ZyXEL Communications MAX208M2W WiMAX Indoor VoIP Wi-Fi IAD User Manual MAX208M2W Users guide

ZyXEL Communications Corporation WiMAX Indoor VoIP Wi-Fi IAD MAX208M2W Users guide

UserManual.wiki >

ZyXEL Communications >

MAX208M2W User Manual >

User Manual Part 1

1. User Manual Part 1
2. User Manual Part 2

User Manual Part 1

www.zyxel.comwww.zyxel.comMAX208M2W SeriesWiMAX Indoor VoIP Wi-Fi IADCopyright © 2011ZyXEL Communications CorporationSoftware Version 2.00Edition 1, 1/2011Default Login DetailsIP Address: http://192.168.1.1Admin s User Name and Password:admin / 1234Guest s User Name and Password:guest / guest

About This User's GuideMAX208M2W Series User s Guide 3About This User's GuideIntended AudienceThis manual is intended for people who want to configure the ZyXEL MAX208M2W Series using the ZyXEL Web Configurator. You should have at least a basic knowledge of TCP/IP networking concepts and topology.Related Documentation!Quick Start Guide The Quick Start Guide is designed to help you get up and running right away. It contains information on setting up your network and configuring for Internet access.!Support DiscRefer to the included CD for support documents.!ZyXEL Web SitePlease refer to www.zyxel.com for additional support documentation and product certifications.Documentation FeedbackSend your comments, questions or suggestions to: techwriters@zyxel.com.twThank you!The Technical Writing Team, ZyXEL Communications Corp.Need More Help?More help is available at www.zyxel.com.

About This User's GuideMAX208M2W Series User s Guide4!Download LibrarySearch for the latest product updates and documentation from this link. Read the Tech Doc Overview to find out how to efficiently use the documentation in order to better understand how to use your product. !Knowledge BaseIf you have a specific question about your product, the answer may be here. This is a collection of answers to previously asked questions about ZyXEL products. !ForumThis contains discussions on ZyXEL products. Learn from others who use ZyXEL products and share your experiences as well.Customer SupportShould problems arise that cannot be solved by the methods listed above, you should contact your vendor. If you cannot contact your vendor, then contact a ZyXEL office for the region in which you bought the device. See http://www.zyxel.com/web/contact_us.php for contact information. Please have the following information ready when you contact an office.!Product model and serial number.!Warranty Information.!Date that you received your device.!Brief description of the problem and the steps you took to solve it.

Document ConventionsMAX208M2W Series User s Guide 5Document ConventionsWarnings and NotesThese are how warnings and notes are shown in this User s Guide. Warnings tell you about things that could harm you or your MAX208M2W Series.Note: Notes tell you other important information (for example, other things you may need to configure or helpful tips) or recommendations.Syntax Conventions!The product(s) described in this book may be referred to as the "MAX208M2W Series#, the "device#, the "system# or the "product# in this User s Guide.!Product labels, screen names, field labels and field choices are all in bold font.!A key stroke is denoted by square brackets and uppercase text, for example, [ENTER] means the "enter# or "return# key on your keyboard.!"Enter# means for you to type one or more characters and then press the [ENTER] key. "Select# or "choose# means for you to use one of the predefined choices.!A right angle bracket ( > ) within a screen name denotes a mouse click. For example, TOOLS > Logs > Log Settings means you first click Tools in the navigation panel, then the Logs sub menu and finally the Log Settings tab to get to that screen.!Units of measurement may denote the "metric# value or the "scientific# value. For example, "k# for kilo may denote "1000# or "1024#, "M# for mega may denote "1000000# or "1048576# and so on.!"e.g.,# is a shorthand for "for instance#, and "i.e.,# means "that is# or "in other words#.

Document ConventionsMAX208M2W Series User s Guide6Icons Used in FiguresFigures in this User s Guide may use the following generic icons. The MAX208M2W Series icon is not an exact representation of your product.Table 1 Common IconsMAX208M2W Series ComputerWireless SignalNotebookServerBase StationTelephoneSwitchRouterInternet CloudNetwork Cloud

Safety WarningsMAX208M2W Series User s Guide 7Safety WarningsFor your safety, be sure to read and follow all warning notices and instructions.!Do NOT use this product near water, for example, in a wet basement or near a swimming pool.!Do NOT expose your device to dampness, dust or corrosive liquids.!Do NOT store things on the device.!Do NOT install, use, or service this device during a thunderstorm. There is a remote risk of electric shock from lightning.!Connect ONLY suitable accessories to the device.!Do NOT open the device or unit. Opening or removing covers can expose you to dangerous high voltage points or other risks. ONLY qualified service personnel should service or disassemble this device. Please contact your vendor for further information.!Make sure to connect the cables to the correct ports.!Place connecting cables carefully so that no one will step on them or stumble over them.!Always disconnect all cables from this device before servicing or disassembling.!Use ONLY an appropriate power adaptor or cord for your device. Connect it to the right supply voltage (for example, 110V AC in North America or 230V AC in Europe).!Do NOT remove the plug and connect it to a power outlet by itself; always attach the plug to the power adaptor first before connecting it to a power outlet.!Do NOT allow anything to rest on the power adaptor or cord and do NOT place the product where anyone can walk on the power adaptor or cord.!Do NOT use the device if the power adaptor or cord is damaged as it might cause electrocution.!If the power adaptor or cord is damaged, remove it from the device and the power source.!Do NOT attempt to repair the power adaptor or cord. Contact your local vendor to order a new one.Do not use the device outside, and make sure all the connections are indoors. There is a remote risk of electric shock from lightning.!Do NOT obstruct the device ventilation slots, as insufficient airflow may harm your device.Use only No. 26 AWG (American Wire Gauge) or larger telecommunication line cord.!Antenna Warning! This device meets ETSI and FCC certification requirements when using the included antenna(s). Only use the included antenna(s).!If you wall mount your device, make sure that no electrical lines, gas or water pipes will be damaged.

Safety WarningsMAX208M2W Series User s Guide8!Make sure that the cable system is grounded so as to provide some protection against voltage surges.Your product is marked with this symbol, which is known as the WEEE mark. WEEE stands for Waste Electronics and Electrical Equipment. It means that used electrical and electronic products should not be mixed with general waste. Used electrical and electronic equipment should be treated separately.

Contents OverviewMAX208M2W Series User s Guide 9Contents OverviewUser!s Guide ...........................................................................................................................17Getting Started ...........................................................................................................................19Introducing the Web Configurator ..............................................................................................25Setup Wizard............................................................................................................................. 31Tutorials .....................................................................................................................................43Technical Reference ..............................................................................................................63System Status ............................................................................................................................65WiMAX .......................................................................................................................................69Network Setting .........................................................................................................................89Security ....................................................................................................................................127The VoIP General Screens ......................................................................................................133The VoIP Account Screens ......................................................................................................139The VoIP Line Screens ............................................................................................................157Maintenance ............................................................................................................................161Troubleshooting .......................................................................................................................187Product Specifications .............................................................................................................193

Contents OverviewMAX208M2W Series User s Guide10

Table of ContentsMAX208M2W Series User s Guide 11Table of ContentsAbout This User's Guide..........................................................................................................3Document Conventions............................................................................................................5Safety Warnings........................................................................................................................7Contents Overview...................................................................................................................9Table of Contents....................................................................................................................11Part I: User!s Guide................................................................................17Chapter 1Getting Started........................................................................................................................191.1 About Your MAX208M2W Series .........................................................................................191.1.1 WiMAX Internet Access .............................................................................................191.1.2 Make Calls via Internet Telephony Service Provider ..................................................201.2 MAX208M2W Series Hardware ...........................................................................................211.2.1 LEDs ..........................................................................................................................211.3 Good Habits for Managing the MAX208M2W Series ..........................................................22Chapter 2Introducing the Web Configurator........................................................................................252.1 Overview ..............................................................................................................................252.1.1 Accessing the Web Configurator ................................................................................252.1.2 The Reset Button .......................................................................................................262.1.3 Saving and Canceling Changes .................................................................................272.1.4 Working with Tables ...................................................................................................272.2 The Main Screen .................................................................................................................28Chapter 3Setup Wizard...........................................................................................................................313.1 Overview ..............................................................................................................................313.1.1 Welcome to the Setup Wizard ....................................................................................313.1.2 LAN Settings ..............................................................................................................333.1.3 WiMAX Frequency Settings .......................................................................................343.1.4 WiMAX Authentication Settings .................................................................................363.1.5 VoIP Settings ..............................................................................................................38

Table of ContentsMAX208M2W Series User s Guide123.1.6 WLAN Settings ...........................................................................................................393.1.7 Setup Complete .........................................................................................................41Chapter 4Tutorials...................................................................................................................................434.1 Overview ..............................................................................................................................434.2 WiMAX Connection Settings ...............................................................................................434.3 Configuring LAN DHCP .......................................................................................................444.4 Changing Certificate ............................................................................................................464.5 Blocking Web Access ..........................................................................................................474.6 Configuring the MAC Address Filter ....................................................................................484.7 Setting Up NAT Port Forwarding .........................................................................................504.8 Access the MAX208M2W Series Using DDNS ...................................................................534.8.1 Registering a DDNS Account on www.dyndns.org ....................................................534.8.2 Configuring DDNS on Your MAX208M2W Series ......................................................544.8.3 Testing the DDNS Setting ..........................................................................................544.9 Configuring Static Route for Routing to Another Network ...................................................544.10 Remotely Managing Your MAX208M2W Series ................................................................574.11 VLAN Configuration Example ............................................................................................58Part II: Technical Reference..................................................................63Chapter 5System Status.........................................................................................................................655.1 Overview ..............................................................................................................................655.2 System Status ......................................................................................................................65Chapter 6WiMAX......................................................................................................................................696.1 Overview ..............................................................................................................................696.1.1 What You Need to Know ............................................................................................696.2 Connection Settings ............................................................................................................736.3 Frequency Settings ..............................................................................................................756.4 Authentication Settings ........................................................................................................786.5 Connect ...............................................................................................................................816.6 Wide Scan ...........................................................................................................................846.7 Link Status ...........................................................................................................................856.8 Link Statistics .......................................................................................................................876.9 Connection Info ...................................................................................................................886.10 Service Flow ......................................................................................................................88

Table of ContentsMAX208M2W Series User s Guide 13Chapter 7Network Setting.......................................................................................................................897.1 Overview ..............................................................................................................................897.1.1 What You Need to Know ............................................................................................897.2 WAN ....................................................................................................................................947.3 PPPoE .................................................................................................................................967.4 GRE .....................................................................................................................................987.5 EtherIP .................................................................................................................................987.6 IP .........................................................................................................................................997.7 DHCP ................................................................................................................................1007.8 WLAN ................................................................................................................................1027.9 WPS ..................................................................................................................................1047.10 MAC Address Filter .........................................................................................................1047.11 Static Route ......................................................................................................................1067.12 Static Route Add ..............................................................................................................1067.13 RIP ...................................................................................................................................1077.14 Port Forwarding ...............................................................................................................1087.14.1 Port Forwarding Wizard ..........................................................................................1107.15 Port Trigger .......................................................................................................................1117.15.1 Port Trigger Wizard .................................................................................................1127.15.2 Trigger Port Forwarding Example ...........................................................................1137.16 DMZ ..................................................................................................................................1147.17 ALG ..................................................................................................................................1157.18 UPnP ................................................................................................................................1167.18.1 Installing UPnP in Windows XP ..............................................................................1167.18.2 Web Configurator Easy Access .............................................................................1207.19 VLAN ...............................................................................................................................1227.20 DDNS ..............................................................................................................................1257.21 Content Filter ...................................................................................................................126Chapter 8Security..................................................................................................................................1278.1 Overview ............................................................................................................................1278.1.1 What You Need to Know ..........................................................................................1278.2 IP Filter ..............................................................................................................................1288.3 MAC Filter ..........................................................................................................................1298.4 DDOS ................................................................................................................................130Chapter 9The VoIP General Screens...................................................................................................1339.1 VoIP Overview ...................................................................................................................1339.1.1 What You Can Do in This Chapter ...........................................................................1339.1.2 What You Need to Know ..........................................................................................133

Table of ContentsMAX208M2W Series User s Guide 1512.8 OMA-DM ..........................................................................................................................17412.9 Date .................................................................................................................................17612.10 Time Zone ......................................................................................................................17712.11 Upgrade File ..................................................................................................................17712.11.1 The Firmware Upload Process .............................................................................17812.12 Upgrade Link .................................................................................................................17912.13 CWMP Upgrade ............................................................................................................17912.14 Backup ...........................................................................................................................18012.15 Restore ..........................................................................................................................18112.15.1 The Restore Configuration Process .....................................................................18112.16 Factory Defaults ............................................................................................................18212.17 Log Setting ....................................................................................................................18212.18 Log Display ....................................................................................................................18312.19 Ping Test ........................................................................................................................18412.20 Traceroute Test ..............................................................................................................18412.21 About .............................................................................................................................18512.22 Reboot ...........................................................................................................................185Chapter 13Troubleshooting....................................................................................................................18713.1 Power, Hardware Connections, and LEDs ......................................................................18713.2 MAX208M2W Series Access and Login ..........................................................................18813.3 Internet Access ................................................................................................................19013.4 Reset the MAX208M2W Series to Its Factory Defaults ...................................................19113.4.1 Pop-up Windows, JavaScript and Java Permissions .............................................192Chapter 14Product Specifications.........................................................................................................19314.1 Wall-Mounting ..................................................................................................................20114.1.1 The Wall-Mounting Kit ............................................................................................20114.1.2 Instructions .............................................................................................................201Appendix A WiMAX Security................................................................................................205Appendix B Setting Up Your Computer s IP Address...........................................................209Appendix C Pop-up Windows, JavaScript and Java Permissions........................................237Appendix D IP Addresses and Subnetting...........................................................................247Appendix E Importing Certificates........................................................................................259Appendix F Common Services.............................................................................................291Appendix G Legal Information..............................................................................................295

Table of ContentsMAX208M2W Series User s Guide16Index.......................................................................................................................................299

MAX208M2W Series User s Guide 19CHAPTER 1 Getting Started1.1 About Your MAX208M2W Series The MAX208M2W Series includes MAX208M2W and MAX218M2W.The MAX208M2W Series has a built-in switch and two phone ports. It allows you to access the Internet by connecting to a WiMAX wireless network. You can use a traditional analog telephone to make Internet calls using the MAX208M2W Series s Voice over IP (VoIP) communication capabilities. Additionally, The web browser-based Graphical User Interface (GUI), also known as the web configurator, provides easy management of the device and its features.See Chapter 14 on page 193 for a complete list of features for your model.1.1.1 WiMAX Internet AccessConnect your computer or network to the MAX208M2W Series for WiMAX Internet access. See the Quick Start Guide for instructions on hardware connection.In a wireless metropolitan area network (MAN), the MAX208M2W Series connects to a WiMAX base station (BS) for Internet access. The following diagram shows a notebook computer equipped with the MAX208M2W Series connecting to the Internet through a WiMAX base station (marked BS).Figure 1 Mobile Station and Base StationWhen the firewall is on, all incoming traffic from the Internet to your network is blocked unless it is initiated from your network.

