| Download: |  |
| Mirror Download [FCC.gov] | |
| Document ID | 913211 |
| Application ID | qIu4CYLh3Cdk4ML7MCTJzw== |
| Document Description | User manual revised 3 |
| Short Term Confidential | No |
| Permanent Confidential | No |
| Supercede | No |
| Document Type | User Manual |
| Display Format | Adobe Acrobat PDF - pdf |
| Filesize | 203.04kB (2537946 bits) |
| Date Submitted | 2008-03-12 00:00:00 |
| Date Available | 2008-09-13 00:00:00 |
| Creation Date | 2008-01-17 16:30:44 |
| Producing Software | pdfFactory Pro 3.10 (Windows XP Professional Chinese) |
| Document Lastmod | 2008-01-17 16:51:31 |
| Document Title | UserMan_I88MAX200HW2-revised.pdf |
| Document Creator | pdfFactory Pro www.ahasoft.com.tw/FinePrint |
| Document Author: | claire |
Chapter 22 Logs
Table 116 FSM Logs: Callee Side
LOG MESSAGE
DESCRIPTION
VoIP Call Start from
SIP[SIP Port Number]
A VoIP phone call came to the ZyXEL Device from the listed SIP
number.
VoIP Call Established
Ph[Phone Port] Tools > Firmware.
Only use firmware for your ZyXEL Devices specific model. Refer to the label
on the bottom of your ZyXEL Device.
MAX-200HW2 Series Users Guide
255
Chapter 23 Tools
Figure 160 Maintenance > Tools > Firmware
Each field is described in the following table.
Table 118 Maintenance > Tools > Firmware
LABEL
DESCRIPTION
File Path
Enter the location of the .bin file you want to upload, or click Browse... to find it.
You must decompress compressed (.zip) files before you can upload them.
Browse...
Click this to find the .bin file you want to upload.
Upload
Click this to begin uploading the selected file. This may take up to two minutes.
See Section 23.2.2 on page 256 for more information about this process.
Note: Do not turn off the device while firmware upload is in
progress!
23.2.2 Firmware Upload Screens
Do not turn off the device while firmware upload is in progress!
When the ZyXEL Device starts to upload firmware, the Firmware Upload in Process screen
appears.
Figure 161 Firmware Upload In Process
256
MAX-200HW2 Series Users Guide
Chapter 23 Tools
The process usually takes about two minutes. The device automatically restarts in this time.
This causes a temporary network disconnect. In some operating systems, you may see the
following icon on your desktop.
Figure 162 Network Temporarily Disconnected
After two minutes, log in again, and check your new firmware version in the Status screen.
You might have to open a new browser window to log in.
If the upload is not successful, the following screen appears.
Figure 163 Firmware Upload Error
Click Return to go back to the Firmware screen.
23.2.3 Configuration Screen
Use this screen to back up or restore the configuration of the ZyXEL Device. You can also use
this screen to reset the ZyXEL Device to the factory default settings. To access this screen,
click Maintenance > Tools > Configuration.
Figure 164 Maintenance > Tools > Configuration
MAX-200HW2 Series Users Guide
257
Chapter 23 Tools
Each field is described in the following table.
Table 119 Maintenance > Tools > Configuration
LABEL
DESCRIPTION
Backup
Configuration
Backup
Click this to save the ZyXEL Devices current configuration to a file on your
computer. Once your device is configured and functioning properly, it is highly
recommended that you back up your configuration file before making configuration
changes. The backup configuration file is useful if you need to return to your
previous settings.
Restore
Configuration
File Path
Enter the location of the file you want to upload, or click Browse... to find it.
Browse
Click this to find the file you want to upload.
Upload
Click this to restore the selected configuration file. See Section 23.2.4 on page
258 for more information about this.
Note: Do not turn off the device while configuration file upload is in
progress.
Back to Factory
Defaults
Reset
Click this to clear all user-entered configuration information and return the ZyXEL
Device to its factory defaults. There is no warning screen.
23.2.4 Restore Configuration Screens
Do not turn off the device while configuration file upload is in progress.
When the ZyXEL Device has finished restoring the selected configuration file, the following
screen appears.
Figure 165 Configuration Upload Successful
The device now automatically restarts. This causes a temporary network disconnect. In some
operating systems, you may see the following icon on your desktop.
258
MAX-200HW2 Series Users Guide
Chapter 23 Tools
Figure 166 Network Temporarily Disconnected
If the ZyXEL Devices IP address is different in the configuration file you selected, you may
need to change the IP address of your computer to be in the same subnet as that of the default
management IP address (192.168.5.1). See your Quick Start Guide or the appendices for
details on how to set up your computers IP address.
You might have to open a new browser to log in again.
If the upload was not successful, a Configuration Upload Error screen appears.
Figure 167 Configuration Upload Error
Click Return to go back to the Configuration screen.
23.2.5 Restart Screen
Use this screen to reboot the ZyXEL Device without turning the power off. To access this
screen, click Maintenance > Tools > Restart.
Figure 168 Maintenance > Tools > Restart
This does not affect the ZyXEL Devices configuration. When you click Restart, the
following screen appears.
MAX-200HW2 Series Users Guide
259
Chapter 23 Tools
Figure 169 Maintenance > Tools > Restart > In Progress
Wait one minute for the device to finish restarting. Then, you can log in again.
260
MAX-200HW2 Series Users Guide
P ART IV
Troubleshooting
and Specifications
Troubleshooting (263)
Product Specifications (269)
261
262
CHAPTER
24
Troubleshooting
This chapter offers some suggestions to solve problems you might encounter. The potential
problems are divided into the following categories.
Power, Hardware Connections, and LEDs
ZyXEL Device Access and Login
Internet Access
Phone Calls and VoIP
Reset the ZyXEL Device to Its Factory Defaults
Wireless LAN Troubleshooting
24.1 Power, Hardware Connections, and LEDs
The ZyXEL Device does not turn on. None of the LEDs turn on.
1 Make sure you are using the power adaptor or cord included with the ZyXEL Device.
2 Make sure the power adaptor or cord is connected to the ZyXEL Device and plugged in
to an appropriate power source. Make sure the power source is turned on.
3 Disconnect and re-connect the power adaptor or cord to the ZyXEL Device.
4 If the problem continues, contact the vendor.
One of the LEDs does not behave as expected.
