LTE7410 LTE Outdoor CPE Version 2.60 Edition 1, 5/2015 Quick Start Guide User’s Guide Default Login Details LAN IP Address http://192.168.1.1 User Name www.zyxel.
IMPORTANT! READ CAREFULLY BEFORE USE. KEEP THIS GUIDE FOR FUTURE REFERENCE. Screenshots and graphics in this book may differ slightly from your product due to differences in your product firmware or your computer operating system. Every effort has been made to ensure that the information in this manual is accurate. Related Documentation • Quick Start Guide The Quick Start Guide shows how to connect the LTE Device and get up and running right away.
Contents Overview Contents Overview User’s Guide ....................................................................................................................................... 11 Introduction .............................................................................................................................................13 Introducing the Web Configurator ...........................................................................................................15 Technical Reference ..
Contents Overview 4 LTE7410 User’s Guide
Table of Contents Table of Contents Contents Overview ..............................................................................................................................3 Table of Contents .................................................................................................................................5 Part I: User’s Guide ......................................................................................... 11 Chapter 1 Introduction...........................................
Table of Contents 4.1.3 Before You Begin .....................................................................................................................28 4.2 The Broadband Screen .....................................................................................................................28 4.2.1 Edit LTE Connection ................................................................................................................29 4.3 SIM Screen .................................................
Table of Contents 8.4 The DMZ Screen ...............................................................................................................................67 8.5 The ALG Screen ...............................................................................................................................68 8.6 Technical Reference ..........................................................................................................................68 8.6.1 NAT Definitions ........................
Table of Contents Chapter 12 L2TP VPN.............................................................................................................................................95 12.1 Overview .........................................................................................................................................95 12.2 The Setup Screen ...........................................................................................................................95 12.
Table of Contents Chapter 16 User Account ....................................................................................................................................131 16.1 Overview .......................................................................................................................................131 16.2 The User Account Screen .............................................................................................................131 Chapter 17 TR-069 Client.............
Table of Contents 23.3 Telnet Screen ................................................................................................................................148 23.4 ICMP Screen .................................................................................................................................148 23.5 SSH Screen ..................................................................................................................................149 23.5.1 SSH Example .......................
P ART I User’s Guide 11
C HAPT ER 1 Introduction 1.1 Overview The LTE Device is an outdoors LTE (Long Term Evolution) router that also supports a Gigabit Ethernet connection. Its Voice over IP (VoIP) communication capabilities let you use a traditional analog telephone to make Internet calls. The LTE Device also includes a robust firewall that uses Stateful Packet Inspection (SPI) technology and protects against Denial of Service (DoS) attacks. 1.
Chapter 1 Introduction 1.2.2 VoIP Features Use SIP (Session Initiation Protocol) accounts with the LTE Device to make and receive VoIP telephone calls. Figure 2 LTE Device’s VoIP Application PSTN The LTE Device sends your call to a VoIP service provider’s SIP server which forwards your calls towards the destination VoIP or PSTN phones. 1.3 Ways to Manage the LTE Device Use the following method to manage the LTE Device. • Web Configurator.
C HAPT ER 2 Introducing the Web Configurator 2.1 Overview The web configurator is an HTML-based management interface that allows easy device setup and management via Internet browser. Use Internet Explorer 8.0 and later versions, Chrome 40 and later versions, Mozilla Firefox 36 and later versions, or Safari 7.0 and later versions. The recommended screen resolution is 1024 by 768 pixels. In order to use the web configurator you need to allow: • Web browser pop-up windows from your device.
Chapter 2 Introducing the Web Configurator 5 The following screen displays if you have not yet changed your password. It is strongly recommended you change the default password. Enter a new password, retype it to confirm and click Apply; alternatively click Skip to proceed to the main menu if you do not want to change the password now. Figure 4 Change Password Screen 6 The Connection Status screen appears.
Chapter 2 Introducing the Web Configurator 2.2 The Web Configurator Layout Click Connection Status > System Info to show the following screen. Figure 6 Web Configurator Layout A B C As illustrated above, the main screen is divided into these parts: • A - title bar • B - main window • C - navigation panel 2.2.1 Title Bar The title bar shows the Logout icons in the upper right corner. Click the Logout icon to log out of the web configurator.
Chapter 2 Introducing the Web Configurator 2.2.2 Main Window The main window displays information and configuration fields. It is discussed in the rest of this document. Click LAN Device on the System Info screen (a in Figure 6 on page 17) to display the Connection Status screen. See Chapter 3 on page 22 for more information on the System Info and Connection Status screens.
P ART II Technical Reference The appendices provide general information. Some details may not apply to your LTE Device.
C HAPT ER 3 Connection Status and System Info 3.1 Overview After you log into the web configurator, the Connection Status screen appears. This shows the network connection status of the LTE Device and clients connected to it. Use the System Info screen to look at the current status of the device, system resources, interfaces (LAN and WAN), and SIP accounts. You can also register and unregister SIP accounts.
Chapter 3 Connection Status and System Info To view the connected LAN devices in a list, click List View in the Viewing mode selection box. Figure 8 Connection Status: List View In Icon View, if you want to view information about a client, click the client’s name and Info. In List View, you can also view the client’s information. 3.3 The System Info Screen Click Connection Status > System Info to open this screen.
Chapter 3 Connection Status and System Info Each field is described in the following table. Table 1 System Info Screen LABEL DESCRIPTION Refresh Interval Select how often you want the LTE Device to update this screen from the dropdown list box. Device Information Host Name This field displays the LTE Device system name. It is used for identification. You can change this in the Maintenance > System screen’s Host Name field. Model Name This is the model name of your device.
Chapter 3 Connection Status and System Info Table 1 System Info Screen (continued) LABEL SIM Card Status DESCRIPTION This displays the SIM card status: PIN DISABLE - the SIM card has no PIN code security. PIN REQUIRED - the SIM card has PIN code security, but you did not enter the PIN code yet. PIN VERIFIED - the SIM card has PIN code security, and you entered the correct PIN code.
Chapter 3 Connection Status and System Info Table 1 System Info Screen (continued) LABEL Action DESCRIPTION This field displays the current registration status of the SIP account. You have to register SIP accounts with a SIP server to use VoIP. If the SIP account is already registered with the SIP server, • • Click Unregister to delete the SIP account’s registration in the SIP server.
Chapter 3 Connection Status and System Info 26 LTE7410 User’s Guide
C HAPT ER 4 Broadband 4.1 Overview This chapter discusses the LTE Device’s Broadband screens. Use these screens to configure your LTE Device for Internet access. A WAN (Wide Area Network) connection is an outside connection to another network or the Internet. It connects your private networks, such as a LAN (Local Area Network) and other networks, so that a computer in one location can communicate with computers in other locations. Figure 10 LAN and WAN LAN WAN 4.1.
Chapter 4 Broadband APN Access Point Name (APN) is a unique string which indicates an LTE network. An APN is required for LTE stations to enter the LTE network and then the Internet. 4.1.3 Before You Begin You may need to know your Internet access settings such as LTE APN, WAN IP address and SIM card’s PIN code if the INTERNET light on your LTE Device is off. Get this information from your service provider. 4.
Chapter 4 Broadband 4.2.1 Edit LTE Connection In Network Setting > Broadband, click the Edit icon next to an LTE connection to display the following screen. Use this screen to configure an LTE WAN connection. Figure 12 Network Setting > Broadband > LTE Interface Edit The following table describes the fields in this screen. Table 3 Network Setting > Broadband > LTE Interface Edit LABEL DESCRIPTION General Active Select this to have the LTE Device use the LTE connection.
