User Guide
Page 5
Every effort has been made to differences in this manual is accurate. WiMAX Device Computer Notebook computer Server Base Station Firewall Router Internet Switch Wireless Signal Telephone WiMAX Device Configuration User's Guide 5 Document Conventions Graphics in this book may differ slightly from the product due to ensure that the information in operating systems, operating system versions, or if you installed updated firmware/software for your device.
Every effort has been made to differences in this manual is accurate. WiMAX Device Computer Notebook computer Server Base Station Firewall Router Internet Switch Wireless Signal Telephone WiMAX Device Configuration User's Guide 5 Document Conventions Graphics in this book may differ slightly from the product due to ensure that the information in operating systems, operating system versions, or if you installed updated firmware/software for your device.
User Guide
Page 46
... Device's login page should be used to the WiMAX Device's LAN. This tutorial shows how to access the WiMAX Device from the Internet. The router may connect a router to separate two department networks. You can then log into the WiMAX Device and manage it. 4.9 Configuring Static Route for two network routings. 46...
... Device's login page should be used to the WiMAX Device's LAN. This tutorial shows how to access the WiMAX Device from the Internet. The router may connect a router to separate two department networks. You can then log into the WiMAX Device and manage it. 4.9 Configuring Static Route for two network routings. 46...
User Guide
Page 47
... need to specify a static routing rule on N1 192.168.1.253 WiMAX Device Configuration User's Guide 47 N1 A R N2 B This tutorial uses the following figure, router R is sent to the WiMAX Device's WAN default gateway by default. Chapter 4 Tutorials In the following example IP settings: Table 10 IP Settings in this... The WiMAX Device's WAN 172.16.1.1 The WiMAX Device's LAN 192.168.1.1 A 192.168.1.34 R's IP address on the WiMAX Device to specify R as the router in N2 network), the traffic is connected to the WiMAX Device's LAN.
... need to specify a static routing rule on N1 192.168.1.253 WiMAX Device Configuration User's Guide 47 N1 A R N2 B This tutorial uses the following figure, router R is sent to the WiMAX Device's WAN default gateway by default. Chapter 4 Tutorials In the following example IP settings: Table 10 IP Settings in this... The WiMAX Device's WAN 172.16.1.1 The WiMAX Device's LAN 192.168.1.1 A 192.168.1.34 R's IP address on the WiMAX Device to specify R as the router in N2 network), the traffic is connected to the WiMAX Device's LAN.
User Guide
Page 53
... Note: Manager IP VLAN ID is the same as one of the LAN transparent VLAN ID VLAN Tag ID=5 VLAN Tag ID=10 Network operators Router Manager IP VLAN Tag ID=5 1 Configure the Link Type, PVID and Tag/Untag settings for the interfaces as below by clicking each row. For example...
... Note: Manager IP VLAN ID is the same as one of the LAN transparent VLAN ID VLAN Tag ID=5 VLAN Tag ID=10 Network operators Router Manager IP VLAN Tag ID=5 1 Configure the Link Type, PVID and Tag/Untag settings for the interfaces as below by clicking each row. For example...
User Guide
Page 55
... LAN transparent VLAN ID User Network VLAN Tag ID=5 Transparent VLAN Tag ID=10 LAN CPE VLAN Tag ID=5 VLAN Tag ID=10 Network operators Router Manager IP VLAN Tag ID=3 VLAN Tag ID=3 1 Configure the Link Type, PVID and Tag/Untag settings for the interfaces as below by clicking each...
... LAN transparent VLAN ID User Network VLAN Tag ID=5 Transparent VLAN Tag ID=10 LAN CPE VLAN Tag ID=5 VLAN Tag ID=10 Network operators Router Manager IP VLAN Tag ID=3 VLAN Tag ID=3 1 Configure the Link Type, PVID and Tag/Untag settings for the interfaces as below by clicking each...
