Quidway W1000 Series Wireless Access Device WA1003A Wireless ADSL Access Point User Manual

(1)

Quidway W1000 Series Wireless

Access Device WA1003A Wireless

ADSL Access Point

User Manual

(2)

HUAWEI

Quidway W1000 Series Wireless Access Device

WA1003A Wireless ADSL Access Point

User Manual

(3)

Quidway W1000 Series Wireless Access Device WA1003A Wireless ADSL Access Point

User Manual

Manual Version: T2-20050809-C-1.20

Huawei Technologies Co., Ltd. provides customers with comprehensive technical support and service. Please feel free to contact our local office or company headquarters.

Huawei Technologies Co., Ltd.

Address: Administration Building, Huawei Technologies Co., Ltd., Bantian, Longgang District, Shenzhen, P. R. China Postal Code: 518129

Website: http://terminal.huawei.com E-mail: support@huawei.com

(4)

No part of this manual may be reproduced or transmitted in any form or by any means without prior written consent of Huawei Technologies Co., Ltd.

Trademarks

, HUAWEI, SmartAX, Quidway are trademarks of Huawei Technologies Co., Ltd.

All other trademarks mentioned in this manual are the property of their respective holders.

Notice

The information in this manual is subject to change without notice.

Every effort has been made in the preparation of this manual to ensure accuracy of the contents, but all statements, information, and recommendations in this manual do not constitute the warranty of any kind, express or implied.

(5)

About This Manual

Organization

z Chapter 1 provides a brief description of WA1003A and a list of features.

z Chapter 2 introduces the hardware installation of WA1003A.

z Chapter 3 introduces the preparation procedures before configuring the WA1003A.

z Chapter 4 describes how to use the embedded Web-based management software to configure the WA1003A.

z Chapter 5 describes the detailed configuration procedures for 6 applications.

z Chapter 6 lists several FAQs and trouble-locating methods.

z Chapter 7 gives the technical specifications of the WA1003A.

z Appendix gives the abbreviation list and default factory settings for WA1003A.

Intended Audience

The manual is intended for the following readers:

z Marketing staff

z Installation engineers & technicians

z Operation & maintenance personnel

(6)

Conventions

The manual uses the following conventions:

I. General conventions

Convention Description

Arial Normal paragraphs are in Arial.

Arial Narrow Warnings, Cautions, Notes and Tips are in Arial Narrow.

Boldface Headings are in Boldface.

II. Symbols

Eye-catching symbols are also used in this manual to highlight the points worthy of special attention during the operation. They are defined as follows:

Caution: Means reader be extremely careful during the operation.

Note: Means a complementary description.

(7)

Environmental Protection

This product has been designed to comply with the requirements on environmental protection. For the proper storage, use and disposal of this product, national laws and regulations must be observed.

(8)

1 WA1003A Overview

In this chapter you will learn about the appearance and features of WA1003A. The WA1003A is designed to provide a simple, cost-effective and secure ADSL Internet connection for wired (Ethernet) and wireless (802.11b/g) stations on your network.

WA1003A combines high-speed ADSL connection technology, TCP/IP routing and 802.11b/g Wireless connectivity in one compact unit.

1.1 Structure

1.1.1 Front Panel

Place the WA1003A in a location where you can easily view the LED indicators.

The LEDs on the front panel of WA1003A are shown below:

Figure 1-1 Front panel WA1003A

The meanings of LEDs are listed as follows:

(12)

Numb

er LED

Indicators Description

1 Power

z Solid green indicates the device is powered on.

z No light indicates the device is powered off.

2 Status

z Solid green indicates power on self-test (POST) is in progress.

z Blinking green indicates the connection status is stable.

z Solid green after the POST indicates the system fails and the device needs reboot.

3 ADSL:

Link/Act

z Solid green indicates a valid ADSL connection. It is on after the ADSL negotiation process is settled.

z Blinking green indicates activity on the WAN (ADSL) interface.

4 Wireless:

Link/Act

z Solid green indicates a valid WLAN connection.

z Blinking green indicates activity on the WLAN interface.

5 USB:

Link/Act

z Solid green indicates a valid USB connection.

z Blinking green indicates activity on the USB interface.

6-9 LAN

1: Link/Act

z Solid green light indicates a valid link on startup.

z Blinking green indicates data is currently passing through the Ethernet port.

(13)

1.1.2 Rear Panel

All cables are connected to the rear panel of WA1003A.

The ports and switch on the rear panel of WA1003A are shown below:

Figure 1-2 Rear panel of WA1003A

Description of buttons and ports in rear panel:

Buttons/Ports Description

12V/AC 1.2A or 12V/DC 1.25A

The port and indication for AC or DC power adapter.

Reset

The WA1003A may be reset to the factory defaults if you press the reset button for a few seconds while the device is powered on.

Power To power on the device, press the button after the power adapter is connected properly..

Ethernet With this port, you can establish an Ethernet connection.

USB

If your computer has a USB port, you can connect the WA1003A to the USB port using a USB cable.

(14)

Buttons/Ports Description

ADSL

Plug one end of the cable into the ADSL port (RJ-11 receptacle) on the rear panel of the WA1003A and insert the other end into the RJ-11 wall socket.

Antenna Screw-on antenna, for 802.11b wireless connection.

1.1.3 External Splitter

Using splitter can reduce noises in the telephone line.

WA1003A has to use an external splitter, which has three ports: LINE, PHONE and MODEM port.

z LINE: Connects to the telephone jack.

z PHONE: Connects to the telephone.

z MODEM: Connects to ADSL modem with RJ-11 telephone line.

