User ManualGemtek WiMAX Modem Manual Version: 1.2 Manual Date: June 11 2009 Software Version: R4.6.0.2-20087-v5.7.9 Software Date: June 11 2009 CONTENTS Chapter 1 Overview.................................................................1-1 1.1. 1.2. Indoor CPE............................................................................................. 1-1 Outdoor CPE.......................................................................................... 1-2 Chapter 2 WEB-GUI ...............................................................2-3 2.1. 2.2. 2.3. 2.4. 2.5. 2.6. 2.7. 2.8. 2.9. 2.10. 2.11. 2.12. 2.13. 2.14. 2.15. 2.16. 2.17. 2.18. 2.19. 2.20. 2.21. 2.22. System Configuration Login.................................................................. 2-3 System Logout ....................................................................................... 2-6 Account .................................................................................................. 2-7 Date ........................................................................................................ 2-8 Language................................................................................................ 2-9 NDS...................................................................................................... 2-10 Scanner................................................................................................. 2-12 Authentication...................................................................................... 2-17 Bridge Mode ........................................................................................ 2-19 NAT Mode ........................................................................................... 2-20 Firewall ................................................................................................ 2-21 DHCP Server........................................................................................ 2-23 NAT ALG............................................................................................. 2-25 Port Forwarding ................................................................................... 2-26 Port Trigger .......................................................................................... 2-27 DDNS................................................................................................... 2-28 TR-069 ................................................................................................. 2-30 SNMP................................................................................................... 2-32 Log ....................................................................................................... 2-33 Upgrade................................................................................................ 2-35 Recovery .............................................................................................. 2-37 Reboot .................................................................................................. 2-40 i FIGURES Figure 1-1 Figure 1-2 Figure 2-1 Figure 2-2 Figure 2-3 Figure 2-4 Figure 2-5 Figure 2-6 Figure 2-7 Figure 2-8 Figure 2-9 Figure 2-10 Figure 2-11 Figure 2-12 Figure 2-13 Figure 2-14 Figure 2-15 Figure 2-16 Figure 2-17 Figure 2-18 Figure 2-19 Figure 2-20 Figure 2-21 Figure 2-22 Figure 2-23 Figure 2-24 Figure 2-25 Figure 2-26 Figure 2-27 Figure 2-28 Figure 2-29 Figure 2-30 Figure 2-31 Figure 2-32 Figure 2-33 Indoor CPE Front Panel LED ............................................... 1-1 Outdoor CPE installation ...................................................... 1-2 Login Page ............................................................................ 2-3 WiMAX Status ...................................................................... 2-4 WiMAX Status-Service Flow ............................................... 2-4 Network Status ...................................................................... 2-5 Device Status......................................................................... 2-5 Logout ................................................................................... 2-6 Account ................................................................................. 2-7 Date ....................................................................................... 2-8 Language ............................................................................... 2-9 NDS-1 ................................................................................2-11 NDS-2.................................................................................2-11 Scanner with Bandwidth range 6~10MHz ........................ 2-13 Scanner with Bandwidth range 6~10MHz ........................ 2-13 Scanner with Bandwidth range 3~5MHz .......................... 