Welcome to use EchoLife WiMAX CPE!

Online Help

Issue Date Part Number

01 2009-05-06 00527860

Huawei Technologies Co., Ltd.

Address: Huawei Industrial Base Bantian, Longgang Shenzhen 518129 People's Republic of China Website: Email: http://www.huawei.com terminal@huawei.com

Huawei Proprietary and Confidential Copyright Huawei Technologies Co., Ltd

Copyright Huawei Technologies Co., Ltd. 2009. All rights reserved.

No part of this document may be reproduced or transmitted in any form or by any means without prior written consent of Huawei Technologies Co., Ltd. The product described in this manual may include copyrighted software of Huawei Technologies Co., Ltd and possible licensors. Customers shall not in any manner reproduce, distribute, modify, decompile, disassemble, decrypt, extract, reverse engineer, lease, assign, or sublicense the said software, unless such restrictions are prohibited by applicable laws or such actions are approved by respective copyright holders under licenses.

Trademarks and Permissions

, , and Technologies Co., Ltd. are trademarks or registered trademarks of Huawei

Other trademarks, product, service and company names mentioned are the property of their respective owners.

Notice
Some features of the product and its accessories described herein rely on the software installed, capacities and settings of local network, and may not be activated or may be limited by local network operators or network service providers, thus the descriptions herein may not exactly match the product or its accessories you purchase. Huawei Technologies Co., Ltd reserves the right to change or modify any information or specifications contained in this manual without prior notice or obligation.

NO WARRANTY
THE CONTENTS OF THIS MANUAL ARE PROVIDED "AS IS". EXCEPT AS REQUIRED BY APPLICABLE LAWS, NO WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE, ARE MADE IN RELATION TO THE ACCURACY, RELIABILITY OR CONTENTS OF THIS MANUAL. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO CASE SHALL HUAWEI TECHNOLOGIES CO., LTD BE LIABLE FOR ANY SPECIAL, INCIDENTAL, INDIRECT, OR CONSEQUENTIAL DAMAGES, OR LOST PROFITS, BUSINESS, REVENUE, DATA, GOODWILL OR ANTICIPATED SAVINGS.

Import and Export Regulations

Customers shall comply with all applicable export or import laws and regulations and will obtain all necessary governmental permits and licenses in order to export, re-export or import the product mentioned in this manual including the software and technical data therein.

Huawei Proprietary and Confidential Copyright Huawei Technologies Co., Ltd

Safety Precautions
General Requirements:
Before you install and use the device, read these safety precautions carefully and observe them during operation. During storage, transportation and operation of the device, keep the device dry. During storage, transportation and operation of the device, avoid collision and crash of the device. Never attempt to dismantle the device by yourself. In case of any fault, contact the appointed maintenance center for repair. Without prior written consent, no organization or individual is permitted to make any change to the structure or safety design of the device. Huawei Technologies Co., Ltd. is not liable to any consequences or legal issues due to such changes. While using the device, observe all applicable laws, directives and regulations, and respect the legal rights of other people.

Environmental Requirements:
Place the device at a well-ventilated place. Do not dispose the device to direct sunlight. Keep the device clean and free of dusts. Place the device on a stable platform. Do not place any object on top of the device. Otherwise, the device may be too hot during operation. It can even be deformed or damaged by the heavy load. Keep at least 10 cm between the device and the closest object for heat dissipation. Do not place the device on or near any object that can easily catch fire, such as something made of rubber. Keep the device far away from any heat source or bare fire, such as a candle or an electric heater. Keep the device far away from any household appliance with strong magnetic field or electromagnetic field, such as a microwave oven, a refrigerator or a satellite dish antenna.

Operating Requirements:
Do no let a child operate the device without guidance. Do not let a child play with the device or any accessory. Swallowing the accessories may lead to peril. Use only the accessories provided or authorized by the manufacturer only. The power supply of the device must meet the requirements of the input voltage of the device.
Huawei Proprietary and Confidential Copyright Huawei Technologies Co., Ltd

Before plugging or unplugging any cable, shut down the device and disconnect it from the power supply. While plugging or unplugging any cable, make sure that your hands are completely dry. Do not tread on, pull or over-bend any cable. This can damage the cable and lead to malfunction of the device. Do not use an old or a damaged cable. During lightning weather, stop using the device and disconnect it from the power supply. If the device is not going to be used for a long time, disconnect it from the power supply and unplug the power plug. In any of the following cases, stop using the device, disconnect it from the power supply and unplug the power plug immediately: there is smoke emitting from the device, there is an abnormal noise or a foul smell. Contact the appointed maintenance center for repair. Ensure that no objects (such as metal shavings) are entering the device from the heat dissipation intakes. Do not scratch or abrade the surface of the device. This may affect the functioning of the device. The painting material shed while scratching the surface of the device can lead to skin allergy. The antenna(s) used for this transmitter must be installed to provide a separation distance of at least 20cm from all persons.

Cleaning Requirements:
Before cleaning the device, power off the device and disconnect it from the power supply. Use a soft cloth to clean the device. Keep the power plug clean and dry. Using a dirty or wet power plug may lead to electric shock or other accidents.