1 Make sure you understand the normal behavior of the LED. See Section 1.2.1 on page
35.
2 Check the hardware connections. See the Quick Start Guide and Section 1.2 on page 35.
3 Inspect your cables for damage. Contact the vendor to replace any damaged cables.
4 Disconnect and re-connect the power adaptor to the ZyXEL Device.
5 If the problem continues, contact the vendor.
MAX-200HW2 Series Users Guide
263
Chapter 24 Troubleshooting
24.2 ZyXEL Device Access and Login
I forgot the IP address for the ZyXEL Device.
1 The default IP address is 192.168.1.1.
2 If you changed the IP address and have forgotten it, you might get the IP address of the
ZyXEL Device by looking up the IP address of the default gateway for your computer.
To do this in most Windows computers, click Start > Run, enter cmd, and then enter
ipconfig. The IP address of the Default Gateway might be the IP address of the ZyXEL
Device (it depends on the network), so enter this IP address in your Internet browser.
3 If this does not work, you have to reset the ZyXEL Device to its factory defaults. See
Section 24.1 on page 263.
I forgot the password.
1 The default password is 1234.
2 If this does not work, you have to reset the ZyXEL Device to its factory defaults. See
Section 23.2.3 on page 257.
I cannot see or access the Login screen in the web configurator.
1 Make sure you are using the correct IP address.
The default IP address is 192.168.1.1.
If you changed the IP address (Section 9.2.1 on page 122), use the new IP address.
If you changed the IP address and have forgotten it, see the troubleshooting
suggestions for I forgot the IP address for the ZyXEL Device.
2 Check the hardware connections, and make sure the LEDs are behaving as expected. See
the Quick Start Guide and Section 1.2.1 on page 35.
3 Make sure your Internet browser does not block pop-up windows and has JavaScripts
and Java enabled. See Appendix C on page 301.
4 If there is a DHCP server on your network, make sure your computer is using a dynamic
IP address. Your ZyXEL Device is a DHCP server by default.
If there is no DHCP server on your network, make sure your computers IP address is in
the same subnet as the ZyXEL Device. See Appendix D on page 309.
5 Reset the ZyXEL Device to its factory defaults, and try to access the ZyXEL Device
with the default IP address. See Section 23.2.3 on page 257.
6 If the problem continues, contact the network administrator or vendor, or try one of the
advanced suggestions.
264
MAX-200HW2 Series Users Guide
Chapter 24 Troubleshooting
Advanced Suggestions
Try to access the ZyXEL Device using another service, such as Telnet. If you can access
the ZyXEL Device, check the remote management settings and firewall rules to find out
why the ZyXEL Device does not respond to HTTP.
If your computer is connected wirelessly, use a computer that is connected to a LAN/
ETHERNET port.
I can see the Login screen, but I cannot log in to the ZyXEL Device.
1 Make sure you have entered the user name and password correctly. The default user
name is admin, and the default password is 1234. These fields are case-sensitive, so
make sure [Caps Lock] is not on.
2 You cannot log in to the web configurator while someone is using Telnet to access the
ZyXEL Device. Log out of the ZyXEL Device in the other session, or ask the person
who is logged in to log out.
3 Disconnect and re-connect the power adaptor or cord to the ZyXEL Device.
4 If this does not work, you have to reset the ZyXEL Device to its factory defaults. See
Section 23.2.3 on page 257.
I cannot Telnet to the ZyXEL Device.
See the troubleshooting suggestions for I cannot see or access the Login screen in the web
configurator. Ignore the suggestions about your browser.
24.3 Internet Access
I cannot access the Internet.
1 Check the hardware connections, and make sure the LEDs are behaving as expected. See
the Quick Start Guide and Section 1.2.1 on page 35.
2 Make sure you entered your ISP account information correctly in the wizard. These
fields are case-sensitive, so make sure [Caps Lock] is not on.
3 Check your security settings. In the web configurator, go to the Status screen. Click the
Details... link next to Profile in the WiMAX Information box and make sure that you
are using the correct security settings for your Internet account.
4 Check your WiMAX settings. The ZyXEL Device may have been set to search the
wrong frequencies for a wireless connection. In the web configurator, go to the Status
screen. Click the Details... link next to Site Information in the WiMAX Information
MAX-200HW2 Series Users Guide
265
Chapter 24 Troubleshooting
box and ensure that the values are correct. If the values are incorrect, enter the correct
frequency settings in the Network > WAN > WiMAX Frequency screen. If you are
unsure of the correct values, contact your service provider.
5 If you are trying to access the Internet wirelessly, make sure the wireless settings in the
wireless client are the same as the settings in the AP.
6 Disconnect all the cables from your ZyXEL Device, and follow the directions in the
Quick Start Guide again.
7 If the problem continues, contact your ISP.
I cannot access the Internet anymore. I had access to the Internet (with the
ZyXEL Device), but my Internet connection is not available anymore.
1 Check the hardware connections, and make sure the LEDs are behaving as expected. See
the Quick Start Guide and Section 1.2.1 on page 35.
2 Disconnect and re-connect the power adaptor to the ZyXEL Device.
3 If the problem continues, contact your ISP.
The Internet connection is slow or intermittent.
1 The quality of the ZyXEL Devices wireless connection to the base station may be poor.
Poor signal reception may be improved by moving the ZyXEL Device away from thick
walls and other obstructions, or to a higher floor in your building.
2 There may be radio interference caused by nearby electrical devices such as microwave
ovens and radio transmitters. Move the ZyXEL Device away or switch the other devices
off. Weather conditions may also affect signal quality.
3 As well as having an external antenna connector, the MAX-210HW2 is equipped with an
internal directional antenna. If you know the location of the base station, orient the front
of the ZyXEL Device (the side with the LEDs) towards the base station. If you do not
know the location of the base station, experiment by moving the ZyXEL Device while
observing the SIGNAL LEDs for an increase in received signal strength. The MAX200HW2 and MAX-230HW2 do not have internal antennas.
4 There might be a lot of traffic on the network. Look at the LEDs, and check Section 1.2.1
on page 35. If the ZyXEL Device is sending or receiving a lot of information, try closing
some programs that use the Internet, especially peer-to-peer applications.
5 Disconnect and re-connect the power adaptor to the ZyXEL Device.
6 If the problem continues, contact the network administrator or vendor, or try one of the
advanced suggestions.
