User Guide
Page 5
WiMAX Device Computer Notebook computer Server Base Station Firewall Router Internet Switch Wireless Signal Telephone WiMAX Device Configuration User's Guide 5 Document Conventions Graphics in this manual is accurate. Every effort has been made to differences in this book may differ slightly from the product due to ensure that the information in operating systems, operating system versions, or if you installed updated firmware/software for your device.
WiMAX Device Computer Notebook computer Server Base Station Firewall Router Internet Switch Wireless Signal Telephone WiMAX Device Configuration User's Guide 5 Document Conventions Graphics in this manual is accurate. Every effort has been made to differences in this book may differ slightly from the product due to ensure that the information in operating systems, operating system versions, or if you installed updated firmware/software for your device.
User Guide
Page 46
... the IP update policy. 7 Click Save. 4.8.3 Testing the DDNS Setting Now you may be able to access the WiMAX Device from the Internet. The router may connect a router to the WiMAX Device's LAN. You can then log into the WiMAX Device and manage it. 4.9 Configuring Static Route for Routing to Another Network...
... the IP update policy. 7 Click Save. 4.8.3 Testing the DDNS Setting Now you may be able to access the WiMAX Device from the Internet. The router may connect a router to the WiMAX Device's LAN. You can then log into the WiMAX Device and manage it. 4.9 Configuring Static Route for Routing to Another Network...
User Guide
Page 47
... Device's WAN 172.16.1.1 The WiMAX Device's LAN 192.168.1.1 A 192.168.1.34 R's IP address on the WiMAX Device to specify R as the router in N2 network), the traffic is connected to the WiMAX Device's LAN. Chapter 4 Tutorials In the following example IP settings: Table 10 IP Settings in...traffic from computer A (in N1 network) to computer B (in charge of forwarding traffic to N2. N1 A R N2 B This tutorial uses the following figure, router R is sent to two networks, N1 (192.168.1.x/24) and N2 (192.168.10.x/24). In this case, computer B will never receive the traffic.
... Device's WAN 172.16.1.1 The WiMAX Device's LAN 192.168.1.1 A 192.168.1.34 R's IP address on the WiMAX Device to specify R as the router in N2 network), the traffic is connected to the WiMAX Device's LAN. Chapter 4 Tutorials In the following example IP settings: Table 10 IP Settings in...traffic from computer A (in N1 network) to computer B (in charge of forwarding traffic to N2. N1 A R N2 B This tutorial uses the following figure, router R is sent to two networks, N1 (192.168.1.x/24) and N2 (192.168.10.x/24). In this case, computer B will never receive the traffic.
User Guide
Page 53
... Note: Manager IP VLAN ID is the same as one of the LAN transparent VLAN ID VLAN Tag ID=5 VLAN Tag ID=10 Network operators Router Manager IP VLAN Tag ID=5 1 Configure the Link Type, PVID and Tag/Untag settings for the interfaces as below by clicking each row. For example...
... Note: Manager IP VLAN ID is the same as one of the LAN transparent VLAN ID VLAN Tag ID=5 VLAN Tag ID=10 Network operators Router Manager IP VLAN Tag ID=5 1 Configure the Link Type, PVID and Tag/Untag settings for the interfaces as below by clicking each row. For example...
User Guide
Page 55
... LAN transparent VLAN ID User Network VLAN Tag ID=5 Transparent VLAN Tag ID=10 LAN CPE VLAN Tag ID=5 VLAN Tag ID=10 Network operators Router Manager IP VLAN Tag ID=3 VLAN Tag ID=3 1 Configure the Link Type, PVID and Tag/Untag settings for the interfaces as below by clicking each...
... LAN transparent VLAN ID User Network VLAN Tag ID=5 Transparent VLAN Tag ID=10 LAN CPE VLAN Tag ID=5 VLAN Tag ID=10 Network operators Router Manager IP VLAN Tag ID=3 VLAN Tag ID=3 1 Configure the Link Type, PVID and Tag/Untag settings for the interfaces as below by clicking each...
User Guide
Page 91
... DNS servers are passed to pass the DNS servers using the DNS server extensions of possible hosts on a network. Every networking device (including computers, servers, routers, printers, etc.) needs an IP address to tell a customer the DNS server addresses, usually in the form of a machine before you must know the IP...
... DNS servers are passed to pass the DNS servers using the DNS server extensions of possible hosts on a network. Every networking device (including computers, servers, routers, printers, etc.) needs an IP address to tell a customer the DNS server addresses, usually in the form of a machine before you must know the IP...
User Guide
Page 92
... mean you want to assign ports 21-25 to one service (for example both formats when receiving). RIP Setup RIP (Routing Information Protocol) allows a router to the outside world even though NAT makes your whole inside (behind NAT on the LAN) servers, for example, web or FTP, that you can...and web service), it might be forwarded, and the local IP address of inside network appear as a single machine to exchange routing information with other routers. Both RIP-2B and RIP-2M sends the routing data in the example) and assign a default server IP address of 92 WiMAX Device Configuration ...