EU Regulatory Conformance
Hereby, Huawei Technologies Co., Ltd., declares that this EchoLife BM632 / BM622 / BM631a is in compliance with the essential requirements and other relevant provisions of Directive 1999/5/EC.

The product is compliant with the REACH regulation Regulation 1907/2006/EC . The declaration of conformity may be consulted at www.huaweidevice.com/certification. Please observe the national local regulations in the location where product is to be used. This product may be restricted for use in some or all countries of European Union.
Huawei Proprietary and Confidential Copyright Huawei Technologies Co., Ltd

Online Help

Contents

Contents
1 Configuring the Network.................................................................................... 1-1
1.1 Functions..................................................................................................................... 1-1 1.2 Logging in to the Web UI............................................................................................ 1-2 1.3 Configuring a WAN .................................................................................................... 1-2 1.3.1 Configuring the Routing Mode ....................................................................... 1-2 1.3.2 Configuring the Bridge Mode ......................................................................... 1-4 1.4 Configuring a LAN ..................................................................................................... 1-4 1.5 Configuring VoIP........................................................................................................ 1-5 1.5.1 Configuring basic VoIP function .................................................................... 1-5 1.5.2 Configuring Speed Dial................................................................................... 1-6 1.6 Connecting and Disconnecting Network ..................................................................... 1-6 1.7 Connecting the External Antenna................................................................................ 1-7

2 Configuring Advanced Functions ..................................................................... 2-1

2.1 Configuring the idle mode........................................................................................... 2-1 2.2 Configuring the NAT .................................................................................................. 2-1 2.2.1 Configuring the ALG ...................................................................................... 2-1 2.2.2 Configuring the DMZ ..................................................................................... 2-2 2.2.3 Configuring Port Mapping .............................................................................. 2-2 2.2.4 Configuring a Port Trigger.............................................................................. 2-3 2.3 Configuring the ACL .................................................................................................. 2-4 2.4 Configuring the SNTP................................................................................................. 2-4 2.5 Configuring the Security ............................................................................................. 2-4 2.5.1 Configuring the URL Filter............................................................................. 2-4 2.5.2 Configuring a MAC Filter............................................................................... 2-5 2.5.3 Configuring an IP Incoming Filter .................................................................. 2-6 2.5.4 Configuring an IP Outgoing Filter .................................................................. 2-7 2.5.5 Configuring the Firewall ................................................................................. 2-7 2.6 Configuring WiMAX Security Parameters ................................................................. 2-7

3 Managing the CPE ................................................................................................ 3-1

3.1 Managing User Passwords .......................................................................................... 3-1 3.2 Rebooting the CPE ...................................................................................................... 3-1
Issue 01 (2009-05-06) Huawei Proprietary and Confidential Copyright Huawei Technologies Co., Ltd i

Online Help

Contents

3.3 Upgrading the Software............................................................................................... 3-1 3.4 Restoring Default Settings........................................................................................... 3-2

4 Maintaining the CPE............................................................................................ 4-1

4.1 Checking Information about the CPE.......................................................................... 4-1 4.1.1 Checking the Device Information ................................................................... 4-1 4.1.2 Checking the Information on the WAN Side .................................................. 4-1 4.1.3 Checking the Information on the LAN Side.................................................... 4-1 4.1.4 Checking the Information on VoIP ................................................................. 4-2 4.1.5 Checking the Information on WiMAX............................................................ 4-2 4.2 Detecting the CPE ....................................................................................................... 4-2

5 FAQs........................................................................................................................ 5-1 6 Abbreviations ........................................................................................................ 6-1

Issue 01 (2009-05-06)

Huawei Proprietary and Confidential Copyright Huawei Technologies Co., Ltd

ii

Online Help

1 Configuring the Network

1
1.1 Functions

Configuring the Network

The supported functions are subject to your product purchased. The online help is only for reference.

The EchoLife WiMAX CPE (hereinafter referred to as the CPE) is a next generation gateway device used in the Worldwide Interoperability for Microwave Access (WiMAX) network. The CPE provides a new service experience for users. With the CPE, users can enjoy wireless broadband services. With the CPE, family and enterprise users can easily set up a network and enjoy the services over a wireless network.

Wireless Broadband Services

Supporting Internet wireless access Supporting seamless connection, which enables users to access the network at any time and any place Guaranteeing network security with reliability

VoIP Service (For the BM632 and the BM622)

Supporting the Voice over IP (VoIP) service based on session initiation protocol (SIP) Supporting the voice compression technology Providing high quality voice services

Enhanced Throughput
Supporting up to 15 Mbit/s downlink bandwidth and up to 5 Mbit/s uplink bandwidth Supporting multiple-input multiple-output (MIMO) Supporting orthogonal frequency division multiple access (OFDMA), which increases spectrum utilization

Various Services
Providing a friendly Web UI and abundant help information Supporting both local and remote upgrade of the CPE
Issue 01 (2009-05-06) Huawei Proprietary and Confidential Copyright Huawei Technologies Co., Ltd 1-1

Online Help

1 Configuring the Network

1.2 Logging in to the Web UI

Before configuring the network, log in to the Web UI. Take the Windows XP operating system and the Internet Explorer 6.0 as examples. Perform the following steps to log in to the Web UI. Step 1 Configure the IP address of the computer so that the IP address of the computer and the IP address of the CPE are in the same network segment.
By default, the IP address of the CPE is 192.168.1.1 and the subnet mask is 255.255.255.0. It is recommended to obtain the IP address and DNS settings automatically.