Chapter 1Getting StartedMAX208M2W Series User s Guide20Use content filtering to block access to web sites with URLs containing keywords that you specify. You can define time periods and days during which content filtering is enabled and include or exclude particular computers on your network from content filtering. For example, you could block access to certain web sites for the kids.1.1.2 Make Calls via Internet Telephony Service ProviderIn a home or small office environment, you can use the MAX208M2W Series to make and receive the following types of VoIP telephone calls:!Peer-to-Peer calls - Use the MAX208M2W Series to make a call directly to the recipient s IP address without using a SIP proxy server.Figure 2 VoIP Features - Peer-to-Peer Calls!Calls via a VoIP service provider - The MAX208M2W Series sends your call to a VoIP service provider s SIP server which forwards your calls to either VoIP or PSTN phones.Figure 3 Calls via VoIP Service Provider

Chapter 1Getting StartedMAX208M2W Series User s Guide 211.2 MAX208M2W Series HardwareFollow the instructions in the Quick Start Guide to make hardware connections.1.2.1 LEDsThe following figure shows the LEDs (lights) on the MAX208M2W Series.Figure 4 The MAX208M2W Series s LEDsThe following table describes your MAX208M2W Series s LEDs (from top to bottom). Table 2 The MAX208M2W Series LEDs behaviorLED STATE DESCRIPTIONPowerOffThe MAX208M2W Series is not receiving power.RedThe MAX208M2W Series is receiving power but has been unable to start up correctly or is not receiving enough power. See the Troubleshooting section for more information.Green Solid: The MAX208M2W Series is receiving power and functioning correctly.Flashing: the device is self-testing (startup)WLANLEDSTRENGTHINDICATORSVOICELEDSPOWERLED1 & 2SIGNALWIMAXLINK

Chapter 1Getting StartedMAX208M2W Series User s Guide221.3 Good Habits for Managing the MAX208M2W SeriesDo the following things regularly to make the MAX208M2W Series more secure and to manage the MAX208M2W Series more effectively.!Change the password. Use a password that s not easy to guess and that consists of different types of characters, such as numbers and letters.!Write down the password and put it in a safe place.WiMAX LinkOffThe MAX208M2W Series is not connected to a wireless (WiMAX) network.GreenThe MAX208M2W Series is successfully connected to a wireless (WiMAX) network.Green (Blinking Slowly)The MAX208M2W Series is searching for a wireless (WiMAX) network.Green (Blinking Quickly)The MAX208M2W Series has found a wireless (WiMAX) network and is connecting.Signal Strength IndicatorThe Strength Indicator LEDs display the Interference-plus-Noise Ratio (CINR) of the wireless (WiMAX) connection.Signal 1 OnThe signal strength is in the range between 5 and 15.Signal 2 OnThe signal strength is in the range between 16 and 24.Signal 3 OnThe signal strength is greater than or equal to 25 dBmVoice 1 & 2OffNo SIP account is registered, or the MAX208M2W Series is not receiving power.GreenA SIP account is registered.Green (Blinking)A SIP account is registered, and the phone attached to the VoIP port is in use (off the hook).YellowA SIP account is registered and has a voice message on the SIP server.Yellow (Blinking)A SIP account is registered and has a voice message on the SIP server, and the phone attached to the VoIP port is in use (off the hook).WLANOffThe Wi-Fi network is not operational.GreenThe Wi-Fi network is operational.Blinking GreenThe WiMAX Device is sending and receiving data across the Wi-Fi network.Table 2 The MAX208M2W Series LEDs behaviorLED STATE DESCRIPTION

Chapter 1Getting StartedMAX208M2W Series User s Guide 23!Back up the configuration (and make sure you know how to restore it). Restoring an earlier working configuration may be useful if the MAX208M2W Series becomes unstable or even crashes. If you forget your password, you will have to reset the MAX208M2W Series to its factory default settings. If you backed up an earlier configuration file, you would not have to totally re-configure the MAX208M2W Series. You could simply restore your last configuration.

Chapter 1Getting StartedMAX208M2W Series User s Guide24

MAX208M2W Series User s Guide 25CHAPTER 2 Introducing the WebConfigurator2.1 OverviewThe Web Configurator is an HTML-based management interface that allows easy device set up and management via any web browser that supports: HTML 4.0, CSS 2.0, and JavaScript 1.5, and higher. The recommended screen resolution for using the web configurator is 1024 by 768 pixels and 16-bit color, or higher.In order to use the Web Configurator you need to allow:!Web browser pop-up windows from your device. Web pop-up blocking is enabled by default in many operating systems and web browsers.!JavaScript (enabled by default in most web browsers).!Java permissions (enabled by default in most web browsers).See the Appendix C on page 237 for more information on configuring your web browser.2.1.1 Accessing the Web Configurator1Make sure your MAX208M2W Series hardware is properly connected (refer to the Quick Start Guide for more information).2Launch your web browser.3Enter 192.168.1.1" as the URL.

Chapter 2Introducing the Web ConfiguratorMAX208M2W Series User s Guide264A login screen displays. Enter the default Username (admin) and Password (1234), then click Login.Figure 5 Login screenNote: For security reasons, the MAX208M2W Series automatically logs you out if you do not use the Web Configurator for five minutes. If this happens, log in again.2.1.2 The Reset ButtonIf you forget your password or cannot access the Web Configurator, you will need to use the Reset button to reload the factory-default configuration file. This means that you will lose all configurations that you had previously and the password will be reset to "1234#.2.1.2.1 Using The Reset Button1Make sure the Power light is on (not blinking).2To set the device back to the factory default settings, press the Reset button for five seconds or until all LED lights blink one time, then release it. The device restarts when the defaults have been restored. 3Reconfigure the MAX208M2W Series following the steps in your Quick Start Guide.

Chapter 2Introducing the Web ConfiguratorMAX208M2W Series User s Guide 272.1.3 Saving and Canceling ChangesAll screens to which you can make configuration changes must be saved before those changes can go into effect. If you make a mistake while configuring the MAX208M2W Series, you can cancel those changes and start over.Figure 6 Saving and Canceling ChangesThis screen contains the following fields:Note: If you make changes to a page but do not save before switching to another page or exiting the Web Configurator, those changes are disgarded.2.1.4 Working with TablesMany screens in the MAX208M2W Series contain tables to provide information or additional configuration options.Figure 7 Tables ExampleThis screen contains the following fields:Table 3 Saving and Canceling ChangesLABEL DESCRIPTIONSaveClick this to save your changes.CancelClick this to restore the settings on this page to their last saved values.Table 4 Saving and Canceling ChangesLABEL DESCRIPTIONItems per PageThis displays the number of items displayed per table page. Use the menu to change this value.First PageClick this to go to the first page in the table.

Chapter 2Introducing the Web ConfiguratorMAX208M2W Series User s Guide282.2 The Main ScreenWhen you first log into the Web Configurator, the Main screen appears. Here you can view a summary of your MAX208M2W Series s connection status. This is also the default "home# page for the Web Configurator and it contains conveniently-placed shortcuts to all of the other screens.Note: Some features in the Web Configurator may not be available depending on your firmware version and/or configuration.Note: The available menus and screens vary depending on the user account you use for login.Previous PageClick this to go to the previous page in the table.Page Indicator / Jump to PageThis indicates which page is currently displayed in the table. Use the menu to jump to another page. You can only jump to other pages if those pages exist.Next PageClick this to go to the previous page in the table.Last PageClick this to go to the last page in the table.#This indicates an item s position in the table. It has no bearing on that item s importance or lack there of.Total NumThis indicates the total number of items in the table, including items on pages that are not visible.Table 4 Saving and Canceling Changes (continued)LABEL DESCRIPTION

Chapter 2Introducing the Web ConfiguratorMAX208M2W Series User s Guide 29Figure 8 Main ScreenThe following table describes the icons in this screen.Table 5 Main > IconsICON DESCRIPTIONSystem StatusClick this to open the Main screen, which shows your MAX208M2W Series status and other information.WiMAXClick this to open the WiMAX menu, which gives you options for configuring your WiMAX settings.Network SettingClick this to open the Network menu, which gives you options for configuring your network settings.SecurityClick this to open the Security menu, which gives you options for configuring your firewall and security settings.VoIPClick this icon to open the VoIP menu, which gives you options on how to use the device to make phone calls.

Chapter 2Introducing the Web ConfiguratorMAX208M2W Series User s Guide30MaintenanceClick this to open the Maintenance menu, which gives you options for maintaining your MAX208M2W Series and performing basic network connectivity tests.LanguageUse this menu to select the Web Configurator s language.Setup WizardClick this to open the Setup Wizard, where you can configure the most essential settings for your MAX208M2W Series to work.LogoutClick this to log out of the Web Configurator.Table 5 Main > Icons (continued)ICON DESCRIPTION

MAX208M2W Series User s Guide 31CHAPTER 3 Setup Wizard3.1 OverviewThis chapter provides information on the ZyXEL Setup Wizard. The wizard guides you through several steps for onfiguring your network settings.3.1.1 Welcome to the Setup WizardThis screen provides a quick summary of the configuration tasks the wizard helps you to perform. They are:1Set up your Local Area Network (LAN) options, which determine how the devices in your home or office connect to the MAX208M2W Series.2Set up your MAX208M2W Series s broadcast frequency, which is the radio channel it uses to communicate with the ISP s base station.3Set up your MAX208M2W Series s login options, which are used to connect your LAN to the ISP s network and verify your account. 4Set up your MAX208M2W Series s VoIP Settings, which will allow you to make calls over the nternet.

Chapter 3Setup WizardMAX208M2W Series User s Guide325Set up your MAX208M2W Series s WLAN so that other devices, such as a laptop or a smartphone, can connect wirelessly to the nternet using the MAX208M2W Series.Figure 9 Setup Wizard > Welcome

Chapter 3Setup WizardMAX208M2W Series User s Guide 333.1.2 LAN SettingsThe LAN Settings screen allows you to configure your local network options.Figure 10 Setup Wizard > LAN SettingsThe following table describes the labels in this screen.Table 6 Setup Wizard > LAN SettingsLABEL DESCRIPTIONLAN TCP/IPIP AddressEnter the IP address of the MAX208M2W Series on the LAN.Note: This field is the IP address you use to access the MAX208M2W Series on the LAN. If the web configurator is running on a computer on the LAN, you lose access to it as soon as you change this field. You can access the web configurator again by typing the new IP address in the browser.IP Subnet MaskEnter the subnet mask of the LAN.DHCP ServerEnable Select this if you want the MAX208M2W Series to be the DHCP server on the LAN. As a DHCP server, the MAX208M2W Series assigns IP addresses to DHCP clients on the LAN and provides the subnet mask and DNS server information.Start IP Enter the IP address from which the MAX208M2W Series begins allocating IP addresses.End IP Enter the IP address at which the MAX208M2W Series stops allocating IP addresses.

Chapter 3Setup WizardMAX208M2W Series User s Guide343.1.3 WiMAX Frequency SettingsThe WiMAX Frequency Settings screen allows you to configure the broadcast radio frequency used by the MAX208M2W Series.Note: These settings should be provided by your ISP.Figure 11 Setup Wizard > WiMAX Frequency SettingsLease TimeEnter the duration in minutes before the device requests a new IP address from the DHCP server.DNS Server assigned by DHCP ServerFirst DNS ServerSpecify the first IP address of three DNS servers that the network can use. The MAX208M2W Series provides these IP addresses to DHCP clients.Second DNS ServerSpecify the second IP address of three DNS servers that the network can use. The MAX208M2W Series provides these IP addresses to DHCP clients.Third DNS ServerSpecify the third IP address of three DNS servers that the network can use. The MAX208M2W Series provides these IP addresses to DHCP clients.Back Click to display the previous screen.Next Click to proceed to the next screen. Table 6 Setup Wizard > LAN Settings (continued)LABEL DESCRIPTION

Chapter 3Setup WizardMAX208M2W Series User s Guide 35The following table describes the labels in this screen.Table 7 Setup Wizard > WiMAX Frequency SettingsLABEL DESCRIPTIONSetting TypeSelect the WiMAX frequency setting type from the list.!By Range - Select this to set up the frequency based on a range of MHz.!By List - Select this to set up the frequency on an individual MHz basis. You can add multiple MHz values to the list.StepEnter the increments in MHz by which to increase the frequency range.Note: This field only appears when you select By Range under Setting Type.Start FrequencyEnter the frequency value at the beginning of the frequency range to use. The frequency is increased in increments equal to the Step value until the End Frequency is reached, at which time the cycle starts over with the Start Frequency.Note: This field only appears when you select By Range under Setting Type.End FrequencyEnter the frequency value at the end of the frequency range to use. Note: This field only appears when you select By Range under Setting Type.BandwidthSet the frequency bandwidth in MHz that this MAX208M2W Series uses.#This is an index number for enumeration purposes only.Frequency (MHz)Displays the frequency MHz for the item in the list.Total NumDisplays the total number of items in the list.DeleteClick this to remove an item from the list.AddClick this to add an item to the list.OKClick this to save an newly added item to the list.#This is an index number for enumeration purposes only.Band Start (KHz)Indicates the beginning of the frequency band in KHz.Band End (KHz)Indicates the end of the frequency band in KHz.Total NumDisplays the total number of items in the list.Back Click to display the previous screen.Next Click to proceed to the next screen.