2-14 Scanner with Bandwidth range 3~5MHz .......................... 2-14 Range Scanner................................................................... 2-15 Full Scanner ...................................................................... 2-15 Last used Channel Scanner ............................................... 2-16 Authentication ................................................................... 2-17 Authentication ................................................................... 2-18 Authentication-View Certificates...................................... 2-18 Bridge Mode...................................................................... 2-19 NAT Mode......................................................................... 2-20 Firewall ............................................................................. 2-21 Firewall Filter.................................................................... 2-22 DHCP Server Enabled....................................................... 2-23 DHCP Server Enabled....................................................... 2-24 DHCP Server Disabled...................................................... 2-24 NAT ALG .......................................................................... 2-25 Port Forwarding ................................................................ 2-26 Port Trigger ....................................................................... 2-27 DDNS Enabled.................................................................. 2-28 DDNS Disabled................................................................. 2-29 ii Figure 2-34 Figure 2-35 Figure 2-36 Figure 2-37 Figure 2-38 Figure 2-39 Figure 2-40 Figure 2-41 Figure 2-42 Figure 2-43 Figure 2-44 Figure 2-45 Figure 2-46 Figure 2-47 Figure 2-48 Figure 2-49 TR-069 .............................................................................. 2-31 TR-069-Certificate File Upload ........................................ 2-31 SNMP enabled................................................................... 2-32 SNMP enabled................................................................... 2-33 SNMP disabled.................................................................. 2-33 Log .................................................................................... 2-34 Log .................................................................................... 2-34 Web/FTP Upgrade............................................................. 2-35 Web Upgrade Summary .................................................... 2-36 TFTP Upgrade................................................................... 2-36 Recovery ........................................................................... 2-37 Recovery ........................................................................... 2-38 Recovery ........................................................................... 2-38 Recovery ........................................................................... 2-39 Reboot Button ................................................................... 2-40 Reboot Confirmation......................................................... 2-41 iii (15dB≤CINR) Figure 1-1 Indoor CPE Front Panel LED 1-1 . the LED indicates the CPE states as follow.Chapter 1 Overview This chapter describes the panel function and installation procedure for the CPE. Only Red LED is ON: the signal is weak. (CINR<8dB) Yellow LED is ON: the signal strength is medium. Indoor CPE Front Panel LED Power LED: ON: power on LAN LED: ON: connect OFF: power fail OFF: disconnect Blinking: data transmit When the CPE powers on. (8dB≤CINR<15dB) Green LED is ON: the signal strength is good.1. 1. Only Red LED is Blinking: synchronization Only Yellow LED is Blinking: authentication Only Green LED is Blinking: DHCP client negotiation After the CPE has connected to the base station. the signal strength LED are defined as follow. Outdoor CPE Power Injector – Power Over Ethernet 802. three LEDs will be blinking simultaneously and then the CPE will be restored to factory default settings.Rear Panel Power jack: DC 12V / 1.2. After continuing pressing the “Reset” button for more few seconds. Yellow and Green LEDs will turn ON simultaneously.3af compliant LAN port: 10/100Base-TX Figure 1-2 Outdoor CPE installation 1-2 . 1. When pressing the “Reset” button for few seconds. the Red.5A LAN port: 10/100Base-TX Reset button: To reboot the CPE. System Configuration Login The CPE will enable a DHCP server by default.0 Gateway: 10. Please contact with Gemtek to define multi-user features. If you disable CPE’s DHCP server by yourself. Computers or network devices connected to its LAN side can get IP address automatically from CPE. 2. 