Step 2 Step 3

Open the Internet Explorer, enter http://192.168.1.1 in the address bar, and then press Enter. Enter the user name and the password in the login interface that is displayed, and then click Login.
The initial user name is user and the corresponding password is also user.

Step 4

After the authentication of the user name and the password succeeds, log in to the Web UI. ----End

1.3 Configuring a WAN

When you configure a WAN, the CPE can act as a routing device or bridge device. With the CPE, a terminal at the LAN side is connected to the network. In routing mode, the CPE acts as a routing device to connect to the network. Based on packet information, the CPE searches for a route over which the packets are sent to the destination IP address. In bridge mode, the CPE acts as a bridge device to connect to the network. The CPE only transparently transmit packets. Three modes of obtaining an IP address are available for the CPE: Dynamic Host Configuration Protocol (DHCP) mode: The IP address is obtained from the Internet service provider (ISP). Static IP address mode: The ISP configures a static IP address. Point-to-Point Protocol over Ethernet (PPPoE) mode: The IP address is obtained by PPPoE dialup.

1.3.1 Configuring the Routing Mode

Configuring the DHCP Routing Mode
Step 1 In the navigation tree, choose Basic > WAN, and then click the WAN tab.
Huawei Proprietary and Confidential Copyright Huawei Technologies Co., Ltd 1-2 Issue 01 (2009-05-06)

Online Help

1 Configuring the Network

Step 2 Step 3 Step 4

Select Route from Mode. Select DHCP Auto get IP address from ISP. Select the network address transmission (NAT) function type.
The NAT function is enabled to facilitate translation of IP address, the host IP address of LAN can be effectively hidden. Thus, the security of the intranet is ensured. Two NAT types are available: network address port translation (NAPT) CONE NAT

Step 5

Click Apply. ----End

Configuring the Static IP Routing Mode

Step 1 Step 2 Step 3 Step 4 In the navigation tree, choose Basic > WAN, and then click the WAN tab. Select Route from Mode. Select Static Get static IP address from ISP. Select the network address transmission (NAT) function type.
The NAT function is enabled to facilitate translation of IP address, the host IP address of LAN can be effectively hidden. Thus, the security of the intranet is ensured. Two NAT types are available: network address port translation (NAPT) CONE NAT

Step 5 Step 6 Step 7 Step 8 Step 9

Enter the IP address in the IP Address text box. Enter the CPE subnet mask in the Subnet Mask text box. Enter the CPE default gateway in the Default Gateway text box. Enter the IP address of primary domain name server (DNS) in the Primary DNS Server text box. Enter the IP address of secondary DNS in the Secondary DNS Server text box.
IP Address, Subnet Mask, Default Gateway, Primary DNS Server, Secondary DNS Server is supplied by the carrier.

Step 10 Click Apply. ----End

Configuring the PPPoE Routing Mode

Step 1 Step 2 Step 3 In the navigation tree, choose Basic > WAN, and then click the WAN tab. Select Route from Mode. Select PPPoE Get IP Address by using PPPoE.
Huawei Proprietary and Confidential Copyright Huawei Technologies Co., Ltd 1-3

Issue 01 (2009-05-06)

Online Help

1 Configuring the Network

Step 4

Select the network address transmission (NAT) function type.

The NAT function is enabled to facilitate translation of IP address, the host IP address of LAN can be effectively hidden. Thus, the security of the intranet is ensured. Two NAT types are available: network address port translation (NAPT) CONE NAT

Step 5 Step 6 Step 7

Enter the user name in the User Name text box. Enter the password in the Password text box. Select the dial method in the Dial Method.
Two dial types are available: Auto Dial and Manual Dial. If you select the Manual Dial type, please click the Manual Dial to dial.

Step 8

Click Apply. ----End

1.3.2 Configuring the Bridge Mode

The configuration of the bridge mode is similar to that of the routing mode. Step 1 Step 2 Step 3 Step 4 Step 5 In the navigation tree, choose Basic > WAN, and then click the WAN tab. Select Bridge from Mode. For the details on how to set parameters, see section1.3.1 "Configuring the Routing Mode". Select whether to enable the virtual local area network (VLAN) function. Click Apply. ----End

1.4 Configuring a LAN

To configure a LAN, set DHCP parameters. After DHCP is enabled, the CPE allocates an IP address pool to the network device at the LAN side. Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 Step 7 Step 8 In the navigation tree, choose Basic > LAN, and then click the DHCP tab. Enter the CPE IP address in the IP Address text box, for example, 192.168.1.1. Enter the CPE subnet mask in the Subnet Mask text box, for example, 255.255.255.0. Click Apply. Select Enable DHCP Server. Enter the start IP address at the LAN side in the Start IP Address text box. Enter the end IP address at the LAN side in the End IP Address text box. Select the lease of the address from the Lease (unit). The system automatically leases the address in advance according to the specified lease.
Huawei Proprietary and Confidential Copyright Huawei Technologies Co., Ltd 1-4

Issue 01 (2009-05-06)

Online Help

1 Configuring the Network

Step 9

Click Apply.
If the CPE is working as a bridge device, you only do Step1 to Step4 when configure an LAN.

