Proprietary and Confidential 2-6
Copyright © Huawei Technologies Co., Ltd
Online Help 2 Configuring Advanced Functions

z Medium: indicates that besides preventing port scanning and IP address spoofing,
the firewall prevents ICMP redirection packets.
z High: indicates that besides preventing port scanning, IP address spoofing, and
ICMP redirection packets, the firewall prevents the Synchronous Idle (SYN)
character flood attack and the ping operation on the WAN side.

2.5 Configuring WiMAX Security Parameters


In the navigation tree, choose WiMAX > Security, and then click the Security tab.
The parameter description is as follows.
Parameter Used to Specify …
PKM Whether authentication is required for network access. There are
two authentication modes:
z NO PKM

z PKMv2_EAP

Authentication Authentication type. There are two authentication types:


z TLS: indicates device authentication.
z TTLS: indicates user authentication.

Inner EAP Inner Extensible Authentication Protocol. The default value is


recommended.
NAI Network Access Identifier. The default value is recommended.
User ID User ID provided by the ISP.
User Password User password provided by the ISP.
Note:
EAP = Extensible Authentication Protocol
NAI = Network Access Identifier
PKM = Privacy Key Management
TLS = Transport Layer Security
TTLS = Tunneled Transport Layer Security

After setting the parameters, click Apply to save the settings.

Issue 03 (2009-08-10) Huawei Proprietary and Confidential 2-7


Copyright © Huawei Technologies Co., Ltd
Online Help 3 Managing the CPE

3 Managing the CPE


3.1 Managing the User Account
A user account is used to allow a user to set network parameters. After you log in to the
CPE, you can change the user name and the password, and you need to remember the
new account.
If you forget the account, you can restore factory settings of the CPE to validate the
initial account or contact the local carrier.
To change a user account, do as follows:
Step 1 In the navigation tree, choose Maintain > Account, and then click the Account tab.
Step 2 Enter the old password.
Step 3 Enter a new user name and a new password, and then confirm the new password.
Step 4 Click Apply.
----End

3.2 Rebooting the CPE


Step 1 In the navigation tree, choose Maintain > Device, and then click the Reset tab.
Step 2 Click Reboot to restart the CPE.
----End

3.3 Upgrading the Software

To any damage to the CPE, do not power off the CPE when it is being upgraded.
The software of the CPE can be upgraded locally or remotely. It takes about a few
minutes to upgrade the software. Upgrade the software according to the on-screen
instructions.

Upgrading the CPE Locally

Issue 03 (2009-08-10) Huawei Proprietary and Confidential 3-1


Copyright © Huawei Technologies Co., Ltd
Online Help 3 Managing the CPE

To upgrade the software of the CPE, you need to upload the local upgrade files to the
CPE. To upgrade the CPE locally, do as follows:
Step 1 In the navigation tree, choose Maintain > Device, and then click Firmware.
Step 2 Click Browse, and select a upgrade file.
Step 3 Click Upgrade Software.
----End

Contact the carrier for how to get the upgrade files.

Upgrading the CPE Remotely


You can upgrade the CPE through a remote server. The remote upgrade of the CPE
requires the corresponding user rights and the support from the carrier.
To upgrade the CPE remotely, do as follows:
Step 1 In the navigation tree, choose Maintain > Device, and then click the Firmware tab.
Step 2 Enter the network address or the IP address of the remote server in Remote URL.
Step 3 Enter the user name and the password.
Step 4 Click Remote Upgrade Software.
----End

Upgrading the CPE by CWMP


You can upgrade the CPE by CPE WAN Management Protocol (CWMP).
To upgrade the CPE by CWMP, do as follows:
Step 1 In the navigation tree, choose Maintain > Device, and then click the Firmware tab.
Step 2 Click Upgrade Software By CWMP.
----End

3.4 Restoring Default Settings

After default settings are restored, the configuration file is restored to the default one.
Therefore, restore the default settings with caution.
Step 1 In the navigation tree, choose Maintain > Device, and then click the Reset tab.
Step 2 Click Restore Default Configuration to restore the default settings.
You need to log in to the Web-based utility after restoration.
----End
Issue 03 (2009-08-10) Huawei Proprietary and Confidential 3-2
Copyright © Huawei Technologies Co., Ltd
Online Help 4 Maintaining the CPE

4 Maintaining the CPE


4.1 Checking Information About the CPE
By querying the status information, you can know about the operating status and the
parameter settings of the CPE.

4.1.1 Checking the Device Information


The device information includes the product class, device ID, hardware version,
software version, and MAC address.
To check the device information, choose Status > Device in the navigation tree , and then
click the Device Info tab.

4.1.2 Checking the Information About the WAN Side


The information about the WAN side includes the connection status and the DNS.
z The connection status information includes the working mode, IP address, and
subnet mask.
z The DNS information includes the default IP address of the gateway, IP address of
the primary DNS server, and IP address of the secondary DNS server.
To check the information about the WAN side, choose Status > WAN in the navigation
tree, and then click the Internet Status tab.

4.1.3 Checking the Information About the LAN Side


The information about the LAN side includes the information about the Ethernet and the
WLAN.
The Ethernet information includes the following:
z LAN Host: indicates the IP address of the LAN host.
z LAN Status: indicates the connection status of each interface on the LAN side. The
working mode of the device on the LAN side is auto-negotiation.
z Ethernet Packet: indicates the information about the packets sent or received over
the Ethernet.
z DHCP Client: indicates the IP address, MAC address, and connection status on the
LAN side.
The WLAN information includes the wireless status, working mode, information about
the sent and received packets, and SSID.