Chapter 3Setup WizardMAX208M2W Series User s Guide363.1.4 WiMAX Authentication SettingsThe WiMAX Authentication Settings screen allows you to configure how your MAX208M2W Series logs into the service provider s network.Note: These settings should be provided by your ISP.Note: The EAP supplicant settings on this screen vary depending on the authentication mode your select.Figure 12 Setup Wizard > WiMAX Authentication Settings

Chapter 3Setup WizardMAX208M2W Series User s Guide 37The following table describes the labels in this screen.Table 8 Setup Wizard > WiMAX Authentication SettingsLABEL DESCRIPTIONAuthenticationAuthentication ModeSelect a WiMAX authentication mode for authentication network sessions with the ISP. Options are:!No authentication!User authentication!Device authentication!User and Device authenticationEAP SupplicationEAP Mode Select an EAP autentication mode. See Table 15 on page 79 if you need more inforamtion.Anonymous IdEnter your anonymous ID. Note: Some modes may not require this.Ignore Cert VerificationSelect this to ignore base station certification verification when a certificate is received during EAP-TLS or EAP-TTLS.Server Root CA Cert. FileBrowse for and choose a server root certificate file, if required.Server Root CA Cert. InfoThis field displays information about the assigned server root certificate.Device Cert. FileBrowse for and choose a device certificate file, if required.Device Cert. Info.This field displays information about the assigned device certificate.Device Private KeyBrowse for and choose a device private key, if required.Device Private KeyInfoThis field displays information about the assigned device private key.Device Private Key PasswordEnter the device private key, if required.Inner Mode Select an inner authentication mode (MS-CHAP, MS-CHAPV2, CHAP, MD5, PAP. See Table 15 on page 79 if you need more inforamtion.Username Enter your authentication username.Password Enter your authentication password.Back Click to display the previous screen.Next Click to proceed to the next screen.

Chapter 3Setup WizardMAX208M2W Series User s Guide383.1.5 VoIP SettingsThe VoIP Settings screen allows you to configure how your MAX208M2W Series connects to up to two VoIP service providers network and makes calls over the Internet.Note: This settings should be provided by your VoIP service provider.Figure 13 Setup Wizard > VoIP SettingsThe following table describes the labels in this screen.Table 9 Setup Wizard > VoIP SettingsLABEL DESCRIPTIONLine 1 SIP Account - Configure this section to use the PHONE 1 port.Enable Select this to activate the SIP account.SIP ServerEnter the IP address or domain name of the SIP server.Port NumberEnter the SIP server s listening port number.

Chapter 3Setup WizardMAX208M2W Series User s Guide 393.1.6 WLAN SettingsThe WLAN Settings screen lets you set up how other devices connect to the Internet wirelessly using the MAX208M2W Series.Figure 14 Setup Wizard > WLAN SettingsSubscriber NumberEnter your SIP number. In the full SIP URI, this is the part before the @ symbol.Display NameEnter the name that appears on the other party s device if they have Caller ID enabled.Authentication NameType the SIP user name associated with this account for authentication to the SIP server.PasswordType the SIP password associated with this account.Line 2 SIP Account - Configure this section to use the PHONE 2 port. See the fields above for similar description.Back Click to display the previous screen.Next Click to proceed to the next screen. Table 9 Setup Wizard > VoIP Settings (continued)LABEL DESCRIPTION

Chapter 3Setup WizardMAX208M2W Series User s Guide40Figure 15 Steup Wizard > WLAN Settings > Encryption Type: WPA PersonallThe following table describes the labels in this screen.Table 10 Setup Wizard > WLAN SettingsLABEL DESCRIPTIONWifi SettingsEnable WLAN Select this box to enable the wireless service and allow other wireless clients to connect to the Internet using the MAX208M2W Series.WLAN Mode Select the mode that the MAX208M2W Series will be using to communicate: 802.11 B/G/N mixed, 802.11 B/G mixed, 802.11 B only, 802.11 G only, or 802.11 N only.WLAN Channel Select one channel from 1 to 13 for wireless communications with the wireless stations. SSID SettingsWLAN SSID This field dilsplays the name of the wireless network associated with the MAX208M2W Series.Hide SSID Select this option if you wish to keep the name of the wireless network hidden.Encryption Type Select the type of encryption that the network will be using: None, WEP, or WPA Personal.SSID WEP SettingsNote: You will only see this options if you selected WEP as the Encryption Type.Authentication Method Select the type of authentication used to join the network: Openn System or Shared Key.WEP Encryption Length Select the length of the encryption key: 64-bit or 128-bit.Key 1 - 4 Pick one of four available keys. The key can be in either Hexagecimal (HEX) or ASCII format.Type the key using any letters and numbers. The field is case sensitive and the lenght must match the length picked in the step above (64-bit or 128-bit). A warning mesage will appear if you fail to do this.SSID WPA Settings

Chapter 3Setup WizardMAX208M2W Series User s Guide 413.1.7 Setup CompleteClick Save to save the Setup Wizard settings and close it.Figure 16 Setup Wizard > Setup CompleteLaunch your web browser and navigate to www.zyxel.com. If everything was configured properly, the web page should display. You can now surf the Internet!Refer to the rest of this guide for more detailed information on the complete range of MAX208M2W Series features available in the more advanced web configurator. Note: If you cannot access the Internet, open the web configurator again to confirm that the Internet settings you configured in the wizard setup are correct.WPA ModeSelect either WPA, WPA2 or Auto (WPA or WPA2).Cipher TypeSelect the type of authentication that you wish to use for your network: TKIP, AES or both. AES is more secure.Pre Shared KeyType the pre-shared key or PSK previously shared between the two parties.Table 10 Setup Wizard > WLAN Settings (continued)LABEL DESCRIPTION

Chapter 3Setup WizardMAX208M2W Series User s Guide42

MAX208M2W Series User s Guide 43CHAPTER 4 Tutorials4.1 OverviewThis chapter shows you how to configure some of the MAX208M2W Series s features.Note: Be sure to read Introducing the Web Configurator on page 25 before working through the tutorials presented here. For field descriptions for individual screens, see the related technical reference in this User's Guide.This chapter includes the following configuration examples:!WiMAX Connection Settings on page 43!Configuring LAN DHCP on page 44!Changing Certificate on page 46!Blocking Web Access on page 47!Configuring the MAC Address Filter, see page48!Setting Up NAT Port Forwarding, see page 50!Access the MAX208M2W Series Using DDNS, see page 53!Configuring Static Route for Routing to Another Network, see page 54!Remotely Managing Your MAX208M2W Series on page 57!VLAN Configuration Example on page 584.2 WiMAX Connection SettingsThis tutorial provides you with pointers for configuring the MAX208M2W Series to connect to an ISP.1Connect the MAX208M2W Series to the ISP s nearest base station. See Section 6.2 on page 73.2Configure the MAX208M2W Series s broadcast frequency. Section 6.3 on page 75.

Chapter 4TutorialsMAX208M2W Series User s Guide443Configure the MAX208M2W Series to connect securely to the ISP s authentication servers. See Section 6.4 on page 78.4Check the MAX208M2W Series s connection status to ensure everything is working properly. See Section 6.7 on page 85.4.3 Configuring LAN DHCPThis tutorial shows you how to set up a small network in your office or home.Goal: Connect three computers to your MAX208M2W Series to form a small network. Required: The following table provides a summary of the information you will need to complete the tasks in this tutorial. 1In the Web Configurator, open the Networking Setting > LAN screen and set the IP Address to 192.168.100.1. Use the default IP Subnet Mask of 255.255.255.0. Click Save.INFORMATION VALUE SEE ALSOLAN IP Address192.168.100.1 Chapter 7 on page 99Starting IP Address192.168.100.10 Chapter 7 on page 100Ending IP Address192.168.100.30DNS ServersFrom ISP

Chapter 4TutorialsMAX208M2W Series User s Guide 452Manually change the IP address of your computer that your are using to 192.168.100.x (for example, 192.168.100.5) and keep the subnet set to 255.255.255.0.3Type http://192.168.100.1 in your browser after the MAX208M2W Series finishes starting up completely.4Log into the Web Configurator and open the Networking Setting > LAN > DHCP screen.5Select Server for the DHCP mode, then enter 192.168.100.10 and 192.168.100.30 as your DHCP starting and ending IP addresses.6Leave the other settings as their defaults and click Save.7Next, go to the Networking Setting > WAN screen and select NAT in the Operation Mode field. Click Save.

Chapter 4TutorialsMAX208M2W Series User s Guide 473You may need to configure the Options section according to the information provided by the ISP.4Click Save. You should now be able to connect to the Internet through your new service provider!4.5 Blocking Web AccessIf your MAX208M2W Series is in a home or office environment you may decide that you want to block an Internet website access. You may need to block both the website s IP address and domain name.Goal: Configure the MAX208M2W Series s content filter to block a website with a domain name www.example.com.See Also: Section 7.21 on page 126.1Open the Networking Setting > Content Filter.2Select Enable URL Filter.3Select Blacklist.4Click Add and configure a URL filter rule by selecting Active and entering www.example.com as the URL.5Click OK.

Chapter 4TutorialsMAX208M2W Series User s Guide486Click Save.Open a browser from your computer in the MAX208M2W Series s LAN network, you should get an "Access Violation# message when you try to access to http://www.example.com. You may also need to block the IP address of the website if you do not want users to access to the website through its IP address.4.6 Configuring the MAC Address FilterThis tutorial shows you how to use the MAC filter to block a DHCP client s access to hosts and to the WiMAX network.

Chapter 4TutorialsMAX208M2W Series User s Guide 491First of all, you have to know the MAC address of the computer. If not, you can look for the MAC address in the Network Setting > LAN > DHCP screen. (192.168.100.3 mapping to 00:02:E3:53:16:95 in this example). 2Click Security > Firewall > MAC Filter. Select Blacklist and click the Add button in the MAC Filter Rules table.

Chapter 4TutorialsMAX208M2W Series User s Guide503An empty entry appears. Enter the computer s MAC address in the Source MAC field and leave the other fields set to their defaults. Click Save.The computer will no longer be able to access any host on the WiMAX network through the MAX208M2W Series.4.7 Setting Up NAT Port ForwardingThomas recently received an Xbox 360 as his birthday gift. His friends invited him to play online games with them on Xbox LIVE. In order to communicate and play with other gamers on Xbox LIVE, Thomas needs to configure the port settings on his MAX208M2W Series.Xbox 360 requires the following ports to be available in order to operate Xbox LIVE correctly:TCP: 53, 80, 3074UDP: 53, 88, 30741You have to know the Xbox 360 s IP address first. You can check it through the Xbox 360 console. You may be able to check the IP address on the MAX208M2W Series if the MAX208M2W Series has assigned a DHCP IP address to the Xbox 360. Check the DHCP Leased Hosts table in the Network > LAN > DHCP screen. Look for the IP address for the Xbox 360.

Chapter 4TutorialsMAX208M2W Series User s Guide 512NAT mode is required to use port forwarding. Click Network Setting > WAN and make sure NAT is selected in the Operation Mode field. Click Save.3Click Network Setting > NAT > Port Forwarding and then click the first entry to edit the rule.4Configure the screen as follows to open TCP/UDP port 53 for the Xbox 360. Click OK.

Chapter 4TutorialsMAX208M2W Series User s Guide525Repeat steps 2 and 3 to open the rest of the ports for the Xbox 360. The port forwarding settings you configured are listed in the Port Forwarding screen.6Click Save.Thomas can then connect his Xbox 360 to the Internet and play online games with his friends.In this tutorial, all port 80 traffic is forwarded to the Xbox 360, but port 80 is also the default listening port for remote management via WWW. If Thomas also wants to manage the MAX208M2W Series from the Internet, he has to assign an unused port to WWW remote access.Click Advanced > Remote MGMT. Enter an unused port in the Port field (81 in this example). Click Save.

Chapter 4TutorialsMAX208M2W Series User s Guide 534.8 Access the MAX208M2W Series Using DDNSIf you connect your MAX208M2W Series to the Internet and it uses a dynamic WAN IP address, it is inconvenient for you to manage the device from the Internet. The MAX208M2W Series s WAN IP address changes dynamically. Dynamic DNS (DDNS) allows you to access the MAX208M2W Series using a domain name. To use this feature, you have to apply for DDNS service at www.dyndns.org.This tutorial covers:!Registering a DDNS Account on www.dyndns.org!Configuring DDNS on Your MAX208M2W Series!Testing the DDNS SettingNote: If you have a private WAN IP address (see Private IP Addresses on page 256), then you cannot use DDNS.4.8.1 Registering a DDNS Account on www.dyndns.org1Open a browser and type http://www.dyndns.org.2Apply for a user account. This tutorial uses UserName1 and 12345 as the username and password.3Log into www.dyndns.org using your account.4Add a new DDNS host name. This tutorial uses the following settings as an example.!Hostname: mywimax.dyndns.org!Service Type: Host with IP address!IP Address: Enter the WAN IP address that your MAX208M2W Series is currently using. You can find the IP address on the MAX208M2W Series s Web Configurator Status page.Then you will need to configure the same account and host name on the MAX208M2W Series later.w.x.y.z a.b.c.dhttp://mywimax.dyndns.orgA

Chapter 4TutorialsMAX208M2W Series User s Guide544.8.2 Configuring DDNS on Your MAX208M2W SeriesConfigure the following settings in the Network Setting > DDNS screen.1Select Enable Dynamic DNS.2Select dyndns.org for the service provider.3Select Dynamic for the service type.4Type mywimax.dyndns.org in the Domain Name field.5Enter the user name (UserName1) and password (12345).6Select WAN IP for the IP update policy.7Click Save.4.8.3 Testing the DDNS SettingNow you should be able to access the MAX208M2W Series from the Internet. To test this:1Open a web browser on the computer (using the IP address a.b.c.d) that is connected to the Internet.2Type http://mywimax.dyndns.org and press [Enter].3The MAX208M2W Series s login page should appear. You can then log into the MAX208M2W Series and manage it.4.9 Configuring Static Route for Routing to Another NetworkIn order to extend your Intranet and control traffic flowing directions, you may connect a router to the MAX208M2W Series s LAN. The router may be used to separate two department networks. This tutorial shows how to configure a static routing rule for two network routings.