Chapter 4 Broadband Table 3 Network Setting > Broadband > LTE Interface Edit (continued) LABEL DESCRIPTION Passthrough Mode Select the Passthrough Mode for the LTE Device. Select None to disable this feature. Select Dynamic to allow the first connected LAN computer to have access to web services using the public IP address. Select Fixed to set the IP passthrough to a fixed MAC address.
Chapter 4 Broadband The following table describes the fields in this screen. Table 4 Network Setting > Broadband > SIM LABEL DESCRIPTION SIM card status This displays the SIM card status: PIN DISABLE - the SIM card has no PIN code security. PIN REQUIRED - the SIM card has PIN code security, but you did not enter the PIN code yet. PIN VERIFIED - the SIM card has PIN code security, and you entered the correct PIN code.
Chapter 4 Broadband You will need a new SIM card if you enter the wrong PUK code too many times. Figure 14 PUK Code The following table describes the fields in this screen. Table 5 PUK Code LABEL DESCRIPTION PUK code Enter the PUK (Pin Unlock Key) code to unlock the SIM card. New PIN code Enter the new PIN code for the SIM card. PUK remaining authentication times This shows how many more times you can try to enter the PUK code before permanently damaging the SIM card.
Chapter 4 Broadband 1 The ISP tells you the DNS server addresses, usually in the form of an information sheet, when you sign up. If your ISP gives you DNS server addresses, manually enter them in the DNS server fields. 2 If your ISP dynamically assigns the DNS server IP addresses (along with the LTE Device’s WAN IP address), set the DNS server fields to get the DNS server address from the ISP.
Chapter 4 Broadband 34 LTE7410 User’s Guide
C HAPT ER 5 Home Networking 5.1 Overview A Local Area Network (LAN) is a shared communication system to which many computers are attached. A LAN is usually located in one immediate area such as a building or floor of a building. The LAN screens can help you configure a LAN DHCP server and manage IP addresses. LAN WAN 5.1.1 What You Can Do in this Chapter • Use the LAN Setup screen to set the LAN IP address, subnet mask, and DHCP settings (Section 5.2 on page 37).
Chapter 5 Home Networking Subnet Mask The subnet mask specifies the network number portion of an IP address. Your LTE Device will compute the subnet mask automatically based on the IP address that you entered. You don't need to change the subnet mask computed by the LTE Device unless you are instructed to do otherwise. DHCP DHCP (Dynamic Host Configuration Protocol) allows clients to obtain TCP/IP configuration at startup from a server.
Chapter 5 Home Networking 5.2 The LAN Setup Screen Click Network Setting > Home Networking to open the LAN Setup screen. Use this screen to set the Local Area Network IP address and subnet mask of your LTE Device and configure the DNS server information that the LTE Device sends to the DHCP client devices on the LAN. Figure 15 Network Setting > Home Networking > LAN Setup The following table describes the fields in this screen.
Chapter 5 Home Networking Table 6 Network Setting > Home Networking > LAN Setup (continued) LABEL DESCRIPTION IP Pool Starting Address This field specifies the first of the contiguous addresses in the IP address pool. Pool Size This field specifies the size, or count of the IP address pool. DHCP Server Lease Time Lease Time DHCP server leases an address to a new device for a period of time, called the DHCP lease time.
Chapter 5 Home Networking Figure 16 Network Setting > Home Networking > IPv6 LAN Setup LTE7410 User’s Guide 39
Chapter 5 Home Networking The following table describes the labels in this screen. Table 7 Network Setting > Home Networking > IPv6 LAN Setup LABEL DESCRIPTION IPv6 LAN Setup Link Local Address Type Select Manual to manually enter a link local address. Select EUI64 to use the EUI-64 format to generate a link local address from the Ethernet MAC address.
Chapter 5 Home Networking Table 7 Network Setting > Home Networking > IPv6 LAN Setup (continued) LABEL DESCRIPTION LAN IPv6 Address Assign Setup Select how you want to obtain an IPv6 address: • • • LAN IPv6 DNS Assign Setup Stateless: The LTE Device uses IPv6 stateless autoconfiguration. RADVD (Router Advertisement Daemon) is enabled to have the LTE Device send IPv6 prefix information in router advertisements periodically and in response to router solicitations. DHCPv6 server is disabled.
Chapter 5 Home Networking Table 7 Network Setting > Home Networking > IPv6 LAN Setup (continued) LABEL Other config flag on DESCRIPTION Select this to have the LTE Device indicate to hosts to obtain DNS information through DHCPv6. Clear this to have the LTE Device indicate to hosts that DNS information is not available in this network.
Chapter 5 Home Networking 5.4.1 Before You Begin Find out the MAC addresses of your network devices if you intend to add them to the Static DHCP screen. Use this screen to change your LTE Device’s static DHCP settings. Click Network Setting > Home Networking > Static DHCP to open the following screen. Figure 17 Network Setting > Home Networking > Static DHCP The following table describes the labels in this screen.
Chapter 5 Home Networking Table 9 Static DHCP: Add New Static Lease LABEL DESCRIPTION OK Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. 5.5 The UPnP Screen Universal Plug and Play (UPnP) is a distributed, open networking standard that uses TCP/IP for simple peer-to-peer network connectivity between devices. A UPnP device can dynamically join a network, obtain an IP address, convey its capabilities and learn about other devices on the network.
Chapter 5 Home Networking LANs, WANs and the LTE Device The actual physical connection determines whether the LTE Device ports are LAN or WAN ports. There are two separate IP networks, one inside the LAN network and the other outside the WAN network as shown next. Figure 20 LAN and WAN IP Addresses LAN WAN DHCP Setup DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at start-up from a server.
Chapter 5 Home Networking Device. The Internet Assigned Number Authority (IANA) reserved this block of addresses specifically for private use; please do not use any other number unless you are told otherwise. Let's say you select 192.168.1.0 as the network number; which covers 254 individual addresses, from 192.168.1.1 to 192.168.1.254 (zero and 255 are reserved). In other words, the first three numbers specify the network number while the last number identifies an individual computer on that network.
Chapter 5 Home Networking 2 Click the Windows Setup tab and select Communication in the Components selection box. Click Details. Figure 21 Add/Remove Programs: Windows Setup: Communication 3 In the Communications window, select the Universal Plug and Play check box in the Components selection box. Figure 22 Add/Remove Programs: Windows Setup: Communication: Components 4 Click OK to go back to the Add/Remove Programs Properties window and click Next.
Chapter 5 Home Networking 5 Restart the computer when prompted. Installing UPnP in Windows XP Follow the steps below to install the UPnP in Windows XP. 1 Click Start and Control Panel. 2 Double-click Network Connections. 3 In the Network Connections window, click Advanced in the main menu and select Optional Networking Components …. Figure 23 Network Connections 4 The Windows Optional Networking Components Wizard window displays.
Chapter 5 Home Networking 5 In the Networking Services window, select the Universal Plug and Play check box. Figure 25 Networking Services 6 Click OK to go back to the Windows Optional Networking Component Wizard window and click Next. 5.8 Using UPnP in Windows XP Example This section shows you how to use the UPnP feature in Windows XP. You must already have UPnP installed in Windows XP and UPnP activated on the LTE Device. Make sure the computer is connected to a LAN port of the LTE Device.
Chapter 5 Home Networking 2 Right-click the icon and select Properties. Figure 26 Network Connections 3 In the Internet Connection Properties window, click Settings to see the port mappings there were automatically created.
