TURBO 7 WIRELESS GATEWAY WITH VOICE (3G10WVT)

TURBO 7 WIRELESS GATEWAY WITH VOICE (3G10WVT)

USER GUIDE

TELSTRA TURBO 7 WIRELESS GATEWAY (3G10WVT) - USER GUIDE�

THAnk YOU fOR pURCHASI nG A TELSTRA TURBO 7 WIRELESS G ATEWAY WITH VOICE

P R E fA c EThe purpose of this manual is to provide you with detailed information on the installation, operation and application of your Turbo 7 Wireless Gateway with Voice

I m PO RTA n T n OT I c E A n D S A f E T Y P R E c AU T I O n• Beforeservicingordisassemblingthisequipment,alwaysdisconnectpowerfromthedevice.

• Useanappropriatepowersupply,preferablythesuppliedpoweradapter,withanoutputofDC12V1.5A.

• Donotoperatethedevicenearflammablegasorfumes.Turnoffthedevicewhenyouarenearapetrolstation,fueldepotorchemicalplant/depot.Operationofsuchequipmentinpotentiallyexplosiveatmospherescanrepresentasafetyhazard.

• Thedeviceandantennashallbeusedonlywithaminimumof20cmfromthehumanbody.

• Theoperationofthisdevicemayaffectmedicalelectronicdevices,suchashearingaidsandpacemakers.

• TheAntennasmustbeconnectedtothisproductpriortoconnectingthetelephonecord.

• ThetelephonecordmustbedisconnectedpriortodisconnectingtheAntennas.

TELSTRA TURBO 7 WIRELESS GATEWAY (3G10WVT) - USER GUIDE 3

TABLE Of COnTEnTS

1 – Introduction .................................................................................................................... 61.1 features............................................................................................................................................ 71.2 PackageContents............................................................................................................................. 71.3 LED Indicators................................................................................................................................... 81.4 Rear Panel......................................................................................................................................... 9

2 – Quick Setup ................................................................................................................... 112.1 Setup procedure .............................................................................................................................................. 11

3 – Web user Interface ......................................................................................................... 133.1 DefaultSettings.............................................................................................................................. 133.2 TransmissionControlProtocol/InternetProtocol(TCP/IP)Settings............................................... 143.3 LoginProcedure.............................................................................................................................. 183.4 WebUserInterfaceHomepage....................................................................................................... 19

4 – Next G™ Settings ............................................................................................................ 224.1 NextG™ServiceSetup.................................................................................................................... ��

4.1.1 Profile Setup........................................................................................................................ �34.2 PINConfiguration........................................................................................................................... 24

4.2.1 PIn code Protection............................................................................................................ 244.2.2 PINCodeChange................................................................................................................. �6

5 – Wireless ......................................................................................................................... 285.1 Setup.............................................................................................................................................. �95.2 Security.......................................................................................................................................... 305.3 Configuration................................................................................................................................. 3�5.4 media Access control (mAc) filter.................................................................................................. 355.5 WirelessBridge............................................................................................................................... 365.6 Station Info..................................................................................................................................... 37

6 – Management ................................................................................................................. 396.1 DeviceSettings............................................................................................................................... 39

6.1.1 BackupSettings.................................................................................................................. 396.1.2 UpdateSettings.................................................................................................................. 406.1.3 Restore Default................................................................................................................... 406.1.4 Update firmware................................................................................................................ 41

6.2 Access control................................................................................................................................ 426.2.1 Services............................................................................................................................... 426.2.2 IP Addresses........................................................................................................................ 436.2.3 Passwords........................................................................................................................... 44

TELSTRA TURBO 7 WIRELESS GATEWAY (3G10WVT) - USER GUIDE4

6.3 ConfigureSNMPagenton3G10WVT............................................................................................. 456.4 Simple network Time Protocol (SnTP)........................................................................................... 466.5 Save and Reboot............................................................................................................................. 46

7 – Advanced setup ............................................................................................................. 487.1 Local Area network (LAn)............................................................................................................... 487.2 network Address Translation (nAT)............................................................................................... 50