Chapter 4TutorialsMAX208M2W Series User s Guide 55In the following figure, router R is connected to the MAX208M2W Series s LAN. R connects to two networks, N1 (192.168.1.x/24) and N2 (192.168.10.x/24). If you want to send traffic from computer A (in N1 network) to computer B (in N2 network), the traffic is sent to the MAX208M2W Series s WAN default gateway by default. In this case, computer B will never receive the traffic.You need to specify a static routing rule on the MAX208M2W Series to specify R as the router in charge of forwarding traffic to N2. In this case, the MAX208M2W Series routes traffic from computer A to R and then R routes the traffic to computer B.N2BARN1N2BN1AR

Chapter 4TutorialsMAX208M2W Series User s Guide56This tutorial uses the following example IP settings:To configure a static route to route traffic from N1 to N2:1Click Network Setting > Route > Static Route.2Click Add to create a new route.3Configure the Edit Static Route screen using the following settings:3a Enter 192.168.10.0 and subnet mask 255.255.255.0 for the destination, N2.3b Enter 192.168.1.253 (R s IP address on N1) in the IP Address field under Next Hop.3a Click Save.Now computer B should be able to receive traffic from computer A. You may need to additionally configure R s firewall settings to accept specific traffic to pass through.Table 11 IP Settings in this TutorialDEVICE / COMPUTER IP ADDRESSThe MAX208M2W Series s WAN172.16.1.1The MAX208M2W Series s LAN192.168.1.1A192.168.1.34R s IP address on N1 192.168.1.253R s IP address on N2 192.168.10.2B192.168.10.33

Chapter 4TutorialsMAX208M2W Series User s Guide 574.10 Remotely Managing Your MAX208M2W SeriesThe remote management feature allows you to log into the device through the Internet.Goal: Set up the MAX208M2W Series to allow management requests from the WAN (Internet).See Also: Section 12.3 on page 169.1Open the Maintenance > Remote MGMT > HTTP screen.2Select Enable in both HTTP Server and HTTPS Server sections and leave the Port Number settings as "80# and "443#.3Select Allow Connection from WAN. This allows remote management connections not only from the local network but also the WAN network (Internet).4Click Save.

Chapter 4TutorialsMAX208M2W Series User s Guide584.11 VLAN Configuration ExampleThis example assumes that you want port 1 to recognize VLAN 100 and VLAN 200 traffic sent from/to computers A and B. Port 2 is dedicated for transmitting and receiving VLAN-untagged and management traffic.Figure 17 VLAN Configuration Example1Connect your computer (C in the example) to the MAX208M2W Series s LAN port 2 and access the Web Configurator.2Log into the MAX208M2W Series.VLAN 100VLAN 200ABport 1port 2C

Chapter 4TutorialsMAX208M2W Series User s Guide 593Click Network Setting > VLAN and then click the PVID Group for port 2.4Select MGMT from the drop-down list, click OK in the section, and then click Save at the bottom of the screen.

Chapter 4TutorialsMAX208M2W Series User s Guide605Click Network Setting > WAN. Change the MAX208M2W Series to bridge mode and then click Save.6The MAX208M2W Series will restart. Wait until it completely restarts.7Configure the IP address of your computer to be in the same network as the MAX208M2W Series s LAN. The default is 192.168.1.x where x can be 2 to 254.8Open a browser and type the MAX208M2W Series s LAN IP address (for example, 192.168.1.1).9Log into the MAX208M2W Series and then click Network Setting > VLAN.10 Enable VLAN and create VLAN 100 by entering VLAN 100 and the priority (7 in this example) in the Management VLAN section. The MAX208M2W Series requires to reboot again.11 After it completely restarts, log into the MAX208M2W Series. Click Network Setting > VLAN.

Chapter 4TutorialsMAX208M2W Series User s Guide 6112 Since by default port 1 is associated with VLAN rule 1. Click the VID field to configure the settings as shown next. Click OK and then Save.Finally, you complete the settings. See Section 7.19 on page 122 if you need more information about VLAN.

Chapter 4TutorialsMAX208M2W Series User s Guide62

MAX208M2W Series User s Guide 65CHAPTER 5 System Status5.1 OverviewUse this screen to view a summary of your MAX208M2W Series connection status.5.2 System StatusThis screen allows you to view the current status of the device, system resources, and interfaces (LAN and WAN).Click System Status to open this screen as shown next.Figure 18 System Status

Chapter 5System StatusMAX208M2W Series User s Guide66The following tables describe the labels in this screen. Table 12 StatusLABEL DESCRIPTIONSystem InformationSystem Model NameThis field displays the MAX208M2W Series system model name. It is used for identification. Software VersionThis field displays the Web Configurator version number.Firmware VersionThis field displays the current version of the firmware inside the device.Firmware Build TimeThis field shows the date the firmware version was created. TimeThis field displays the current system time.UptimeThis field displays how long the MAX208M2W Series has been running since it last started up. System ResourcesMemoryThis field displays what percentage of the MAX208M2W Series s memory is currently used. The higher the memory usage, the more likely the MAX208M2W Series is to slow down. Some memory is required just to start the MAX208M2W Series and to run the web configurator. You can reduce the memory usage by disabling some services; by reducing the amount of memory allocated to NAT and firewall rules (you may have to reduce the number of NAT rules or firewall rules to do so); or by deleting rules in functions such as incoming call policies, speed dial entries, and static routes.CPUThis field displays what percentage of the MAX208M2W Series s CPU is currently used. The higher the CPU usage, the more likely the MAX208M2W Series is to slow down. WiMAXDevice StatusThis field displays the MAX208M2W Series current status for connecting to the selected base station.Scanning - The MAX208M2W Series is scanning for available base stations.Ready - The MAX208M2W Series has finished a scanning and you can connect to a base station.Connecting - The MAX208M2W Series attempts to connect to the selected base station.Connected - The MAX208M2W Series has successfully connected to the selected base station.

Chapter 5System StatusMAX208M2W Series User s Guide 67Connection StatusThis field displays the status of the WiMAXconnection between the MAX208M2W Series and the base station.Network Search - The MAX208M2W Series is scanning for any available WiMAX connections.Disconnected - No WiMAX connection is available.Network Entry - A WiMAX connection is initializing.Normal - The WiMAX connection has successfully established.BSIDThis field displays the MAC address of the base station to which the device is connected.FrequencyThis field indicates the frequency the MAX208M2W Series is using.Signal StrengthThis field indicates the strength of the connection that the MAX208M2W Series has with the base station.Link QualityThis field indicates the relative quality of the link the MAX208M2W Series has with the base station.WANStatusThis field indicates the status of the WAN connection to the MAX208M2W Series.MAC AddressThis field indicates the MAC address of the port making the WAN connection on the MAX208M2W Series.IP AddressThis field indicates the current IP address of the MAX208M2W Series in the WAN.Subnet MaskThis field indicates the current subnet mask on the WAN.GatewayThis field indicates the IP address of the gateway to which the MAX208M2W Series is connected.MTUThis field indicates the Maximum Transmission Unit (MTU) between the MAX208M2W Series and the ISP servers to which it is connected.DNSThis field indicates the Domain Name Server (DNS) to which your MAX208M2W Series is connected.LAN MAC AddressThis field indicates the MAC address of the port making the LAN connection on the MAX208M2W Series.IP AddressThis field displays the current IP address of the MAX208M2W Series in the LAN.Subnet MaskThis field displays the current subnet mask in the LAN.MTUThis field indicates the Maximum Transmission Unit (MTU) between the MAX208M2W Series and the client devices to which it is connected.VOIP PhoneAccount1 SubscriberThis field displays the SIP number for SIP account 1.Registered StatusThis field displays whether SIP account 1 is already registered with a SIP server (Registered or Unregistered).Account2 SubscriberThis field displays the SIP number for SIP account 2.Table 12 Status (continued)LABEL DESCRIPTION

Chapter 5System StatusMAX208M2W Series User s Guide68Registered StatusThis field displays whether SIP account 2 is already registered with a SIP server (Registered or Unregistered).Line1 StatusThis field displays whether phone line 1 (mapping to the VoIP1 port) is in use or not (idle).Line 2 StatusThis field displays whether phone line 2 (mapping to the VoIP2 port) is in use or not (idle).Table 12 Status (continued)LABEL DESCRIPTION

MAX208M2W Series User s Guide 69CHAPTER 6 WiMAX6.1 OverviewThis chapter shows you how to set up and manage the connection between the MAX208M2W Series and your ISP s base stations.6.1.1 What You Need to KnowThe following terms and concepts may help as you read through this chapter.WiMAX WiMAX (Worldwide Interoperability for Microwave Access) is the IEEE 802.16 wireless networking standard, which provides high-bandwidth, wide-range wireless service across wireless Metropolitan Area Networks (MANs). ZyXEL is a member of the WiMAX Forum, the industry group dedicated to promoting and certifying interoperability of wireless broadband products.In a wireless MAN, a wireless-equipped computer is known either as a mobile station (MS) or a subscriber station (SS). Mobile stations use the IEEE 802.16e standard and are able to maintain connectivity while switching their connection from one base station to another base station (handover) while subscriber stations use other standards that do not have this capability (IEEE 802.16-2004, for example). The following figure shows an MS-equipped notebook computer MS1 moving from base station BS1 s coverage area and connecting to BS2.Figure 19 WiMax: Mobile Station

Chapter 6WiMAXMAX208M2W Series User s Guide70WiMAX technology uses radio signals (around 2 to 10 GHz) to connect subscriber stations and mobile stations to local base stations. Numerous subscriber stations and mobile stations connect to the network through a single base station (BS), as in the following figure. Figure 20 WiMAX: Multiple Mobile StationsA base station s coverage area can extend over many hundreds of meters, even under poor conditions. A base station provides network access to subscriber stations and mobile stations, and communicates with other base stations.The radio frequency and bandwidth of the link between the MAX208M2W Series and the base station are controlled by the base station. The MAX208M2W Series follows the base station s configuration. AuthenticationWhen authenticating a user, the base station uses a third-party RADIUS or Diameter server known as an AAA (Authentication, Authorization and Accounting) server to authenticate the mobile or subscriber stations. The following figure shows a base station using an AAA server to authenticate mobile station MS, allowing it to access the Internet.Figure 21 Using an AAA ServerIn this figure, the dashed arrow shows the PKM (Privacy Key Management) secured connection between the mobile station and the base station, and the solid arrow shows the EAP secured connection between the mobile station, the base station and the AAA server. See the WiMAX security appendix for more details.

Chapter 6WiMAXMAX208M2W Series User s Guide 71Frequency RangesThe following figure shows the MAX208M2W Series searching a range of frequencies to find a connection to a base station. Figure 22 Frequency RangesIn this figure, A is the WiMAX frequency range. "WiMAX frequency range# refers to the entire range of frequencies the MAX208M2W Series is capable of using to transmit and receive (see the Product Specifications appendix for details). In the figure, B shows the operator frequency range. This is the range of frequencies within the WiMAX frequency range supported by your operator (service provider).The operator range is subdivided into bandwidth steps. In the figure, each C is a bandwidth step.The arrow D shows the MAX208M2W Series searching for a connection.Have the MAX208M2W Series search only certain frequencies by configuring the downlink frequencies. Your operator can give you information on the supported frequencies. The downlink frequencies are points of the frequency range your MAX208M2W Series searches for an available connection. Use the Site Survey screen to set these bands. You can set the downlink frequencies anywhere within the WiMAX frequency range. In this example, the downlink frequencies have been set to search all of the operator range for a connection.Certification AuthorityA Certification Authority (CA) issues certificates and guarantees the identity of each certificate owner. There are commercial certification authorities like CyberTrust or VeriSign and government certification authorities. You can use the MAX208M2W Series to generate certification requests that contain identifying information and public keys and then send the certification requests to a certification authority.

Chapter 6WiMAXMAX208M2W Series User s Guide74Idle Mode IntervalSet the idle duration in minutes. This is how long the MAX208M2W Series waits during periods of no activity before going into idle mode.CINR & RSSI Refresh IntervalSet the refresh interval in milliseconds for calculating the signal-to-noise measurement (CINR) and signal strength measurement (RSSI) of the MAX208M2W Series.LDRP (Low Data Rate Protection)Enter the Low Data Rate Protection (LDRP) time in milliseconds. If the uplink/downlink data rate is smaller than the LDRP time, the MAX208M2W Series sends a disconnect request to the base station.LDRP TX RateEnter the outgoing data rates for LDRP in bytes per second.LDRP RX RateEnter the incoming data rates for LDRP in bytes per second.Connection Type SettingsMode SelectSelect how the MAX208M2W Series connects to the base station.!Auto Connect Mode - The device connects automatically to the first base station in range.!Network Search Mode - The device scans for available base stations then connects to the best one it can.BSIDThis displays the MAC address of a base station within range of the MAX208M2W Series.Preamble IDThe preamble ID is the index identifier in the header of the base station s broadcast messages. In the beginning of a mobile stations s network entry process, it searches for the preamble and uses it to additional channel information. The preamble ID is used to synchronize the upstream and downstream transmission timing with the base station.Frequency (MHz)This field displays the radio frequency of the MAX208M2W Series s connection to the base station.Bandwidth (MHz)This field displays the bandwidth of the base station in megahertz (MHz).RSSI (dBm)This field displays the Received Signal Strength Indication (RSSI), which is an overal measurement of radio signal strength. A higher RSSI level indicates a stronger signal.CINR (dB) R3/R1This field displays the average Carrier to Interference plus Noise Ratio for the current connection. This value is an indication of overal radio signal quality, where a higher value means a better quality signal.SearchClick this to have the MAX208M2W Series scan for base stations.Table 13 Connection Settings (continued)LABEL DESCRIPTION

Chapter 6WiMAXMAX208M2W Series User s Guide76This screen contains the following fields:Table 14 Frequency SettingsLABEL DESCRIPTIONSetting TypeSelect whether to scan base stations by entering specific frequency(-ies) (By List) or a range of frequencies (By Range).Note: When you select By Range, you can only configure one range of frequencies in this screen. To configure multiple frequency ranges, use the WiMAX > Wide Scan screen.Note: Some settings in this screen are only available depending on the Setting Type selected.Join Wide Scan Result The scanning result of the frequency to scan you configured in this screen will be shown in the WiMAX > Connect screen. Select this option to determine whether to also append the wide scanning result (configured in the WiMAX > Wide Scan screen) to the same table.Default BandwidthSelect the default bandwidth (size) per frequency band you specify in table A.A (When By List is selected in the Setting Type field)Frequency (KHz)This displays the center frequency of an frequency band in kilohertz (KHz).Click the number to modify it.Enter the center frequency in this field when you are adding an entry.Bandwidth (MHz)This displays the bandwidth of the frequency band in megahertz (MHz). If you set a center frequency to 3400000 KHz with the bandwidth of 10 MHz, then the frequency band is from 3399500 to 3400500 KHz.Click the number to modify it.Enter the bandwidth of the frequency band in this field when you are adding an entry.DeleteClick this button to remove an item from the list.AddClick this button to add an item to the list.OKClick this button to save any changes made to the list.A (When By Range is selected in the Setting Type field)Start Frequency (KHz)This indicates the beginning of a frequency band in kilohertz (KHz).Click this field to modify it.Enter the beginning frequency when you are adding an entry.End Frequency (KHz)This indicates the end of the frequency band in kilohertz (KHz).Click this field to modify it.Step (KHz)This indicates the frequency step within each band in kilohertz (KHz).Click this field to modify it.Bandwidth (MHz)This indicates the bandwidth in megahertz (MHz).Click this field to modify it.