Chapter 5 Home Networking 4 You may edit or delete the port mappings or click Add to manually add port mappings. Figure 28 Internet Connection Properties: Advanced Settings Figure 29 Internet Connection Properties: Advanced Settings: Add 5 When the UPnP-enabled device is disconnected from your computer, all port mappings will be deleted automatically.
Chapter 5 Home Networking 6 Select Show icon in notification area when connected option and click OK. An icon displays in the system tray. Figure 30 System Tray Icon 7 Double-click on the icon to display your current Internet connection status. Figure 31 Internet Connection Status Web Configurator Easy Access With UPnP, you can access the web-based configurator on the LTE Device without finding out the IP address of the LTE Device first.
Chapter 5 Home Networking 3 Select My Network Places under Other Places. Figure 32 Network Connections 4 An icon with the description for each UPnP-enabled device displays under Local Network.
Chapter 5 Home Networking 5 Right-click on the icon for your LTE Device and select Invoke. The web configurator login screen displays. Figure 33 Network Connections: My Network Places 6 Right-click on the icon for your LTE Device and select Properties. A properties window displays with basic information about the LTE Device.
C HAPT ER 6 Static Route 6.1 Overview The LTE Device usually uses the default gateway to route outbound traffic from computers on the LAN to the Internet. To have the LTE Device send data to devices not reachable through the default gateway, use static routes. For example, the next figure shows a computer (A) connected to the LTE Device’s LAN interface. The LTE Device routes most traffic from A to the Internet through the LTE Device’s default gateway (R1).
Chapter 6 Static Route 6.2 Configuring Static Route Use this screen to view and configure IP static routes on the LTE Device. Click Network Setting > Routing to open the Static Route screen. Figure 36 Network Setting > Routing > Static Route The following table describes the labels in this screen. Table 11 Network Setting > Routing > Static Route LABEL DESCRIPTION Add New Static Route Click this to set up a new static route on the LTE Device. # This is the number of an individual static route.
Chapter 6 Static Route 6.2.1 Add/Edit Static Route Click add new Static Route in the Routing screen, the following screen appears. Use this screen to configure the required information for a static route. Figure 37 Routing: Add New Static Route The following table describes the labels in this screen. Table 12 Routing: Add/Edit LABEL DESCRIPTION Destination IP Address This parameter specifies the IP network address of the final destination. Routing is always based on network number.
Chapter 6 Static Route 58 LTE7410 User’s Guide
C HAPT ER 7 DNS Route 7.1 Overview DNS (Domain Name System) is for mapping a domain name to its corresponding IP address and vice versa. The DNS server is extremely important because without it, you must know the IP address of a machine before you can access it. In addition to the system DNS servers, each WAN interface (service) is set to have its own static or dynamic DNS server list.
Chapter 7 DNS Route 7.2 The DNS Route Screen The DNS Route screens let you view and configure DNS routes on the LTE Device. Click Network Setting > Routing > DNS Route to open the DNS Route screen. A DNS route forwards DNS queries for a specific domain name through a specific WAN interface to its DNS server. Figure 39 Network Setting > Routing > DNS Route The following table describes the labels in this screen.
Chapter 7 DNS Route The following table describes the labels in this screen. Table 14 DNS Route: Add/Edit LABEL DESCRIPTION Domain Name Enter the domain name you want to resolve. You can use the wildcard character, an “*” (asterisk) as the left most part of a domain name, such as *.example.com. The LTE Device forwards DNS queries for any domain name ending in example.com to the WAN interface specified in this route.
Chapter 7 DNS Route 62 LTE7410 User’s Guide
C HAPT ER 8 Network Address Translation (NAT) 8.1 Overview NAT (Network Address Translation - NAT, RFC 1631) is the translation of the IP address of a host in a packet, for example, the source address of an outgoing packet, used within one network to a different IP address known within another network. 8.1.1 What You Can Do in this Chapter • Use the General screen to limit the number of concurrent NAT sessions each client can use (Section 8.2 on page 64).
Chapter 8 Network Address Translation (NAT) Port Forwarding A port forwarding set is a list of inside (behind NAT on the LAN) servers, for example, web or FTP, that you can make visible to the outside world even though NAT makes your whole inside network appear as a single computer to the outside world. Finding Out More See Section 8.6 on page 68 for advanced technical information on NAT. 8.2 The General Screen Use the General screen to limit the number of concurrent NAT sessions each client can use.
Chapter 8 Network Address Translation (NAT) specify a range of port numbers. You can allocate a server IP address that corresponds to a port or a range of ports. Please refer to RFC 1700 for further information about port numbers. Note: Many residential broadband ISP accounts do not allow you to run any server processes (such as a Web or FTP server) from your location. Your ISP may periodically check for servers and may suspend your account if it discovers any active services at your location.
Chapter 8 Network Address Translation (NAT) Table 16 Network Setting > NAT > Port Forwarding (continued) LABEL DESCRIPTION Active This field indicates whether the rule is active or not. A yellow bulb signifies that this rule is active. A gray bulb signifies that this rule is not active. Service Name This is the service’s name. This shows User Defined if you manually added a service. You can change this by clicking the edit icon.
Chapter 8 Network Address Translation (NAT) Table 17 Port Forwarding: Add/Edit (continued) LABEL DESCRIPTION External Start Port Configure this for a user-defined entry. Enter the original destination port for the packets. To forward only one port, enter the port number again in the External End Port field. To forward a series of ports, enter the start port number here and the end port number in the External End Port field. External End Port Configure this for a user-defined entry.
Chapter 8 Network Address Translation (NAT) The following table describes the fields in this screen. Table 18 Network Setting > NAT > DMZ LABEL DESCRIPTION WAN Interface Select the WAN interface for which to configure a default server. Default Server Address Enter the IP address of the default server which receives packets from ports that are not specified in the Port Forwarding screen.
Chapter 8 Network Address Translation (NAT) 8.6.1 NAT Definitions Inside/outside denotes where a host is located relative to the LTE Device, for example, the computers of your subscribers are the inside hosts, while the web servers on the Internet are the outside hosts.
Chapter 8 Network Address Translation (NAT) Device keeps track of the original addresses and port numbers so incoming reply packets can have their original values restored. The following figure illustrates this. Figure 47 How NAT Works NAT Table LAN Inside Local IP Address 192.168.1.10 192.168.1.11 192.168.1.12 192.168.1.13 192.168.1.13 192.168.1.12 SA SA 192.168.1.10 IGA1 Inside Local Address (ILA) 192.168.1.
C HAPT ER 9 Dynamic DNS 9.1 Overview This chapter discusses how to configure your LTE Device to use Dynamic DNS. Dynamic DNS allows you to update your current dynamic IP address with one or many dynamic DNS services so that anyone can contact you (in applications such as NetMeeting and CU-SeeMe). You can also access your FTP server or Web site on your own computer using a domain name (for instance myhost.dhs.
Chapter 9 Dynamic DNS 9.2 The Dynamic DNS Screen Use the Dynamic DNS screen to enable DDNS and configure the DDNS settings on the LTE Device. To change your LTE Device’s DDNS, click Network Setting > Dynamic DNS. The screen appears as shown. Figure 48 Network Setting > Dynamic DNS The following table describes the fields in this screen. Table 21 Network Setting > Dynamic DNS LABEL DESCRIPTION Dynamic DNS Configuration Dynamic DNS Select Enable to use dynamic DNS.