1 ≤ x ≤ 253 Netmask: 255.1.Chapter 2 WEB-GUI This chapter describes how to configure the CPE in order to connect to the base station. and gateway as following. netmask. IP address: 10. Figure 2-1 Login Page 2-3 . set the IP address.1.1. and you will see a webpage such as the one shown in Figure 2-1.255. below: Username: admin Password: admin The administrator username and password are as shown Gemtek CPE also support multi-level user login.1.254/ with a browser.1.1.1.255.x.254 Connect to http://10. Figure 2-4. Network Status. and Device Status are as shown in Figure 2-2. and Figure 2-5. and WiMAX Status. the user can login into the Status Page.If there is no error. Figure 2-2 WiMAX Status Figure 2-3 WiMAX Status-Service Flow 2-4 . Figure 2-3. Figure 2-4 Network Status Figure 2-5 Device Status 2-5 . System Logout Press the “Logout” button as shown in Figure 2-6 to logout of the system and go back to the “Login” page as shown in Figure 2-1.2.2. Figure 2-6 Logout 2-6 . 3. After setting the configurations of these fields.2. Figure 2-7 Account 2-7 . Account Personalization Account The Account page is used for changing the password of the WEB-UI account as shown in Figure 2-7. press the “Apply” button to write the new configurations into the CPE and the new configurations will take effect. The system date of a CPE can be synchronized with the PC that is connected to its LAN side by clicking the “Synchronize with PC” button. The system date of a CPE can also be automatically updated by synchronizing time with an NTP server assigned manually by the user or from the DHCP server. to reboot the system in order for the new configurations to take effect. Figure 2-8 Date 2-8 . the CPE will not pass the authentication from the base station. Please refer to Figure 2-8 for more detail.2.4. press the “Apply” button to write the new configurations into the CPE and press “Reboot” as shown in Figure 2-49. Date Personalization Date If the system date is not in the valid duration of the uploaded certificate file. The selection of different time zone and daylight saving option are available as well for different regions. After setting the configurations of these fields. press the “Apply” button to view the WEB-GUI in the selected language. After selecting the desired language. Figure 2-9 Language 2-9 . Language Personalization Language The Language page allows users to select one of the languages in the drop-down list for viewing the WEB-GUI as shown in Figure 2-9.5.2. press the “Apply” button to write the new configurations into the CPE and press “Reboot” as shown in Figure 2-49. Please note that when the CPE is connected to a BS. In “HomeNSP” section. The “NDS Config” of this page gives users the ability to allow or deny roaming NSP. a red x will appear beside the small CPE icon on the top banner. a green check will appear on the “Active” of the linked frequency in the “Frequency CINR Table” section as well as beside the small CPE icon on the top banner. Please refer to the next topic “Scanner” for more details. After setting the configurations of these fields. Furthermore. When enabling the “Allow Roaming” checkbox. or allow roaming NSP not in Roaming NSP List. Home NSP ID and Home NSP Name should be entered respectively as agreed upon with the specific NSP. NDS WiMAX NDS (can only be accessed by administrator) The NDS page allows users to stop or start WiMAX connection with a BS by simply clicking the “start” or “stop” button in the “Start/Stop WiMAX” section. otherwise. Please refer to Figure 2-11 for more details. which are showed in the “Scanner Type” section of the “Scanner” page. users are allowed to add. Users can click “On” or “Off” button in the “Only Configured List used” section in order to allow more types of scanners.6. Users are allowed to define the specific frequency CINR threshold as shown in Figure 2-10. The “Frequency CINR Table” section of this page shows the current available WiMAX channels and one of them should be active automatically according to their bandwidth and CINR. or allow connected NAP not in NAP List. 2-10 . to reboot the system in order for the new configurations to take effect. remove. and edit NSPs in NSP list table. users can also add. and edit NAPs in NAP list table. remove.2. Figure 2-10 NDS-1 Figure 2-11 NDS-2 2-11 . remove. the “Full Scanner Radio Profile” section will show up and list the available channel bandwidths in the table. 