Chapter 6WiMAXMAX208M2W Series User s Guide 77OKClick this button to save any changes made to the list.Valid Band Info (B)This table displays the entire frequency band the MAX208M2W Series supports. The frequenc(ies) to scan that you configured in table A must be within this range.Band Start (KHz)This indicates the beginning of the frequency band in kilohertz (KHz).Band End (KHz)This indicates the end of the frequency band in kilohertz (KHz).Table 14 Frequency Settings (continued)LABEL DESCRIPTION

Chapter 6WiMAXMAX208M2W Series User s Guide 79This screen contains the following fields:Table 15 Authentication SettingsLABEL DESCRIPTIONAuthentication ModeSelect the authentication mode from the list.The MAX208M2W Series supports the following authentication modes:!No authentication!User authentication!Device authentication!User and device authenticationData EncryptionAES-CCMSelect this to enable AES-CCM encryption. CCM combines counter-mode encryption with CBC-MAC authentication.AES-CBCSelect this to enable AES-CBC encryption. CBC creates message authentication code from a block cipher.Key EncryptionAES-key wrapSelect this encapsulate cryptographic keys in a symmetric encryption algorithm.AES-ECBSelect this to divide cryptographic keys into blocks and encrypt them separately.EAP SupplicantEAP ModeSelect an Extensible Authentication Protocol (EAP) mode.The MAX208M2W Series supports the following:!EAP-TLS - In this protocol, digital certifications are needed by both the server and the wireless clients for mutual authentication. The server presents a certificate to the client. After validating the identity of the server, the client sends a different certificate to the server. The exchange of certificates is done in the open before a secured tunnel is created. This makes user identity vulnerable to passive attacks. A digital certificate is an electronic ID card that authenticates the sender s identity. However, to implement EAP-TLS, you need a Certificate Authority (CA) to handle certificates, which imposes a management overhead.!EAP-TTLS - This protocol is an extension of the EAP-TLS authentication that uses certificates for only the server-side authentications to establish a secure connection. Client authentication is then done by sending username and password through the secure connection, thus client identity is protected. For client authentication, EAP-TTLS supports EAP methods and legacy authentication methods such as PAP, CHAP, MS-CHAP and MS-CHAP v2. Anonymous IDEnter the anonymous ID used for EAP supplicant authentication.Server Root CA Cert FileBrowse for and choose a server root certificate file, if required.Server Root CA InfoThis field displays information about the assigned server root certificate.Device Cert FileBrowse for and choose a device certificate file, if required.Device Cert InfoThis field displays information about the assigned device certificate.

Chapter 6WiMAXMAX208M2W Series User s Guide80Device Private KeyBrowse for and choose a device private key, if required.Device Private Key InfoThis field displays information about the assigned device private key.Device Private Key PasswordEnter the device private key, if required.Inner ModeSets the EAP-TTLS inner mode.The MAX208M2W Series supports the following:!MS-CHAP v2 - This is version 2 of Microsoft s variant of Challenge Handshake Authentication Protocol (CHAP). It allows for mutual authentication between devices.!MS-CHAP - This is Microsoft s variant of Challenge Handshake Authentication Protocol (CHAP). It allows for mutual authentication between devices.!CHAP - The Challenge Handshake Authentication Protocol (CHAP) uses PPP to authenticate remote devices using a three-way handshake and shared secret verification.!MD5 - Message-Digest, algorithm 5, (MD5) encryption is typically used for checking file integrity. Because this encryption protocol contains a number of serious security flaws it is generally not recommended that you use it for authentication security.!PAP - Password Authentication Protocol uses unencrypted plaintext to send a passwords for authentication over the network. It s probably not a good idea to rely on this for security.UsernameEnter the username required for the EAP-TTLS inner method.PasswordEnter the password required for the EAP-TTLS inner method.OptionsEnable Auth Mode Decoration in EAP Outer IDSelect this to enable authentication mode.Enable Service Mode Decoration in EAP Outer IDSelect this to enable service mode.Random Outer IDSelect this to allow the MAX208M2W Series to generate a 16-byte random number as a username for the EAP Identity Response message.Ignore Cert VerificationSelect this to ignore base station certification verification when a certificate is received during EAP-TLS or EAP-TTLS.Same EAP OuterID in ReAuthSelect this to use the same EAP to the outer ID when reauthenticating.MAC address in EAP-TLS outer IdAdds the MAC address of the MAX208M2W Series to the outer ID while the EAP mode is set to EAP-TLS.Table 15 Authentication Settings (continued)LABEL DESCRIPTION

Chapter 6WiMAXMAX208M2W Series User s Guide 816.5 ConnectThis screen allows you to view the available WiMAX frequency band(s) and base station(s) the MAX208M2W Series found through scanning and choose a base station to which to connect.Click WiMAX > Connect to open this screen as shown next.Figure 27 Connect ScreenDelete existed Root Certificate fileSelect this to delete an existing root certificate file from the MAX208M2W Series.Delete existed Device Certificate fileSelect this to delete an existing device certificate file from the MAX208M2W Series.Delete existed Private KeySelect this to delete an existing private key from the MAX208M2W Series.Table 15 Authentication Settings (continued)LABEL DESCRIPTION

Chapter 6WiMAXMAX208M2W Series User s Guide 83Device StatusThis field displays the MAX208M2W Series current status for connecting to the selected base station.Scanning - The MAX208M2W Series is scanning for available base stations.Ready - The MAX208M2W Series has finished scanning and you can connect to a base station.Connecting - The MAX208M2W Series attempts to connect to the selected base station.Connected - The MAX208M2W Series has successfully connected to the selected base station.UMAC StateThis field displays the status of the WiMAXconnection between the MAX208M2W Series and the base station.Network Search - The MAX208M2W Series is scanning for any available WiMAX connections.Disconnected - No WiMAX connection is available.Network Entry - A WiMAX connection is initializing.Normal - The WiMAX connection has been successfully established.BSIDThis field displays the MAC address of the base station to which the MAX208M2W Series is connected.Frequency (MHz)This field displays the frequency the base station uses in megahertz (MHz).RSSI (dBm)This field displays the Received Signal Strength Indication (RSSI), which is an overal measurement of radio signal strength. A higher RSSI level indicates a stronger signal.CINR (dB)This field displays the average Carrier to Interference plus Noise Ratio for the current connection. This value is an indication of overal radio signal quality, where a higher value means a better quality signal.Table 16 Connect (continued)LABEL DESCRIPTION

Chapter 6WiMAXMAX208M2W Series User s Guide846.6 Wide ScanThis screen allows you to discover base stations by entering one or more frequency ranges and bandwidth on which to scan.Click WiMAX > Wide Scan to open this screen as shown next.Figure 28 Wide Scan ScreenThis screen contains the following fields:Table 17 Wide ScanLABEL DESCRIPTIONWide Scan SettingsAuto Wide ScanUse this to enable (Yes) or disable (No) automatically scanning for base stations.Wide Scan RangeStart Frequency (KHz)Enter the start frequency in kilohertz (KHz) for a wide scan range.End Frequency (KHz)Enter the end frequency in kilohertz (KHz) for a wide scan range.Step (KHz)Enter the step increment in kilohertz (KHz) that the wide scan jumps each time it scans between the start and end frequencies.Bandwidth (MHz)Enter the frequency bandwidth to be scanned.DeleteClick this to remove a range of frequencies from the wide scan range list.AddClick this to add a range of frequencies to the wide scan range list.OKClick this so save any changes to the wide scan range list.Wide Scan ResultThis table displays the available frequency band(s) found through the wide scan.

Chapter 6WiMAXMAX208M2W Series User s Guide86CINR R1This field displays the average Carrier to Interference plus Noise Ratio (R1) for the current connection. This value is an indication of overal radio signal quality, where a higher value means a better quality signal.CINR Std DevThis field displays the average Carrier to Interference plus Noise Ratio (Std Dev) for the current connection. This value is an indication of overal radio signal quality, where a higher value means a better quality signal.FrequencyThis field displays the frequency in kilohertz (KHz).TX PowerThis field displays the transmission power of the MAX208M2W Series in dBm.UL MCSThis field displays the Uplink Modulation and Coding Sequence (UL MCS).DL MCSThis field displays the Downlink Modulation and Coding Sequence (DL MCS).RF TemperatureThis field displays the temperature in centigrade of the MAX208M2W Series s RF circuit.Handover SuccessThis field displays how many times the MAX208M2W Series had ever successfully switched its connection from one base station to another base station, since the MAX208M2W Series last restarted.Handover FailThis field displays how many times the MAX208M2W Series had been failed to switch its connection from one base station to another base station, since the MAX208M2W Series last restarted.Table 18 Link Status (continued)LABEL DESCRIPTION

Chapter 6WiMAXMAX208M2W Series User s Guide 876.8 Link StatisticsThis screen provides a detailed overview of the current WiMAX connection with the service provider..Click WiMAX > Link Statistics to open this screen as shown next.Figure 30 Link Statistics ScreenThis screen contains the following sections:Table 19 Link StatisticsLABEL DESCRIPTIONLinkThis section provides a detailed overview of link statistics.HARQThis section provides a detailed overview of Hybrid Automatic Repeat Request link statistics.TX/RXThis section provides a detailed overview of transmission and receiving link statistics.MCSThis section provides a detailed overview of Modulation and Coding Sequence (MCS) link statistics

Chapter 6WiMAXMAX208M2W Series User s Guide886.9 Connection InfoThis screen displays all of the connections made through the WiMAX device since its last reboot.Click WiMAX > Connection Info to open this screen as shown next.Figure 31 Connection Info ScreenThis screen contains the following fields:6.10 Service FlowThis screen displays data priority information for all of the connections made through the WiMAX device since its last reboot.Click WiMAX > Service Flow to open this screen as shown next.Figure 32 Service Flow ScreenThis screen contains the following fields:Table 20 Connection InfoLABEL DESCRIPTIONActive Connection CIDThis displays the unique, unidirectional 16-bit Connection Identifier (CID) for an active connection.Connection TypeThis displays the type of connection.Table 21 Service FlowLABEL DESCRIPTIONSFIDThis displays a 32-bit service flow identifier.SF StatusThis display the service flow status.SF DirectionThis displays the service flow direction.

MAX208M2W Series User s Guide 89CHAPTER 7 Network Setting7.1 OverviewThis chapter shows you how to configure the MAX208M2W Series s network setting.7.1.1 What You Need to KnowThe following terms and concepts may help as you read through this chapter.IP AddressIP addresses identify individual devices on a network. Every networking device (including computers, servers, routers, printers, etc.) needs an IP address to communicate across the network. These networking devices are also known as hosts.Subnet MasksSubnet masks determine the maximum number of possible hosts on a network. You can also use subnet masks to divide one network into multiple sub-networks.DHCPA DHCP (Dynamic Host Configuration Protocol) server can assign your MAX208M2W Series an IP address, subnet mask, DNS and other routing information when it s turned on.

Chapter 7Network SettingMAX208M2W Series User s Guide90DNS Server AddressDNS (Domain Name System) is for mapping a domain name to its corresponding IP address and vice versa. The DNS server is extremely important because without it, you must know the IP address of a machine before you can access it. The DNS server addresses that you enter in the DHCP setup are passed to the client machines along with the assigned IP address and subnet mask.There are two ways that an ISP disseminates the DNS server addresses. The first is for an ISP to tell a customer the DNS server addresses, usually in the form of an information sheet, when s/he signs up. If your ISP gives you the DNS server addresses, enter them in the DNS Server fields; otherwise, leave them blank.Some ISPs choose to pass the DNS servers using the DNS server extensions of PPP IPCP (IP Control Protocol) after the connection is up. If your ISP did not give you explicit DNS servers, chances are the DNS servers are conveyed through IPCP negotiation. The MAX208M2W Series supports the IPCP DNS server extensions through the DNS proxy feature.If the Primary and Secondary DNS Server fields are not specified, for instance, left as 0.0.0.0, the MAX208M2W Series tells the DHCP clients that it itself is the DNS server. When a computer sends a DNS query to the MAX208M2W Series, the MAX208M2W Series forwards the query to the real DNS server learned through IPCP and relays the response back to the computer.Please note that DNS proxy works only when the ISP uses the IPCP DNS server extensions. It does not mean you can leave the DNS servers out of the DHCP setup under all circumstances. If your ISP gives you explicit DNS servers, make sure that you enter their IP addresses. This way, the MAX208M2W Series can pass the DNS servers to the computers and the computers can query the DNS server directly without the MAX208M2W Series s intervention.RIP SetupRIP (Routing Information Protocol) allows a router to exchange routing information with other routers. The RIP Direction field controls the sending and receiving of RIP packets. When set to:!RX/TX - the MAX208M2W Series will broadcast its routing table periodically and incorporate the RIP information that it receives.!RX Only - the MAX208M2W Series will not send any RIP packets but will accept all RIP packets received.!TX Only - the MAX208M2W Series will send out RIP packets but will not accept any RIP packets received.!None - the MAX208M2W Series will not send any RIP packets and will ignore any RIP packets received.