User Guide
Page 91
... and vice versa. If your WiMAX Device an IP address, subnet mask, DNS and other routing information when it . Every networking device (including computers, servers, routers, printers, etc.) needs an IP address to communicate across the network. These networking devices are passed to the client machines along with the assigned IP...
... and vice versa. If your WiMAX Device an IP address, subnet mask, DNS and other routing information when it . Every networking device (including computers, servers, routers, printers, etc.) needs an IP address to communicate across the network. These networking devices are passed to the client machines along with the assigned IP...
User Guide
Page 92
..., the WiMAX Device forwards the query to the real DNS server learned through IPCP and relays the response back to exchange routing information with other routers. This way, the WiMAX Device can pass the DNS servers to another (B in RIP-2 format; RIP Setup RIP (Routing Information Protocol) allows... a router to the computer. the WiMAX Device will not send any RIP packets and will send out RIP packets but RIP-2 carries more than one FTP, ...
..., the WiMAX Device forwards the query to the real DNS server learned through IPCP and relays the response back to exchange routing information with other routers. This way, the WiMAX Device can pass the DNS servers to another (B in RIP-2 format; RIP Setup RIP (Routing Information Protocol) allows... a router to the computer. the WiMAX Device will not send any RIP packets and will send out RIP packets but RIP-2 carries more than one FTP, ...
User Guide
Page 93
... replace the LAN computer's IP address in use the application. ALG Some applications, such as SIP, H.323 or FTP) at the application layer. Some NAT routers may include a SIP Application Layer Gateway (ALG). A UPnP device can dynamically join a network, obtain an IP address, convey its capabilities and learn about other devices...
... replace the LAN computer's IP address in use the application. ALG Some applications, such as SIP, H.323 or FTP) at the application layer. Some NAT routers may include a SIP Application Layer Gateway (ALG). A UPnP device can dynamically join a network, obtain an IP address, convey its capabilities and learn about other devices...
User Guide
Page 95
... option enables or disables allow ARP requests to share an Internet account. • NAT - WiMAX Device Configuration User's Guide 95 WAN Protocol • Bridge - Select Router from the ISP. Select this if you connect to the network using Point-to-Point Protocol to manually enter the IP address the WiMAX Device... to tag frames for NAT, allowing devices on the LAN to use their own internal IP addresses while communicating with devices on the WAN. • Router -
... option enables or disables allow ARP requests to share an Internet account. • NAT - WiMAX Device Configuration User's Guide 95 WAN Protocol • Bridge - Select Router from the ISP. Select this if you connect to the network using Point-to-Point Protocol to manually enter the IP address the WiMAX Device... to tag frames for NAT, allowing devices on the LAN to use their own internal IP addresses while communicating with devices on the WAN. • Router -
User Guide
Page 105
...'s Guide 105 Chapter 7 Network Setting Click Add in the Network Setting > Route > Static Route screen to configure how the WiMAX Device exchanges information with other routers. Figure 53 Static Route Screen This screen contains the following fields: Table 36 Static Route LABEL Destination IP Subnet Mask Next Hop DESCRIPTION Enter the...
...'s Guide 105 Chapter 7 Network Setting Click Add in the Network Setting > Route > Static Route screen to configure how the WiMAX Device exchanges information with other routers. Figure 53 Static Route Screen This screen contains the following fields: Table 36 Static Route LABEL Destination IP Subnet Mask Next Hop DESCRIPTION Enter the...
User Guide
Page 132
... the Authentication Protocol allowed for connecting to the PPTP server. It provides additional security over stateless MPPE, but should not be located behind a NAT enabled router. This can increase performance over MSCHAPv1, including two-way authentication. Options are : • MPPE 40 - MPPE with PPTP at the same time. Select Yes to...
... the Authentication Protocol allowed for connecting to the PPTP server. It provides additional security over stateless MPPE, but should not be located behind a NAT enabled router. This can increase performance over MSCHAPv1, including two-way authentication. Options are : • MPPE 40 - MPPE with PPTP at the same time. Select Yes to...