C HAPTER 10 Firewall 10.1 Overview This chapter shows you how to enable the LTE Device firewall. Use the firewall to protect your LTE Device and network from attacks by hackers on the Internet and control access to it. The firewall: • allows traffic that originates from your LAN computers to go to all other networks. • blocks traffic that originates on other networks from going to the LAN. • blocks SYN and port scanner attacks.
Chapter 10 Firewall • Use the DoS screen (Section 10.5 on page 81) to set the thresholds that the LTE Device uses to determine when to start dropping sessions that do not become fully established (half-open sessions). Note: The settings and rules configured in the Default Action and Rules screens can be apply only when the firewall protection level is set to Custom in the General screen. 10.1.
Chapter 10 Firewall RFC 4890 SPEC Traffic RFC 4890 specifies the filtering policies for ICMPv6 messages. This is important for protecting against security threats including DoS, probing, redirection attacks and renumbering attacks that can be carried out through ICMPv6. Since ICMPv6 error messages are critical for establishing and maintaining communications, filtering policy focuses on ICMPv6 informational messages.
Chapter 10 Firewall The following table describes the labels in this screen. Table 22 Security > Firewall > General LABEL DESCRIPTION High This setting blocks all traffic to and from the Internet. Only local network traffic and LAN to WAN service (Telnet, FTP, HTTP, HTTPS, DNS, POP3, SMTP) is permitted. Medium This is the recommended setting. It allows traffic to the Internet but blocks anyone from the Internet from accessing any services on your local network.
Chapter 10 Firewall The following table describes the labels in this screen. Table 23 Security > Firewall > Default Action LABEL DESCRIPTION Packet Direction This is the direction of travel of packets (WAN to LAN, LAN to WAN, WAN to Router, LAN to Router). Firewall rules are grouped based on the direction of travel of packets to which they apply. For example, LAN to Router means packets traveling from a computer/subnet on the LAN to the LTE Device itself.
Chapter 10 Firewall 10.4.1 Rules Add Screen Use this screen to configure firewall rules. In the Rules screen, select an index number and click Add or click a rule’s Edit icon to display this screen and refer to the following table for information on the labels. Figure 53 Security > Firewall > Rules > Add The following table describes the labels in this screen. Table 25 Security > Firewall > Rules > Add LABEL DESCRIPTION Edit Rule 78 Active Select this option to enable this firewall rule.
Chapter 10 Firewall Table 25 Security > Firewall > Rules > Add (continued) LABEL DESCRIPTION Maximum Burst Number Set the maximum number of packets that can be sent at the peak rate. Log This field determines if a log for packets that match the rule is created or not. Rules/Source Address Address Type Do you want your rule to apply to packets with a particular (single) IP, a range of IP addresses (for instance, 192.168.1.10 to 192.169.1.
Chapter 10 Firewall Figure 54 Security > Firewall > Rules: Add: Edit Customized Services The following table describes the labels in this screen. Table 26 Security > Firewall > Rules: Add: Edit Customized Services LABEL DESCRIPTION # This is the number of your customized port. Name This is the name of your customized service. Protocol This shows the IP protocol (TCP or UDP) that defines your customized service. Port Type This is the port number or range that defines your customized service.
Chapter 10 Firewall Figure 55 Security > Firewall > Rules: Add: Edit Customized Services: Add The following table describes the labels in this screen. Table 27 Security > Firewall > Rules: Edit: Edit Customized Services: Add/Edit LABEL DESCRIPTION Config Service Name Type a unique name for your custom port. Service Type Choose the IP port (TCP or UDP) that defines your customized port from the drop down list box.
Chapter 10 Firewall The following table describes the labels in this screen. Table 28 Security > Firewall > Dos LABEL DESCRIPTION Denial of Services Enable this to protect against DoS attacks. The LTE Device will drop sessions that surpass maximum thresholds. Apply Click this to save your changes. Cancel Click this to restore your previously saved settings. Advanced Click this to go to a screen to specify maximum thresholds at which the LTE Device will start dropping sessions. 10.5.
Chapter 10 Firewall 3 The CPU power of servers in your LAN network. 4 Network bandwidth. 5 Type of traffic for certain servers. Reduce the threshold values if your network is slower than average for any of these factors (especially if you have servers that are slow or handle many tasks and are often busy).
Chapter 10 Firewall Table 29 Security > Firewall > DoS > Advanced (continued) LABEL DESCRIPTION ICMP Redirect Select Enable to monitor for and block ICMP redirect attacks. An ICMP redirect attack is one where forged ICMP redirect messages can force the client device to route packets for certain connections through an attacker’s host. DoS Log(Log Level: DEBUG) Select Enable to log DoS attacks. See Section 15.3 on page 125 for information on viewing logs. OK Click this to save your changes.
Chapter 10 Firewall Note: You also need to configure NAT port forwarding (or full featured NAT address mapping rules) to allow computers on the WAN to access devices on the LAN. • WAN to Router By default the LTE Device stops computers on the WAN from managing the LTE Device. You could configure one of these rules to allow a WAN computer to manage the LTE Device. Note: You also need to configure the remote management settings to allow a WAN computer to manage the LTE Device.
Chapter 10 Firewall Consider these security ramifications before creating a rule: 1 Does this rule stop LAN users from accessing critical resources on the Internet? For example, if IRC is blocked, are there users that require this service? 2 Is it possible to modify the rule to be more specific? For example, if IRC is blocked for all users, will a rule that blocks just certain users be more effective? 3 Does a rule that allows Internet users access to resources on the LAN create a security vulnerabili
C HAPTER 11 Certificates 11.1 Overview The LTE Device can use certificates (also called digital IDs) to authenticate users. Certificates are based on public-private key pairs. A certificate contains the certificate owner’s identity and public key. Certificates provide a way to exchange public keys for use in authentication. 11.1.1 What You Can Do in this Chapter • Use the Local Certificates screen to view and import the LTE Device’s CA-signed certificates (Section 11.2 on page 89).
Chapter 11 Certificates The LTE Device uses certificates based on public-key cryptology to authenticate users attempting to establish a connection. The method used to secure the data that you send through an established connection depends on the type of connection. For example, a VPN tunnel might use the triple DES encryption algorithm. The certification authority uses its private key to sign certificates. Anyone can then use the certification authority’s public key to verify the certificates.
Chapter 11 Certificates 2 Make sure that the certificate has a “.cer” or “.crt” file name extension. Figure 59 Certificates on Your Computer 3 Double-click the certificate’s icon to open the Certificate window. Click the Details tab and scroll down to the Thumbprint Algorithm and Thumbprint fields. Figure 60 Certificate Details 4 Use a secure method to verify that the certificate owner has the same information in the Thumbprint Algorithm and Thumbprint fields.
Chapter 11 Certificates Click Security > Certificates to open the Local Certificates screen. Figure 61 Security > Certificates > Local Certificates The following table describes the labels in this screen. Table 30 Security > Certificates > Local Certificates LABEL DESCRIPTION WebServer Click Browse... to find the certificate file you want to upload. Current File This field displays the name used to identify this certificate. It is recommended that you give each certificate a unique name.
Chapter 11 Certificates 11.3 Trusted CA Use this screen to view a summary list of certificates of the certification authorities that you have set the LTE Device to accept as trusted. The LTE Device accepts any valid certificate signed by a certification authority on this list as being trustworthy; thus you do not need to import any certificate that is signed by one of these certification authorities. Click Security > Certificates > Trusted CA to open the Trusted CA screen.