Chapter 7Network SettingMAX208M2W Series User s Guide 91The Version field controls the format and the broadcasting method of the RIP packets that the MAX208M2W Series sends (it recognizes both formats when receiving). RIP-1 is universally supported; but RIP-2 carries more information. RIP-1 is probably adequate for most networks, unless you have an unusual network topology.Both RIP-2B and RIP-2M sends the routing data in RIP-2 format; the difference being that RIP-2B uses subnet broadcasting while RIP-2M uses multicasting.Port Forwarding A NAT server set is a list of inside (behind NAT on the LAN) servers, for example, web or FTP, that you can make accessible to the outside world even though NAT makes your whole inside network appear as a single machine to the outside world.With port forwarding, you can forward incoming service requests to the server(s) on your local network. You may enter a single port number or a range of port numbers to be forwarded, and the local IP address of the desired server. The port number identifies a service; for example, web service is on port 80 and FTP on port 21. In some cases, such as for unknown services or where one server can support more than one service (for example both FTP and web service), it might be better to specify a range of port numbers. In addition to the servers for specified services, NAT supports a default server. A service request that does not have a server explicitly designated for it is forwarded to the default server. If the default is not defined, the service request is simply discarded.For example, let's say you want to assign ports 21-25 to one FTP, Telnet and SMTP server (A in the example), port 80 to another (B in the example) and assign a default server IP address of 192.168.1.35 to a third (C in the example). You assign the LAN IP addresses and the ISP assigns the WAN IP address. The NAT network appears as a single host on the Internet.Figure 33 Multiple Servers Behind NAT Example

Chapter 7Network SettingMAX208M2W Series User s Guide92Trigger PortsSome services use a dedicated range of ports on the client side and a dedicated range of ports on the server side. With regular port forwarding you set a forwarding port in NAT to forward a service (coming in from the server on the WAN) to the IP address of a computer on the client side (LAN). The problem is that port forwarding only forwards a service to a single LAN IP address. In order to use the same service on a different LAN computer, you have to manually replace the LAN computer's IP address in the forwarding port with another LAN computer's IP address, Trigger port forwarding solves this problem by allowing computers on the LAN to dynamically take turns using the service. The MAX208M2W Series records the IP address of a LAN computer that sends traffic to the WAN to request a service with a specific port number and protocol (a "trigger" port). When the MAX208M2W Series's WAN port receives a response with a specific port number and protocol ("incoming" port), the MAX208M2W Series forwards the traffic to the LAN IP address of the computer that sent the request. After that computer s connection for that service closes, another computer on the LAN can use the service in the same manner. This way you do not need to configure a new IP address each time you want a different LAN computer to use the application.ALGSome applications, such as SIP, cannot operate through NAT (are NAT un-friendly) because they embed IP addresses and port numbers in their packets data payload. Some NAT routers may include a SIP Application Layer Gateway (ALG). An Application Layer Gateway (ALG) manages a specific protocol (such as SIP, H.323 or FTP) at the application layer. A SIP ALG allows SIP calls to pass through NAT by examining and translating IP addresses embedded in the data stream.UPnPUniversal Plug and Play (UPnP) is a distributed, open networking standard that uses TCP/IP for simple peer-to-peer network connectivity between devices. A UPnP device can dynamically join a network, obtain an IP address, convey its capabilities and learn about other devices on the network. In turn, a device can leave a network smoothly and automatically when it is no longer in use.How do I know if I'm using UPnP? UPnP hardware is identified as an icon in the Network Connections folder (Windows XP). Each UPnP compatible device installed on your network will appear as a separate icon. Selecting the icon of a UPnP device will allow you to access the information and properties of that device.

Chapter 7Network SettingMAX208M2W Series User s Guide 93NAT TraversalUPnP NAT traversal automates the process of allowing an application to operate through NAT. UPnP network devices can automatically configure network addressing, announce their presence in the network to other UPnP devices and enable exchange of simple product and service descriptions. NAT traversal allows the following:!Dynamic port mapping!Learning public IP addresses!Assigning lease times to mappingsWindows Messenger is an example of an application that supports NAT traversal and UPnP. Cautions with UPnPThe automated nature of NAT traversal applications in establishing their own services and opening firewall ports may present network security issues. Network information and configuration may also be obtained and modified by users in some network environments. All UPnP-enabled devices may communicate freely with each other without additional configuration. Disable UPnP if this is not your intention. UPnP and ZyXELZyXEL has received UPnP certification from the official UPnP Forum (http://www.upnp.org). ZyXEL's UPnP implementation supports IGD 1.0 (Internet Gateway Device).The MAX208M2W Series only sends UPnP multicasts to the LAN.Content FilterInternet content filtering allows you to create and enforce Internet access policies tailored to their needs. Content filtering is the ability to block certain specific URL keywords.

Chapter 7Network SettingMAX208M2W Series User s Guide947.2 WANUse these settings to configure the WAN connection between the WiMAX Device and the service provider.Click Network Setting > WAN to open this screen as shown next.Figure 34 WAN Screen

Chapter 7Network SettingMAX208M2W Series User s Guide 95This screen contains the following fields:Table 22 WANLABEL DESCRIPTIONOperation ModeSelect the MAX208M2W Series s operational mode.!Bridge - This puts the MAX208M2W Series in bridge mode, acting as a transparent middle man between devices on the LAN and the devices on the WAN.!NAT - This allows the MAX208M2W Series to tag frames for NAT, allowing devices on the LAN to use their own internal IP addresses while communicating with devices on the WAN.WAN ProtocolSelect the protocol the MAX208M2W Series uses to connect to the WAN.The options are:!Ethernet - Select this if you have a persistent connection to the network.!PPPoE - Select this if must log into the network before initiating a persistent connection.!GRE Tunnel - Select this if you connect to the network using Point-to-Point Protocol to create VPNs.!EtherIP - Select this if you need to tunnel Ethernet and IEEE 802.3 MAC frames across an IP Internet.Bridging LAN ARPThis option enables or disables allow ARP requests to cross the MAX208M2W Series.Get IP MethodSelect how the MAX208M2W Series receives its IP address.!User - Select this to manually enter the IP address the MAX208M2W Series uses.!From ISP - Select to automatically get the IP address the MAX208M2W Series uses from the ISP.WAN IP Request TimeoutEnter the number of seconds the MAX208M2W Series waits for an IP from the ISP before it times out.WAN IP AddressIf the MAX208M2W Series gets its IP from the user, enter the IP address it is to use.WAN IP Subnet MaskIf the MAX208M2W Series gets its IP from the ISP, enter the IP address it is to use.Gateway IP AddressIf the MAX208M2W Series gets its gateway IP address from the user, enter the IP address it is to use.MTUEnter the Maximum Transmission Unit (MTU) for the MAX208M2W Series. This is the largest protocol unit that the MAX208M2W Series allows to pass through it.

Chapter 7Network SettingMAX208M2W Series User s Guide967.3 PPPoEUse these settings to configure the PPPoE connection between the WiMAX Device and the service provider.Click Network Setting > WAN > PPPoE.Figure 35 PPPoE ScreenClone MAC AddressEnter a MAC address here for registering bridged devices on the network if their current MAC addresses are causing problems. For example, this can happen when a desktop computer swaps network interface cards; the original NIC may have used its MAC address to register itself on the network and now the new NIC is unrecognized. Using a MAC address that you know is valid, i.e. a "clone#, allows that device to stay registered.First~Third DNS ServerSelect how the MAX208M2W Series acquires its DNS server address.!From ISP - Select this to have the MAX208M2W Series acquire its DNS server address from the ISP.!User Define - Select this to manually enter the DNS server used by the MAX208M2W Series.Table 22 WAN (continued)LABEL DESCRIPTION

Chapter 7Network SettingMAX208M2W Series User s Guide 97This screen contains the following fields:Table 23 PPPoELABEL DESCRIPTIONUser NameEnter the username for PPPoE login into the WAN network.PasswordEnter the password for PPPoE login into the WAN network.Retype PasswordRetype the password to confirm it.Auth ProtocolSelect a PPPoE authentication protocol. The MAX208M2W Series supports the following:!CHAP - The Challenge Handshake Authentication Protocol (CHAP) uses PPP to authenticate remote devices using a three-way handshake and shared secret verification.!PAP - Password Authentication Protocol uses unencrypted plaintext to send a passwords for authentication over the network. It s probably not a good idea to rely on this for security.!MS-CHAP v1/2 -This is Microsoft s variant of Challenge Handshake Authentication Protocol (CHAP). It allows for mutual authentication between devices.MPPE EncryptionUse this option to enable or disable authentication through Microsoft Point-To-Point Encryption (MPPE) protocol.through Microsoft Point-To-Point Encryption (MPPE) protocol.MPPE StatefulUse this option to allow or disallow the MAX208M2W Series to use the Microsoft Point-To-Point Encryption (MPPE) protocol for stateful peer negotiation.Idle TimeoutEnter the number of second the MAX208M2W Series waits during authentication before timing out.AC NameEnter the access concentrator name for the PPPoE interface if your ISP uses an AC PPPoE service.DNS OverwriteUse this option to allow or disallow the MAX208M2W Series to overwrite DNS static DNS entries on client devices.Connection TriggerSet whether the MAX208M2W Series is persistently connected to the WAN (AlwaysOn) or you must click the PPPoE Connect button each time you want to get on the WAN (Manual).Connection TimeoutEnter in seconds the duration the MAX208M2W Series waits for idle activity before disconnecting from the WAN.PPPoE ConnectClick this to connect to the WAN using PPPoE.PPPoE DisconnectClick this to disconnect from the WAN.

Chapter 7Network SettingMAX208M2W Series User s Guide987.4 GREUse these settings to configure the peer setting of the Generic Routing Encapsulation (GRE) tunnel between the WiMAX Device and another GRE peer.Click Network Setting > WAN > GRE to open this screen as shown next.Figure 36 GRE ScreenThis screen contains the following fields:7.5 EtherIPUse these settings to configure the peer setting of the EtherIP tunnel between the WiMAX Device and another EtherIP peer.Click Network Setting > WAN > EtherIP to open this screen as shown next.Figure 37 EtherIP ScreenThis screen contains the following fields:Table 24 GRELABEL DESCRIPTIONPeer IP AddressEnter the IP address of the GRE peer.Table 25 EtherIPLABEL DESCRIPTIONPeer IP AddressEnter the IP address of the EtherIP peer.

Chapter 7Network SettingMAX208M2W Series User s Guide 997.6 IPUse these settings to configure the LAN connection between the WiMAX Device and your local network.Click Network Setting > LAN > IP to open this screen as shown next.Figure 38 IP ScreenThis screen contains the following fields:Table 26 IPLABEL DESCRIPTIONIP addressEnter the IP address of the LAN interface for the MAX208M2W Series.IP Subnet MaskEnter the IP subnet maks of the LAN interface for the MAX208M2W Series.

Chapter 7Network SettingMAX208M2W Series User s Guide1007.7 DHCPUse these settings to configure whether the WiMAX Device functions as a DHCP server for your local network, or a DHCP relay between the local network and the service provider. You can also disable the DHCP functions.Click Network Setting > LAN > DHCP to open this screen as shown next.Figure 39 DHCP ScreenThis screen contains the following fields:Table 27 DHCPLABEL DESCRIPTIONDHCP ServerDHCP ModeSelect this if you want the MAX208M2W Series to be the DHCP server on the LAN. As a DHCP server, the MAX208M2W Series assigns IP addresses to DHCP clients on the LAN and provides the subnet mask and DNS server information.!None - This disables DHCP mode for the MAX208M2W Series.!Server - This sets the MAX208M2W Series as a DHCP server for the LAN.!Relay - This sets the MAX208M2W Series as a DHCP relay for the LAN, allowing it to pass-through IP addresses assigned to LAN devices from the ISP servers.

Chapter 7Network SettingMAX208M2W Series User s Guide 101Start IPEnter the start IP address from which the MAX208M2W Series begins allocating IP addresses.End IPEnter the end IP address at which the MAX208M2W Series ceases allocating IP addresses.Lease TimeEnter the duration in minutes that devices on the LAN retain their DHCP-issued IP addresses. At the end of the lease time, they poll the MAX208M2W Series for a renewed or replacement IP.Relay IPEnter the name of the IP address to be used.DNS Server Assigned by the DHCP ServerFirst~Third DNS ServerSelect how the MAX208M2W Series acquires its DNS server address.!None - Select this to not use a DNS server.!From ISP - Select this to have the MAX208M2W Series acquire its DNS server address from the ISP.!User Define - Select this to manually enter the DNS server used by the MAX208M2W Series.Static DHCPMAC AddressThis field displays the MAC address of the static DHCP client connected to the MAX208M2W Series.IP AddressThis field displays the IP address of the static DHCP client connected to the MAX208M2W Series.AddClick this to add a new static DHCP entry.OKClick this to save any changes made to this list.DHCP Leased HostsMAC AddressThis displays the MAC address of the DHCP leased host.IP AddressThis displays the IP address of the DHCP leased host.Remaining TimeThis displays the how much time is left on the host s lease.RefreshClick this to refresh the list.Table 27 DHCP (continued)LABEL DESCRIPTION

Chapter 7Network SettingMAX208M2W Series User s Guide1027.8 WLANUse this screen to configure the connections between the MAX208M2W Series and the wireless clients that want to access the Internet.Click Network Setting > WLAN to open this screen as shown next.Figure 40 WLAN ScreenThis screen contains the following fields:Table 28 Network Setting WLANLABEL DESCRIPTIONWiFi SettingsEnable WLANSelect this to activate the wireless LAN.WLAN Mode Select 802.11B/G mixed to allow both IEEE802.11b and IEEE802.11g compliant WLAN devices to associate with the HES-219M2W.Select 802.11B only to allow only IEEE 802.11b compliant WLAN devices to associate with the HES-219M2W.Select 802.11A only to allow only IEEE 802.11a compliant WLAN devices to associate with the HES-219M2W.Select 802.11G only to allow only IEEE 802.11g compliant WLAN devices to associate with the HES-219M2W.WLAN ChannelSelect this option and set the operating fequency/channel depending on your particular region. Select Auto to have the MAX208M2W Series scan and find an available channel.