1.2 Features

1.2.1 ADSL

z Supporting ADSL2+, data rates up to 24 Mbps for downstream and 1 Mbps for upstream

z Supporting up to eight simultaneous virtual connections

z Supporting T1.413 issue 2, G.dmt and G.lite standards

z Widest range of DSLAM interoperability

(15)

1.2.2 Wireless

z Compatible with IEEE 802.11g high rate standard to provide wireless 54Mbps data rate

z Compatible with IEEE 802.11b high rate standard to provide wireless 11Mbps data rate

z Operating at 2.4 ~ 2.5GHz frequency to meet worldwide regulations

z Dynamic date rate scaling at 6 Mbps, 9 Mbps, 12 Mbps, 18 Mbps, 24 Mbps, 36 Mbps, 48 Mbps and 54 Mbps for IEEE 802.11g

z Dynamic date rate scaling at 1 Mbps, 2 Mbps, 5.5 Mbps and 11Mbps for IEEE 802.11b

z Supporting wireless data encryption with 64/128-bit WEP for security

z Supporting infrastructure networks through Access Point (AP) and special network through peer-to-peer communication

z Integrated microstrip antenna

z WPA enhanced security

1.2.3 Others

z Built-in MIBs for SNMP management

z Upgradeable firmware through TFTP

z Friendly Web-based Graphic User Interface (GUI) for configuration and management.

z Built-in switch, supports up to 4 Ethernet connections

z Maximum reliability, throughput and connectivity with automatic data rate switching

(16)

z One-piece PC Card designed to fully support PC Card type II defined mechanical and environmental stress conditions.

(17)

2 Hardware Installation

In this chapter you will learn how to connect your WA1003A.

1) Preparations

2) Connecting WA1003A 3) Powering on WA1003A

2.1 Preparations

2.1.1 Checking Computer Configuration

Item Requirement

OS Web browser, such as IE, is installed.

Web browser

type Microsoft Internet Explorer^®5.0 or Netscape Navigator^®4.7 or higher is installed.

Web browser

settings JavaScript is enabled Ethernet port NIC adapter is installed

TCP/IP is enabled

Wireless LAN 802.11b/g wireless LAN, WEP and WPA are supported.

2.1.2 Collecting ISP Information

z VPI, VCI

z Encapsulation type

(18)

z Protocol type

z Modulation type

z User name, password

2.2 Fixing WA1003A

WA1003A supports horizontal and vertical positions as well as hanging on the wall. Place your WA1003A in a location where you can easily view the LED indicators.

2.3 Connecting WA1003A

2.3.1 Connecting ADSL Line

Simply plug one end of the UTP cable into the Modem port of the splitter and insert the other end into the ADSL port on the rear panel of WA1003A.

Use another telephone cable to connect the splitter to the Phone Jack in the wall.

2.3.2 Connecting Your Computer to WA1003A

Use a straight-through cable to connect your computer to WA1003A. You can connect the WA1003A directly to a 10/100Base-TX Ethernet adapter card on your PC with the provided Ethernet cable as shown in the following figure.

(19)

(1) Computer (2) Phone (3) RJ-45 Ethernet Cable (4) RJ-11 Tel Cable (5) RJ-11 Tel Cable (6) Splitter

(7) WA1003A (8) RJ-11 Tel Cable (9) Phone Jack Figure 2-1 Computer to WA1003A connection

2.3.3 Connecting Ethernet LAN to WA1003A

WA1003A can connect to any 10/100Base-TX Ethernet port.

When connecting WA1003A to any Ethernet device capable to operate at speeds higher than 10Mbps, ensure that you enable auto-negotiation mode for the connecting port of WA1003A.

Use cross-over cable to connect WA1003A and the uplink port of a switch or hub. Ensure that the cable connecting the LAN to WA1003A is no longer than 100 meters.

(20)

2.4 Powering on WA1003A

1) Plug in the provided power adapter.

2) The Power LED indicator is on, indicating the device is powered on.

3) After a few seconds, ensure the LAN LINK indicator is on with steady light, which indicates a valid connection between the router and your computer.

(21)

3 Before Configuring WA1003A

To configure WA1003A, you have to connect WA1003A to a computer as shown below. Use the provided straight-through cable.

(1) Computer (2) RJ-45 Ethernet Cable (3) WA1003A Figure 3-1 Connection between computer and WA1003A

3.1 When to Configure the WA1003A

The factory defaults of WA1003A are optimized, and make WA1003A operable in most networks. Usually, for the users with simple network topology, the default values can meet their basic requirements and need no change.

If the condition of network has been changed due to modification of security, scale, line of communication, protocol or

(22)

topology, for example, a demand of particular VPI and VCI, you should adjust the default settings accordingly to adapt WA1003A to the changes.

3.2 Setting IP Address on Your Computer

The steps of setting the IP address are as below.

1) Understand the default IP settings for WA1003A: IP address (192.168.1.1), Subnet mask (255.255.255.0).

2) Make sure you install and enable TCP/IP on your computer.

z If you have an Ethernet port on your computer, the TCP/IP is probably installed.

z If you are using Windows XP, the TCP/IP is enabled by default for standard installations.

3) Configure the IP address and Subnet mask of your computer to make your computer in the same subnet as that of the WA1003A, for example, IP address:192.168.1.100, Subnet mask: 255.255.255.0.

For computers running non-Windows operating systems (OS), follow the instructions of the OS to configure the IP address of your computer to the same subnet as that of WA1003A.

(23)

3.3 Accessing the Web-based Configuration

Manager

Once the IP address of the computer is set to access the Web-based configuration manager, you can change the factory defaults to enable WA1003A to connect to the Internet.

3.3.1 Checking for Proxy Service

If the browser on your computer is configured to use a proxy server for Internet access, disable the proxy connection first.

In Windows Internet Explorer (IE), you can check whether a proxy server is enabled by following these procedures:

1) In the IE Window, select Tools > Internet Options to display the Internet Options window.

2) In the Internet Options window, select the Connections tab and click LAN Settings.