The Internet connection disconnects.
266
MAX-200HW2 Series Users Guide
Chapter 24 Troubleshooting
Check your WiMAX link and signal strength using the LINK and SIGNAL LEDs on the device. See the
following section if signal strength is poor or the ZyXEL Device has no link to a base station.
Contact your ISP if the problem persists.
24.4 Phone Calls and VoIP
The telephone port wont work or the telephone lacks a dial tone.
1 Check the telephone connections and telephone wire.
2 Make sure you have the VoIP SIP Settings screen properly configured.
I can access the Internet, but cannot make VoIP calls.
1 Make sure you have the VoIP SIP Settings screen properly configured.
2 The VoIP LED should come on. Make sure that your telephone is connected to the
LINE port.
3 You can also check the VoIP status in the Status screen.
4 If the VoIP settings are correct, use speed dial to make peer-to-peer calls. If you cannot
make a call using speed dial, there may be something wrong with the SIP server. Contact
your VoIP service provider.
Problems With Multiple SIP Accounts
You can set up two SIP accounts on your ZyXEL Device. By default your ZyXEL Device uses
SIP account 1 for outgoing calls, and it uses SIP accounts 1 and 2 for incoming calls. With this
setting, you always use SIP account 1 for your outgoing calls and you cannot distinguish
which SIP account the calls are coming in through. If you want to control the use of different
dialing plans for accounting purposes or other reasons, you need to configure your phone port
in order to control which SIP account you are using when placing or receiving calls.
24.5 Reset the ZyXEL Device to Its Factory Defaults
If you reset the ZyXEL Device, you lose all of the changes you have made. The ZyXEL
Device re-loads its default settings, and the password resets to 1234. You have to make all of
your changes again.
MAX-200HW2 Series Users Guide
267
Chapter 24 Troubleshooting
You will lose all of your changes when you push the RESET button.
To reset the ZyXEL Device,
1 Make sure the PWR LED is on and not blinking.
2 Press and hold the RESET button for five to ten seconds. Release the RESET button
when the PWR LED begins to blink. The default settings have been restored.
If the ZyXEL Device restarts automatically, wait for the ZyXEL Device to finish restarting,
and log in to the web configurator. The password is 1234.
If the ZyXEL Device does not restart automatically, disconnect and reconnect the ZyXEL
Devices power. Then, follow the directions above again.
24.5.1 Pop-up Windows, JavaScripts and Java Permissions
Please see Section Appendix C on page 301.
24.6 Wireless LAN Troubleshooting
I cannot access the ZyXEL Device or ping any computer from the WLAN
1 Make sure the wireless LAN is enabled on the ZyXEL Device
2 Make sure the wireless adapter on the wireless station is working properly.
3 Make sure the wireless adapter (installed on your computer) is IEEE 802.11 compatible
and supports the same wireless standard as the ZyXEL Device.
4 Make sure your computer (with a wireless adapter installed) is within the transmission
range of the ZyXEL Device.
5 Check that both the ZyXEL Device and your wireless station are using the same wireless
and wireless security settings.
6 Make sure traffic between the WLAN and the LAN is not blocked by the firewall on the
ZyXEL Device.
7 Make sure you allow the ZyXEL Device to be remotely accessed through the WLAN
interface. Check your remote management settings.
268
MAX-200HW2 Series Users Guide
CHAPTER
25
Product Specifications
This chapter gives details about your ZyXEL Devices hardware and firmware features.
Table 120 Product Specifications
PHYSICAL AND ENVIRONMENTAL
Product Name
WIMAX-200HW2/WIMAX-210HW2/WIMAX-230HW2
Ethernet Interface
Four auto-negotiating, auto-MDI/MDI-X 10/100 Mbps RJ-45
Ethernet ports
WLAN Interface
WiFi (54 Mbps) interface (801.11g, 802.16b backward compatible)
Telephony Interface
Two analog interfaces for standard telephones through RJ-11
connectors
Standards
IEEE 802.16e-2005
Antenna
MAX-210HW2:
Built-in patch antenna (WiMAX): 6dBi, 70? azimuth, 30? elevation
WiMAX SMA antenna connector, equipped by default with 2dBi omni
antenna, 60
WiFi SMA antenna connector, equipped by default with 2dBi omni
antenna, 60
MAX-200HW2/MAX-230HW2:
WiFi SMA antenna connector, equipped by default with 2dBi omni
antenna, 60
Panel Directional Antenna
Operating Temperature
0蚓 to 45蚓
Storage Temperature
-25蚓 to 55蚓
Operating Humidity
10% ~ 90% (non-condensing)
Storage Humidity
10% to 95%
Power Supply
18 V DC 1A
Power consumption
Worst-case-scenario 10W, peak 15W
Weight
600g
Dimensions
216 x 164 x 52mm
RADIO SPECIFICATIONS
Media Access Protocol
IEEE 802.16e
WiMAX Bandwidth
MAX-200HW2: 2.5 - 2.7 GHz
MAX-210HW2: 3.4 ~ 3.6 GHz
MAX-230HW2: 2.3 ~ 2.4 GHz
Data Rate
Downlink:
Maximum 5 Mbps
Uplink:
Maximum 2 Mbps
MAX-200HW2 Series Users Guide
269
Chapter 25 Product Specifications
Table 120 Product Specifications (continued)
Modulation
QPSK (uplink and downlink)
16-QAM (uplink and downlink)
64-QAM (downlink only)
Output Power
27dBm (+/- 1dB)
Duplex mode
Time Division Duplex (TDD)
SOFTWARE SPECIFICATIONS
Security
PKMv2
EAP
CCMP, 128-bit AES
Table 121 Physical Features
FEATURE
DESCRIPTION
Auto-crossover 10/100 Mbps
Ethernet Interface
This interface automatically adjusts to either a crossover or straightthrough Ethernet cable.
External Antenna
The MAX-210HW2 is equipped with WiFi and WiMAX omnidirectional
antennas.
The MAX-200HW2 and MAX-230HW2 are equippped with a WiFi
omnidirectional antenna and a WiMAX panel directional antenna.
Telephone Port
Connect analog telephones to the ZyXEL Devices 2 LINE ports (RJ11 connector) to take advantage of its Voice over IP (VoIP) features.