User Guide
Page 136
... Protocol Version NAT Mode? MPPE with Microsoft products. • MSCHAPv2 - This can increase performance over stateless MPPE, but should not be located behind a NAT enabled router. L2TPv2 is selected as shown next. Options are : • MPPE 40 bits - It provides improved usability with 40 bit session key length • MPPE 128...
... Protocol Version NAT Mode? MPPE with Microsoft products. • MSCHAPv2 - This can increase performance over stateless MPPE, but should not be located behind a NAT enabled router. L2TPv2 is selected as shown next. Options are : • MPPE 40 bits - It provides improved usability with 40 bit session key length • MPPE 128...
User Guide
Page 137
... Device Configuration User's Guide 137 Retype Retype the password for the client. Figure 77 IPSec Fields Summary Local Network Remote Network Remote IPSec Router Local IP Address VPN Tunnel Remote IP Address Click Security > IPSec VPN to the client. Local Endpoint This displays the IP address of...IP address for connecting to be allowed on the LAN behind your WiMAX Device or the IP address and subnet mask of the remote IPSec router. Local Network This displays the single (static) IP address on the L2TP server. Chapter 8 Security Table 58 L2TP Client: Add (continued)...
... Device Configuration User's Guide 137 Retype Retype the password for the client. Figure 77 IPSec Fields Summary Local Network Remote Network Remote IPSec Router Local IP Address VPN Tunnel Remote IP Address Click Security > IPSec VPN to the client. Local Endpoint This displays the IP address of...IP address for connecting to be allowed on the LAN behind your WiMAX Device or the IP address and subnet mask of the remote IPSec router. Local Network This displays the single (static) IP address on the L2TP server. Chapter 8 Security Table 58 L2TP Client: Add (continued)...
User Guide
Page 138
Add Click this button to add an item to the list. 138 WiMAX Device Configuration User's Guide Chapter 8 Security Table 59 IPSec VPN (continued) LABEL DESCRIPTION Remote Network This displays the single (static) IP address on the LAN behind the remote IPSec router or the IP address and subnet mask of a network behind the remote IPSec router.
Add Click this button to add an item to the list. 138 WiMAX Device Configuration User's Guide Chapter 8 Security Table 59 IPSec VPN (continued) LABEL DESCRIPTION Remote Network This displays the single (static) IP address on the LAN behind the remote IPSec router or the IP address and subnet mask of a network behind the remote IPSec router.
User Guide
Page 140
...server. You must precede a hexadecimal key with dynamic WAN IP addresses. Remote Endpoint IP Address Enter the IP address of the remote IPSec router in user) and can be able to activate this WiMAX Device in the Local Content field. When you configure the Content field to ...address of the VPN connection. Content Select E-mail to the Pre-Shared Key field description). Choose this to identify this if the remote IPSec router has a static IP address or a domain name. Select Domain Name to allow incoming connections from IPSec VPN clients. The WiMAX Device is...
...server. You must precede a hexadecimal key with dynamic WAN IP addresses. Remote Endpoint IP Address Enter the IP address of the remote IPSec router in user) and can be able to activate this WiMAX Device in the Local Content field. When you configure the Content field to ...address of the VPN connection. Content Select E-mail to the Pre-Shared Key field description). Choose this to identify this if the remote IPSec router has a static IP address or a domain name. Select Domain Name to allow incoming connections from IPSec VPN clients. The WiMAX Device is...
User Guide
Page 141
... depends on the remote ID type. Choices are : • DH1 - Authentication Select which hash algorithm to use to use in from remote IPSec routers with the DES encryption algorithm • 3DES - use a 1024-bit random number • DH5 - WiMAX Device Configuration User's Guide 141 Content ...algorithm • AES256 - a 192-bit key with the DES encryption algorithm • AES128 - Add Click this to delete it is a NAT router between VPN connection requests that come in the IKE SA. Chapter 8 Security Table 60 IPSec VPN: Add (continued) LABEL Remote ID Type DESCRIPTION ...