2-12 .7. After changing the Profile table.2. to reboot the system in order for the new configurations to take effect. If “Full Range” is enabled. remove. The “Configured Channel Table” section of this page lists all the channels that are stored in the channel table along with channel status associated to the channel used to connect the CPE to a BS. such as Configured List Scanner. and edit the scanning ranges and bandwidths in the list table. Scanner WiMAX Scanner (can only be accessed by administrator) The Scanner page allows users to configure different types of scanners. and Last Used Channel Scanner. Please refer to Figure 2-16 for more details. press the “Apply” button to write the new configurations into the CPE. Users are allowed to edit the scanning time and scanning time when linking failed as shown in Figure 2-18. If “Range Scanner” is enabled. Range Scanner. press the “Apply” button to write the new configurations into the CPE. the “Last used Channel Scanner Config” will show up and list the last used channel frequency and bandwidth. After changing the config table. Users are allowed to select one or more channel bandwidths and configure the frequency step as shown in Figure 2-17. press the “Apply” button to write the new configurations into the CPE. Please refer to Figure 2-12 and Figure 2-14 for more details. the “Range Scanner List Table” section will show up and list all the configured scanning ranges and bandwidths that are stored in the list table. press the “Apply” button to write the new configurations into the CPE. and edit channels in the channel table. Full Scanner. Users are allowed to add. After changing the channel table. If any configuration in this page is changed. then press “Reboot” as shown in Figure 2-49. Users are allowed to add. After changing the list table. If “Last used Channel Scanner” is enabled. Figure 2-12 Scanner with Bandwidth range 6~10MHz Figure 2-13 Scanner with Bandwidth range 6~10MHz 2-13 . Figure 2-14 Scanner with Bandwidth range 3~5MHz Figure 2-15 Scanner with Bandwidth range 3~5MHz 2-14 . Figure 2-16 Range Scanner Figure 2-17 Full Scanner 2-15 . Figure 2-18 Last used Channel Scanner 2-16 . Certificates required for authentication can be uploaded in the “Certificate File Upload” section. Contents of the certificates that are currently in the CPE can be viewed in details by clicking “View CA Certificate” as shown in Figure 2-21. username. After setting the configurations of these fields. EAP-TLS and EAP-TTLS. if authentication is required. and password should be entered respectively as agreed upon with the BS. Figure 2-19 Authentication 2-17 . or by selecting none in “Phase 1” field.8. Authentication WiMAX Authentication (can only be accessed by administrator) Users can enable or disable the authentication by selecting one of the two methods supported. Note that the only certificate format supported is PEM (Privacy Enhanced Mail. Base64 encoded DER certificate). to reboot the system in order for the new configurations to take effect. press the “Apply” button to write the new configurations into the CPE and press “Reboot” as shown in Figure 2-49. Users can enable or disable “Validate the date duration of CA certificate” and “Validate the server certificate” by selecting or deselecting the checkbox as shown in New Figure 2-20. Identity. Please confirm the format before uploading.2. Users can also choose one of five key encoding methods listed in “Phase 2”. Certificates in the CPE can also be deleted by pressing the “Delete” button. Please refer to Figure 2-19 for more details. Figure 2-20 Authentication Figure 2-21 Authentication-View Certificates 2-18 . press the “Apply” button to write the new configurations into the CPE and go to “Management Reboot” as shown in Figure 2-49.2. The “IP address” and “netmask” can also be automatically assigned by the DHCP server by selecting “DHCP” IP type. to reboot the system in order for the new configurations to take effect.9. After setting the configurations of these fields. Bridge Mode Networking Bridge/NAT Mode Bridge mode is enabled by simply selecting “Bridge Mode” as shown in Figure 2-22. By selecting “Static” IP type. Figure 2-22 Bridge Mode 2-19 . users can manually assign the “IP address” and “netmask”. By selecting “Static” WAN IP type. and “WAN gateway”. “LAN netmask”. “WAN netmask”.2. After setting the configurations of these fields. users can manually assign the “WAN IP address”. Figure 2-23 NAT Mode 2-20 . and “MTU”. Users can also configure “LAN IP address”. to reboot the system in order for the new configurations to take effect. press the “Apply” button to write the new configurations into the CPE and go to “Management Reboot” as shown in Figure 2-49. NAT Mode Networking Bridge/NAT Mode NAT mode is enabled by simply selecting “NAT Mode” as shown in Figure 2-23. and “WAN gateway” can also be automatically assigned by the DHCP server by selecting “DHCP” WAN IP type. “WAN netmask”.10. The “WAN IP address”. which should be between 68 and 1500. 