Issue 03 (2009-08-10) Huawei Proprietary and Confidential 4-1


Copyright © Huawei Technologies Co., Ltd
Online Help 4 Maintaining the CPE

To check information about the LAN side, choose Status > LAN in the navigation tree,
and then click the tabs.

4.1.4 Checking the VoIP Information


The VoIP information includes the SIP ID, register status of the SIP ID, and port number.
To check the VoIP information, choose Status > VoIP in the navigation tree, and then
click the VoIP Info tab.

4.1.5 Checking the WiMAX Information


The WiMAX information includes the network access status of the WiMAX network,
upload and download rates, signal strength, link quality, and the information about the
base station, received and sent packets, bandwidth, and frequency.
To check the WiMAX information, choose Status > WiMAX in the navigation tree, and
then click the tabs.

4.2 Detecting the CPE


The local network connection and the network connection of the ISP can be tested.
To detect the CPE, do as follows:
Step 1 In the navigation tree, choose Maintain > Diagnose, and then click the Diagnose tab.
Step 2 Enter the IP address to be detected.
Step 3 Click Start.
----End

Issue 03 (2009-08-10) Huawei Proprietary and Confidential 4-2


Copyright © Huawei Technologies Co., Ltd
Online Help 5 FAQs

5 FAQs
The power indicator is not on.
z Check the power supply, ensuring that the power supply is properly connected.
z Check whether the power adapter meets the specification.
The WiMAX indicator is not on.
z Check the power supply, ensuring that the power supply is properly connected.
z Check whether you have activated the WiMAX online service.
z Place the device in an open space without any obstacle around it, such as a cement
wall or a wooden wall, which affects reception of WiMAX network signals.
z Place the device far away from an electrical device that produces a strong magnetic
field or a strong electric field, such as a microwave oven, a fridge, or a satellite dish
antenna.
You cannot make a VoIP call.
z Ensure that the phone line is properly connected.
z Check whether the VoIP parameters are properly set. For details, see section 1.6
"Configuring VoIP".
The WiMAX network cannot be found.
z Ensure that the antenna is properly connected.
z Check the power supply, ensuring that the power supply is properly connected.
z Place the device in an open space without any obstacle around it, such as a cement
wall or a wooden wall, which affects reception of WiMAX network signals.
z Place the device far away from an electrical device that produces a strong magnetic
field or a strong electric field, such as a microwave oven, a fridge, or a satellite dish
antenna.

Issue 03 (2009-08-10) Huawei Proprietary and Confidential 5-1


Copyright © Huawei Technologies Co., Ltd
Online Help 5 FAQs

You cannot log in to the Web-based utility.


z Check the power supply, ensuring that the power supply is properly connected.
z Check whether the network cable between the device and the computer is properly
connected. Ensure that the device is properly connected to the computer.
z Check whether the parameters of the Web-based utility are properly set. For details,
see section 1.2 "Logging In to the Web-Based Utility."
z Check the Internet Explorer parameters, ensuring that the proxy server is disabled.
Take the Internet Explorer 6.0 as an example. Disable the proxy server as follows:
1. Start the Internet Explorer 6.0.
2. Choose Tools > Internet Options…, and then click the Connections
tab.
3. Click LAN Settings....
4. Clear the Use a proxy server for your LAN check box. Then click OK.
5. Log in to the Web-based utility.
The device or the power adapter overheats.
z The device may get heated after being used for a long time. Therefore, power off the
device when you do not use the device.
z Place the device in a well-ventilated place and do not expose the device to direct
sunlight.

Issue 03 (2009-08-10) Huawei Proprietary and Confidential 5-2


Copyright © Huawei Technologies Co., Ltd
Online Help 6 Abbreviations

6 Abbreviations
ACL Access Control List
ALG Application Layer Gateway
CWMP CPE WAN Management Protocol
DHCP Dynamic Host Configuration Protocol
DMZ Demilitarized Zone
DNS Domain Name Server
EAP Extensible Authentication Protocol
FE Fast Ethernet
FTP File Transfer Protocol
HTTP Hypertext Transfer Protocol
ICMP Internet Control Message Protocol
IPSec IP Security Protocol
ISP Internet Service Provider
L2TP Layer 2 Tunneling Protocol
LAN Local Area Network
MAC Medium Access Control
MIMO Multiple-Input Multiple-Output
NAI Network Access Identifier
NAPT Network Address Port Translation
NAT Network Address Transmission
OFDMA Orthogonal Frequency Division Multiple Access
PKM Privacy Key Management
POT Plain Old Telephone
PPPoE Point-to-Point Protocol over Ethernet
PPTP Point-to-Point Tunneling Protocol
QoS Quality of Service
RTSP Real-Time Streaming Protocol
SIP Session Initiation Protocol

Issue 03 (2009-08-10) Huawei Proprietary and Confidential 6-1


Copyright © Huawei Technologies Co., Ltd
Online Help 6 Abbreviations

SNTP Simple Network Time Protocol


SSID Service Set Identifier
SSH Secure Shell
SYN Synchronous
TLS transport layer security protocol
TTLS tunneled transport layer security protocol
URI Uniform Resource Identifier
URL Universal Resource Locator
VoIP Voice over IP
WAN Wide Area Network
WEP Wired Equivalent Privacy
WiMAX Worldwide Interoperability for Microwave Access
WLAN Wireless Local Area Network
WPA-PSK Wi-Fi Protected Access Pre-Shared Key

Issue 03 (2009-08-10) Huawei Proprietary and Confidential 6-2


Copyright © Huawei Technologies Co., Ltd

S-ar putea să vă placă și