3) Make sure that the “Use proxy server” option is not checked. If it is checked, deselect it and click OK.

3.3.2 Applying the LAN IP Address of WA1003A

To access the Web-based configuration manager, launch your Web browser and enter the LAN IP address of the WA1003A. For the first access, the default LAN IP address of the WA1003A is used.

Type in “http://” followed by the default IP address, “192.168.1.1” in the address bar of the browser. The URL in the address bar should be: http://192.168.1.1.

(24)

3.3.3 Inputting the User Name and Password

A window appears, prompting you for a user name and password to access the Web-based configuration manager.

Figure 3-2 Enter user name and password

Enter the user name admin and password admin for the first time login. You can change the password once you access the Web-based configuration manager. The user name and password allows any computer on the same subnet as WA1003A to access the Web-based configuration manger. And the password can also be used to Telnet the device through Ethernet or Internet interfaces. To change the password, see “4 Web-based Management”.

Note:

Do remember the user name and password for accessing the Web-based manager; do remember the ADSL account and password for PPP connections to access your ISP’s network as well.

(25)

4 Web-based Management

This chapter describes how to use the Web-based management software to configure WA1003A, introduces the parameters and their settings in the configuration interface. The order of sectors is listed according to the functional configuration interfaces.

4.1 Manager Interface Layout

The WA1003A initially presents the Home page shown as below when you first log in.

z The upper part of the page is available menus, including Setup, Advanced, Tools, and Status.

z The left part of the page is the wizard column. You can enter the Web page of configuration or management through the hyperlink in the column.

z The right part of the page is the practical domain of configuration and management.

(26)

Figure 4-1 GUI of Web-based Configuration Manager

4.2 Home Page

Figure 4-2 Home – Status Information window

(27)

A brief introduction to menus is displayed at the upper part of Home page displays, and at the lower part, the current status of WA1003A is displayed, including: System Uptime, DSL Status, DSL Speed, DHCP Server, LAN IP Address, Software Version, status of Ethernet and USB port.

4.3 Setup

The Setup window offers links to menus for setting Local Area Network (LAN) and Wide Area Network (WAN).

Figure 4-3 Opening Setup window

4.3.1 DHCP Configuration

WA1003A supports three DHCP modes for the LAN. By default, DHCP service is provided using an IP pool of 192.168.1.2 – 192.168.1.254 for a total of 253 IP addresses available. WA1003A can also relay DHCP service from another server through the WAN

(28)

port. You may disable DHCP service and DHCP relay and then use a different method for IP addressing on your LAN.

Enter the Setup menu and click DHCP Configuration in the wizard column to open the DHCP Configuration page. To disable the embedded DHCP server, select Server Off and click Apply.

I. Configuration page

Figure 4-4 Configure DHCP service for the LAN

II. Parameter description

z Server on: Select this option to enable DHCP service on the LAN.

z Start IP: Type in the base address for the IP pool of unassigned IP addresses. This IP address must be

(29)

consistent with the Management IP address of WA1003A. Normally the Start IP address is one greater than the Management IP address.

z End IP: Type in the last address of the continuous IP address range to be used by WA1003A for DHCP function. Up to 253 consecutive IP addresses are available for the pool.

z Lease Time: This specifies the amount of time (in hours) a client can lease an IP address, from the dynamically allocated IP pool.

z Server off: Select this option to disable DHCP services. In this case, the IP address of ADSL router device shall be assigned manually or received from the DHCP server of LAN or ISP.

III. Save

z Click Apply to save the settings in the RAM.

z To save these changes permanently, select Tools >

System Commands, and then click Save All.

4.3.2 Management IP

The IP address of WA1003A can be changed to meet the requirements of your LAN. Remember, if you are using DHCP from WA1003A, the IP address must be consistent with the DHCP IP settings.

Enter the Setup menu and click Management IP in the wizard column to open the Management IP page.

(30)

Figure 4-5 Configure Management IP

II. Parameter description

z LAN IP Address: Type in the IP address for the Ethernet LAN interface. The default IP address is 192.168.1.1

z LAN Network Mask: Type in the Subnet Mask for the Ethernet LAN IP interface. The default Mask is 255.255.255.0

z Hostname: Enter a hostname if WA1003A to be set as local host of LAN.

z Domain Name: Enter the local domain name if it exists.

III. Save

(31)

4.3.3 Firewall / NAT Service

Enter the Setup menu and click the Firewall/NAT Service to set the firewall and NAT for LAN clients.

Figure 4-6 Firewall / NAT service

You can enable or disable firewall and NAT by selecting Enable or Disable in the configuration page and applying the settings.

II. Save

(32)

4.3.4 Wireless

Enter the Setup menu and click Wireless in the wizard column to open the Wireless setup page.

Figure 4-7 Wireless configuration window

II. Parameter explanation

z Enable AP: Select this option to allow WA1003A to operate in the wireless environment.

z Channel: The channel which is available for the Access Point (AP) depends on the local regulatory environment.

Remember that all devices communicating with WA1003A must use the same channel (and use the same SSID).

Select the channel for your 802.11b/g wireless LAN from the drop-down menu.

(33)

z SSID: The SSID identifies members of Service Set. If the default SSID is changed, all other devices on the wireless network must also use the changed SSID.

III. Save

4.3.5 New Connection

Enter the Setup menu and click New Connection in the wizard column to set up a connection for WAN. You can set up and configure 8 different WAN connections on WA1003A.

The default connection protocol used for WA1003A is Point-to-Point Protocol over Ethernet (PPPoE) when you click New Connection button to create a new one. The alternative connection types supported by WA1003A are the PPP over ATM (PPPoA), Bridge, Static (IP for WAN), DHCP (for WAN), and Classical IP over ATM or IPoA (CLIP).