11. Furthermore. Firewall Networking Firewall (can only be accessed by administrator) The “CPE Access Control” section of this page gives users the ability to allow or deny web/telnet access from WAN. to reboot the system in order for the new configurations to take effect. press the “Apply” button to write the new configurations into the CPE and press “Reboot” as shown in Figure 2-49. TCP/UDP port and interface. an external attacker only has access to the DMZ host. IP. Please refer to Figure 2-24 and Figure 2-25 for more details. The “Firewall Filter” section of this page is used to filter incoming network traffic based on MAC. After setting the configurations of these fields. By enabling and identifying a DMZ host. protocol. Figure 2-24 Firewall 2-21 . the redirection of ICMP can also be enabled. rather than the entire private network at the CPE’s back end.2. Figure 2-25 Firewall Filter 2-22 . and “Max lease time (seconds)” is between 1 and 99999999.12. After setting the configurations of these fields.2. to reboot the system in order for the new configurations to take effect. press the “Apply” button to write the new configurations into the CPE and press “Reboot” as shown in Figure 2-49. otherwise. it shows that the DHCP server is disabled as shown in Figure 2-28. DHCP Server Networking DHCP Server DHCP server will automatically start up when the CPE is powered on if “DHCP server” is enabled. Users can select or deselect the checkbox of “From ISP” in order to get DNS address automatically or not as shown in Figure 2-27. Note that “Primary DNS” and “Domain Name” are required for DHCP server settings. Specific IP address can also be assigned to a specific MAC address in “Permanent Host Configuration” as shown in Figure 2-26. Please note that DHCP server is only applicable when the CPE is in NAT mode. If enabled. Figure 2-26 DHCP Server Enabled 2-23 . this page shows the previous configuration of the DHCP server as shown in Figure 2-26. Figure 2-27 DHCP Server Enabled Figure 2-28 DHCP Server Disabled 2-24 . 13. to reboot the system in order for the new configurations to take effect. With it enabled. NAT ALG Networking NAT ALG (can only be accessed by administrator) By selecting or deselecting the checkbox. BSID can be used in SIP authentication to decide if the ATA is within the service area.2. Figure 2-29 NAT ALG 2-25 . press the “Apply” button to write the new configuration into the CPE and press “Reboot” as shown in Figure 2-49. Please note that NAT ALG is only applicable when the CPE is in NAT mode. After changing the configuration. users can enable or disable BSID authorization of SIP ALG as shown in Figure 2-29. After setting the configurations of these fields. to reboot the system in order for the new configurations to take effect.2. press the “Apply” button to write the new configurations into the CPE and press “Reboot” as shown in Figure 2-49. Users are allowed to add. enable. Port Forwarding Networking Port Forwarding Port forwarding redirects incoming network traffic from pre-defined “WAN Port” range to pre-defined “LAN IP Address” and “LAN Port” range. Figure 2-30 Port Forwarding 2-26 . edit. Please note that port forwarding is only applicable when the CPE is in NAT mode.14. remove. and disable port forwarding rules here as shown in Figure 2-30. to reboot the system in order for the new configurations to take effect. Please note that port trigger is only applicable when the CPE is in NAT mode. press the “Apply” button to write the new configurations into the CPE and press “Reboot” as shown in Figure 2-49. After setting the configurations of these fields. Port Trigger Networking Port Trigger Port trigger dynamically opens port forwarding from a pre-defined WAN “Forwarding Port” range to a pre-defined LAN “Forwarding Port” range when a client on the local network makes an outgoing connection to a predetermined “Trigger Port” range. and disable port trigger mappings here as shown in Figure 2-31. edit. enable.2. remove. Users are allowed to add.15. Figure 2-31 Port Trigger 2-27 . and password you have registered with the service provider and press the “Apply” button to save the changes into the CPE. To enable DDNS. The CPE will be able to notify the selected domain name server to change the active DNS configuration of its configured hostnames and addresses in real time by using the Internet Protocol Suite after pressing “Reboot” as shown in Figure 2-49. users can enable or disable DDNS as shown in Figure 2-32 and Figure 2-33. username. Enter the hostname. and can be done by clicking the “Sign Up” hyperlink and following the procedures. registration with at least one of the seven service providers is required. DDNS Networking DDNS By selecting or deselecting the checkbox. Figure 2-32 DDNS Enabled 2-28 .2.16. Figure 2-33 DDNS Disabled 2-29 . 