----End

1.5 Configuring VoIP

The BM632 and the BM622 have the VoIP function.

As the voice service based on SIP, VoIP enables users to make Internet phone calls and fax data. As an application layer protocol, SIP is used for setting up, modifying, or completing a multimedia session.

1.5.1 Configuring basic VoIP function

Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 Step 7 In the navigation tree, choose Basic > VoIP, and then click the SIP User tab. Enter the new ID, which is the telephone number in the SIP ID text box. Enter the username provided by the carrier in the Username text box. Enter the password provided by the carrier in the Password text box. Enter the port number in the SIP Local Port text box. The value ranges from 1 to 65534. Select the correct caller identification display type from the Caller Number Display Type, for example, Display. Select whether to enable message waiting indication in the Select Message Waiting Indication Service. When you enable the function, you need to enter the Uniform Resource Identifier (URI) in the Message Waiting Indication Service Subscribe URI text box. Click Apply to save the settings. Click the SIP Server tab. Select the server type from the Server. Two options are available: Primary server and Secondary server. Enter the registrar server address in the SIP Registrar Server Address text box. Enter the registrar server port in the SIP Registrar Server Port text box. The value ranges from 1 to 65535. Enter the domain name of the SIP server in the SIP Service Domain text box. Enter the proxy server address in the SIP Proxy Server Address text box. Enter the proxy server port in the SIP Proxy Server Port text box. The value ranges from 1 to 65535. Click Apply to save the settings.

Step 8 Step 9 Step 10 Step 11 Step 12 Step 13 Step 14 Step 15 Step 16

Issue 01 (2009-05-06)

Huawei Proprietary and Confidential Copyright Huawei Technologies Co., Ltd

1-5

Online Help

1 Configuring the Network

Select a SIP ID to be modified, modify it, and then click Apply. Click Register to register the selected SIP ID to the server, Click Unregister to unregister the selected SIP ID to the server. Select Remove to delete the selected SIP ID. After they are removed, if you want to use the SIP ID, you need to create a SIP ID first. If the SIP server type is secondary server, you need not to configure the proxy server parameters.

----End

1.5.2 Configuring Speed Dial

In the navigation tree, choose Basic > VoIP, and then click the Speed Dial tab. Parameter Dial Number Note Real Number Description It indicates the speed dial number. It indicates the prompt of the speed dial. It indicates the real phone number of the speed dial.

Modify the selected speed dial attributes and click Apply. Select Remove to delete the selected speed dial. After it is removed, if you want to use the speed dial function, you need to create a speed dial number first.

1.6 Connecting and Disconnecting Network

Connecting Network
To connect the WiMAX network, do as follows: Step 1 Step 2 In the navigation tree, choose Status > WiMAX, and then click the WiMAX Status tab. Click Connect To Network. The CPE will connect the network automatically. ----End

If all the cables are correctly connected, when powered on, the CPE searches for the WiMAX network automatically.

Disconnecting Network

Issue 01 (2009-05-06)

Huawei Proprietary and Confidential Copyright Huawei Technologies Co., Ltd

1-6

Online Help

1 Configuring the Network

When you are not using the Internet, you can disconnect the network manually. After you disconnect the network connection, you need to reconnect the network to access the Internet. Step 1 Step 2 In the navigation tree, choose Status > WiMAX, and then click the WiMAX Status tab. Click Disconnect From Network. ----End

1.7 Connecting the External Antenna

Do not place the external antenna outdoors. During lightning weather, stop using the external antenna, and disconnect it from the CPE. You can connect two external antennas to the CPE. If only one antenna can be connected, connect it to the main antenna interface with . Otherwise, the CPE may fail to work normally. If you need to connect the external antenna, do as follows: Step 1 Step 2 Step 3 Power off the CPE, and plug the cables that connected to the CPE. Connect the external antenna to the CPE. Put the external antenna in an open space without any surrounding obstacles, so that the network signals are not affected. ----End

Issue 01 (2009-05-06)

Huawei Proprietary and Confidential Copyright Huawei Technologies Co., Ltd

1-7

Online Help

2 Configuring Advanced Functions

2 Configuring Advanced Functions

2.1 Configuring the idle mode
The CPE enters the power saving state after the idle mode is accessed. When there is demand for data transmission, the CPE can exit this mode and resume the working state. Two idle modes are available: When the CPE is working normally, you can press and hold the POWER for one second to three seconds to enter or leave the idle mode. Operating in the Web page of the CPE. Perform the following steps: Step 1 Step 2 Step 3 Step 4 In the navigation tree, choose Maintain > Idle, and then click the Idle tab. Enter the wait time, for example, 10. The CPE will enter the idle mode after ten minutes with no operation. The value ranges from 10 to 60. Select whether to automatically enable the idle function. Click Apply. ----End

The idle function can be used only when Status is set to supported.