Chapter 7Network SettingMAX208M2W Series User s Guide 103WLAN Maximum STA numberEnter the maximum number of wireless stations that is allowed to associate with the MAX208M2W Series.WLAN TxPowerSelect a number between 1 and 24 dB in the drop down box to control the strength of the connection signal, or leave it as default to let the MAX208M2W Series control this feature.SSID SettingsWLAN SSIDThis field displays the name of the wireless network and it will appear to other computers that wish to connect wirelessly to the Internet.Hide SSIDSelect this to make the name of the network invisible to others.Encryption TypeSelect the type of encryption that the network will use: None, WEP or WPA Personal.SSID WEP SettingsNote: You will only see these options if you selected WEP as the Encryption TypeAuthentication MethodSelect the type of authentication used to join the network: OPEN SYSTEM or SHARED KEY.WEP Encryption LengthSelect the length of the encryption key: 64-bit or 128-bit.Key 1 - 4 Pick one of four available keys. The key can be in either HexaDecimal (HEX) or ASCII format.Type the key using any letters and numbers. The field is case sensitive and the lenght must match the length picked in the step above (64-bit or 128-bit). A warning mesage will appear if you fail to do this.SSID WPA SettingsNote: You will only see these options if you selected WPA Personal as the Encryption Type.WPA Mode Select either WPA, WPA2 or Auto (WPA or WPA2).Cipher Type Select the type of authentication that you wish to use for your network: TKIP, AES or TKIP and AES. AES is more secure.Pre-shared Key Type a pre-shared key from 8 to 63 case-sensitive ASCII char-acters (including spaces and symbols).Table 28 Network Setting WLANLABEL DESCRIPTION

Chapter 7Network SettingMAX208M2W Series User s Guide1047.9 WPSUse this screen to configure WiFi Protected Setup (WPS) on your MAX208M2W Series.WPS allows you to quickly set up a wireless network with strong security without having to configure security settings manually. Set up each WPS connection between two devices. Both devices have to support WPS.Click Network Setting > WLAN > WPS to open this screen as shown next.Figure 41 WPS ScreenThis screen contains the following fields:7.10 MAC Address FilterUse these screens to configure a MAC (Media Access Control) address filter to restrict access to the network.Table 29 WPSLABEL DESCRIPTIONEnable WPSSelect Enable and click Apply to activate WPS on the MAX208M2W Series. Select Disable and click Apply to deactivate WPS.Start WPS PBCThis field is available after you select Enable in the Enable WPS field and click Apply.Click this to activate the Push Button Configuration. After clicking this you will be able to use the WPS button at the back of the device to add new wireless clients.Note: You must press the WPS buttons within two minutes of each other.

Chapter 7Network SettingMAX208M2W Series User s Guide 105Click on Network Setting > WLAN > MAC Address Filter. The screen appears as shown.Figure 42 MAC Address Filter ScreenThis screen contains the following fields:Table 30 MAC Address FilterLABEL DESCRIPTIONEnable MAC Address FilterSelect the check box to enable MAC address filtering. Then, the following fields display.Mode Define the filter action for the list of MAC addresses in the MAC address table.Select Allow listed stations to permit access to the MAX208M2W Series only to addresses listed. MAC addresses not listed will be denied access to the MAX208M2W Series.Select Deny listed stations to block access to the MAX208M2W Series to the computers or devices listed in this list.#This is the index number of the MAC address.ActiveSelect this box to make the policy effective or ineffective for a particular device.NameType the name of the device. The name can be up to 20 characters long, and any combination of letters, numbers or symbols.MAC Address Enter the MAC addresses of the wireless devices that are allowed or denied access to the MAX208M2W Series in these address fields. Enter the MAC addresses in a valid MAC address format, that is, six hexadecimal character pairs, for example, 12:34:56:78:9a:bc.DeleteClick to delete a specific MAC address from the list.AddClick to add a MAC address to the list.OKClick this button when you are done adding a MAC Address.

Chapter 7Network SettingMAX208M2W Series User s Guide1067.11 Static RouteUse these settings to create fixed paths through the network.Click Network Setting > Route > Static Route to open this screen as shown next.Figure 43 Static Route ScreenThis screen contains the following fields:7.12 Static Route AddUse these settings to configure a static route.Click Add in the Network Setting > Route > Static Route screen to open this screen as shown next.Figure 44 Static Route ScreenTable 31 Static RouteLABEL DESCRIPTIONDestinationThis field displays the destination IP address of the static route.Subnet MaskThis field displays the subnet mask of the static route.Next HopThis field displays next hop information of the static route.MetricThis field displays the static route metric.AddClick this to add a new static route to the list.

Chapter 7Network SettingMAX208M2W Series User s Guide 107This screen contains the following fields:7.13 RIPUse these settings to configure how the WiMAX Device exchanges information with other routers.Click Network Setting > Route > RIP to open this screen as shown next.Figure 45 RIP ScreenTable 32 Static RouteLABEL DESCRIPTIONDestination IPEnter the destination IP address of the static route.Subnet MaskEnter the subnet mask of the static route.Next HopSelect Interface and then select WAN or LAN for the next hop of the static route.If the next hop is an IP address rather than an interface on the MAX208M2W Series, select IP Address and enter the IP address.MetricEnter the static route metric.

Chapter 7Network SettingMAX208M2W Series User s Guide108This screen contains the following fields:7.14 Port ForwardingUse these settings to forward incoming service requests to the ports on your local network.Note: Make sure you did not configure a DMZ host in the Network Setting > NAT > DMZ screen if you want to make the settings of this screen work.Table 33 RIPLABEL DESCRIPTIONGeneral SetupEnableSelect this to enable RIP on the MAX208M2W Series.RedistributeActiveThis indicates whether a route is being redistributed.TypeThis indicates what type of route is being redistributed.MetricThis indicates the metric that is being used for redistribution.EditClick this to edit a selected route.OKClick this to save any changes to the redistribution table.LANDirectionSet the LAN network direction to use with RIP.VersionSet the RIP version to use.AuthenticationUse this option to enable or disable RIP authentication.Authentication IDEnter the authentication ID to use for RIP authentication.Authentication KeyEnter the authentication key to use for RIP authentication.WANDirectionSet the WAN network direction to use with RIP.VersionSet the RIP version to use.AuthenticationUse this option to enable or disable RIP authentication.Authentication IDEnter the authentication ID to use for RIP authentication.Authentication KeyEnter the authentication key to use for RIP authentication.

Chapter 7Network SettingMAX208M2W Series User s Guide 109Click Network Setting > NAT > Port Forwarding to open this screen as shown next.Figure 46 Port Forwarding ScreenThis screen contains the following fields:Table 34 Port ForwardingLABEL DESCRIPTIONActiveThis indicates whether the port forwarding rule is active or not.NameThe displays the name of the port forwarding rule.ProtocolThis displays the protocol to which the port forwarding rule applies.Incoming Port(s)Start PortThis displays the starting port number for incoming traffic for the port forwarding rule.End PortThis displays the ending port number for incoming traffic for the port forwarding rule.Forward Port(s)Start Port This field displays the beginning of the range of port numbers forwarded by this rule.End Port This field displays the end of the range of port numbers forwarded by this rule. If it is the same as the Start Port, only one port number is forwarded.Server IPThis displays the IP address of the server to which packet for the selected port(s) are forwarded.DeleteClick this to delete a specified rule.WizardClick this to open the port forwarding "wizard#.AddClick this to add a new port forwarding rule.OKClick this to save any changes made to the port forwarding list.

Chapter 7Network SettingMAX208M2W Series User s Guide1107.14.1 Port Forwarding WizardUse this wizard to set up a port forwarding rule for incoming service requests to the ports on your local network.Click Network Setting > NAT > Port Forwarding > Wizard to open this screen as shown next.Figure 47 Port Forwarding Wizard ScreenThis screen contains the following fields:Table 35 Port Forwarding WizardLABEL DESCRIPTIONActiveSelect this to make this port forwarding rule active.Port Forward RuleSelect the type of port forwarding rule.Rule NameEnter a name for the port forwarding rule.ProtocolSelect the port forwarding protocol.Incoming Start PortEnter the starting port number for incoming traffic for the port forwarding rule.Incoming End PortEnter the ending port number for incoming traffic for the port forwarding rule.Forwarding Start PortEnter the starting port number for forwarded traffic for the port forwarding rule.Forwarding End PortEnter the ending port number for forwarded traffic for the port forwarding rule.Server IPEnter the port forwarding server IP address.

Chapter 7Network SettingMAX208M2W Series User s Guide 1117.15 Port TriggerUse these settings to automate port forwarding and allow computers on local network to provide services that would normally require a fixed address on the local network.Click Network Setting > NAT > Port Trigger to open this screen as shown next.Figure 48 Port Trigger ScreenThis screen contains the following fields:Table 36 Port TriggerLABEL DESCRIPTIONActiveThis indicates whether the port trigger rule is active or not.NameThe displays the name of the port trigger rule.Trigger ProtocolThis displays the protocol to which the port trigger rule applies.Trigger Port(s)Start / End PortThis displays the start / end trigger port for the port trigger rule.Click Add to create a new, empty rule, then enter the incoming port number or range of port numbers you want to forward to the IP address the MAX208M2W Series records.To forward one port number, enter the port number in the Start Port and End Port fields.To forward a range of ports,!enter the port number at the beginning of the range in the Start Port field!enter the port number at the end of the range in the End Port field.If you want to delete this rule, click the Delete icon.Open ProtocolThis indicates which protocol is used to open the port trigger ports.Open Port(s)

Chapter 7Network SettingMAX208M2W Series User s Guide1127.15.1 Port Trigger WizardUse the wizard to create a port trigger rules that will allow the MAX208M2W Series to to automate port forwarding and allow computers on local network to provide services that would normally require a fixed address on the local network.Click Network Setting > NAT > Port Trigger > WizardFigure 49 Port Trigger Wizard ScreenStart / End PortThis displays the start / end open port for the port trigger rule.Click Add to create a new, empty rule, then enter the outgoing port number or range of port numbers that makes the MAX208M2W Series record the source IP address and assign it to the selected incoming port number(s).To select one port number, enter the port number in the Start Port and End Port fields.To select a range of ports,!enter the port number at the beginning of the range in the Start Port field!enter the port number at the end of the range in the End Port field.If you want to delete this rule, click the Delete icon.DeleteClick this to delete a specified rule.WizardClick this to open the port trigger "wizard#.AddClick this to add a new port trigger rule.OKClick this to save any changes made to the port trigger list.Table 36 Port Trigger (continued)LABEL DESCRIPTION

Chapter 7Network SettingMAX208M2W Series User s Guide 113This screen contains the following fields:7.15.2 Trigger Port Forwarding ExampleThe following is an example of trigger port forwarding. In this example, J is Jane s computer and S is the Real Audio server.Figure 50 Trigger Port Forwarding Example1Jane requests a file from the Real Audio server (port 7070).2Port 7070 is a "trigger# port and causes the MAX208M2W Series to record Jane s computer IP address. The MAX208M2W Series associates Jane's computer IP address with the "incoming" port range of 6970-7170.3The Real Audio server responds using a port number ranging between 6970-7170.4The MAX208M2W Series forwards the traffic to Jane s computer IP address. Table 37 Port Trigger WizardLABEL DESCRIPTIONActiveSelect this to make this port trigger rule active.Port Trigger RuleSelect the type of port trigger rule.Rule NameEnter a name for the port trigger rule.Trigger ProtocolSelect the type of port trigger protocol.Trigger Start PortEnter the port trigger start port.Trigger End PortEnter the port trigger end port.Open ProtocolSelect the type of open protocol for the port trigger rule.Open Start PortSelect the starting open port for the port trigger rule.Open End PortSelect the ending open port number for the port trigger rule.

Chapter 7Network SettingMAX208M2W Series User s Guide1145Only Jane can connect to the Real Audio server until the connection is closed or times out. The MAX208M2W Series times out in three minutes with UDP (User Datagram Protocol), or two hours with TCP/IP (Transfer Control Protocol/Internet Protocol). Two points to remember about trigger ports:1Trigger events only happen on data that is coming from inside the MAX208M2W Series and going to the outside.2If an application needs a continuous data stream, that port (range) will be tied up so that another computer on the LAN can t trigger it. 7.16 DMZUse this page to set the IP address of your network DMZ (if you have one) for the WiMAX Device. All incoming packets received by this MAX208M2W Series s WAN interface will be forwarded to the DMZ host you set.Click Network Setting > NAT > DMZ to open this screen as shown next.Note: The configuration you set in this screen takes priority than the Network Setting > NAT > Port Forwarding screen.Figure 51 DMZ ScreenThis screen contains the following fields:Table 38 DMZLABEL DESCRIPTIONDMZ HostEnter the IP address of your network DMZ host, if you have one. 0.0.0.0 means this feature is disabled.

Chapter 7Network SettingMAX208M2W Series User s Guide 1157.17 ALGUse these settings to bypass NAT on your WiMAX Device for those applications that are "NAT un-friendly".Click Network Setting > NAT > ALG to open this screen as shown next.Figure 52 ALG ScreenThis screen contains the following fields:Table 39 Network Setting > NAT > ALGLABEL DESCRIPTIONEnable FTP ALGTurns on the FTP ALG to detect FTP (File Transfer Program) traffic and helps build FTP sessions through the MAX208M2W Series s NAT. Enable H.323 ALGTurns on the H.323 ALG to detect H.323 traffic (used for audio communications) and helps build H.323 sessions through the MAX208M2W Series s NAT. Enable IPsec ALGTurns on the IPsec ALG to detect IPsec traffic and helps build IPsec sessions through the MAX208M2W Series s NAT. Enable L2TP ALGTurns on the L2TP ALG to detect L2TP traffic and helps build L2TP sessions through the MAX208M2W Series s NAT.Enable PPTP ALGTurns on the PPTP ALG to detect PPTP traffic and helps build PPTP sessions through the MAX208M2W Series s NAT. Enable RTSP ALGTurns on the RTSP ALG to detect RTSP traffic and helps build RTSP sessions through the MAX208M2W Series s NAT. Enable SIP ALGTurns on the SIP ALG to detect SIP traffic and helps build SIP sessions through the MAX208M2W Series s NAT.SIP PortIf you are using a custom UDP port number (not 5060) for SIP traffic, enter it here.Enable SIP ALG Set BSIDCheck this box to add the base station ID to the outgoing SIP messages. Select this option only if the media server forwarding calls requires this information.

Chapter 7Network SettingMAX208M2W Series User s Guide1167.18 UPnPUse this page to enable the UPnP networking protocol on your WiMAX Device and allow easy network connectivity with other UPnP-compatible devices.Click Network Setting > UPnP to open this screen as shown next.Figure 53 UPnP ScreenThis screen contains the following fields:7.18.1 Installing UPnP in Windows XPFollow the steps below to install the UPnP in Windows XP.1Click Start > Control Panel. 2Double-click Network Connections.3In the Network Connections window, click Advanced in the main menu and select Optional Networking Components . Table 40 UPnPLABEL DESCRIPTIONEnable UPnPSelect this to enable UPnP on the MAX208M2W Series.Enable NAT-PMPSelect this to enable NAT Port Mapping Protocol on the MAX208M2W Series.