I. PPPoE

PPP is a standard method for setting up a network connection or session between networked devices. Different forms of PPP include PPPoA and PPPoE. PPPoE requires a username and password to access the network. PPPoE is a method of using PPP through the Ethernet network.

(34)

Click New Connection under WAN Setup to display the Connection Setup configuration menu.

Figure 4-8 Set up a New Connection - PPPoE

z Name: Type in a Name for the connection in the space, such as PPPoE_LLC.

z Options: Enable NAT and/or Firewall by selecting corresponding check boxes.

z NAT: Network Address Translation (NAT) is a method by which hosts in a private network domain are allowed simultaneous access to hosts in the external network transparently using a single registered address.

z Firewall: The Firewall enables you to protect the system against denial of service (DoS) attacks and other types of malicious accesses to your LAN.

(35)

z VPI&VCI: If prompted to change the VPI or VCI values, type in the values given by your service provider. You may just use the default settings. See the attached table for all the VPI&VCI default values of PVCs.

z QoS: You can select UBR, CBR and VBR from the drop-down list of QoS, but it is suggested to leave the default QoS values if you are unsure or the ISP did not provide this information.

z PCR&SCR: Do not change the PCR or SCR values unless you are required to do so. If prompted to change these, type in the values given by your service provider.

z Username & Password: Type the username and password to verify your identity. Typically, the username is an account assigned by your ISP. For most users, the remaining settings should not be changed. See your ISP for further information.

z Idle Timeout/Keep Alive/MAX Fail/MTU: Leave the default values if you are unsure or the ISP did not provide this information.

z On demand: If this option is selected, WA1003A will automatically connect the Internet while data request is received.

Click Apply to set up a connection. Note that a menu button is created (PVC0-PVC5), this links to the configuration menu for PVC0-PVC5. If at any time you want to change, delete, disconnect or connect this WAN connection, click the PVC0-PVC5 button.

(36)

II. PPPoA

PPP is a standard method for setting up a network connection or session between networked devices. PPPoA configuration requires the same basic information as the previously discussed PPPoE and both menus are basically identical.

Click New Connection under WAN Setup to display the Connection Setup configuration menu. Select PPPoA in the Type drop-down list to enter Connection SetupPPPoA page.

Figure 4-9 Configure Connection – PPPoA

z Name: Type in a Name for the connection, such as PVC0.

z Type: Select PPPoA from the drop-down list..

z Options: Enable NAT and/or Firewall by selecting corresponding check box.

(37)

z NAT: Network Address Translation (NAT) is a method by which hosts in a private network domain are allowed simultaneous access to hosts in the external network transparently using a single registered address.

z Firewall: The Firewall enables you to protect the system against denial of service (DoS) attacks and other types of malicious accesses to your LAN.

z QoS: You can select UBR, CBR and VBR from the drop-down list, but it is suggested to leave the default values if you are unsure or the ISP did not provide this information.

z Encapsulation: The Encapsulation values LLC (SNAP) and VC (MUX) are two different methods for encapsulating the PPP packet. Contact your ISP to make sure the supported encapsulation.

z Username & Password: Type the username and password to verify your identity. Typically, the username is an account assigned by your ISP. For most users, the remaining settings should not be changed. See your ISP for further information.

(38)

z Idle Timeout/Keep Alive/MAX Fail/MTU: It is suggested to leave the default values if you are unsure or the ISP did not provide this information.

z On demand: If this option is selected, WA1003A will automatically connect the Internet while data request is received.

III. Bridge

“Bridge” means a pure bridged connection with no IP address assigned to WA1003A. This connection method makes WA1003A act as a bridge, and just passes packets across the DSL port. When the device is used in this manner, install additional connection software on any computer or server to access the Internet.

Click New Connection under WAN Setup to enter the Connection Setup configuration menu. Select Bridge in the Type drop-down list to display the Bridged Connection Setup page.

Figure 4-10 Configure Connection – Bridge

(39)

z Type: Select Bridge from the drop-down list.

z VPI&VCI: If prompted to change the VPI or VCI values, type in the values given by your service provider. You may just use the default settings. See the attached table for all VPI&VCI default values of PVCs.

IV. Static

Static is used whenever a known static IP is assigned. Related information such as the Subnet mask and the gateway should also be specified to set up the connection. Up to three Domain Name Server (DNS) addresses can also be specified. These enable you to access other web servers. Valid IP addresses range from 0.0.0.0 to 255.255.255.255.

(40)

Click New Connection under WAN Setup to display the Connection Setup configuration menu. Select Static in the Type drop-down list to enter the Static Connection Setup page.

Figure 4-11 Configure Connection – Static

z Type: Select Static from the drop-down list.

z VPI&VCI: If prompted to change the VPI or VCI values, type in the values given by your service provider. You may

(41)

just use the default settings. See the attached table for all VPI&VCI default values of PVCs.

z PCR&SCR/IP Address/Mask/Default GW/DNS: Based on the information provided by your ISP, enter the IP Address, Subnet Mask, Default Gateway (if provided), and DNS values (if provided).

z Mode: Select the desired Mode, Bridged or Routed.

V. DHCP

Dynamic Host Configuration Protocol (DHCP) allows the gateway to obtain the IP address automatically from a DHCP server on the service provider’s network. The service provider assigns a global IP address from an available address pool. Typically the IP address assigned has a long lease time, so it will likely be the same address each time WA1003A requests an IP address.

Click New Connection under WAN Setup to enter the Connection Setup configuration menu. Select DHCP in the Type drop-down list to display the DHCP Connection Setup page.

(42)

Figure 4-12 Configure Connection – DHCP

z Type: Select DHCP from the drop-down list.

z VPI&VCI: If prompted to change the VPI or VCI values, type in the values given by your service provider. You may just use the default settings. See the attached table for all VPI&VCI default values of PVCs.

z QoS: You can select UBR, CBR and VBR from QoS drop-down list, but it is suggested to leave the default QoS values if you are unsure or the ISP did not provide this information.

