EchoLife BM635

User Guide

3 Configuring Basic Functions

Issue 01 (2008-06-15)

Huawei Proprietary and Confidential

Copyright © Huawei Technologies Co., Ltd

3-9

3.3 Configuring RIP

Route is used to configure routes and forward packets. Routing Information Protocol

(RIP) is used to automatically set parameters of a route. RIP is applied to set up a

network with a complicated topology structure. The maintenance of a RIP network is

simple.

Step 1

In the navigation tree, choose

Advanced > RIP

, and then click the

RIP

tab.

Step 2

Select an interface from

Interface

.

Step 3

Select an operation status from

Operation

.

Step 4

Select a version from

Version

.

Step 5

Click

Apply

.

----End

3.4 Configuring

QoS

The quality of service (QoS) varies with the requirements of network applications.

Step 1

In the navigation tree, choose

Advanced > QoS

, and then click the

QoS

tab.

Step 2

The

Interface Name

list all interface names, enter the Differentiated Services Code

Point (DSCP) in the

DSCP

text box.

Step 3

Select the priority of interface from the

Priority

.

Note:

z

The priority is from one to five, one level is the highest priority.

z

The priority of

local

cannot be modified.

Step 4

Click

Apply

.

----End

EchoLife BM635

User Guide

4 Configuring Advanced Functions

Issue 01 (2008-06-15)

Huawei Proprietary and Confidential

Copyright © Huawei Technologies Co., Ltd

4-1

4

Configuring Advanced Functions

About

This

Chapter

The following table lists the contents of this chapter.

Section

Describes

4.1 Configuring the

WiMAX Network

How to set WiMAX network parameters.

4.2 Configuring the NAT

How to set NAT parameters.

4.3 Configuring the ACL

How to set ACL parameters.

4.4 Configuring the SNTP

How to set SNTP parameters.

4.5 Configuring the Security

How to set Security parameters.

4 Configuring Advanced Functions

EchoLife BM635

User Guide

4-2

Huawei Proprietary and Confidential

Copyright © Huawei Technologies Co., Ltd

Issue 01 (2008-06-15)

4.1 Configuring the WiMAX Network

In a WiMAX network, a subscriber station (SS) or mobile station (MS) can communicate

with the base station (BS) after the WiMAX network parameters are properly set. After

network parameters are properly set, an available connection can be set up between the

BM635 and the WiMAX BS.

4.1.1 Configuring WiMAX Frequencies

Before you configure the network frequency point, you need to configure the network

bandwidth. There are two types of bandwidth such as 5 M and 10 M. You are

recommended to use the default bandwidth.

Step 1

In the navigation tree, choose

WiMAX

>

Scanset

, and then click the

Scanset

tab.

Step 2

Select the bandwidth from the

Working Bandwidth

.

Step 3

Click

Save

.

----End

After the bandwidth set correctly, then set the WiMAX frequency. The following

frequency scanning modes are available:

z

Smart scan mode: According to the specified start frequency, end frequency, and

frequency step, the BM635 determines the range of frequency that can be searched

for and searches for a frequency.

z

Expert scan mode: The BM635 searches for the specified frequency only.

Smart Scan Mode

Parameter

Description

Frequency Step

It indicates the step of frequency scanning in smart scan mode.

Start frequency

It indicates the start frequency to be scanned in smart scan mode.

End frequency

It indicates the end frequency to be scanned in smart scan mode.

Expert Scan Mode

Parameter

Description

DL Frequency

1~10

It indicates the frequency to be scanned in expert scan mode.

You can enter up to 10 frequencies to be scanned.

EchoLife BM635

User Guide

4 Configuring Advanced Functions

Issue 01 (2008-06-15)

Huawei Proprietary and Confidential

Copyright © Huawei Technologies Co., Ltd

4-3

4.1.2 Configuring WiMAX Security Parameters

By configuring the security authentication mode and importing a certificate, you can

finish the settings of the WiMAX security parameters.

Configuring the Security Authentication Mode

In the navigation tree, choose

WiMAX

>

Security

, and then click the

Security

tab.

The parameter description is as follows.

Parameter

Description

PKM

It indicates whether authentication is required during network

access. There are two authentication modes:

z

NO PKM

z

PKMv2_EAP

Authentication

It indicates the authentication type. There are two authentication

types:

z

TLS: It indicates device authentication.

z

TTLS: It indicates user authentication.

NAI

It indicates the NAI. The default value is

1E:CA:FE:00:00:[email protected]

.

User ID

It indicates the user ID provided by the ISP.

User Password

It indicates the user password provided by the ISP.

Note:

EAP = Extensible Authentication Protocol; NAI = network access identifier

PKM = Privacy key management; TLS = Transport layer security protocol

TTLS = Tunneled transport layer security protocol

Importing a Certificate

The certificate includes a personal certificate, a personal private key, and a certification

authority (CA) root certificate. Each certificate can be uploaded to the server.

z

Modify a certificate with caution, because improper modification may cause the

BM635 to improperly operate.

z

Do not modify the suffix of a certificate at will.

4 Configuring Advanced Functions

EchoLife BM635

User Guide

4-4

Huawei Proprietary and Confidential

Copyright © Huawei Technologies Co., Ltd

Issue 01 (2008-06-15)

Functions of each certificate are as follows:

z

Personal certificate: It indicates the certificate uploaded to the Authorization,

Authentication and Accounting (AAA) server when the BM635 is authenticated.

z

Personal private key: It indicates the personal private key allocated by the server to a

BM635. This key is used together with a personal certificate.

z

CA root certificate: It indicates the root certificate that is used to verify the AAA

server at the front end.

Click

Browse

to select the correct corresponding certificate, and upload to the BM635.

4.2 Configuring the NAT

NAT is used to convert an IP address and a port so that the device on the LAN side uses

an IP address of the same public network to access the network at the WAN side.

4.2.1 Configuring the ALG

Application layer gateway (ALG) is used to convert the specified data carried in IP

packets, thus supporting LAN applications in the process of transmitting the packets on

the LAN side and the packets at the WAN side.

In the navigation tree, choose

Advanced

>

NAT

, and then click the

ALG

tab.

Parameter

Description

Enable L2TP ALG

It indicates whether to enable L2TP ALG.

Enable IPSec ALG

It indicates whether to enable IPSec ALG.

Enable H.323

ALG

It indicates whether to enable H.323 ALG.

Enable RTSP ALG

It indicates whether to enable RTSP ALG.

Enable SIP ALG

It indicates whether to enable SIP ALG. After SIP ALG is

enabled, enter the SIP port number.

Note:

L2TP = Layer 2 Tunneling Protocol; IPSec = IP Security Protocol; RTSP = Real-Time

Streaming Protocol

4.2.2 Configuring the DMZ

Demilitarized zone (DMZ) is used to forward the packets from the WAN without port

mapping to the host defined in the DMZ.

In the navigation tree, choose

Advanced

>

NAT

, and then click the

DMZ

tab.

Parameter

Description

Host Address

It indicates the host IP address.