Reset Button
The reset button is built into the rear panel. Use this button to restore
the factory default password to 1234; IP address to 192.168.1.1,
subnet mask to 255.255.255.0 and DHCP server enabled with a pool
of 32 IP addresses starting at 192.168.1.33.
Table 122 Non-Physical Features
270
FEATURE
DESCRIPTION
High Speed Wireless Internet
Access
The ZyXEL Device is ideal for high-speed wireless Internet browsing.
WiMAX (Worldwide Interoperability for Microwave Access) is a
wireless networking standard providing high-bandwidth, wide-range
secured wireless service. The ZyXEL Device is a WiMAX mobile
station (MS) compatible with the IEEE 802.16e standard.
WiFi Functionality
Allow the IEEE 802.11b and/or IEEE 802.11g wireless clients to
connect to the ZyXEL Device wirelessly. Enable wireless security
(WEP, WPA(2), WPA(2)-PSK) and/or MAC filtering to protect your
wireless network.
Firewall
The ZyXEL Device is a stateful inspection firewall with DoS (Denial of
Service) protection. By default, when the firewall is activated, all
incoming traffic from the WAN to the LAN is blocked unless it is
initiated from the LAN. The ZyXEL Devices firewall supports TCP/
UDP inspection, DoS detection and prevention, real time alerts,
reports and logs.
Content Filtering
The ZyXEL Device can block access to web sites containing specified
keywords. You can define time periods and days during which content
filtering is enabled and include or exclude a range of users on the LAN
from content filtering.
Auto Provisioning
Your Internet service provider can automatically update your devices
configuration via an auto-provisioning server.
MAX-200HW2 Series Users Guide
Chapter 25 Product Specifications
Table 122 Non-Physical Features
FEATURE
DESCRIPTION
Auto Firmware Upgrade
Your device gives you the option to upgrade to a newer firmware
version if it finds one during auto-provisioning. Your VoIP service
provider must have an auto-provisioning server and a server set up
with firmware in order for this feature to work.
Network Address Translation
(NAT)
Network Address Translation (NAT) allows the translation of an
Internet protocol address used within one network (for example a
private IP address used in a local network) to a different IP address
known within another network (for example a public IP address used
on the Internet).
Universal Plug and Play
(UPnP)
Your device and other UPnP enabled devices can use the standard
TCP/IP protocol to dynamically join a network, obtain an IP address
and convey their capabilities to each other.
Dynamic DNS Support
With Dynamic DNS support, you can have a static hostname alias for
a dynamic IP address, allowing the host to be more easily accessible
from various locations on the Internet. You must register for this
service with a Dynamic DNS service provider.
DHCP
DHCP (Dynamic Host Configuration Protocol) allows the individual
clients (computers) to obtain the TCP/IP configuration at start-up from
a centralized DHCP server. Your device has built-in DHCP server
capability enabled by default. It can assign IP addresses, an IP default
gateway and DNS servers to DHCP clients. Your device can also act
as a surrogate DHCP server (DHCP Relay) where it relays IP address
assignment from the actual real DHCP server to the clients.
Multiple PVC (Permanent
Virtual Circuits) Support
Your device supports up to 8 Permanent Virtual Circuits (PVCs).
IP Alias
IP alias allows you to partition a physical network into logical networks
over the same Ethernet interface. Your device supports three logical
LAN interfaces via its single physical Ethernet interface with the your
device itself as the gateway for each LAN network.
IP Policy Routing (IPPR)
Traditionally, routing is based on the destination address only and the
router takes the shortest path to forward a packet. IP Policy Routing
(IPPR) provides a mechanism to override the default routing behavior
and alter the packet forwarding based on the policy defined by the
network administrator.
REN
A Ringer Equivalence Number (REN) is used to determine the number
of devices (like telephones or fax machines) that may be connected to
the telephone line. Your device has a REN of three, so it can support
three devices per telephone port.
Multiple SIP Accounts
You can configure multiple voice (SIP) accounts.
SIP ALG
Your device is a SIP Application Layer Gateway (ALG). It allows VoIP
calls to pass through NAT for devices behind it (such as a SIP-based
VoIP software application on a computer).
Dynamic Jitter Buffer
The built-in adaptive buffer helps to smooth out the variations in delay
(jitter) for voice traffic. This helps ensure good voice quality for your
conversations.
Voice Activity Detection/
Silence Suppression
Voice Activity Detection (VAD) reduces the bandwidth that a call uses
by not transmitting when you are not speaking.
Comfort Noise Generation
Your device generates background noise to fill moments of silence
when the other device in a call stops transmitting because the other
party is not speaking (as total silence could easily be mistaken for a
lost connection).
MAX-200HW2 Series Users Guide
271
Chapter 25 Product Specifications
Table 122 Non-Physical Features
272
FEATURE
DESCRIPTION
Echo Cancellation
You device supports G.168, an ITU-T standard for eliminating the echo
caused by the sound of your voice reverberating in the telephone
receiver while you talk.
QoS (Quality of Service)
Quality of Service (QoS) mechanisms help to provide better service on
a per-flow basis. Your device supports Type of Service (ToS) tagging.
This allows the device to tag voice frames so they can be prioritized
over the network.
Packet Filters
Your devices packet filtering function allows added network security
and management.
MAX-200HW2 Series Users Guide
P ART V
Appendices and
Index
WiMAX Security (275)
Setting up Your Computers IP Address (279)
Pop-up Windows, JavaScripts and Java Permissions (301)
IP Addresses and Subnetting (309)
Wireless LANs (319)
Common Services (333)
Legal Information (337)
Customer Support (341)
Index (347)
273
274
APPENDIX
WiMAX Security
Wireless security is vital to protect your wireless communications. Without it, information
transmitted over the wireless network would be accessible to any networking device within
range.
User Authentication and Data Encryption
The WiMAX (IEEE 802.16) standard employs user authentication and encryption to ensure
secured communication at all times.
User authentication is the process of confirming a users identity and level of authorization.
Data encryption is the process of encoding information so that it cannot be read by anyone
who does not know the code.
WiMAX uses PKMv2 (Privacy Key Management version 2) for authentication, and CCMP
(Counter Mode with Cipher Block Chaining Message Authentication Protocol) for data
encryption.