Chapter 11 Certificates Note: You must remove any spaces from the certificate’s filename before you can import the certificate. Figure 63 Trusted CA > Import The following table describes the labels in this screen. Table 32 Security > Certificates > Trusted CA > Import LABEL DESCRIPTION Certificate File Path Type in the location of the file you want to upload in this field or click Browse to find it. Browse Click Browse to find the certificate file you want to upload.
Chapter 11 Certificates Click Security > Certificates > Trusted CA to open the Trusted CA screen. Click the View icon to open the View Certificate screen. Figure 64 Trusted CA: View The following table describes the labels in this screen. Table 33 Trusted CA: View LABEL DESCRIPTION Certificate Name This field displays the identifying name of this certificate. If you want to change the name, type up to 31 characters to identify this key certificate. You may use any character (not including spaces).
Chapter 11 Certificates 94 LTE7410 User’s Guide
C HAPTER 12 L2TP VPN 12.1 Overview L2TP VPN tunnels network traffic between the LTE Device and a peer device or server over the Internet. 12.2 The Setup Screen Use this screen to view and manage L2TP VPN tunnels. Click Security > L2TP VPN to open the following screen. Figure 65 Security > L2TP VPN The following table describes the labels in this screen. Table 34 Security > L2TP VPN LABEL DESCRIPTION # This shows the index number of an L2TP tunnel.
Chapter 12 L2TP VPN 12.3 The Edit L2TP Tunnel Screen Use this screen to modify a L2TP VPN tunnel. Click Edit icon in Security > L2TP VPN > Modify to open the following screen. Click Security > L2TP VPN > Modify to open the L2TP Tunnel Edit screen. Figure 66 Security > L2TP VPN > Modify The following table describes the labels in this screen. Table 35 Security > L2TP VPN > Modify 96 LABEL DESCRIPTION Active Click this to activate the L2TP VPN. Default Route Click this to activate the default route.
C HAPTER 13 GRE VPN 13.1 Overview GRE (Generic Routing Encapsulation) tunnels encapsulate a wide variety of network layer protocol packet types inside IP tunnels. A GRE tunnel serves as a virtual point-to-point link between the LTE Device and another router over an IPv4 network. 13.2 The Setup Screen Use this screen to view and manage GRE VPN tunnels. Click Security > GRE VPN to open the following screen. Figure 67 Security > GRE VPN The following table describes the labels in this screen.
Chapter 13 GRE VPN 13.3 The Edit GRE Tunnel Screen Use this screen to modify a GRE VPN tunnel. Click Edit icon in Security > GRE VPN > Modify to open the following screen. Figure 68 Security > GRE VPN > Modify The following table describes the labels in this screen. Table 37 Security > GRE VPN > Modify 98 LABEL DESCRIPTION Active Click this to activate the GRE VPN. Tunnel Name Enter a descriptive name for the GRE tunnel.
C HAPTER 14 VoIP 14.1 Overview Use this chapter to: • Connect an analog phone to the LTE Device. • Make phone calls over the Internet, as well as the regular phone network. • Configure settings such as speed dial. • Configure network settings to optimize the voice quality of your phone calls. 14.1.1 What You Can Do in this Chapter These screens allow you to configure your LTE Device to make phone calls over the Internet and your regular phone line, and to set up the phones you connect to the LTE Device.
Chapter 14 VoIP SIP SIP stands for Session Initiation Protocol. SIP is a signalling standard that lets one network device (like a computer or the LTE Device) send messages to another. In VoIP, these messages are about phone calls over the network. For example, when you dial a number on your LTE Device, it sends a SIP message over the network asking the other device (the number you dialed) to take part in the call. SIP Accounts A SIP account is a type of VoIP account.
Chapter 14 VoIP • You should have the information your VoIP service provider gave you ready, before you start to configure the LTE Device. 14.2 The SIP Account Screen The LTE Device uses a SIP account to make outgoing VoIP calls and check if an incoming call’s destination number matches your SIP account’s SIP number. In order to make or receive a VoIP call, you need to enable and configure a SIP account, and map it to a phone port.
Chapter 14 VoIP 14.2.1 Edit SIP Account You can configure a SIP account. To access this screen, click the Edit icon next to an account. Figure 70 SIP Account: Add/Edit Each field is described in the following table. Table 39 SIP Account: Edit LABEL DESCRIPTION General Enable SIP Account Select the check box to use this account. Clear it to not use this account. SIP Account Number Enter your SIP number. In the full SIP URI, this is the part before the @ symbol.
Chapter 14 VoIP Table 39 SIP Account: Edit (continued) LABEL DESCRIPTION Password Enter the password for registering this SIP account, exactly as it was given to you. You can use up to 95 printable ASCII characters. URL Type URL Type Select whether or not to include the SIP service domain name when the LTE Device sends the SIP number. SIP - include the SIP service domain name. TEL - do not include the SIP service domain name.
Chapter 14 VoIP Table 39 SIP Account: Edit (continued) LABEL DESCRIPTION No Answer Ring Time This field is used by the Active No Answer Forward feature. Active No Answer Forward Enter the number of seconds the LTE Device should wait for you to answer an incoming call before it considers the call is unanswered. Select this if you want the LTE Device to forward incoming calls to the specified phone number if the call is unanswered. (See No Answer Time.
Chapter 14 VoIP Table 40 VoIP > SIP > SIP Service Provider (continued) LABEL DESCRIPTION SIP Service Domain Enter the SIP service domain name. In the full SIP URI, this is the part after the @ symbol. You can use up to 127 printable ASCII Extended set characters. Modify Click the Edit icon to configure the profile of SIP service provider settings. 14.3.
Chapter 14 VoIP Figure 72 VoIP > SIP > SIP Service Provider > Edit 106 LTE7410 User’s Guide
Chapter 14 VoIP Note: VoIP > SIP > SIP Service Provider > Edit (continued) Figure 73 The following table describes the labels in this screen. Table 41 VoIP > SIP > SIP Service Provider > Edit LABEL DESCRIPTION General SIP Service Provider Select this if you want the LTE Device to use this SIP provider. Clear it if you do not want the LTE Device to use this SIP provider. SIP Service Provider Name Enter the name of your SIP service provider.
Chapter 14 VoIP Table 41 VoIP > SIP > SIP Service Provider > Edit (continued) LABEL DESCRIPTION SIP Service Domain Enter the SIP service domain name. In the full SIP URI, this is the part after the @ symbol. You can use up to 127 printable ASCII Extended set characters. Bound Interface Name Bound Interface Name If you select AnyWAN, the LTE Device automatically activates the VoIP service when any WAN connection is up. If you select MultiWAN, you also need to select the pre-configured WAN connections.
Chapter 14 VoIP Table 41 VoIP > SIP > SIP Service Provider > Edit (continued) LABEL DESCRIPTION DTMF Mode Control how the LTE Device handles the tones that your telephone makes when you push its buttons. You should use the same mode your VoIP service provider uses. RFC2833 - send the DTMF tones in RTP packets. Inband - send the DTMF tones in the voice data stream. This method works best when you are using a codec that does not use compression (like G.711). Codecs that use compression (like G.
Chapter 14 VoIP Table 41 VoIP > SIP > SIP Service Provider > Edit (continued) LABEL DESCRIPTION Phone Key Config Use this section to customize the phone keypad combinations you use to access certain features on the LTE Device. Caller Display Call This code is used to display the caller ID for outgoing calls. Caller Hidden Call This code is used to hide the caller ID for outgoing calls.