2.2 Configuring the NAT

NAT is used to convert an IP address and a port so that the device on the LAN side uses an IP address of the same public network to access the network at the WAN side.

2.2.1 Configuring the ALG

Application layer gateway (ALG) is used to convert the specified data carried in IP packets, thus supporting LAN applications in the process of transmitting the packets on the LAN side and the packets at the WAN side. In the navigation tree, choose Advanced > NAT, and then click the ALG tab. Parameter Enable L2TP ALG Enable IPSec ALG
Issue 01 (2009-05-06)

Description It indicates whether to enable L2TP ALG. It indicates whether to enable IPSec ALG.
Huawei Proprietary and Confidential Copyright Huawei Technologies Co., Ltd 2-1

Online Help

2 Configuring Advanced Functions

Parameter Enable H.323 ALG Enable RTSP ALG Enable SIP ALG Enable PPTP ALG

Description It indicates whether to enable H.323 ALG. It indicates whether to enable RTSP ALG. It indicates whether to enable SIP ALG. After SIP ALG is enabled, enter the SIP port number. It indicates whether to enable PPTP ALG.

Note: L2TP = Layer 2 Tunneling Protocol; IPSec = IP Security Protocol; RTSP = Real-Time Streaming Protocol; PPTP = Point-to-Point Tunneling Protocol

2.2.2 Configuring the DMZ

Demilitarized zone (DMZ) is used to forward the packets from the WAN without port mapping to the host defined in the DMZ. In the navigation tree, choose Advanced > NAT, and then click the DMZ tab. Parameter Host Address Enable DMZ Description It indicates the host IP address. It indicates whether to enable the DMZ.

2.2.3 Configuring Port Mapping

Port mapping supports the mapping between the interfaces at the WAN side and the interfaces at the LAN side.

Adding Port Mapping

In the navigation tree, choose Advanced > NAT, and then click the Port Mapping tab. Two port mapping modes are available: Custom: It indicates the self-defined mode. Application: It indicates the mode provided by the system. When selecting Custom, you must set the following parameters. Parameter Mapping Name Protocol External Port Internal Port
Issue 01 (2009-05-06)

Description It indicates the mapping name. It indicates the interface protocol. It indicates the external port number. It indicates the internal port number.
Huawei Proprietary and Confidential Copyright Huawei Technologies Co., Ltd 2-2

Online Help

2 Configuring Advanced Functions

Parameter Internal Host Source IP Address

Description It indicates the IP address of the internal host. It indicates the source host IP address.

When you select Application, the system displays values of all parameters. You can keep the default values or modify them.

Deleting Port Mapping

Select the mapping name to be deleted, and then click Remove.

2.2.4 Configuring a Port Trigger

During remote access, the specified port of the firewall on the router must be enabled for certain applications. Port trigger is used to set up a new connection between the remote applications at the WAN side and the applications at the LAN side that require the use of certain ports.

Adding a Port Trigger

In the navigation tree, choose Advanced > NAT, and then click the Port Trigger tab. Two port mapping modes are available: Custom: It indicates the self-defined mode. Application: It indicates the mode provided by the system. When selecting Custom, you must set the following parameters. Parameter Trigger Description Trigger Protocol Trigger Start Port Trigger End Port Open Start Port Open End Port Description It indicates the new rule name. It indicates the protocol type. It indicates the start port number. It indicates the end port number. It indicates the open start port number. It indicates the open end port number.

When you select Application, the system displays values of all parameters. You can keep the default values or modify them.

Deleting a Port Trigger

Select the trigger name to be deleted, and then click Remove.

Issue 01 (2009-05-06)

Huawei Proprietary and Confidential Copyright Huawei Technologies Co., Ltd

2-3

Online Help

2 Configuring Advanced Functions

2.3 Configuring the ACL

Access control list (ACL) guarantees QoSs of Hypertext Transfer Protocol (HTTP), Telnet, and Secure Shell (SSH) services. By controlling and managing packets, ACL increases utilization of network links, limits network traffic, and enhances network performance. Step 1 Step 2 Step 3 In the navigation tree, choose Advanced > ACL, and then click the ACL tab. The ACL of a service can be enabled or disabled. Click Apply. ----End

2.4 Configuring the SNTP

Simple Network Time Protocol (SNTP) is used to synchronize network time. Step 1 Step 2 Step 3 In the navigation tree, choose Advanced > SNTP, and then click the SNTP tab. Select the Auto Synchronization Network Time Server check box. Select an option respectively from Primary SNTP Server, Secondary SNTP Server, and Time Zone.
If Primary SNTP Server and Secondary SNTP Server drop-down list boxes do not contain the required options, enter the server names in the text boxes.

Step 4

Click Apply. ----End

2.5 Configuring the Security

The security function is used to control the rights of sending and receiving packets and the period for accessing the network. Two options are available: Black: It indicates that the black list member does not have the corresponding rights. White: It indicates that the white list member has the corresponding rights.

2.5.1 Configuring the URL Filter

The universal resource locator (URL) filter is used to prevent a network device at the LAN side to access certain web sites at the WAN side.