WiMAX supports EAP (Extensible Authentication Protocol, RFC 2486) which allows
additional authentication methods to be deployed with no changes to the base station or the
mobile or subscriber stations.
PKMv2
PKMv2 is a procedure that allows authentication of a mobile or subscriber station and
negotiation of a public key to encrypt traffic between the MS/SS and the base station. PKMv2
uses standard EAP methods such as Transport Layer Security (EAP-TLS) or Tunneled TLS
(EAP-TTLS) for secure communication.
In cryptography, a key is a piece of information, typically a string of random numbers and
letters, that can be used to lock (encrypt) or unlock (decrypt) a message. Public key
encryption uses key pairs, which consist of a public (freely available) key and a private
(secret) key. The public key is used for encryption and the private key is used for decryption.
You can decrypt a message only if you have the private key. Public key certificates (or digital
IDs) allow users to verify each others identity.
RADIUS
RADIUS is based on a client-server model that supports authentication, authorization and
accounting. The base station is the client and the server is the RADIUS server. The RADIUS
server handles the following tasks:
MAX-200HW2 Series Users Guide
275
Appendix A WiMAX Security
Authentication
Determines the identity of the users.
Authorization
Determines the network services available to authenticated users once they are connected
to the network.
Accounting
Keeps track of the clients network activity.
RADIUS is a simple package exchange in which your base station acts as a message relay
between the MS/SS and the network RADIUS server.
Types of RADIUS Messages
The following types of RADIUS messages are exchanged between the base station and the
RADIUS server for user authentication:
Access-Request
Sent by an base station requesting authentication.
Access-Reject
Sent by a RADIUS server rejecting access.
Access-Accept
Sent by a RADIUS server allowing access.
Access-Challenge
Sent by a RADIUS server requesting more information in order to allow access. The base
station sends a proper response from the user and then sends another Access-Request
message.
The following types of RADIUS messages are exchanged between the base station and the
RADIUS server for user accounting:
Accounting-Request
Sent by the base station requesting accounting.
Accounting-Response
Sent by the RADIUS server to indicate that it has started or stopped accounting.
In order to ensure network security, the access point and the RADIUS server use a shared
secret key, which is a password they both know. The key is not sent over the network. In
addition to the shared key, password information exchanged is also encrypted to protect the
network from unauthorized access.
Diameter
Diameter (RFC 3588) is a type of AAA server that provides several improvements over
RADIUS in efficiency, security, and support for roaming.
Security Association
The set of information about user authentication and data encryption between two computers
is known as a security association (SA). In a WiMAX network, the process of security
association has three stages.
276
MAX-200HW2 Series Users Guide
Appendix A WiMAX Security
Authorization request and reply
The MS/SS presents its public certificate to the base station. The base station verifies the
certificate and sends an authentication key (AK) to the MS/SS.
Key request and reply
The MS/SS requests a transport encryption key (TEK) which the base station generates
and encrypts using the authentication key.
Encrypted traffic
The MS/SS decrypts the TEK (using the authentication key). Both stations can now
securely encrypt and decrypt the data flow.
CCMP
All traffic in a WiMAX network is encrypted using CCMP (Counter Mode with Cipher Block
Chaining Message Authentication Protocol). CCMP is based on the 128-bit Advanced
Encryption Standard (AES) algorithm.
Counter mode refers to the encryption of each block of plain text with an arbitrary number,
known as the counter. This number changes each time a block of plain text is encrypted.
Counter mode avoids the security weakness of repeated identical blocks of encrypted text that
makes encrypted data vulnerable to pattern-spotting.
Cipher Block Chaining Message Authentication (also known as CBC-MAC) ensures
message integrity by encrypting each block of plain text in such a way that its encryption is
dependent on the block before it. This series of chained blocks creates a message
authentication code (MAC or CMAC) that ensures the encrypted data has not been tampered
with.
Authentication
The ZyXEL Device supports EAP-TTLS authentication.
EAP-TTLS (Tunneled Transport Layer Service)
EAP-TTLS is an extension of the EAP-TLS authentication that uses certificates for only the
server-side authentications to establish a secure connection (with EAP-TLS digital
certifications are needed by both the server and the wireless clients for mutual authentication).
Client authentication is then done by sending username and password through the secure
connection, thus client identity is protected. For client authentication, EAP-TTLS supports
EAP methods and legacy authentication methods such as PAP, CHAP, MS-CHAP and MSCHAP v2.
MAX-200HW2 Series Users Guide
277
Appendix A WiMAX Security
278
MAX-200HW2 Series Users Guide
APPENDIX
Setting up Your Computers IP
Address
The purpose of this appendix is to show you how to configure an IP address
on your computer depending on what operating system you have. It does NOT
mean that your ZyXEL Device supports all these operating systems.
All computers must have a 10M or 100M Ethernet adapter card and TCP/IP installed.
Windows 95/98/Me/NT/2000/XP/Vista, Macintosh OS 7 and later operating systems and all
versions of UNIX/LINUX include the software components you need to install and use TCP/
IP on your computer. Windows 3.1 requires the purchase of a third-party TCP/IP application
package.
TCP/IP should already be installed on computers using Windows NT/2000/XP, Macintosh OS
7 and later operating systems.
After the appropriate TCP/IP components are installed, configure the TCP/IP settings in order
to "communicate" with your network.
If you manually assign IP information instead of using dynamic assignment, make sure that
your computers have IP addresses that place them in the same subnet as the ZyXEL Devices
LAN port.
Windows 95/98/Me
Click Start, Settings, Control Panel and double-click the Network icon to open the Network
window.
MAX-200HW2 Series Users Guide
279
Appendix B Setting up Your Computers IP Address
Figure 170 WIndows 95/98/Me: Network: Configuration
Installing Components
The Network window Configuration tab displays a list of installed components. You need a
network adapter, the TCP/IP protocol and Client for Microsoft Networks.
If you need the adapter:
1 In the Network window, click Add.
2 Select Adapter and then click Add.
3 Select the manufacturer and model of your network adapter and then click OK.
If you need TCP/IP:
In the Network window, click Add.
Select Protocol and then click Add.
Select Microsoft from the list of manufacturers.
Select TCP/IP from the list of network protocols and then click OK.
If you need Client for Microsoft Networks:
Click Add.
Select Client and then click Add.
Select Microsoft from the list of manufacturers.
Select Client for Microsoft Networks from the list of network clients and then click
OK.