7.2.1 PortForwarding.................................................................................................................. 507.2.2 PortTriggering.................................................................................................................... 527.2.3 Demilitarized Zone (DmZ) Host.......................................................................................... 537.3 Security............................................................................................................................... 547.3.1 IPFiltering........................................................................................................................... 547.3.2 Parental control.................................................................................................................. 56

7.4 Routing........................................................................................................................................... 577.4.1 Default Gateway................................................................................................................. 577.4.2 Static Route......................................................................................................................... 587.4.3 Dynamic Route................................................................................................................... 59

7.5 Domain name System (DnS)......................................................................................................... 597.5.1 Domain name System (DnS) Server................................................................................... 597.5.2 Dynamic Domain name System (Dynamic DnS)............................................................... 60

8 – Voice ............................................................................................................................. 628.1Configuringyour3G10WVTforplacingVoiceCalls......................................................................... 6�

9 – Status ............................................................................................................................ 649.1 Diagnostics..................................................................................................................................... 659.2 SystemLog..................................................................................................................................... 679.3 NextG™Status............................................................................................................................... 699.4 Statistics......................................................................................................................................... 7�

9.4.1 LAn Statistics...................................................................................................................... 7�9.4.2 NextG™Statistics............................................................................................................... 73

9.5 Route.............................................................................................................................................. 749.6 Address Resolution Protocol (ARP)................................................................................................. 759.7 DynamicHostConfigurationProtocol(DHCP)............................................................................... 759.7 PInG................................................................................................................................................ 76

Appendix A: Print Server ...................................................................................................... 78

Appendix B: USB Storage ..................................................................................................... 89

Appendix C: Command Line Interface (CLI) Commands Via Telnet ......................................... 92

I n T RO D U c T I O n


InTRODUCTIO n

Withtheincreasingpopularityofthe3Gstandardworldwide,theTelstraTurbo7WirelessGatewaywithVoiceprovidesyouwithtriple-bandcoveragethroughexpandingcellularnetworksthroughouttheworld.

Byfollowingthesimplestep-by-stepinstructionsfoundontheConnectionManagerUSBkey,youcanshareyourconnectionwithmultiplewirelessandwireddevicesusingtheNextG™network.

The Gateway also provides state-of-the-art security features such as Wi-fi Protected Access (WPA) dataencryption,FirewallandVirtualPrivateNetworks(VPN)passthrough.


1.1 FeATUReS• TheTelstraTurbo7WirelessGatewaywithVoiceallowsyoutoshareyourNextG™

connection with multiple wireless or wired devices

• Providesyouwithworldwidecoveragethroughtriple-bandHSUPA/HSDPA/UMTS(850/1900/2100MHz),quad-bandeDGe/GSM(850/900/1800/1900MHz)

• embeddedmulti-modeHSUPA/HSDPA/UMTS/eDGe/GPRS/GSMmodule

• 1xRJ11portforvoicecallingovertheNextG™networkviaaconnectedstandardAnalogueTelephone(notincluded).

• Built-inUSB2.0PrintServerfunctionality

• SupportforUSB2.0MassStoragedevice(NTFS,FAT32)

• Integrated802.11g/54MbpsAP(backwardcompatiblewith802.11b)

• Wi-FiProtectedAccess(WPA)/Wi-FiProtectedAccess2(WPA2)and802.1xwirelessencryption

• Staticroute/RoutingInformationProtocol(RIP)/RIPv2routingfunctions

• MediaAccessControl(MAC)addressandIPfiltering

• NetworkAddressTranslation(NAT)/PortAddressTranslation(PAT)

• SupportsUniversalPlugandPlay(UPnP)andInternetGroupManagementProtocol(IGMP)snooping

• SupportsVirtualPrivateNetwork(VPN)Pass-Through

• DynamicHostConfigurationProtocol(DHCP)Server/Relay/Client

• DomainNameSystem(DNS)ProxyandDynamicDomainNameSystem(DDNS)

• Web-basedManagement

• CommandLineInterface(CLI)viaTelnet

• Configurationbackupandrestoration

• Remoteconfiguration

• GatewayandNextG™modulefirmwareupgrade

• Supportshalf-bridgingmode

• SupportsSimpleNetworkManagementProtocol(SNMP)

1 .2 PACkAGeCONTeNTSYourpackagecontainsthefollowing:

• TelstraTurbo7WirelessGatewaywithVoice

• PrintedQuickStartGuide

• USBkey(ContainingTelstraConnectionManagerandUserGuide)

• ethernetCable

• SecurityCard

• 2x3GAntennas

• 1xWi-FiAntenna

• PowerSupply


1.3 LeD INDICATORSThe LED indicators are shown in this illustration and followed by detailed explanations in the tablebelow.