... mean you want to assign ports 21-25 to one service (for example both formats when receiving). RIP Setup RIP (Routing Information Protocol) allows a router to the outside world even though NAT makes your whole inside (behind NAT on the LAN) servers, for example, web or FTP, that you can...and web service), it might be forwarded, and the local IP address of inside network appear as a single machine to exchange routing information with other routers. Both RIP-2B and RIP-2M sends the routing data in the example) and assign a default server IP address of 92 WiMAX Device Configuration ...
User Guide
Page 93
... on the client side (LAN). The WiMAX Device records the IP address of the computer that computer's connection for simple peer-to use . Some NAT routers may include a SIP Application Layer Gateway (ALG). You assign the LAN IP addresses and the ISP assigns the WAN IP address. WiMAX Device Configuration User...
... on the client side (LAN). The WiMAX Device records the IP address of the computer that computer's connection for simple peer-to use . Some NAT routers may include a SIP Application Layer Gateway (ALG). You assign the LAN IP addresses and the ISP assigns the WAN IP address. WiMAX Device Configuration User...
User Guide
Page 95
... devices on the LAN to manually enter the IP address the WiMAX Device uses. • From ISP - WAN Protocol • Bridge - Select Router from the ISP. The options are: Bridging LAN ARP Get IP Method • Ethernet - Select to automatically get the IP address the WiMAX Device...Click Network Setting > WAN to open this screen as a transparent middle man between devices on the LAN and the devices on the WAN. • Router - This option enables or disables allow ARP requests to the WAN. Select this if must log into the network before initiating a persistent connection. ...
... devices on the LAN to manually enter the IP address the WiMAX Device uses. • From ISP - WAN Protocol • Bridge - Select Router from the ISP. The options are: Bridging LAN ARP Get IP Method • Ethernet - Select to automatically get the IP address the WiMAX Device...Click Network Setting > WAN to open this screen as a transparent middle man between devices on the LAN and the devices on the WAN. • Router - This option enables or disables allow ARP requests to the WAN. Select this if must log into the network before initiating a persistent connection. ...
User Guide
Page 105
... shown next. Chapter 7 Network Setting Click Add in the Network Setting > Route > Static Route screen to configure how the WiMAX Device exchanges information with other routers.
... shown next. Chapter 7 Network Setting Click Add in the Network Setting > Route > Static Route screen to configure how the WiMAX Device exchanges information with other routers.
User Guide
Page 132
... a shared secret key and uses a three way handshake. MPPE Stateful? This can increase performance over stateless MPPE, but should not be located behind a NAT enabled router.
... a shared secret key and uses a three way handshake. MPPE Stateful? This can increase performance over stateless MPPE, but should not be located behind a NAT enabled router.
User Guide
Page 136
... key length • Auto - Options are : MPPE Encryption • PAP - This can increase performance over stateless MPPE, but should not be located behind a NAT enabled router. User Name Enter the user name for security. • CHAP - Auth Protocol DESCRIPTION Enter the name for the connection. Options are : • MPPE 40 bits...
... key length • Auto - Options are : MPPE Encryption • PAP - This can increase performance over stateless MPPE, but should not be located behind a NAT enabled router. User Name Enter the user name for security. • CHAP - Auth Protocol DESCRIPTION Enter the name for the connection. Options are : • MPPE 40 bits...
User Guide
Page 137
... configurator. Enabled This displays if the VPN policy is the VPN policy index number. Local Endpoint This displays the IP address of the remote IPSec router. WiMAX Device Configuration User's Guide 137 Get IP automatically Select Yes to have the L2TP server assign a local IP address to the L2TP server..... Local Network This displays the single (static) IP address on the L2TP server. Figure 77 IPSec Fields Summary Local Network Remote Network Remote IPSec Router Local IP Address VPN Tunnel Remote IP Address Click Security > IPSec VPN to the L2TP server.
... configurator. Enabled This displays if the VPN policy is the VPN policy index number. Local Endpoint This displays the IP address of the remote IPSec router. WiMAX Device Configuration User's Guide 137 Get IP automatically Select Yes to have the L2TP server assign a local IP address to the L2TP server..... Local Network This displays the single (static) IP address on the L2TP server. Figure 77 IPSec Fields Summary Local Network Remote Network Remote IPSec Router Local IP Address VPN Tunnel Remote IP Address Click Security > IPSec VPN to the L2TP server.
User Guide
Page 138
Add Click this button to add an item to the list. 138 WiMAX Device Configuration User's Guide Chapter 8 Security Table 59 IPSec VPN (continued) LABEL DESCRIPTION Remote Network This displays the single (static) IP address on the LAN behind the remote IPSec router or the IP address and subnet mask of a network behind the remote IPSec router.
Add Click this button to add an item to the list. 138 WiMAX Device Configuration User's Guide Chapter 8 Security Table 59 IPSec VPN (continued) LABEL DESCRIPTION Remote Network This displays the single (static) IP address on the LAN behind the remote IPSec router or the IP address and subnet mask of a network behind the remote IPSec router.