Adding a URL Filter Rule

Step 1 Step 2 Step 3 In the navigation tree, choose Advanced > Security, and then click the URL Filter tab. Select Enable URL Filter to enable the URL filter. Select Black or White.
Huawei Proprietary and Confidential Copyright Huawei Technologies Co., Ltd 2-4

Issue 01 (2009-05-06)

Online Help

2 Configuring Advanced Functions

Step 4 Step 5 Step 6

Click New. Enter an address in URL. Click Apply. ----End

Modifying a URL Filter Rule

Select a URL filter rule to be modified, modify it, and then click Apply.

Deleting a URL Filter Rule

Select the URL filter rule to be deleted, and then click Remove.

2.5.2 Configuring a MAC Filter

The MAC filter can filter data frames according to the defined filter rule. The filter takes effect only when all conditions of the filter rule are met.

Adding a MAC Filter Rule

Step 1 Step 2 Step 3 Step 4 Step 5 In the navigation tree, choose Advanced > Security, and then click the MAC Filter tab. Select Enable MAC Filter to enable the MAC filter. Select Black or White. Click New. Set the following parameters of the MAC filter rule. Parameter Filter Name Source MAC Address Destination MAC Address Start Time End Time Day Enable Step 6 Description It indicates the MAC filter rule name. It indicates the source host MAC address. It indicates the destination host MAC address. It indicates the effective time of a rule, in the format of hh: mm. It indicates the expiration time of a rule, in the format of hh: mm. It indicates the effective date of a rule. It indicates whether to use this rule.

Click Apply. ----End

Modifying a MAC Filter Rule

Select a MAC filter rule to be modified, modify it, and then click Apply.
Issue 01 (2009-05-06) Huawei Proprietary and Confidential Copyright Huawei Technologies Co., Ltd 2-5

Online Help

2 Configuring Advanced Functions

Deleting a MAC Filter Rule

Select the MAC filter rule to be deleted, and then click Remove.

2.5.3 Configuring an IP Incoming Filter

When the firewall is enabled, the IP incoming filter can be used to receive certain specified IP packets at the WAN side.

Adding an IP Incoming Filter Rule

Step 1 Step 2 Step 3 Step 4 In the navigation tree, choose Advanced > Security, and then click the IP Incoming tab. Select Enable IP Incoming Filter to enable the IP incoming filter. Click New. Set the following parameters of the IP incoming filter rule. Parameter Filter Name Protocol Enable Source Start Address Source End Address Source Start Port Source End Port Destination Start Address Destination End Address Destination Start Port Destination End Port Step 5 Description It indicates the name of an IP incoming filter rule. It indicates a protocol type. It indicates whether to use this rule. It indicates the start IP address of the source host. It indicates the end IP address of the source host. It indicates the start port number of the source host. It indicates the end port number of the source host. It indicates the start IP address of the destination host. It indicates the end IP address of the destination host. It indicates the start port number of the destination host. It indicates the end port number of the destination host.

Click Apply. ----End

Modifying an IP Incoming Filter Rule

Select an IP incoming filter rule to be modified, modify it, and then click Apply.

Issue 01 (2009-05-06)

Huawei Proprietary and Confidential Copyright Huawei Technologies Co., Ltd

2-6

Online Help

2 Configuring Advanced Functions

Deleting an IP Incoming Filter Rule

Select the IP incoming filter rule to be deleted, and then click Remove.

2.5.4 Configuring an IP Outgoing Filter

The IP outgoing filter is used to prevent the LAN side from sending certain IP packets. The configuration of an IP outgoing filter rule is the same as that of an IP incoming filter rule. For detailed parameter settings, see section 2.5.3 "Configuring an IP Incoming Filter"

2.5.5 Configuring the Firewall

The firewall is used to prevent the protected network from the unauthorized or unverified access from the Internet. Users of an intranet are allowed to access the Internet. In the navigation tree, choose Advanced > Security, and then click the Firewall tab. Select a firewall level from Security Level. The meanings of options are as follows: Off: It indicates that the firewall is disabled. Low: It indicates that the firewall acts as a state firewall. The firewall prevents port scan and IP address spoofing, but allows both ping operation and Internet Control Message Protocol (ICMP) redirection packet at the WAN side. Medium: Besides preventing port scan and IP address spoofing, the firewall prevents ICMP redirection packets. High: Besides preventing port scanning, IP address spoofing, and ICMP redirection packets, the firewall prevents the synchronous idle character (SYN) flood attack and the ping operation at the WAN side.

2.6 Configuring WiMAX Security Parameters

In the navigation tree, choose WiMAX > Security, and then click the Security tab. The parameter description is as follows. Parameter PKM Description It indicates whether authentication is required during network access. There are two authentication modes: NO PKM PKMv2_EAP It indicates the authentication type. There are two authentication types: TLS: It indicates device authentication. TTLS: It indicates user authentication. It indicates the inner extensible authentication protocol. The default value is recommended.
Huawei Proprietary and Confidential Copyright Huawei Technologies Co., Ltd 2-7

Authentication

Inner EAP
Issue 01 (2009-05-06)

Online Help

2 Configuring Advanced Functions

Parameter NAI User ID User Password

Description It indicates the NAI. The default value is recommended. It indicates the user ID provided by the ISP. It indicates the user password provided by the ISP.