Chapter 7Network SettingMAX208M2W Series User s Guide 1174The Windows Optional Networking Components Wizard window displays. Select Networking Service in the Components selection box and click Details. 5In the Networking Services window, select the Universal Plug and Play check box. 6Click OK to go back to the Windows Optional Networking Component Wizard window and click Next.

Chapter 7Network SettingMAX208M2W Series User s Guide1187.18.1.1 Auto-discover Your UPnP-enabled Network Device in Windows XPThis section shows you how to use the UPnP feature in Windows XP. You must already have UPnP installed in Windows XP and UPnP activated on the MAX208M2W Series.Make sure the computer is connected to a LAN port of the MAX208M2W Series. Turn on your computer and the MAX208M2W Series. 1Click Start and Control Panel. Double-click Network Connections. An icon displays under Internet Gateway.2Right-click the icon and select Properties.

Chapter 7Network SettingMAX208M2W Series User s Guide 1193In the Internet Connection Properties window, click Settings to see the port mappings there were automatically created. 4You may edit or delete the port mappings or click Add to manually add port mappings. 5When the UPnP-enabled device is disconnected from your computer, all port mappings will be deleted automatically.

Chapter 7Network SettingMAX208M2W Series User s Guide1206Select Show icon in notification area when connected option and click OK. An icon displays in the system tray. 7Double-click on the icon to display your current Internet connection status.7.18.2 Web Configurator Easy AccessWith UPnP, you can access the web-based configurator on the MAX208M2W Series without finding out the IP address of the MAX208M2W Series first. This becomes helpful if you do not know the IP address of the MAX208M2W Series.Follow the steps below to access the web configurator:1Click Start and then Control Panel. 2Double-click Network Connections.

Chapter 7Network SettingMAX208M2W Series User s Guide 1213Select My Network Places under Other Places. 4An icon with the description for each UPnP-enabled device displays under Local Network. 5Right-click on the icon for your MAX208M2W Series and select Invoke. The web configurator login screen displays.

Chapter 7Network SettingMAX208M2W Series User s Guide1226Right-click on the icon for your MAX208M2W Series and select Properties. A properties window displays with basic information about the MAX208M2W Series. 7.19 VLANUse this screen to configure port-based VLAN settings on the MAX208M2W Series. This screen allows you to assign port(s) to specific virtual LAN(s) in order to isolate traffic from different VLAN groups.

Chapter 7Network SettingMAX208M2W Series User s Guide 123Click Network Setting > VLAN to open the screen as shown next.Figure 54 VLAN ScreenThis screen contains the following fields:Table 41 VLANLABEL DESCRIPTIONManagement VLANVLAN IDEnter an ID number (1~4094) to create a new VLAN. Enter 0 to disable VLAN on the MAX208M2W Series.Note: To use VLAN on the MAX208M2W Series, you must switch the operation mode to !bridge" on the Network Setting > WAN screen. It will then require system restart to take effect.PriorityEnter a priority level (1~7) that the MAX208M2W Series assigns to frames belonging to this VLAN. Enter "0# for no priority assigned.Port Egress Tagging#This is the index number of a port (1 or 2).

Chapter 7Network SettingMAX208M2W Series User s Guide124TagThis field displays whether to prioritize traffic transmitted by the port, tagged or untagged. Click this field to change the setting. Set this to untagged if you do not want to prioritize outgoing traffic through the port.OKClick this to save the changes in the Port Egress Tagging section.Port Settings#This is the index number of a port (1 or 2).PVID GroupThis field displays the index number of a VLAN rule with which the port is associated. Click this field to change the setting. Select MGMT to allow the computer(s) connected to the port to access the MAX208M2W Series using the LAN IP address (see the Network Setting > LAN > IP screen).Note: Set one port to MGMT so that you can still manage the MAX208M2W Series through the port. Set both ports to tagged if you do not need to manage the MAX208M2W Series any more. PriorityEnter a priority level (1~7) that the MAX208M2W Series assigns to frames belonging to this VLAN. Enter "0# for no priority assigned.OKClick this to save the changes in the Port Settings section.VLAN Rules - You can configure up to 7 VLANs on the MAX208M2W Series. By default, VLANs 1 to 7 are configured.#This is the index number of a VLAN rule.VIDThis field displays the VLAN ID of the VLAN rule. Click this field to change the VLAN ID. When you make the change, make sure you configure the same VLAN ID in the Management VLAN section..Port1 / Port 2This is an indicator of which port is being configured.JoinSelect Y to add the port into the VLAN group. Otherwise, select N.TagThis field displays the allowed traffic for the port, VLAN-tagged or VLAN-untagged. Click this field to change the setting.OKClick this to save the changes in the VLAN Rules section.Table 41 VLANLABEL DESCRIPTION

Chapter 7Network SettingMAX208M2W Series User s Guide 1257.20 DDNSUse this page to configure the WiMAX Device as a dynamic DNS client.Click Network Setting > DDNSFigure 55 DDNS ScreenThis screen contains the following fields:Table 42 DDNSLABEL DESCRIPTIONEnable Dynamic DNSSelect this to enable dynamic DNS on the MAX208M2W Series.Service ProviderSelect the dynamice DNS service provider for the MAX208M2W Series.Service TypeSelect the dynamic DNS service type.Domain NameEnter the domain name.Login NameEnter the user name.PasswordEnter the password.IP Update PolicySelect the policy used by the MAX208M2W Series. Options are:!Auto Detect!WAN!User DefinedUser Defined IPIf chose "User Defined# for the IP Update Policy, enter the user defined IP address.WildcardsSelect this to allow a hostname to use wildcards such as "*#.MXSelect this to enable mail routing, if supported by the specified DYNDNS service provider.

Chapter 7Network SettingMAX208M2W Series User s Guide1267.21 Content FilterUse these settings to allow ("whitelist") or block ("blacklist") connections to and from specific web sites through the WiMAX Device.Click Network Setting > Content Filter to open this screen as shown next.Figure 56 Content Filter ScreenThis screen contains the following fields:Backup MXSelect this to enable a secondary mail routing, if supported by the specified DYNDNS service provider.MX HostEnter the host to which mail is routed when the MX option is selected.Table 42 DDNS (continued)LABEL DESCRIPTIONTable 43 Content FilterLABEL DESCRIPTIONURL ListEnable URL FilterSelect this employ the content filter to allow ("whitelist#) or block ("blacklist#) specific URL connections made through the MAX208M2W Series.Blacklist/WhitelistSelect whether the current filtering applies to the blacklist (sites that are blocked) or the whitelist (sites that are allowed).URL Filter RuleActiveIndicates whether the current URL filter is active or not.URLIndicates the URL to be filtered according to blacklist or whitelist rules.DeleteClick this to delete a specified rule.AddClick this to add a new filter rule.OKClick this to save any changes made to the list.

MAX208M2W Series User s Guide 127CHAPTER 8 Security8.1 OverviewThis chapter shows you how to configure the MAX208M2W Series s network settings.8.1.1 What You Need to KnowThe following terms and concepts may help as you read through this chapter.About the MAX208M2W Series!s Security FeaturesThe MAX208M2W Series security features are designed to protect against Denial of Service attacks when activated as well as block access to and from specific URLs and MAC addresses. Its purpose is to allow a private Local Area Network (LAN) to be securely connected to the Internet. The MAX208M2W Series can be used to prevent theft, destruction and modification of data. The MAX208M2W Series is installed between the LAN and a WiMAX base station connecting to the Internet. This allows it to act as a secure gateway for all data passing between the Internet and the LAN.The MAX208M2W Series has one Ethernet (LAN) port. The LAN (Local Area Network) port attaches to a network of computers, which needs security from the outside world. These computers will have access to Internet services such as e-mail, FTP and the World Wide Web. However, "inbound access# is not allowed (by default) unless the remote host is authorized to use a specific service.

Chapter 8SecurityMAX208M2W Series User s Guide1288.2 IP FilterUse this screen to block incoming connections from specific IP addresses.Click Security > Firewall > IP Filter to open this screen as shown next.Figure 57 IP Filter ScreenThis screen contains the following fields:Table 44 IP FilterLABEL DESCRIPTIONActiveIndicates whether the current IP filter is active or not.Source IPThis displays the source IP address for the IP filter rule.Click Add to create a new, empty rule, then enter the incoming IP address for the MAX208M2W Series to block.If you want to delete this rule, click the Delete icon.Source PortThis displays the source port number for the IP filter rule.Click Add to create a new, empty rule, then enter the incoming port number for the MAX208M2W Series to block.If you want to delete this rule, click the Delete icon.Destination IPThis displays the destination IP address for the IP filter rule.Click Add to create a new, empty rule, then enter the outgoing IP address for the MAX208M2W Series to block.If you want to delete this rule, click the Delete icon.Destination PortThis displays the destination port number for the IP filter rule.Click Add to create a new, empty rule, then enter the outgoing port number for the MAX208M2W Series to block.If you want to delete this rule, click the Delete icon.ProtocolThis displays the protocol blocked by the IP filter rule.Click Add to create a new, empty rule, then select the protocol type for the MAX208M2W Series to block.If you want to delete this rule, click the Delete icon.DeleteClick this to delete a specified rule.AddClick this to add a new filter rule.OKClick this to save any changes made to the list.

Chapter 8SecurityMAX208M2W Series User s Guide 1298.3 MAC FilterUse this screen to allow ("whitelist") or block ("blacklist") connections to and from specific devices on the network based on their unique MAC addresses.Note: This feature only works when the MAX208M2W Series is in bridge mode.Click Security > Firewall > MAC Filter to open this screen as shown next.Figure 58 MAC Filter ScreenThis screen contains the following fields:Table 45 MAC FilterLABEL DESCRIPTIONBlacklist/WhitelistSelect either whitelist or blacklist for viewing and editing.Source MACThis displays the source MAC for the MAC filter rule.Click Add to create a new, empty rule, then enter the incoming MAC address for the MAX208M2W Series to block.If you want to delete this rule, click the Delete icon.Destination MACThis displays the destination MAC for the MAC filter rule.Click Add to create a new, empty rule, then enter the outgoing MAC address for the MAX208M2W Series to block.If you want to delete this rule, click the Delete icon.Mon ~ Sun Select which days of the week you want the filter rule to be effective.Start / End TimeSelect what time each day you want the filter rule to be effective. Enter times in 24-hour format; for example, 3:00pm should be entered as 15:00.AddClick this to add a new filter rule.OKClick this to save any changes made to the list.

Chapter 8SecurityMAX208M2W Series User s Guide1308.4 DDOSUse these settings to potentially block specific types of Denial of Service attacks directed at your WiMAX Device.Click Security > Firewall > DDOS to open this screen as shown next.Figure 59 DDOS ScreenThis screen contains the following fields:Table 46 DDOSLABEL DESCRIPTIONPrevent from TCP SYN FloodSelect this to monitor for and block TCP SYN flood attacks.A SYN flood is one type of denial of service attack where an overwhelming number of SYN requests assault a client device.Prevent from UDP FloodSelect this to monitor for and block UDP flood attacks.An UDP flood is a type of denial of service attack where an overwhelming number of UDP packets assault random ports on a client device. Because the device is forced to analyze and respond to each packet, it quickly becomes unreachable to other devices.Prevent from ICMP FloodSelect this to monitor for and block ICMP flood attacks.An ICMP flood is a type of denial of service attack where an overwhelming number of ICMP ping assault a client device, locking it down and preventing it from responding to requests from other servers.Prevent from Port ScanSelect this to monitor for and block port scan attacks.A port scan attack is typicall the precursor to a full-blown denial of service attack wherein each port on a device is probed for security holes that can be exploited. Once a security flaw is discovered, an attacker can initiate the appropriate denial of service attack or intrusion attack against the client device.Prevent from LAND AttackSelect this to monitor for and block LAND attacks.A Local Area Network Denial (LAND) attack is a type of denial of service attack where a spoofed TCP SYN packet targets a client device s IP address and forces it into an infinite recursive loop of querying itself and then replying, effectively locking it down.

Chapter 8SecurityMAX208M2W Series User s Guide 131Prevent from IP SpoofSelect this to monitor for and block IP address spoof attacks.An IP address spoof is an attack whereby the source IP address in the incoming IP packets allows a malicious party to masquerade as a legitimate user and gain access to the client device.Prevent from ICMP redirectSelect this to monitor for and block ICMP redirect attacks.An ICMP redirect attack is one where forged ICMP redirect messages can force the client device to route packets for certain connections through an attacker s host.Prevent from PING of DeathSelect this to monitor for and block ping of death attacks.A Ping of Death (POD) attack is one where larger-than-allowed ping packets are fragmented then sent against a client device. This results in the client device suffering from a buffer overflow and subsequent system crash.Prevent from PING from WANSelect this to ignore ping requests from the WAN.Table 46 DDOS (continued)LABEL DESCRIPTION

Chapter 8SecurityMAX208M2W Series User s Guide132

$MAX208M2W Series User s Guide 133CHAPTER 9 The VoIP General Screens9.1 VoIP OverviewThe VOICE > General screens allow you to set up global SIP and Quality of Service (QoS) settings.VoIP (Voice over IP) is the sending of voice signals over the Internet Protocol. This allows you to make phone calls and send faxes over the Internet at a fraction of the cost of using the traditional circuit-switched telephone network. You can also use servers to run telephone service applications like PBX services and voice mail. Internet Telephony Service Provider (ITSP) companies provide VoIP service. A company could alternatively set up an IP-PBX and provide it s own VoIP service.Circuit-switched telephone networks require 64 kilobits per second (kbps) in each direction to handle a telephone call. VoIP can use advanced voice coding techniques with compression to reduce the required bandwidth.9.1.1 What You Can Do in This Chapter!The Media screen (Section 9.2 on page 135) lets you set up and maintain global VoIP settings on the MAX208M2W Series.!The QoS screen (Section 9.2 on page 135) lets you set up and maintain QoS settings for voice traffic flowing through the MAX208M2W Series.9.1.2 What You Need to KnowThe following terms and concepts may help as you read through this chapter.Voice CodingA codec (coder/decoder) codes analog voice signals into digital signals and decodes the digital signals back into voice signals. The MAX208M2W Series supports the following codecs.$