Chapter 14 VoIP 14.3.2 Dial Plan Rules A dial plan defines the dialing patterns, such as the length and range of the digits for a telephone number. It also includes country codes, access codes, area codes, local numbers, long distance numbers or international call prefixes. For example, the dial plan ([2-9]xxxxxx) does not allow a local number which begins with 1 or 0.
Chapter 14 VoIP 14.4 Phone Screen Use this screen to maintain settings that depend on which region of the world the LTE Device is in. To access this screen, click VoIP > Phone. Figure 74 VoIP > Phone Each field is described in the following table. Table 42 VoIP > Phone LABEL DESCRIPTION Region Setting Select the place in which the LTE Device is located.
Chapter 14 VoIP To access this screen, click VoIP > Call Rule. Figure 75 VoIP > Call Rule Each field is described in the following table. Table 43 VoIP > Call Rule LABEL DESCRIPTION Clear all speed dials Click this to erase all the speed-dial entries. Keys This field displays the speed-dial number you should dial to use this entry. Number Enter the SIP number you want the LTE Device to call when you dial the speed-dial number.
Chapter 14 VoIP 14.6.2 SIP The Session Initiation Protocol (SIP) is an application-layer control (signaling) protocol that handles the setting up, altering and tearing down of voice and multimedia sessions over the Internet. SIP signaling is separate from the media for which it handles sessions. The media that is exchanged during the session can use a different path from that of the signaling. SIP handles telephone calls and can interface with traditional circuit-switched telephone networks.
Chapter 14 VoIP Authorization Requirements SIP registrations (and subsequent SIP requests) require a username and password for authorization. These credentials are validated via a challenge / response system using the HTTP digest mechanism (as detailed in RFC 3261, "SIP: Session Initiation Protocol"). SIP Servers SIP is a client-server protocol. A SIP client is an application program or device that sends SIP requests. A SIP server responds to the SIP requests.
Chapter 14 VoIP 2 The SIP proxy server forwards the call invitation to C. Figure 77 SIP Proxy Server B 1 2 A C SIP Redirect Server A SIP redirect server accepts SIP requests, translates the destination address to an IP address and sends the translated IP address back to the device that sent the request. Then the client device that originally sent the request can send requests to the IP address that it received back from the redirect server. Redirect servers do not initiate SIP requests.
Chapter 14 VoIP 3 Client device A then sends the call invitation to client device C. Figure 78 SIP Redirect Server 1 2 A 3 B C SIP Register Server A SIP register server maintains a database of SIP identity-to-IP address (or domain name) mapping. The register server checks your user name and password when you register. RTP When you make a VoIP call using SIP, the RTP (Real time Transport Protocol) is used to handle voice data transfer. See RFC 3550 for details on RTP.
Chapter 14 VoIP 1 A sends a SIP INVITE request to B. This message is an invitation for B to participate in a SIP telephone call. 2 B sends a response indicating that the telephone is ringing. 3 B sends an OK response after the call is answered. 4 A then sends an ACK message to acknowledge that B has answered the call. 5 Now A and B exchange voice media (talk). 6 After talking, A hangs up and sends a BYE request.
Chapter 14 VoIP 14.6.3 Phone Services Overview Supplementary services such as call hold, call waiting, and call transfer. are generally available from your VoIP service provider.
Chapter 14 VoIP Table 45 European Flash Key Commands COMMAND SUB-COMMAND DESCRIPTION Flash 3 Create three-way conference connection. Flash *98# Transfer the call to another phone. European Call Hold Call hold allows you to put a call (A) on hold by pressing the flash key. If you have another call, press the flash key and then “2” to switch back and forth between caller A and B by putting either one on hold.
Chapter 14 VoIP 1 When you are on the phone talking to someone, press the flash key to put the call on hold and get a dial tone. 2 Dial a phone number directly to make another call. 3 When the second call is answered, press the flash key and press “3” to create a three-way conversation. 4 Hang up the phone to drop the connection. 5 If you want to separate the activated three-way conference into two individual connections (one is on-line, the other is on hold), press the flash key and press “2”.
Chapter 14 VoIP 122 LTE7410 User’s Guide
C HAPTER 15 System Monitor 15.1 Overview Use the Traffic Status screens to view status and log information. 15.1.1 What You Can Do in this Chapter • Use the LTE Status screen to see the present LTE Status in detail (Section 15.2 on page 124). • Use the Log screen to see the system logs for the categories that you select (Section 15.3 on page 125). • Use the WAN Traffic Status screen to view the WAN traffic statistics (Section 15.4 on page 126).
Chapter 15 System Monitor facility identifies a file in the syslog server. Refer to the documentation of your syslog program for details. The following table describes the syslog severity levels. Table 46 Syslog Severity Levels CODE SEVERITY 0 Emergency: The system is unusable. 1 Alert: Action must be taken immediately. 2 Critical: The system condition is critical. 3 Error: There is an error condition on the system. 4 Warning: There is a warning condition on the system.
Chapter 15 System Monitor Table 47 System Monitor > LTE Status (continued) LABEL DESCRIPTION IMEI This displays the LTE Device’s International Mobile Equipment Identity number (IMEI). An IMEI is a unique ID used to identify a mobile device. SIM Card Status This displays the SIM card status. LTE Status Status This displays 4G LTE if there is an LTE connection, otherwise, it displays N/A. RSSI(dBm) This displays the Received Signal Strength Indication (RSSI) of the LTE connection.
Chapter 15 System Monitor The following table describes the fields in this screen. Table 48 System Monitor > Log LABEL DESCRIPTION Level Select a severity level from the drop-down list box. This filters search results according to the severity level you have selected. When you select a severity, the LTE Device searches through all logs of that severity or higher. Refresh Click this to renew the log screen. Clear Logs Click this to delete all the logs.
Chapter 15 System Monitor Table 49 System Monitor > Traffic Status > WAN (continued) LABEL Drop DESCRIPTION This indicates the number of outgoing packets dropped on this interface. Packets Received Data This indicates the number of received packets on this interface. Error This indicates the number of frames with errors received on this interface. Drop This indicates the number of received packets dropped on this interface. 15.
Chapter 15 System Monitor Table 50 System Monitor > Traffic Status > LAN (continued) LABEL DESCRIPTION Error This indicates the number of frames with errors received on this interface. Drop This indicates the number of received packets dropped on this interface. 15.6 The NAT Traffic Status Screen Click System Monitor > Traffic Status > NAT to open the following screen. You can view the NAT status of the LTE Device’s clients in this screen.
Chapter 15 System Monitor The following table describes the fields in this screen. Table 52 System Monitor > VoIP Status LABEL DESCRIPTION Refresh Interval Specify how often you want the LTE Device to update this screen and click Set Interval to apply the change. SIP Status Account This column displays each SIP account in the LTE Device. Registration This field displays the current registration status of the SIP account. You can change this in the Status screen.
Chapter 15 System Monitor 130 LTE7410 User’s Guide
C HAPTER 16 User Account 16.1 Overview You can configure the system password in the User Account screen. 16.2 The User Account Screen Use the User Account screen to configure system password. Click Maintenance > User Account to open the following screen. Figure 85 Maintenance > User Account The following table describes the labels in this screen. Table 53 Maintenance > User Account LABEL DESCRIPTION User Name You can configure the password for the admin account.
Chapter 16 User Account 132 LTE7410 User’s Guide
C HAPTER 17 TR-069 Client 17.1 Overview This chapter explains how to configure the LTE Device’s TR-069 auto-configuration settings. 17.2 The TR-069 Client Screen TR-069 defines how Customer Premise Equipment (CPE), for example your LTE Device, can be managed over the WAN by an Auto Configuration Server (ACS). TR-069 is based on sending Remote Procedure Calls (RPCs) between an ACS and a client device. RPCs are sent in Extensible Markup Language (XML) format over HTTP or HTTPS.