(43)

z IP Address/Mask/Default Gateway: The automatically obtained IP address, subnet mask and default gateway will be displayed here.

VI. CLIP

CLIP or IPoA connections function in a similar way to DHCP or Static IP connections. Certain CLIP connections function like P2P networks. WA1003A must obtain IP settings from a server owned by an ISP, or use a static IP address assigned by the ISP.

Click New Connection under WAN Setup to enter the Connection Setup configuration menu. Select CLIP in the Type drop-down list to display the CLIP Connection Setup page.

(44)

Figure 4-13 Configure Connection – CLIP (IPoA)

z Type: Select CLIP from the drop-down list.

z QoS: You can select UBR, CBR and VBR from the drop-down list, but it is suggested to leave the default QoS values if you are unsure or the ISP did not provide this information.

(45)

z IP Address/Mask/Default Gateway: Based on the information your ISP provided, enter the IP Address (e.g.

168.128.1.1), the Subnet Mask (e.g. 255.255.255.0), ARP Server (e.g. 168.128.1.2) and the Default Gateway (e.g.

168.128.1.1).

VII. Save

z To save the changes permanently, select Tools > System Commands, and then click Save All.

4.3.6 Modem Setup

Enter the Setup menu and Click Modem Setup in wizard column to open the Modem Setup page. The Modem Setup menu is used to change the Modulation Type for the ADSL connection. This setting should be changed only if your service provider has given explicit instructions.

(46)

Figure 4-14 Modem Setup menu

If instructed by your ISP to change the Modulation type for your service, select the desired modulation type. The available modulation types are MMODE, T1413, GDMT, GLITE, ADSL2 and ADSL2Plus. By default, WA1003A will automatically detect the modulation used; this setting is listed as MMODE (Multi-mode).

II. Save

z To save the changes permanently, select Tools > System Commands page, and then click Save All.

(47)

4.4 Advanced

Click the Advanced tab to access the menus for configuring Wireless Security, Wireless Management, UPnP, Port Forwarding, Advanced Security (including NAT, Firewall and DMZ setup), LAN Clients, Bridge Filters, Multicast pass-through, Static Routing, Dynamic Routing (RIP setup), Customer Port Forwarding and Customer Filter IP.

4.4.1 Wireless Security

Enter the Advanced menu and Click Wireless Security in wizard column to open the Wireless Security page. WA1003A offers two types of network security: WEP and WPA. It is None by default.

I. WEP

WEP (Wireless Encryption Protocol) encryption can be enabled for security and privacy. WEP encrypts the data portion of each frame transmitted from the wireless adapter by using one of the preset keys.

To display the WEP configuration window, click the WEP radio button.

(48)

Figure 4-15 WEP configuration window

z Enable WEP Wireless Security: Select this option to enable the WEP encryption.

z Authentication Type: From the drop-down list, select an Authentication Type: Open, Shared, or Both.

z Encryption Key: WA1003A offers 64-bit, 128-bit, or 256-bit encryption with four keys available. Select a key by clicking a button on the left, select an encryption level from the drop-down list on the right, and then enter the proper-length key. (Key length is outlined at the bottom of the window.)

(49)

Note:

z If encryption of any kind, at any level is applied to WA1003A, all devices such as WA1003A and user’s wireless card on the network must comply with all security measures including: SSID, channel, security method and encryption key’s length and value.

z Encryption key can be English letters and digits. Pay attention that the encryption key is case sensitive.

z Do remember to set the encryption key.

II. WPA (Wi-Fi Protected Access)

Wi-Fi Protected Access was designed to provide improved data encryption, perceived as weak in WEP, and to provide user authentication, largely nonexistent in WEP.

For most small networks, such as those in a small business or home-based enterprise, WPA is the easiest way to obtain effective network security. In the three options of WPA, PSK String is the easiest to implement.

(50)

Figure 4-16 WPA configuration window

z Group Key Interval: Time (in seconds) after which the Group Key is changed automatically (1-99999).

z 802.1X: Enter the IP address of the RADIUS server, Port number, and Secret (password) that can be obtained from your Internet Service Provider (ISP).

z PSK HEX: Pre-Shared Key (PSK) Hex is a hexadecimal value with 1-32 characters in length.

z PSK String: PSK is a numeral of 1-63 characters in length.

Note:

If encryption of any kind, at any level is applied to WA1003A, all devices on the network must comply with the security measures.

(51)

4.4.2 Wireless Management

Enter the Advanced menu and click Wireless Management in the wizard column to open the Wireless Management page.

For the added security, you can use access control based on the MAC address. This feature lets you create a list of MAC addresses that are allowed or denied to access WA1003A through the wireless interface. When it is enabled, the access point is instructed to forward packets only from the wireless devices if the MAC address of the device is granted association. Packets received through the wireless interface from non-authorized devices, including other access points, will be discarded.

Figure 4-17 Wireless Management

(52)

II. Parameter Description

z Enable Access List: Check this option to enable the access control based on MAC address.

z MAC address: Enter a MAC Address in the box, choose Allow or Ban, and then click Add.

III. Save

4.4.3 SNMP

Enter the Advanced menu and click SNMP in the wizard column to open the SNMP page.

Simple Network Management Protocol (SNMP) is an OSI Layer 7 (Application Layer) designed specifically for managing and monitoring network devices. SNMP enables network management stations to read and modify the settings of gateways, routers, switches, and other network devices. Use SNMP to configure system features for proper operation, monitor performance and detect potential problems in the switch, switch group or network.