5 Restart your computer so the changes you made take effect.
280
MAX-200HW2 Series Users Guide
Appendix B Setting up Your Computers IP Address
Configuring
1 In the Network window Configuration tab, select your network adapter's TCP/IP entry
and click Properties
2 Click the IP Address tab.
If your IP address is dynamic, select Obtain an IP address automatically.
If you have a static IP address, select Specify an IP address and type your
information into the IP Address and Subnet Mask fields.
Figure 171 Windows 95/98/Me: TCP/IP Properties: IP Address
3 Click the DNS Configuration tab.
If you do not know your DNS information, select Disable DNS.
If you know your DNS information, select Enable DNS and type the information in
the fields below (you may not need to fill them all in).
MAX-200HW2 Series Users Guide
281
Appendix B Setting up Your Computers IP Address
Figure 172 Windows 95/98/Me: TCP/IP Properties: DNS Configuration
4 Click the Gateway tab.
If you do not know your gateways IP address, remove previously installed gateways.
If you have a gateway IP address, type it in the New gateway field and click Add.
5 Click OK to save and close the TCP/IP Properties window.
6 Click OK to close the Network window. Insert the Windows CD if prompted.
7 Turn on your ZyXEL Device and restart your computer when prompted.
Verifying Settings
1 Click Start and then Run.
2 In the Run window, type "winipcfg" and then click OK to open the IP Configuration
window.
3 Select your network adapter. You should see your computer's IP address, subnet mask
and default gateway.
Windows 2000/NT/XP
The following example figures use the default Windows XP GUI theme.
1 Click start (Start in Windows 2000/NT), Settings, Control Panel.
282
MAX-200HW2 Series Users Guide
Appendix B Setting up Your Computers IP Address
Figure 173 Windows XP: Start Menu
2 In the Control Panel, double-click Network Connections (Network and Dial-up
Connections in Windows 2000/NT).
Figure 174 Windows XP: Control Panel
3 Right-click Local Area Connection and then click Properties.
MAX-200HW2 Series Users Guide
283
Appendix B Setting up Your Computers IP Address
Figure 175 Windows XP: Control Panel: Network Connections: Properties
4 Select Internet Protocol (TCP/IP) (under the General tab in Win XP) and then click
Properties.
Figure 176 Windows XP: Local Area Connection Properties
5 The Internet Protocol TCP/IP Properties window opens (the General tab in Windows
XP).
If you have a dynamic IP address click Obtain an IP address automatically.
If you have a static IP address click Use the following IP Address and fill in the IP
address, Subnet mask, and Default gateway fields.
Click Advanced.
284
MAX-200HW2 Series Users Guide
Appendix B Setting up Your Computers IP Address
Figure 177 Windows XP: Internet Protocol (TCP/IP) Properties
6 If you do not know your gateway's IP address, remove any previously installed
gateways in the IP Settings tab and click OK.
Do one or more of the following if you want to configure additional IP addresses:
In the IP Settings tab, in IP addresses, click Add.
In TCP/IP Address, type an IP address in IP address and a subnet mask in Subnet
mask, and then click Add.
Repeat the above two steps for each IP address you want to add.
Configure additional default gateways in the IP Settings tab by clicking Add in
Default gateways.
In TCP/IP Gateway Address, type the IP address of the default gateway in Gateway.
To manually configure a default metric (the number of transmission hops), clear the
Automatic metric check box and type a metric in Metric.
Click Add.
Repeat the previous three steps for each default gateway you want to add.
Click OK when finished.
MAX-200HW2 Series Users Guide
285
Appendix B Setting up Your Computers IP Address
Figure 178 Windows XP: Advanced TCP/IP Properties
7 In the Internet Protocol TCP/IP Properties window (the General tab in Windows
XP):
Click Obtain DNS server address automatically if you do not know your DNS
server IP address(es).
If you know your DNS server IP address(es), click Use the following DNS server
addresses, and type them in the Preferred DNS server and Alternate DNS server
fields.
If you have previously configured DNS servers, click Advanced and then the DNS
tab to order them.
286
MAX-200HW2 Series Users Guide
Appendix B Setting up Your Computers IP Address
Figure 179 Windows XP: Internet Protocol (TCP/IP) Properties
8 Click OK to close the Internet Protocol (TCP/IP) Properties window.
9 Click Close (OK in Windows 2000/NT) to close the Local Area Connection
Properties window.
10 Close the Network Connections window (Network and Dial-up Connections in
Windows 2000/NT).
11 Turn on your ZyXEL Device and restart your computer (if prompted).
Verifying Settings
1 Click Start, All Programs, Accessories and then Command Prompt.
2 In the Command Prompt window, type "ipconfig" and then press [ENTER]. You can
also open Network Connections, right-click a network connection, click Status and
then click the Support tab.
Windows Vista
This section shows screens from Windows Vista Enterprise Version 6.0.
1 Click the Start icon, Control Panel.
MAX-200HW2 Series Users Guide
287
Appendix B Setting up Your Computers IP Address
Figure 180 Windows Vista: Start Menu
2 In the Control Panel, double-click Network and Internet.
Figure 181 Windows Vista: Control Panel
3 Click Network and Sharing Center.
Figure 182 Windows Vista: Network And Internet
4 Click Manage network connections.
Figure 183 Windows Vista: Network and Sharing Center
288
MAX-200HW2 Series Users Guide
Appendix B Setting up Your Computers IP Address
5 Right-click Local Area Connection and then click Properties.
During this procedure, click Continue whenever Windows displays a screen
saying that it needs your permission to continue.
Figure 184 Windows Vista: Network and Sharing Center
6 Select Internet Protocol Version 4 (TCP/IPv4) and click Properties.
Figure 185 Windows Vista: Local Area Connection Properties
MAX-200HW2 Series Users Guide
289
Appendix B Setting up Your Computers IP Address
7 The Internet Protocol Version 4 (TCP/IPv4) Properties window opens (the General
tab).
If you have a dynamic IP address click Obtain an IP address automatically.
If you have a static IP address click Use the following IP address and fill in the IP
address, Subnet mask, and Default gateway fields.
Click Advanced.
Figure 186 Windows Vista: Internet Protocol Version 4 (TCP/IPv4) Properties
8 If you do not know your gateway's IP address, remove any previously installed
gateways in the IP Settings tab and click OK.