Note: EAP = Extensible Authentication Protocol; NAI = network access identifier PKM = Privacy key management; TLS = Transport layer security protocol TTLS = Tunneled transport layer security protocol

Click Apply, save the settings. Click Default, the settings is restored to the default setting.

Issue 01 (2009-05-06)

Huawei Proprietary and Confidential Copyright Huawei Technologies Co., Ltd

2-8

Online Help

3 Managing the CPE

3 Managing the CPE

3.1 Managing User Passwords
A user password is used to allow a user to set network parameters. After you log in to the CPE, you can modify the username and password, and must keep the new password in mind. If you forget the password, you can restore factory settings of the CPE to validate the initial password or contact the local carrier. Perform the following steps to modify a user password: Step 1 Step 2 Step 3 Step 4 Step 5 In the navigation tree, choose Maintain > Account, and then click the Account tab. Enter the old password. Enter the new username in the New Username text box. Fill in New Password and Confirm Password text boxes in sequence. Click Apply. ----End

3.2 Rebooting the CPE

After importing a configuration file, restart the CPE. Step 1 Step 2 In the navigation tree, choose Maintain > Device, and then click the Reset tab. Click Reboot to restart the CPE.
You can also press the Reset button on the side panel to restart the CPE.

----End

3.3 Upgrading the Software

Do not power off the CPE when the CPE is being upgraded to avoid any damage.

Issue 01 (2009-05-06)

Huawei Proprietary and Confidential Copyright Huawei Technologies Co., Ltd

3-1

Online Help

3 Managing the CPE

The software of the CPE can be upgraded locally or remotely. It takes about a few minutes to upgrade the software of the CPE. Upgrade the software according to the prompts.

Upgrading the CPE Locally

To upgrade the software of the CPE, upload the local files for upgrade to the CPE. Perform the following steps to upgrade the CPE locally: Step 1 Step 2 Step 3 In the navigation tree, choose Maintain > Device, and then click Firmware. Click Browse. Select a file for upgrade, Click Upgrade Software. ----End

The carrier sends the files for upgrade or you obtain these files by negotiation.

Upgrading the CPE Remotely

You can upgrade the CPE through a remote server. The remote upgrade of the CPE requires the corresponding user rights and the support from carrier. Perform the following steps to upgrade the CPE remotely: Step 1 Step 2 Step 3 Step 4 In the navigation tree, choose Maintain > Device, and then click the Firmware tab. Enter the network address or IP address of the remote server in Remote URL. Fill in User Name and Password text boxes. Click Remote Upgrade Software. ----End

Upgrading the CPE by CWMP

You can upgrade the CPE by CPE WAN Management Protocol (CWMP). Perform the following steps to upgrade the CPE: Step 1 Step 2 In the navigation tree, choose Maintain > Device, and then click the Firmware tab. Click Upgrade Software By CWMP. ----End

3.4 Restoring Default Settings

After default settings are restored, the configuration file is restored to the default configuration file. Restore the default settings with caution.
Issue 01 (2009-05-06) Huawei Proprietary and Confidential Copyright Huawei Technologies Co., Ltd 3-2

Online Help

3 Managing the CPE

To restore default settings of the CPE, perform the following steps: Step 1 Step 2 In the navigation tree, choose Maintain > Device, and then click the Reset tab. Click Restore Default Configuration to restore the default settings. Please login the Web UI after restore. ----End

Issue 01 (2009-05-06)

Huawei Proprietary and Confidential Copyright Huawei Technologies Co., Ltd

3-3

Online Help

4 Maintaining the CPE

4 Maintaining the CPE

4.1 Checking Information about the CPE
By querying the status information, you can know about the operating status and the parameter settings of the CPE.

4.1.1 Checking the Device Information

The device information includes the product class, device ID, hardware version, software version, WAN MAC address, and LAN MAC address. In the navigation tree, choose Status > Device, and then click the Device Info tab to check device information.

4.1.2 Checking the Information on the WAN Side

The information on the WAN side contains the connection status and the DNS. The connection status information includes the working mode, IP address, and subnet mask. The DNS information includes the default IP address of the gateway, IP address of the primary DNS server, and IP address of the secondary DNS server. In the navigation tree, choose Status > WAN, and then click the Internet Status tab to check the information on the WAN side.

4.1.3 Checking the Information on the LAN Side

The Ethernet information includes the following: LAN Host: It specifies the IP address of the LAN host. LAN Status: It specifies the connection status of each interface on the LAN side. The working mode of the device at the LAN side is auto-negotiation. Ethernet Packet: It specifies the information on the packets sent or received over the Ethernet. DHCP Client: It specifies the IP address, MAC address, and connection status of each connected device at the LAN side. In the navigation tree, choose Status > LAN, and then click the Ethernet tab to check information on the LAN side.

Issue 01 (2009-05-06)

Huawei Proprietary and Confidential Copyright Huawei Technologies Co., Ltd

4-1

Online Help

4 Maintaining the CPE

4.1.4 Checking the Information on VoIP

The BM632 and the BM622 have the VoIP function.