(53)

Figure 4-18 SNMP Management

II. Parameters Description

z Enable SNMP Agent: Check the option of Enable SNMP Agent. A defined set of variables (managed objects) is maintained by the SNMP agent and used to manage the device.

z Enable SNMP Traps: Check the option of Enable SNMP Traps. Traps are messages that alert network personnel of events that occur on the device. The device generates

(54)

traps and sends them to the trap recipient (or network manager).

z Name/Location/Contact: Enter the information of trap recipient.

z Vendor OID: Displaying the OID (Object ID) of vendor.

OID is a unique set of numbers that allows Objectivity/DB to locate and manage persistent objects.

z Community: In SNMP v.1 and v.2, user authentication is carried out using ”community strings”, which function like passwords. The remote user SNMP application and the device SNMP must use the same community string.

z Name: The default community strings for the device used for SNMP v.1 and v.2 management access are:

Public and Private

z Access Right: Specifies the level of access for an authorized user. The levels can be ReadOnly or ReadWrite.

z Traps: Traps are messages that alert network personnel of events that occur on the device. The device generates traps and sends them to the trap recipient (or network manager).

z Destination IP:

z Trap Community: A string of up to 20 characters to authenticate users that want to receive traps from the SNMP agent of the device.

z Trap Version: Choose SNMP v1 or SNMP v2c.

III. Save

(55)

4.4.4 UPnP

Enter the Advanced menu and click UPnP in the wizard column to open the UPnP page.

UPnP supports zero-configuration networking and automatic discovery for many types of networked devices. When enabled, it allows other devices that support UPnP to dynamically join a network, obtain an IP address, convey its capabilities, and learn about the presence and capabilities of other devices. DHCP and DNS service can also be used if available on the network. UPnP also allows supported devices to leave a network automatically without adverse effects to the device or other devices on the network.

Diverse networking media including Ethernet, 802.11b/g wireless, Firmware, phone line and power line networking can support UPnP.

(56)

Figure 4-19 UPnP

To enable UPnP for any available connection, check Enable UPnP, select the connection or connections on which you will enable UPnP listed under Available Connections.

II. Save

4.4.5 Port Forwarding

Click Port Forwarding from the Advanced menu to display the Port Forwarding page.

(57)

Port Forwarding enables specific functions to ignore NAT protection that would otherwise not allow them to function. To use Port Forwarding, you must configure the client IP addresses. Use the LAN Clients menu to configure client IP addresses for port forwarding.

Figure 4-20 Port Forwarding

II. Parameters explanation

z Choose a connection: Select a WAN connection from the drop-down menu.

z LAN IP: Choose the client IP address listed in the LAN IP drop-down menu, or click New IP button to go to the LAN Clients menu.

(58)

z Category: This column lists various traffic types. Select a traffic type to view the available rules in Available Rules.

z Available/Applied Rules: Click Add to place the rule in the Applied Rules list. The available rules can be applied to one client IP address only.

III. Save

z To save these changes, select Tools > System Commands, and click Save All.

4.4.6 Advanced Security

Click Advanced Security from the Advanced menu to display the Advanced Security page.

Using the advanced security features of WA1003A, you can enable or disable NAT and Firewall protection for any WAN connection, enable or disable DMZ IP addresses, enable or disable remote Telnet or web management from specified IP addresses, and enable or disable ICMP ping packets from the WAN.

(59)

Figure 4-21 Advanced security

II. Parameters explanation

z Select your WAN Connection: Select a WAN connection from the drop-down menu.

z Enable DMZ: A DMZ address is used by a device that is not protected by NAT or Firewall. You may select an IP address from the drop-down menu or create a New IP by pressing the button.

z Enable Remote Web/Telnet: Telnet and web management through the WAN port can be enabled for specified IP addresses. To enable remote management, click Remote Telnet or Remote Web. If there is IP address in IP Access List, choose one. Otherwise, enter a

(60)

new one in New IP, select the Add checkbox and then click the Apply button.

z Enable Incoming ICMP: To enable ICMP packets from the WAN, click Enable Incoming ICMP.

III. Save

4.4.7 LAN Clients

Click LAN Clients from the Advanced menu to display the LAN Clients menu.

Using the LAN Clients menu, you can define Port Forwarding, Access Control and Advanced Security rules for IP addresses on the LAN. To access this menu, click LAN Clients or hyperlink from the advanced menu. You can also click New IP from the Port Forwarding, Access Control and Advanced Security menus to access this menu. In order to use these advanced features, you need to configure the IP addresses of LAN Clients. If there are no IP addresses in the LAN Clients menu, you cannot configure Port Forwarding, Access Control and Advanced Security.

(61)

Figure 4-22 LAN Clients

II. Parameters explaination

z New IP Address: Type a valid IP address and click Add to add it to the list. Any addresses added will appear in the list of Static Addresses for advanced configuration. These addresses can be used in the Port Forwarding, Access Control and Advanced Security menus.

z Hostname: Type a hostname for the static IP address.

z MAC address: Enter a MAC Address in the box, and then click Add.

III. Save

(62)

4.4.8 Bridge Filters

Click Bridge Filters from the Advanced menu to display the Bridge Filters page.

Bridge filters are used to block or allow various types of packets through the WAN interface, to improve network security or efficiency.

The rules are configured for individual devices based on MAC addresses. Filter rules can be set up for source, destination or both.

You can set up filter rules or disable a set of rules without loosing the rules that have been configured.

Figure 4-23 Bridge Filters

II. Parameters explaination

z Enable Bridge Filters: select this option to add a bridge filter rule.

(63)

z Source/Destination MAC: Enter a Source MAC, a Destination MAC or both in the entry fields.

z Protocol: Select the protocols for the bridge filter. The supported protocols are IPv4, IPv6, RARP, PPPoE Discovery and PPPoE Session.

z Mode: Specify to allow or deny a bridge filter.