Chapter 17 TR-069 Client The following table describes the fields in this screen. Table 54 Maintenance > TR-069 Client 134 LABEL DESCRIPTION CWMP Select Enable to allow the LTE Device to be managed by a management server. Otherwise, select Disable to not allow the LTE Device to be managed by a management server. ACS URL Enter the URL or IP address of the auto-configuration server. ACS User Name Enter the TR-069 user name for authentication with the auto-configuration server.
C HAPTER 18 System 18.1 Overview You can configure system settings, including the host name, domain name and the inactivity timeout interval in the System screen. 18.2 The System Screen Use the System screen to configure the system’s host name, domain name, and inactivity time-out interval. Click Maintenance > System to open the following screen. Figure 87 Maintenance > System The following table describes the labels in this screen.
Chapter 18 System 136 LTE7410 User’s Guide
C HAPTER 19 Time Setting 19.1 Overview You can configure the system’s time and date in the Time Setting screen. 19.2 The Time Setting Screen To change your LTE Device’s time and date, click Maintenance > Time. The screen appears as shown. Use this screen to configure the LTE Device’s time based on your local time zone. Figure 88 Maintenance > Time Setting The following table describes the fields in this screen.
Chapter 19 Time Setting Table 56 Maintenance > System > Time Setting (continued) LABEL DESCRIPTION Get from Time Server Select this to have the LTE Device get the time automatically from a time server. Time Server Address 1, 2 Enter the IP address or URL (up to 31 extended ASCII characters in length) of your time server. Check with your ISP/network administrator if you are unsure of this information. Time Zone Choose the time zone of your location.
C HAPTER 20 Log Setting 20.1 Overview You can configure where the LTE Device sends logs and which logs and/or immediate alerts the LTE Device records in the Log Setting screen. 20.2 The Log Setting Screen To change your LTE Device’s log settings, click Maintenance > Log Setting. The screen appears as shown.
Chapter 20 Log Setting The following table describes the fields in this screen. Table 57 Maintenance > Log Setting LABEL DESCRIPTION Syslog Settings Syslog Logging Select the Active check box to enable syslog logging. Mode Select Local File to have the LTE Device save the log file locally. Select Local File and Remote to have the LTE Device save the log file locally and send it to an external syslog server.
C HAPTER 21 Firmware Upgrade 21.1 Overview This chapter explains how to upload new firmware to your LTE Device. You can download new firmware releases from your nearest ZyXEL FTP site (or www.zyxel.com) to use to upgrade your device’s performance. Only use firmware for your device’s specific model. Refer to the label on the bottom of your LTE Device. 21.2 The Firmware Upgrade Screen Click Maintenance > Firmware Upgrade to open the following screen.
Chapter 21 Firmware Upgrade Table 58 Maintenance > Firmware Upgrade (continued) LABEL DESCRIPTION Browse... Click this to find the .bin file you want to upload. Remember that you must decompress compressed (.zip) files before you can upload them. Upload Click this to begin the upload process. This process may take up to three minutes. After you see the firmware updating screen, wait a few minutes before logging into the LTE Device again.
C HAPTER 22 Backup/Restore 22.1 Overview The Backup/Restore screen allows you to backup and restore device configurations. You can also reset your device settings back to the factory default. 22.2 The Backup/Restore Screen Click Maintenance > Backup/Restore. Information related to factory defaults, backup configuration, and restoring configuration appears in this screen, as shown next.
Chapter 22 Backup/Restore Restore Configuration Restore Configuration allows you to upload a new or previously saved configuration file from your computer to your LTE Device. Table 59 Restore Configuration LABEL DESCRIPTION File Path Type in the location of the file you want to upload in this field or click Browse ... to find it. Browse... Click this to find the file you want to upload. Remember that you must decompress compressed (.ZIP) files before you can upload them.
C HAPTER 23 Remote Management 23.1 Overview Remote management allows you to determine which services/protocols can access which LTE Device interface (if any) from which computers. The following figure shows remote management of the LTE Device coming in from the WAN. Figure 96 Remote Management From the WAN LAN WAN HTTP Telnet Note: When you configure remote management to allow management from the WAN, you still need to configure a IP filter rule to allow access.
Chapter 23 Remote Management • Use the SSH screen (Section 23.5 on page 149) to configure through which interfaces and from which IP addresses users can use SSH to manage the LTE Device. 23.1.2 What You Need to Know About Remote Management Remote Management Limitations • Remote management does not work when: • You have not enabled that service on the interface in the corresponding remote management screen. • You have disabled that service in one of the remote management screens.
Chapter 23 Remote Management 23.2.1 Configuring the WWW Screen Click Maintenance > Remote MGMT to display the WWW screen. Figure 97 Maintenance > Remote MGMT > WWW The following table describes the labels in this screen. Table 60 Maintenance > Remote MGMT > WWW LABEL DESCRIPTION Server Port This displays the service port number for accessing the LTE Device using HTTP or HTTPS. If the number is grayed out, it is not editable.
Chapter 23 Remote Management 23.3 Telnet Screen You can use Telnet to access the Device’s command line interface. Specify which interfaces allow Telnet access and from which IP address the access can come. Click Maintenance > Remote MGMT > Telnet tab to display the screen as shown. Figure 98 Maintenance > Remote MGMT > Telnet The following table describes the labels in this screen.
Chapter 23 Remote Management If an outside user attempts to probe an unsupported port on your LTE Device, an ICMP response packet is automatically returned. This allows the outside user to know the LTE Device exists. Your LTE Device supports anti-probing, which prevents the ICMP response packet from being sent. This keeps outsiders from discovering your LTE Device when unsupported ports are probed.
Chapter 23 Remote Management Click Maintenance > Remote MGMT > SSH tab to display the screen as shown. Figure 100 Maintenance > Remote MGMT > SSH The following table describes the labels in this screen. Table 63 Maintenance > Remote MGMT > SSH LABEL DESCRIPTION Server Port This displays the service port number for accessing the LTE Device. If the number is grayed out, it is not editable. Server Access Select the interfaces through which a computer may access the LTE Device using this service.
Chapter 23 Remote Management 1 2 3 Enter the IP address and port number. Select SSH. A window displays prompting you to store the host key in your computer. Click Yes to continue. Enter your user name and password.
Chapter 23 Remote Management 4 152 The command line interface displays.
C HAPTER 24 Diagnostic 24.1 Overview You can use different diagnostic methods to test a connection and see the detailed information. These read-only screens display information to help you identify problems with the LTE Device. 24.2 The Ping/TraceRoute Screen Ping and traceroute help check availability of remote hosts and also help troubleshoot network or Internet connections. Click Maintenance > Diagnostic to open the Ping/TraceRoute screen shown next.
Chapter 24 Diagnostic 154 LTE7410 User’s Guide
C HAPTER 25 Troubleshooting 25.1 Overview This chapter offers some suggestions to solve problems you might encounter. The potential problems are divided into the following categories. • Power and Hardware Connections • LTE Device Access and Login • Internet Access • Phone Calls and VoIP • UPnP 25.2 Power and Hardware Connections The LTE Device does not turn on. 1 Make sure the LTE Device is turned on. 2 Make sure you are using the power adaptor or cord included with the LTE Device.