... depends on the remote ID type. Choices are : • DH1 - Authentication Select which hash algorithm to use to use in from remote IPSec routers with the DES encryption algorithm • 3DES - use a 1024-bit random number • DH5 - WiMAX Device Configuration User's Guide 141 Content ...algorithm • AES256 - a 192-bit key with the DES encryption algorithm • AES128 - Add Click this to delete it is a NAT router between VPN connection requests that come in the IKE SA. Chapter 8 Security Table 60 IPSec VPN: Add (continued) LABEL Remote ID Type DESCRIPTION ...
User Guide
Page 142
... subnet. Two active SAs can still go through the connection. If you specify to the remote IPSec router's configured remote IP addresses. Two active SAs cannot both have the same configured local or remote IP... and re-negotiate the IKE SA. DPD Interval DPD Idle Try Local Network If the remote IPSec router does not support DPD, see if you want the WiMAX Device to accept the TCP or UDP .... You can have the same local or remote IP address, but not both . If the remote IPSec router does not respond, the WiMAX Device shuts down the IKE SA. Specify the maximum number of times the ...
... subnet. Two active SAs can still go through the connection. If you specify to the remote IPSec router's configured remote IP addresses. Two active SAs cannot both have the same configured local or remote IP... and re-negotiate the IKE SA. DPD Interval DPD Idle Try Local Network If the remote IPSec router does not support DPD, see if you want the WiMAX Device to accept the TCP or UDP .... You can have the same local or remote IP address, but not both . If the remote IPSec router does not respond, the WiMAX Device shuts down the IKE SA. Specify the maximum number of times the ...
User Guide
Page 143
.... Select icmp to have the WiMAX Device regularly perform a TCP or UDP handshake with the AES encryption algorithm The WiMAX Device and the remote IPSec router must be configured to respond to specify if the VPN connection terminates at an IP address or subnet. If you select tcp or udp, specify... security protocols used for the connectivity check. A short SA Life Time increases security by entering a (static) IP address on the LAN behind the remote IPSec's router. Subnet Mask Remote Port If Subnet address is selected, enter a (static) IP address on the LAN behind the remote IPSec...
.... Select icmp to have the WiMAX Device regularly perform a TCP or UDP handshake with the AES encryption algorithm The WiMAX Device and the remote IPSec router must be configured to respond to specify if the VPN connection terminates at an IP address or subnet. If you select tcp or udp, specify... security protocols used for the connectivity check. A short SA Life Time increases security by entering a (static) IP address on the LAN behind the remote IPSec's router. Subnet Mask Remote Port If Subnet address is selected, enter a (static) IP address on the LAN behind the remote IPSec...
User Guide
Page 144
... secure the encryption, but also the longer it takes to the WiMAX Device. The Encryption Algorithm describes the use the same DH key group. Both routers must use of encryption techniques such as follows. PFS changes the root key that is shown as DES (Data Encryption Standard) and Triple DES algorithms...
... secure the encryption, but also the longer it takes to the WiMAX Device. The Encryption Algorithm describes the use the same DH key group. Both routers must use of encryption techniques such as follows. PFS changes the root key that is shown as DES (Data Encryption Standard) and Triple DES algorithms...
User Guide
Page 146
An IKE SA times out when the IKE SA lifetime period expires. If an IPSec SA times out, then the IPSec router must : • Choose a negotiation mode. • Authenticate the connection by entering a pre-shared key. • Choose an encryption algorithm. • Choose an authentication algorithm. • ...
An IKE SA times out when the IKE SA lifetime period expires. If an IPSec SA times out, then the IPSec router must : • Choose a negotiation mode. • Authenticate the connection by entering a pre-shared key. • Choose an encryption algorithm. • Choose an authentication algorithm. • ...