LED Icon Color Mode Description

POWER Blue On Power on

Off Power off

Phone Blue On Phone line active

Off Phone line inactive or not connected

LAN 1~2 Blue On Powered device connected to the associated port (includes devices with wake-on-LANcapabilitywhereaslightvoltageissuppliedtoanethernetconnection)

Off no activity, modem powered off, no cable or no powered device connected to the associated port

Blink LAn activity present (traffic in either direction)

Wi-Fi Blue On LocalWi-FiaccesstotheGatewayisenabledandworking

Off Local Wi-fi access to the Gateway is disabled

Blink DatabeingtransmittedorreceivedoverWi-Fi.

Internet Blue Blink DataistransmittedthroughInternetconnection

Off Noconnectiontotheinternetorgatewaypoweredoff

On Internet connection established

3G Blue On connection established with 3G network

Blink Connectingwith3Gnetwork

Off NoconnectionwithUMTScellularstation,noactivity,gatewaypoweredoff.

2G Blue On connection established with �G network

Blink ConnectingtoaneDGe,GPRSorGSMcellularstation

Off no connection with EDGE, GPRS or GSm cellular station, no activity or gatewaypoweredoff.

Low Blue On Lowsignalstrength

Off Noactivity,gatewaypoweredofforonothersignalstrength

Med Blue On Mediumsignalstrength

Off Noactivity,gatewaypoweredofforonothersignalstrength

High Blue On Highsignalstrength

Off Noactivity,gatewaypoweredofforonothersignalstrengthnOTE: The six LEDs on the left side of the top panel display (Low, Med, High, Internet, 3G, 2G) will cycle on and off if pIn

code protection is activated. In this case, you should consult section 4.2.1 pIn Code protection (page 21) for further instructions.


1.4 ReARPANeLTherearpanelcontainstheportsfordataandpowerconnections.

(1) PowerjackforDCpowerinput(12VDC/1.5A)/Powerbutton

(�) USIm card slot

(3) USBPort(ForconnectingaUSBPrinterorUSBStorageDevice)

(4) Resetbutton

(5) PhonePort(forVoicecallsovertheNextG™Network)

(6) 2RJ-45ethernetLANports

1 2 3 4 5 6 871 2 3 4 5 6 871 2 3 4 5 6 871 2 3 4 5 6 871 2 3 4 5 6 871 2 3 4 5 6 87

QUICkSeTUP


QUICk SETU p

2.1 SeTUPPROCeDURe (WITHOUTUSBkeY )ThesestepsexplainhowtoquicklysetupyourNextG™Gateway:

1: Attachthetwo3GantennasprovidedtotheportsmarkedMAIN3GandAUX3Gonthefrontofthegateway.Theantennasshouldbescrewedinaclockwisedirection.

2: AttachtheWi-FiantennaprovidedtotheportmarkedWI-FIonthefrontoftheGateway.Theantennashouldbescrewedinaclockwisedirection.

3: InsertyourSIMcard(untilyouhearaclick)intotheUSIMslotontherearoftheGateway.

4: ConnecttheyellowethernetcabletooneoftheyellowLANportsfoundatthebackoftheGateway.

5: Connecttheotherendoftheyellownetworkingcabletotheethernetportonyourcomputer.

6: Ifrequired,connectastandardAnalogueTelephone(notincluded)totheportlabeled“Phone”usingastandardtelephonecable(notincluded).

7: ConnectthepoweradaptertothePowersocketonthebackoftheGateway.

8: PlugthepoweradapterintoawallsocketandpressthepowerbuttonintotheONposition(depressed).

9: ConfiguretheGatewaythroughtheWebUserInterface(WUI).NOTe: Chapters3through8explainhowtosetupandusetheWUI

10: SavetheGatewayconfigurationandreboot(seesection6.5).