Chapter 25 Troubleshooting 2 If you changed the IP address and have forgotten it, you might get the IP address of the LTE Device by looking up the IP address of the default gateway for your computer. To do this in most Windows computers, click Start > Run, enter cmd, and then enter ipconfig. The IP address of the Default Gateway might be the IP address of the LTE Device (it depends on the network), so enter this IP address in your Internet browser.
Chapter 25 Troubleshooting 2 You cannot log in to the web configurator while someone is using Telnet to access the LTE Device. Log out of the LTE Device in the other session, or ask the person who is logged in to log out. 3 Turn the LTE Device off and on. 4 If this does not work, you have to reset the device to its factory defaults. See Section 25.2 on page 155. I cannot Telnet to the LTE Device. See the troubleshooting suggestions for I cannot see or access the Login screen in the web configurator.
Chapter 25 Troubleshooting 2 Turn the LTE Device off and on. 3 If the problem continues, contact the network administrator or vendor, or try one of the advanced suggestions. 25.5 Phone Calls and VoIP The telephone port won’t work or the telephone lacks a dial tone. 1 Check the telephone connections and telephone wire. I can access the Internet, but cannot make VoIP calls. 1 You can also check the VoIP status in the System Info screen.
Chapter 25 Troubleshooting 1 Wait more than three minutes. 2 Restart the applications.
Chapter 25 Troubleshooting 160 LTE7410 User’s Guide
A PPENDIX A Customer Support In the event of problems that cannot be solved by using this manual, you should contact your vendor. If you cannot contact your vendor, then contact a ZyXEL office for the region in which you bought the device. Regional websites are listed below (see also http://www.zyxel.com/ about_zyxel/zyxel_worldwide.shtml). Please have the following information ready when you contact an office. Required Information • Product model and serial number. • Warranty Information.
Appendix A Customer Support Korea • ZyXEL Korea Corp. • http://www.zyxel.kr Malaysia • ZyXEL Malaysia Sdn Bhd. • http://www.zyxel.com.my Pakistan • ZyXEL Pakistan (Pvt.) Ltd. • http://www.zyxel.com.pk Philippines • ZyXEL Philippines • http://www.zyxel.com.ph Singapore • ZyXEL Singapore Pte Ltd. • http://www.zyxel.com.sg Taiwan • ZyXEL Communications Corporation • http://www.zyxel.com Thailand • ZyXEL Thailand Co., Ltd • http://www.zyxel.co.
Appendix A Customer Support Belgium • ZyXEL Communications B.V. • http://www.zyxel.com/be/nl/ Bulgaria • ZyXEL България • http://www.zyxel.com/bg/bg/ Czech • ZyXEL Communications Czech s.r.o • http://www.zyxel.cz Denmark • ZyXEL Communications A/S • http://www.zyxel.dk Estonia • ZyXEL Estonia • http://www.zyxel.com/ee/et/ Finland • ZyXEL Communications • http://www.zyxel.fi France • ZyXEL France • http://www.zyxel.fr Germany • ZyXEL Deutschland GmbH • http://www.zyxel.
Appendix A Customer Support Lithuania • ZyXEL Lithuania • http://www.zyxel.com/lt/lt/homepage.shtml Netherlands • ZyXEL Benelux • http://www.zyxel.nl Norway • ZyXEL Communications • http://www.zyxel.no Poland • ZyXEL Communications Poland • http://www.zyxel.pl Romania • ZyXEL Romania • http://www.zyxel.com/ro/ro Russia • ZyXEL Russia • http://www.zyxel.ru Slovakia • ZyXEL Communications Czech s.r.o. organizacna zlozka • http://www.zyxel.sk Spain • ZyXEL Spain • http://www.zyxel.
Appendix A Customer Support Turkey • ZyXEL Turkey A.S. • http://www.zyxel.com.tr UK • ZyXEL Communications UK Ltd. • http://www.zyxel.co.uk Ukraine • ZyXEL Ukraine • http://www.ua.zyxel.com Latin America Argentina • ZyXEL Communication Corporation • http://www.zyxel.com/ec/es/ Ecuador • ZyXEL Communication Corporation • http://www.zyxel.com/ec/es/ Middle East Egypt • ZyXEL Communication Corporation • http://www.zyxel.com/homepage.shtml Middle East • ZyXEL Communication Corporation • http://www.zyxel.
Appendix A Customer Support Oceania Australia • ZyXEL Communications Corporation • http://www.zyxel.com/au/en/ Africa South Africa • Nology (Pty) Ltd. • http://www.zyxel.co.
A PPENDIX B Legal Information Copyright Copyright © 2015 by ZyXEL Communications Corporation. The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation.
Appendix B Legal Information applications. For outdoor use, only 2400-2454 MHz frequency band may be used. For the latest requirements, see http://www.art-telecom.fr. CE Declaration of Conformity Complies with the essential requirements of Article 3 of the R&TTE 1999/5/EC Directive, if used for its intended use and the following standards have been applied: 1 Health (Article 3.1(a) of the R&TTE Directive) Applied Standard(s): • EN 62311: 2008 ; EN 50385 : 2002 2 Safety (Article 3.
Appendix B Legal Information Viewing Certifications 1 Go to http://www.zyxel.com. 2 Select your product on the ZyXEL home page to go to that product's page. 3 Select the certification you wish to view from this page. ZyXEL Limited Warranty ZyXEL warrants to the original end user (purchaser) that this product is free from any defects in material or workmanship for a specific period (the Warranty Period) from the date of purchase. The Warranty Period varies by region.
Appendix B Legal Information Safety Warnings • • • • • • • • • • • • • • • • • • • • • Do NOT use this product near water, for example, in a wet basement or near a swimming pool. Do NOT expose your device to dampness, dust or corrosive liquids. Do NOT store things on the device. Do NOT install, use, or service this device during a thunderstorm. There is a remote risk of electric shock from lightning. Connect ONLY suitable accessories to the device. Do NOT open the device or unit.
Index Index A certifications 167 viewing 169 ACK message 118 client list 42 ACS 133 client-server protocol 115 administrator password 15 comfort noise generation 100 anti-probing 75 configuration 45 backup 143 restoring 144 applications Internet access 13 VoIP 14 contact information 161 Auto Configuration Server, see ACS 133 copyright 167 automatic logout 15 customer support 161 customized services 79, 81 B D backup configuration 143 DDoS 74 Broadband 27 default LAN IP address 15 BYE
Index E I echo cancellation 100 IANA 46 Europe type call service mode 119 ICMP 75, 148 importing trusted CAs 91 F firewalls 73 actions 78 address types 79 anti-probing 75 customized services 79, 81 DDoS 74 default action 77 DoS 74 thresholds 75, 82 ICMP 75 LAND attack 74 logs 79 P2P 83 packet direction 77 Ping of Death 74 rules 84 security 85 SYN attack 74 three-way handshake 82 firmware 141 flash key 119 flashing 119 FTP 64 install UPnP 46 Windows Me 46 Windows XP 48 Internet access 13 Internet Ass
Index good habits 14 using FTP. See FTP.
Index static route 55 status 21 firmware version 23 subnet mask 45 voice activity detection 100 supplementary services 119 voice coding 118 SYN attack 74 VoIP 113 features 14 peer-to-peer calls 112 syslog protocol 123 severity levels 123 system firmware 141 passwords 15 status 21 System Info 22 system name 23 VoIP features 14 VoIP status 128 W WAN Wide Area Network, see WAN 27 warnings 170 T warranty 169 note 169 The 27 Web Configurator 15 three-way conference 120 web configurator passwords