17. After setting the configurations of these fields. and TR-069 client uses the “ACS Username” and “ACS Password” to login the ACS Server. TR-069 certificates required for HTTPS protocol can be uploaded in the “TR-069 Certificate File Upload” section. In other words. then do nothing and the change will take effect in the next inform interval.2. However. Note that the only certificate format supported is PEM (Privacy Enhanced Mail. When the “Inform Enable” is enabled. to reboot the system in order for the new configurations to take effect. Please confirm the format before uploading. otherwise press “Reboot” as shown in Figure 2-49. press the “Apply” button to write the new configurations into the CPE. all of the above parameters will be restored when the CPE reboots. the parameters changed by Option-43 will not be saved into the CPE. Base64 encoded DER certificate). 2-30 . TR-069 client will periodically query the ACS server according to the “Inform Interval”. all of the above parameters will be overwritten if Option-43 is activated. Nevertheless. TR-069 Management TR-069 (can only be accessed by administrator) TR-069 client will automatically start up when the CPE is operational if the “TR-069 Active Flag” is enabled. If only the “Inform Enable” and/or “Inform Interval” have been changed. The ACS server can also use the “Connection Request Username” and “Connection Request Password” to connect to the CPE and get/set parameter via connection request mechanism. Please refer to Figure 2-34 and Figure 2-35 for more details. The “ACS Server URL” is the URL used by TR-069 client to connect to the ACS server. Figure 2-34 TR-069 Figure 2-35 TR-069-Certificate File Upload 2-31 . SNMP Management SNMP (can only be accessed by administrator) This page is used to enable disable SNMP server as shown in Figure 2-36 and Figure 2-38. Figure 2-36 SNMP enabled 2-32 . the community string of the SNMP server can be changed. to reboot the system in order for the new configurations to take effect. press the “Apply” button to write the new configurations into the CPE and press “Reboot” as shown in Figure 2-49. After setting the configurations of these fields. When SNMP is enabled.2.18. Log Management Log (can only be accessed by administrator) This page displays the system message log as shown in Figure 2-39.Figure 2-37 SNMP enabled Figure 2-38 SNMP disabled 2.19. In order to 2-33 . Figure 2-39 Log Figure 2-40 Log 2-34 .show more or less system message log. users can add or delete system message log modules by setting the configurations in “filter” field and press the “Apply” button to validate the configurations as shown in New Figure 2-40. Then press the “Apply” button to upgrade the firmware. Upgrade Management Upgrade (can only be accessed by administrator) To perform web upgrade. To perform FTP upgrade. Please refer to Figure 2-43 for more details. input the TFTP server IP address and the firmware file path and press the “Upgrade” button in the “TFTP Upgrade” section. The CPE automatically reboots itself afterwards. It takes about 3 minutes for a CPE to download the firmware from a TFTP server and upgrade it. The CPE will automatically reboot itself afterwards. FTP username and password. After the firmware file is uploaded. Please refer to Figure 2-41 for more details. Press the “Upgrade” button in the “FTP Upgrade” section and the CPE will start to download the firmware from the FTP server and upgrade.20. the summary will be displayed as shown in Figure 2-42. firmware file path. Figure 2-41 Web/FTP Upgrade 2-35 . This upgrade procedure takes about 3 minutes and reboots the CPE afterwards automatically. Please refer to Figure 2-41 for more details. and firmware file name. and press the “Upload” button to upload the file into the CPE.2. To perform TFTP upgrade. press the “Brows…” button to choose the firmware file in the computer in the “Web Upgrade” section. input the FTP server IP address. Figure 2-42 Web Upgrade Summary Figure 2-43 TFTP Upgrade 2-36 . 2.conf. Recovery Management Recovery (can only be accessed by administrator) Both current firmware version and previous firmware version are shown in the “Firmware Rollback” section. . and Figure 2-46 for more details. users are allowed to disable or enable auto firmware rollback so that auto firmware rollback will be performed when the current firmware validation test is failed.configdb and ddns. Figure 2-46. Furthermore. Figure 2-44 Recovery 2-37 . Device configuration file that includes files such as. Firmware rollback can be performed by pressing the “Rollback” button. just press the “Factory Default” button in the “Factory Default Settings” section.21. can be uploaded from PC to CPE as well as downloaded from CPE to PC. Please refer to Figure 2-44 for more details. Please refer to Figure 2-45. To restore a CPE back to factory default settings. Figure 2-45 Recovery Figure 2-46 Recovery 2-38 . Figure 2-47 Recovery 2-39 . Please refer to Figure 2-48 and Figure 2-49 for more details. Figure 2-48 Reboot Button 2-40 . Reboot Press the “Reboot” and “Yes” buttons to reboot the system.22.2. Figure 2-49 Reboot Confirmation 2-41 .