W E B US E R I n T E R fA c E


WEB USER In TER fACE

ThissectiondescribeshowtoaccessthedeviceviathewebuserinterfaceusingawebbrowsersuchasMicrosoftInternetexplorer(version5.0orlater),MozillaFirefoxorSafari.

3 .1 DeFAULTSeTTINGSThefollowingarethedefaultsettingsfortheGateway

• Local(LAN)access(username:admin,password:admin)

• Remote(WAN)access(username:support,password:support)

• Useraccess(username:user,password:user)

• LANIPaddress:10.0.0.138

• RemoteWANaccess:disabled

• NATandfirewall:enabled

• DynamicHostConfigurationProtocol(DHCP)serveronLANinterface:enabledTechnicalNote:

Duringpoweron,thedeviceinitializesallsettingstodefaultvalues.Itwillthenreadtheconfigurationprofilefromthepermanentstoragesectionofflashmemory.Thedefaultattributesareoverwrittenwhenidenticalattributeswithdifferentvaluesareconfigured.Theconfigurationprofileinpermanentstoragecanbecreatedviathewebuserinterfaceortelnetuserinterface,orothermanagementprotocols.ThefactorydefaultconfigurationcanberestoredeitherbypushingtheresetbuttonformorethanfivesecondsuntilthepowerLeDblinksorbyclickingtheRestoreDefaultConfigurationoptionintheRestoreDefaultSettingsscreen(seesection6.1.3).


3 .2 TCP/ IP SeTTINGSItislikelythatyourcomputerwillautomaticallyobtainanIPAddressandjointhenetwork.ThisisbecausetheDynamicHostConfigurationProtocol(DHCP)server(onthedevice)willstartautomaticallywhenyourGatewaypowersup.

ThisautomaticassignmentrequiresthatDHCPisconfiguredonyourcomputers.Itislikelythatthisisalreadythecase,butshouldyouberequiredtoconfigurethis,pleaseseetheinstructionsbelow.

WINDOWSXPDHCP Mode

To set your Pc for DHcP mode, check the Internet Protocol properties of your Local Area Connection.YoucansetyourPCtoDHCPmodebyselectingObtainanIPaddressautomaticallyinthedialogboxshownbelow.

STATIC IP Mode

ThefollowingstepsshowhowtoconfigureyourPCIPaddressusingsubnet10.0.0.x.ThefollowingassumesyouarerunningWindowsXP.

1: FromtheNetworkConnectionswindow,openLocalAreaConnection(Youmayalsoaccessthisscreenbydouble-clickingtheLocalAreaConnectionicononyourtaskbar).ClickthePropertiesbutton.

2: SelectInternetProtocol(TCP/IP)andclickthePropertiesbutton.Thescreenshouldnowdisplayasbelow.ChangetheIPaddresstothedomainof10.0.0.x.(1<x<254)withsubnetmaskof255.255.255.0.SetthedefaultgatewayandDNSservertothegateway’sIPaddress.

nOTE: The Ip address of the gateway is 10.0.0.138. (default), so the pC must be set with a different Ip. In the case below, the PC’s IP address is set as 10.0.0.1

3: ClickOktosubmitthesettings.


MACOSX10.4DHCP Mode

TosetyourAppleMacforDHCPmode,browsetotheApplemenuandselectSystemPreferences.IntheSystemPreferencesmenu,clickontheNetworkiconandselectethernet.NextselectUsingDHCPfromtheConfiguredropdownlist.AfterclickingApply,yourMac’sIPAddresswillnowbeautomaticallyassignedfromtheGateway.


STATIC Mode

IfyoudonotwishtouseautomaticassignmentofIPAddressesandwishtoconfigureyourGatewaymanually,yourcomputermusthaveastaticIPaddresswithintheGateway’ssubnet.Thefollowingstepsshowhowtoconfigureyourcomputer’sIPaddresswithinthesubnet10.0.0.x

1. BrowsetotheApplemenuandselectSystemPreferences.FromtheSystemPreferences,clicktheNetworkiconandselecttheethernetconnection.