The VoIP information includes SIP ID, status of the SIP registration server, and port number. In the navigation tree, choose Status > VoIP, and then click the VoIP Info tab to check VoIP information.

4.1.5 Checking the Information on WiMAX

The WiMAX information includes the network access status of the WiMAX network, upload and download rates, the signal strength, the link quality, the information of the base station, and the information of the bandwidth and the frequency. In the navigation tree, choose Status > WiMAX, and then click the tabs to check WiMAX information.

4.2 Detecting the CPE

The local network connection and network connection of the internet service provider can be tested. To detect the CPE, perform the following steps: Step 1 Step 2 Step 3 In the navigation tree, choose Maintain > Diagnose, and then click the Diagnose tab. In IP Address, enter the IP address to be detected. Click Start. After the detection is complete, the CPE reports the detection results to the server. ----End

Issue 01 (2009-05-06)

Huawei Proprietary and Confidential Copyright Huawei Technologies Co., Ltd

4-2

Online Help

5 FAQs

5 FAQs
The power indicator is off. Please check the power supply, ensure that the power supply is properly connected. Please check whether the power adapter meets the specification. The WiMAX indicator is off. Please check the power supply, ensure that the power supply is properly connected. Check whether you have activated the WiMAX online service. Place the device in an open space without any obstacle around it, such as a cement wall and a wooden wall, which affects the WiMAX network signal. Place the device far away from an electrical device that produces a strong magnetic field or strong electric field, such as a microwave oven, a fridge, and a satellite dish antenna. You cannot make a VoIP call. Ensure that the phone line is properly connected. Please check whether the VoIP parameters are properly set, see section 1.5 "Configuring VoIP". The WiMAX network cannot be found. Ensure that the antenna is properly connected. Please check the power supply, ensure that the power supply is properly connected. Place the device in an open space without any obstacle around it, such as a cement wall and a wooden wall, which affects the WiMAX network signal. Place the device far away from an electrical device that produces a strong magnetic field or strong electric field, such as a microwave oven, a fridge, and a satellite dish antenna. The device or the power adapter heats up. The device may heat up after operating for a long time. Therefore, power off the device when you do not use the device. Place the device in a well-ventilated place and avoid direct sunshine.

Issue 01 (2009-05-06)

Huawei Proprietary and Confidential Copyright Huawei Technologies Co., Ltd

5-1

Online Help

5 FAQs

You cannot log in to the Web UI. Please check the power supply, ensure that the power supply is properly connected. Please check whether the network cable between the device and the computer is properly connected. Ensure that the device is properly connected to the computer. Please check whether the Web UI parameters are properly set. see section 1.2 "Logging in to the Web UI". Please check the Internet Explorer parameters, ensure the proxy server is disable. Take the Internet Explorer 6.0 as an example. perform the following steps: 1. Open the Internet Explorer 6.0. 2. Choose Tools > Internet Options... , select the Connections tab. 3. Click LAN Settings.... 4. Deselect Use a proxy server for your LAN. If select, click the check box to deselect it. Then click OK. 5. Login the Web UI.

Issue 01 (2009-05-06)

Huawei Proprietary and Confidential Copyright Huawei Technologies Co., Ltd

5-2

Online Help

6 Abbreviations

6 Abbreviations
A ACL ALG C CWMP D DHCP DMZ DNS E EAP F FE FTP H HTTP I ICMP IPSec ISP L
Issue 01 (2009-05-06) Huawei Proprietary and Confidential Copyright Huawei Technologies Co., Ltd 6-1

Access Control List Application Layer Gateway

CPE WAN Management Protocol

Dynamic Host Configuration Protocol Demilitarized Zone Domain Name Server

Extensible Authentication Protocol

Fast Ethernet File Transfer Protocol

Hypertext Transfer Protocol

Internet Control Message Protocol IP Security Protocol Internet Service Provider

Online Help

6 Abbreviations

L2TP LAN M MAC MIMO N NAI NAPT NAT O OFDMA P PKM POT PPPoE PPTP Q QoS R RTSP S SIP SNTP SSID SSH SYN T
Issue 01 (2009-05-06)

Layer 2 Tunneling Protocol Local Area Network

Medium Access Control Multiple-Input Multiple-Output

Network Access Identifier Network Address Port Translation Network Address Transmission

Orthogonal Frequency Division Multiple Access

Privacy Key Management Plain Old Telephone Point-to-Point Protocol over Ethernet Point-to-Point Tunneling Protocol

Quality of Service

Real-Time Streaming Protocol

Session Initiation Protocol Simple Network Time Protocol Service Set Identifier Secure Shell Synchronous

Huawei Proprietary and Confidential Copyright Huawei Technologies Co., Ltd

6-2

Online Help

6 Abbreviations

TLS TTLS U URI URL V VoIP W WAN WEP WiMAX WPA-PSK

transport layer security protocol tunneled transport layer security protocol

Uniform Resource Identifier Universal Resource Locator

Voice over IP

Wide Area Network Wired Equivalent Privacy Worldwide Interoperability for Microwave Access Wi-Fi Protected Access Pre-Shared Key

Issue 01 (2009-05-06)

Huawei Proprietary and Confidential Copyright Huawei Technologies Co., Ltd

6-3