Do one or more of the following if you want to configure additional IP addresses:
In the IP Settings tab, in IP addresses, click Add.
In TCP/IP Address, type an IP address in IP address and a subnet mask in Subnet
mask, and then click Add.
Repeat the above two steps for each IP address you want to add.
Configure additional default gateways in the IP Settings tab by clicking Add in
Default gateways.
In TCP/IP Gateway Address, type the IP address of the default gateway in Gateway.
To manually configure a default metric (the number of transmission hops), clear the
Automatic metric check box and type a metric in Metric.
Click Add.
Repeat the previous three steps for each default gateway you want to add.
Click OK when finished.
290
MAX-200HW2 Series Users Guide
Appendix B Setting up Your Computers IP Address
Figure 187 Windows Vista: Advanced TCP/IP Properties
9 In the Internet Protocol Version 4 (TCP/IPv4) Properties window, (the General tab):
Click Obtain DNS server address automatically if you do not know your DNS
server IP address(es).
If you know your DNS server IP address(es), click Use the following DNS server
addresses, and type them in the Preferred DNS server and Alternate DNS server
fields.
If you have previously configured DNS servers, click Advanced and then the DNS
tab to order them.
MAX-200HW2 Series Users Guide
291
Appendix B Setting up Your Computers IP Address
Figure 188 Windows Vista: Internet Protocol Version 4 (TCP/IPv4) Properties
10 Click OK to close the Internet Protocol Version 4 (TCP/IPv4) Properties window.
11 Click Close to close the Local Area Connection Properties window.
12 Close the Network Connections window.
13 Turn on your ZyXEL Device and restart your computer (if prompted).
Verifying Settings
1 Click Start, All Programs, Accessories and then Command Prompt.
2 In the Command Prompt window, type "ipconfig" and then press [ENTER]. You can
also open Network Connections, right-click a network connection, click Status and
then click the Support tab.
Macintosh OS 8/9
1 Click the Apple menu, Control Panel and double-click TCP/IP to open the TCP/IP
Control Panel.
292
MAX-200HW2 Series Users Guide
Appendix B Setting up Your Computers IP Address
Figure 189 Macintosh OS 8/9: Apple Menu
2 Select Ethernet built-in from the Connect via list.
Figure 190 Macintosh OS 8/9: TCP/IP
3 For dynamically assigned settings, select Using DHCP Server from the Configure: list.
4 For statically assigned settings, do the following:
From the Configure box, select Manually.
MAX-200HW2 Series Users Guide
293
Appendix B Setting up Your Computers IP Address
Type your IP address in the IP Address box.
Type your subnet mask in the Subnet mask box.
Type the IP address of your ZyXEL Device in the Router address box.
5 Close the TCP/IP Control Panel.
6 Click Save if prompted, to save changes to your configuration.
7 Turn on your ZyXEL Device and restart your computer (if prompted).
Verifying Settings
Check your TCP/IP properties in the TCP/IP Control Panel window.
Macintosh OS X
1 Click the Apple menu, and click System Preferences to open the System Preferences
window.
Figure 191 Macintosh OS X: Apple Menu
2 Click Network in the icon bar.
Select Automatic from the Location list.
Select Built-in Ethernet from the Show list.
Click the TCP/IP tab.
3 For dynamically assigned settings, select Using DHCP from the Configure list.
294
MAX-200HW2 Series Users Guide
Appendix B Setting up Your Computers IP Address
Figure 192 Macintosh OS X: Network
4 For statically assigned settings, do the following:
From the Configure box, select Manually.
Type your IP address in the IP Address box.
Type your subnet mask in the Subnet mask box.
Type the IP address of your ZyXEL Device in the Router address box.
5 Click Apply Now and close the window.
6 Turn on your ZyXEL Device and restart your computer (if prompted).
Verifying Settings
Check your TCP/IP properties in the Network window.
Linux
This section shows you how to configure your computers TCP/IP settings in Red Hat Linux
9.0. Procedure, screens and file location may vary depending on your Linux distribution and
release version.
MAX-200HW2 Series Users Guide
295
Appendix B Setting up Your Computers IP Address
Make sure you are logged in as the root administrator.
Using the K Desktop Environment (KDE)
Follow the steps below to configure your computer IP address using the KDE.
1 Click the Red Hat button (located on the bottom left corner), select System Setting and
click Network.
Figure 193 Red Hat 9.0: KDE: Network Configuration: Devices
2 Double-click on the profile of the network card you wish to configure. The Ethernet
Device General screen displays as shown.
Figure 194 Red Hat 9.0: KDE: Ethernet Device: General
296
MAX-200HW2 Series Users Guide
Appendix B Setting up Your Computers IP Address
If you have a dynamic IP address, click Automatically obtain IP address settings
with and select dhcp from the drop down list.
If you have a static IP address, click Statically set IP Addresses and fill in the
Address, Subnet mask, and Default Gateway Address fields.
3 Click OK to save the changes and close the Ethernet Device General screen.
4 If you know your DNS server IP address(es), click the DNS tab in the Network
Configuration screen. Enter the DNS server information in the fields provided.
Figure 195 Red Hat 9.0: KDE: Network Configuration: DNS
5 Click the Devices tab.
6 Click the Activate button to apply the changes. The following screen displays. Click Yes
to save the changes in all screens.
Figure 196 Red Hat 9.0: KDE: Network Configuration: Activate
7 After the network card restart process is complete, make sure the Status is Active in the
Network Configuration screen.
Using Configuration Files
Follow the steps below to edit the network configuration files and set your computer IP
address.
1 Assuming that you have only one network card on the computer, locate the ifconfigeth0 configuration file (where eth0 is the name of the Ethernet card). Open the
configuration file with any plain text editor.
If you have a dynamic IP address, enter dhcp in the BOOTPROTO= field. The
following figure shows an example.
MAX-200HW2 Series Users Guide
297
Appendix B Setting up Your Computers IP Address
Figure 197 Red Hat 9.0: Dynamic IP Address Setting in ifconfig-eth0
DEVICE=eth0
ONBOOT=yes
BOOTPROTO=dhcp
USERCTL=no
PEERDNS=yes
TYPE=Ethernet
If you have a static IP address, enter static in the BOOTPROTO= field. Type
IPADDR= followed by the IP address (in dotted decimal notation) and type NETMASK=
followed by the subnet mask. The following example shows an example where the
static IP address is 192.168.1.10 and the subnet mask is 255.255.255.0.