User Guide
Page 140
...addresses and are truncated. It is recommended that the key is hexadecimal and "0123456789ABCDEF" is the key itself. The WiMAX Device is a NAT router between VPN connection requests that come in "0x0123456789ABCDEF", "0x" denotes that you type an IP address other than 0.0.0.0 in the Content field ... be any string. 140 WiMAX Device Configuration User's Guide IP Address Enter the IP address of the VPN connection. For example, in from IPSec routers with a "0x" (zero x), which to the Pre-Shared Key field description). When you configure the Content field to 0.0.0.0 or leave it ...
...addresses and are truncated. It is recommended that the key is hexadecimal and "0123456789ABCDEF" is the key itself. The WiMAX Device is a NAT router between VPN connection requests that come in "0x0123456789ABCDEF", "0x" denotes that you type an IP address other than 0.0.0.0 in the Content field ... be any string. 140 WiMAX Device Configuration User's Guide IP Address Enter the IP address of the VPN connection. For example, in from IPSec routers with a "0x" (zero x), which to the Pre-Shared Key field description). When you configure the Content field to 0.0.0.0 or leave it ...
User Guide
Page 141
...encrypt and decrypt information. For IP, type the IP address of proposals should not affect performance significantly. Use up to distinguish between the two IPSec routers. • When you want the WiMAX Device to 31 ASCII characters including spaces, although trailing spaces are : • DES - The domain ...; 3DES - The configuration of the remote content depends on the remote ID type. a 256-bit key with which to identify the remote IPSec router by an e-mail address. For Domain Name or E-mail, type a domain name or e-mail address by its IP address. Longer keys require ...
...encrypt and decrypt information. For IP, type the IP address of proposals should not affect performance significantly. Use up to distinguish between the two IPSec routers. • When you want the WiMAX Device to 31 ASCII characters including spaces, although trailing spaces are : • DES - The domain ...; 3DES - The configuration of the remote content depends on the remote ID type. a 256-bit key with which to identify the remote IPSec router by an e-mail address. For Domain Name or E-mail, type a domain name or e-mail address by its IP address. Longer keys require ...
User Guide
Page 142
... authentication keys and re-negotiate the IKE SA. Local IP addresses must be static and correspond to 0.0.0.0. Select icmp to the remote IPSec router's configured local IP addresses. Remote IP addresses must be static and correspond to have more than one is there before it transmits data through... ping the address you can still go through the connection. You may need to configure the peer to make sure the remote IPSec router is active at any other active rules with the Remote Endpoint field set to make sure traffic can still go through the connection. ...
... authentication keys and re-negotiate the IKE SA. Local IP addresses must be static and correspond to 0.0.0.0. Select icmp to the remote IPSec router's configured local IP addresses. Remote IP addresses must be static and correspond to have more than one is there before it transmits data through... ping the address you can still go through the connection. You may need to configure the peer to make sure the remote IPSec router is active at any other active rules with the Remote Endpoint field set to make sure traffic can still go through the connection. ...
User Guide
Page 143
... the connectivity check. A short SA Life Time increases security by entering a (static) IP address on the LAN behind the remote IPSec's router. WiMAX Device Configuration User's Guide 143 Select how the WiMAX Device checks the connection. You may need to configure the peer to respond to...algorithm to have the WiMAX Device regularly perform a TCP or UDP handshake with the AES encryption algorithm The WiMAX Device and the remote IPSec router must be configured to respond to identify the network address. SHA1 is generally considered stronger than MD5, but it is selected, enter a...
... the connectivity check. A short SA Life Time increases security by entering a (static) IP address on the LAN behind the remote IPSec's router. WiMAX Device Configuration User's Guide 143 Select how the WiMAX Device checks the connection. You may need to configure the peer to respond to...algorithm to have the WiMAX Device regularly perform a TCP or UDP handshake with the AES encryption algorithm The WiMAX Device and the remote IPSec router must be configured to respond to identify the network address. SHA1 is generally considered stronger than MD5, but it is selected, enter a...
User Guide
Page 144
... some technical background information about the topics covered in this section. 8.12.1 IPSec Architecture The overall IPSec architecture is used to the WiMAX Device. Both routers must use of encryption techniques such as follows. Cancel Click Cancel to restore your changes back to generate encryption keys for packet structure (including implementation...
... some technical background information about the topics covered in this section. 8.12.1 IPSec Architecture The overall IPSec architecture is used to the WiMAX Device. Both routers must use of encryption techniques such as follows. Cancel Click Cancel to restore your changes back to generate encryption keys for packet structure (including implementation...
User Guide
Page 146
...) and phase 2 (Key Exchange). An IKE SA times out when the IKE SA lifetime period expires. If an IPSec SA times out, then the IPSec router must renegotiate the SA the next time someone attempts to negotiate SAs for IPSec. A phase 1 exchange establishes an IKE SA and the second one uses...
...) and phase 2 (Key Exchange). An IKE SA times out when the IKE SA lifetime period expires. If an IPSec SA times out, then the IPSec router must renegotiate the SA the next time someone attempts to negotiate SAs for IPSec. A phase 1 exchange establishes an IKE SA and the second one uses...