Note:

To edit an existing rule, select the rule by clicking Edit. The rule will appear in the edit box on the top. Edit the rule and click Add. To remove a bridge filter from the table at the bottom, click Delete and then Apply.

III. Save

4.4.9 Web Filter

Click Web Filters from the Advanced menu to display the Web Filters page.

The Web filtering enables users to allow/deny most Web applications, including Proxy, Cookies, Java Applets, ActiveX and Pop-Ups. Select the checkboxes to enable or disable the Web applications.

(64)

Figure 4-24 Web Filters

II. Save

z Click the Apply button to save the settings in the RAM.

4.4.10 Multicast

Click Multicast from the Advanced menu to display the Multicast page.

Multicast pass-through can be enabled or disabled for any WAN connection. When enabled, it allows IGMP packets to pass through the WAN interface. IGMP packets are used to control multicasts and discontinue multicasts to individual IP addresses when they are no longer needed.

(65)

Figure 4-25 Multicast

To enable Multicast pass-through for any WAN connection, select the connection, click Enable IGMP Multicast and then Apply.

II. Save

z Click the Apply button to save the settings in the RAM.

4.4.11 Static Routing

Click Static Routing from the Advanced menu to display the Static Routing page.

(66)

Static Routing specifies a route used for data traffic within your Ethernet LAN or routes data on the WAN. All packets destined for a particular network or subnet use a preset gateway.

Figure 4-26 Static Routing

II. Parameter explaination

z Connection: choose a connection from the drop-down menu for adding a route.

z New Destination IP/Mask/Gateway/Metric: Enter the proper parameters in these blanks and click Add. A new static route will be added in the table below and the route becomes active immediately.

III. Save

(67)

4.4.12 Dynamic Routing

Click Dynamic Routing from the Advanced menu to display the Dynamic Routing page.

The WA1003A supports RIP v1 and RIP v2 used to share routing tables with other Layer 3 routing devices. It also supports password protection which requires password verification for RIP requests. Use the Dynamic Routing menu to enable RIP and configure password protection.

Figure 4-27 Dynamic Routing

(68)

z Enable RIP: To enable RIP v1, check Enable RIP, select RIP v1 Protocol, and select the Direction (In, Out, or Both) from the drop-down list. To enable RIP v2 or RIP v1 Compatible, select the appropriate Protocol and Direction.

z Enable Password: To use password protection for RIP v2 or RIP v1 Compatible protocols, check Enable Password, enter a Password.

III. Save

4.4.13 Customer Port Forwarding

Click Custom Port Forwarding from the Advanced menu to display the Customer Port Forwarding page.

(69)

Figure 4-28 Custom Port Forwarding

z Connection: Select a WAN connection from the drop-down list.

z Application: Enter a name for the customer port forwarding.

z WAN Side IP Address/Netmask: Enter the IP address and subnet mask in each field.

z LAN Side IP Address/Netmask: Enter the IP address and subnet mask in each field.

z Port Start/End/Map: Enter the port number in each field for the starting port, ending port and mapping port.

z Protocol: Select the transmitting protocol for the customer port forwarding, including TCP, UDP and Both.

(70)

III. Save

4.4.14 Customer Filter IP

Click Custom Filter IP from the Advanced menu to display the Custom Filter IP page.

Figure 4-29 Custom Filter IP

z Filter Name: Enter a name for the customer filter.

z LAN Side IP Address/Netmask: Enter the IP address and subnet mask in each field.

(71)

z WAN Side IP Address/Netmask: Enter the IP address and subnet mask in each field.

z Port Start/End: Enter the port number in each fieldfor the starting port and ending port.

z Protocol: Select the transmitting protocol for the customer port forwarding, including TCP, UDP and Both.

III. Save

4.5 Tools

The menus under the Tools menu are used for System Commands to save settings, restart and reset the WA1003A; to set up Remote Log information; for User Management to update firmware and load saved configuration files (in the Update Gateway menu); to perform a Ping test; to test the DSL network connectivity in the Modem Test menu.

4.5.1 System Command

Enter the Tools menu and click System Commands from the Advanced menu to display the System Commands page.

System Commands are used to save settings to non-volatile memory, to reboot the WA1003A and to restore factory default settings of the WA1003A.

(72)

I. Configuration Page

Figure 4-30 Tools – System Commands menu

II. Parameter Explanation

z Save All: In order to save the changes you have just made, click Save All to save them to the non-volatile RAM.

z Restart: Click Restart to restart the WA1003A. If you have not saved your changes, the WA1003A will revert to the previously configuration upon rebooting.

z Restart AP: Click to restart the Wireless AP (Access Point).

The Wireless AP must be restarted whenever the wireless configuration is changed.

z Restore: The WA1003A can be reset to the default settings using the Restore option. This will also change both the LAN and WAN IP address of the device, so these will need to be reconfigured accordingly. To perform a reset, click Restore. Since the IP settings will return to their

(73)

default, you will lose access to the Web Manager. To use the Web Manager interface, the LAN IP address will need to be reconfigured.

4.5.2 Remote Log

Click Remote Log from the Tools menu to display the Remote Log Settings page.

Use the Remote Log menu to set up logging to servers or computers that are located outside of the LAN or subnet of the WA1003A.

Figure 4-31 Remote Log menu

(74)

II. Parameters eaplanation

z Log Level: Select the Log Level from the drop-down menu. The levels available are: Alert, Critical, Debug, Error, Info, Notice, Panic and Warning.

z Add an IP Address: Enter the IP address of a receiver for the log message in the Add an IP Address field and click the Add button.

z Select a logging Destination: Log message receivers that are added appear listed in the Select a logging destination drop-down menu. These may be used at any time for other types of log messages. To delete a log message receiver from the list, select it and click Delete.

III. Save

4.5.3 User Management

Click User Management from the Tools menu to display the User Management page.