Figure 198 Red Hat 9.0: Static IP Address Setting in ifconfig-eth0
DEVICE=eth0
ONBOOT=yes
BOOTPROTO=static
IPADDR=192.168.1.10
NETMASK=255.255.255.0
USERCTL=no
PEERDNS=yes
TYPE=Ethernet
2 If you know your DNS server IP address(es), enter the DNS server information in the
resolv.conf file in the /etc directory. The following figure shows an example where
two DNS server IP addresses are specified.
Figure 199 Red Hat 9.0: DNS Settings in resolv.conf
nameserver 172.23.5.1
nameserver 172.23.5.2
3 After you edit and save the configuration files, you must restart the network card. Enter
./network restart in the /etc/rc.d/init.d directory. The following figure
shows an example.
Figure 200 Red Hat 9.0: Restart Ethernet Card
[root@localhost init.d]# network restart
Shutting down interface eth0:
Shutting down loopback interface:
Setting network parameters:
Bringing up loopback interface:
Bringing up interface eth0:
298
[OK]
[OK]
[OK]
[OK]
[OK]
MAX-200HW2 Series Users Guide
Appendix B Setting up Your Computers IP Address
Verifying Settings
Enter ifconfig in a terminal screen to check your TCP/IP properties.
Figure 201 Red Hat 9.0: Checking TCP/IP Properties
[root@localhost]# ifconfig
eth0
Link encap:Ethernet HWaddr 00:50:BA:72:5B:44
inet addr:172.23.19.129 Bcast:172.23.19.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:717 errors:0 dropped:0 overruns:0 frame:0
TX packets:13 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:100
RX bytes:730412 (713.2 Kb) TX bytes:1570 (1.5 Kb)
Interrupt:10 Base address:0x1000
[root@localhost]#
MAX-200HW2 Series Users Guide
299
Appendix B Setting up Your Computers IP Address
300
MAX-200HW2 Series Users Guide
APPENDIX
Pop-up Windows, JavaScripts
and Java Permissions
In order to use the web configurator you need to allow:
Web browser pop-up windows from your device.
JavaScripts (enabled by default).
Java permissions (enabled by default).
Internet Explorer 6 screens are used here. Screens for other Internet Explorer
versions may vary.
Internet Explorer Pop-up Blockers
You may have to disable pop-up blocking to log into your device.
Either disable pop-up blocking (enabled by default in Windows XP SP (Service Pack) 2) or
allow pop-up blocking and create an exception for your devices IP address.
Disable Pop-up Blockers
1 In Internet Explorer, select Tools, Pop-up Blocker and then select Turn Off Pop-up
Blocker.
Figure 202 Pop-up Blocker
You can also check if pop-up blocking is disabled in the Pop-up Blocker section in the
Privacy tab.
1 In Internet Explorer, select Tools, Internet Options, Privacy.
MAX-200HW2 Series Users Guide
301
Appendix C Pop-up Windows, JavaScripts and Java Permissions
2 Clear the Block pop-ups check box in the Pop-up Blocker section of the screen. This
disables any web pop-up blockers you may have enabled.
Figure 203 Internet Options: Privacy
3 Click Apply to save this setting.
Enable Pop-up Blockers with Exceptions
Alternatively, if you only want to allow pop-up windows from your device, see the following
steps.
1 In Internet Explorer, select Tools, Internet Options and then the Privacy tab.
2 Select Settings to open the Pop-up Blocker Settings screen.
302
MAX-200HW2 Series Users Guide
Appendix C Pop-up Windows, JavaScripts and Java Permissions
Figure 204 Internet Options: Privacy
3 Type the IP address of your device (the web page that you do not want to have blocked)
with the prefix http://. For example, http://192.168.167.1.
4 Click Add to move the IP address to the list of Allowed sites.
Figure 205 Pop-up Blocker Settings
MAX-200HW2 Series Users Guide
303
Appendix C Pop-up Windows, JavaScripts and Java Permissions
5 Click Close to return to the Privacy screen.
6 Click Apply to save this setting.
JavaScripts
If pages of the web configurator do not display properly in Internet Explorer, check that
JavaScripts are allowed.
1 In Internet Explorer, click Tools, Internet Options and then the Security tab.
Figure 206 Internet Options: Security
304
Click the Custom Level... button.
Scroll down to Scripting.
Under Active scripting make sure that Enable is selected (the default).
Under Scripting of Java applets make sure that Enable is selected (the default).
Click OK to close the window.
MAX-200HW2 Series Users Guide
Appendix C Pop-up Windows, JavaScripts and Java Permissions
Figure 207 Security Settings - Java Scripting
Java Permissions
From Internet Explorer, click Tools, Internet Options and then the Security tab.
Click the Custom Level... button.
Scroll down to Microsoft VM.
Under Java permissions make sure that a safety level is selected.
Click OK to close the window.
Figure 208 Security Settings - Java
MAX-200HW2 Series Users Guide
305
Appendix C Pop-up Windows, JavaScripts and Java Permissions
JAVA (Sun)
1 From Internet Explorer, click Tools, Internet Options and then the Advanced tab.
2 Make sure that Use Java 2 for
Source Exif Data:
File Type : PDF
File Type Extension : pdf
MIME Type : application/pdf
PDF Version : 1.6
Linearized : No
Encryption : Standard V2.3 (128-bit)
User Access : Print, Copy, Extract, Print high-res
XMP Toolkit : 3.1-702
Create Date : 2008:01:17 16:30:44+08:00
Creator Tool : pdfFactory Pro www.ahasoft.com.tw/FinePrint
Modify Date : 2008:01:17 16:51:31+08:00
Metadata Date : 2008:01:17 16:51:31+08:00
Format : application/pdf
Creator : claire
Title : UserMan_I88MAX200HW2-revised.pdf
Producer : pdfFactory Pro 3.10 (Windows XP Professional Chinese)
Document ID : uuid:2a9616e1-9d98-4ae2-be58-7db539848442
Instance ID : uuid:06633c78-639e-4562-9a64-46613ef2d304
Has XFA : No
Page Count : 104
Author : claire
EXIF Metadata provided by EXIF.tools