You need to change the administrator information for the WA1003A before or immediately after establishing a link to the WAN.

(75)

Figure 4-32 User Management menu

z User Name: Enter the current User Name in the edit box.

z Password: Enter the new Password in the edit box.

z Confirmed Password: Enter the new password again in the Confirm Password field.

z Idle Timeout: Enter the disabled timeout interval value with minute as unit. If the web-based idle time exceeds the time, the web management will be closed. If you want to access the web management page, you must login in again.

III. Save

(76)

4.5.4 Update Gateway

Click Update Gateway from the Tools menu to display the Update Gateway page.

You can use the Update Gateway feature to load the latest firmware for the device. You can obtain the latest version of the WA1003A firmware from Huawei online technical support at http://terminal.huawei.com. Download the latest firmware version to your computer or an accessible TFTP server.

Figure 4-33 Tools – Update Gateway page

(77)

z Select a File: Enter the full path and file name of the firmware file to be uploaded. Alternatively you may click Browse to search for the file on your system. When the file name has been entered, click Update Gateway to start loading the file. The process of upgrade lasts about 2 minutes. If it is successful, you see a success message and then the device is rebooted automatically. If the firmware loading fails, you see an error message. Check the filenames and try to load again.

z Get Configuration: Store current settings to a configuration file on your computer or load previously saved configuration files on the device.

Caution:

Do not power off the WA1003A during the firmware upgrade process.

Otherwise, the configuration in the flash could be damaged.

4.5.5 Ping Test

Click Ping Test from the Tools menu to display the Ping Test page.

The Ping Test menu allows you to ping any IP address from the WA1003A to test the connectivity.

(78)

Figure 4-34 Tools – Ping Test page

II. Parameter Explanation

z Enter IP Address to ping: Enter the IP address of the device that you wish to Ping.

z Packet Size: Enter the packet size (in bytes) of the device that you wish to Ping.

z Number of echo requests: Enter the number of pinging attempts.

Click Test to start the Ping. The results of the Ping will be shown at the bottom of the page.

4.5.6 Modem Test

Click Modem Test from the Tools menu to display the Modem Test menu.

(79)

Figure 4-35 Tools – Modem Test page

The Modem Test menu is used for checking connection problems on the WAN interface. You can test connectivity on the service provider’s network for any WAN connection, or test F5 or F4 connection on the near segment or end-to-end.

To test your modem, select a Connection, choose a Test Type, and click Test.

4.6 Status Menus

The Status page displays performance data about the WA1003A. Click the hyperlink or button for the desired Status page.

4.6.1 Network Statistics

Click Network Statistics from the Status menu to display the Network Statistics page.

(80)

Figure 4-36 Network Statistics page

You can view the network statistics of system in this page.

There are four options at the top of the page. Choose the desired option and then click Refresh to view the latest network statistics.

4.6.2 Connection Status

Click Connection Status from the Status menu to display the Connection Status page.

(81)

Figure 4-37 Connection Status page

You can view the information of current connection. Click Refresh to view the latest connection status information.

4.6.3 DHCP Clients

Click DHCP Clients from the Status menu to display the DHCP Clients page.

This page displays the status of all current DHCP clients.

(82)

Figure 4-38 DHCP Clients page

4.6.4 Modem Status

Click Modem Status from the Status menu to display the Modem Status page.

This page displays DSL statistics and various modem status data.

Quidway W1000 Series Wireless Access Device WA1003A Wireless ADSL Access Point User Manual

Quidway W1000 Series Wireless

Access Device WA1003A Wireless

ADSL Access Point

User Manual

HUAWEI

Quidway W1000 Series Wireless Access Device

WA1003A Wireless ADSL Access Point

User Manual

Table of Contents

1 WA1003A Overview

1.1 Structure

1.1.1 Front Panel

1.1.2 Rear Panel

1.1.3 External Splitter

1.2 Features

1.2.1 ADSL

1.2.2 Wireless

1.2.3 Others

2 Hardware Installation

2.1 Preparations

2.1.1 Checking Computer Configuration

2.1.2 Collecting ISP Information

2.2 Fixing WA1003A

2.3 Connecting WA1003A

2.3.1 Connecting ADSL Line

2.3.2 Connecting Your Computer to WA1003A

2.3.3 Connecting Ethernet LAN to WA1003A

2.4 Powering on WA1003A

3 Before Configuring WA1003A

3.1 When to Configure the WA1003A

3.2 Setting IP Address on Your Computer

3.3 Accessing the Web-based Configuration

Manager

3.3.1 Checking for Proxy Service

3.3.2 Applying the LAN IP Address of WA1003A

3.3.3 Inputting the User Name and Password

4 Web-based Management

4.1 Manager Interface Layout

4.2 Home Page

4.3 Setup

4.3.1 DHCP Configuration

4.3.2 Management IP

4.3.3 Firewall / NAT Service

4.3.4 Wireless

4.3.5 New Connection

4.3.6 Modem Setup

4.4 Advanced

4.4.1 Wireless Security

4.4.2 Wireless Management

4.4.3 SNMP

4.4.4 UPnP

4.4.5 Port Forwarding

4.4.6 Advanced Security

4.4.7 LAN Clients

4.4.8 Bridge Filters

4.4.9 Web Filter

4.4.10 Multicast

4.4.11 Static Routing

4.4.12 Dynamic Routing

4.4.13 Customer Port Forwarding

4.4.14 Customer Filter IP

4.5 Tools

4.5.1 System Command

4.5.2 Remote Log

4.5.3 User Management

4.5.4 Update Gateway

4.5.5 Ping Test

4.5.6 Modem Test

4.6 Status Menus

4.6.1 Network Statistics

4.6.2 Connection Status

4.6.3 DHCP Clients

4.6.4 Modem Status