2. FromtheConfiguredropdownlist,youcansetyourcomputertoStaticIPmodebyselectingtheManuallyoption.

3. ChooseanIPaddressbetween10.0.0.1–10.0.0.254(DonotchoosetheGatewayIPof10.0.0.138).enterthisIPaddressintothefieldmarkedIPAddress,andenteraSubnetMaskof255.255.255.0

4. SettheRouterandDNSserverfieldto10.0.0.138(Thegateway’sIPaddress).

NOTe: TheIPaddressofthegatewayis10.0.0.138.(default),sothecomputermustbesetwithadifferentIPtothegateway.Inthecasebelow,thePC’sIPaddressissetas10.0.0.1

5. ClickApplytosubmitthesettings.


W I n D OW S V I STADHCP Mode

TosetyourPCforDHCPmode,clickpropertiesofyourLocalAreaConnection.YoucansetyourPCtoDHCPmodebyselectingObtainanIPaddressautomaticallyinthedialogboxshownbelow.

STATIC IP Mode

ToconfigureyourGatewaymanually,yourPCmusthaveastaticIPaddresswithintheGateway’ssubnet.ThefollowingstepsshowhowtoconfigureyourPCIPaddressusingsubnet10.0.0.x.ThefollowingassumesyouarerunningWindowsVista.

1: FromtheNetworkConnectionswindow,openLocalAreaConnection(Youmayalsoaccessthisscreenbydouble-clickingtheLocalAreaConnectionicononyourtaskbar).ClickthePropertiesbutton.

2: SelectInternetProtocol(TCP/IPv4)andclickthePropertiesbutton.Thescreenshouldnowdisplayasbelow.ChooseanIPaddressbetween10.0.0.1–10.0.0.254

nOTE: The Ip address of the gateway is 10.0.0.138. (default), so the pC must be set with a different Ip. In the case below, the PC’s IP address is set as 10.0.0.1

3: SettheRouterandDNSserverfieldto10.0.0.138(Thegateway’sIPaddress).

3. ClickOktoapplythesettings.


3.3 LOGINPROCeDUReTologintothewebinterface,followthestepsbelow:

NOTe: Thedefaultsettingscanbefoundin3.1DefaultSettings.

1: OpenawebbrowserandenterthedefaultIPaddressfortheGatewayintheWebaddressfield.Inthiscasehttp://10.0.0.138

NOTe: Forremoteaccess,usetheWANIPaddressshownontheWUIHomepagescreenandloginwithremoteusernameandpassword.

2: Adialogboxwillappear,asillustratedbelow.enterthedefaultusernameandpassword,asdefinedinsection3.1DefaultSettings.

ClickOktocontinue.

NOTe: Theloginpasswordcanbechangedlater(see6.2.3Passwords)

3: Aftersuccessfullylogginginforthefirsttime,youwillreachthisscreen.


3.4 WeBUSeR INTeRFACeHOMePAGeThe web user interface (WUI) is divided into two window panels, the main menu (on the top) and thedisplayscreen(onthebottom).Themainmenuhasthefollowingoptions:Basic,NextG™Settings,Wireless,Management,AdvancedandStatus.

Selectingoneoftheseoptionswillopenasubmenuwithmoreoptions.Basicisdiscussedbelowwhilesubsequentchaptersintroducetheothermainmenuselections.

NOTe: Themenuoptionsavailablewithinthewebuserinterfacearebaseduponthedeviceconfigurationanduserprivileges(i.e.localorremote).

BASIC / HOME

TheBasic/HomescreenistheWUIhomepageandthefirstselectiononthemainmenu.Itprovidesinformationregardingthefirmware,3G,andIPconfiguration.

TELSTRA TURBO 7 WIRELESS GATEWAY (3G10WVT) - USER GUIDE�0

Thefollowingtableprovidesfurtherdetails.

Fields Description

Software version Thesoftwareversionofthedevice.

Hardware version The Hardware version of the device

Bootloader version

Thebootloaderversionofthedevice.

Wireless driver version

Thewirelessdriverversionofthewirelessmodule.

Network Thenameoforotherreferencetothemobilenetworkoperator.

Link ShowstheconnectionstatusofthecurrentNextG™connection.

Mode Theradioaccesstechniquecurrentlyusedtoenableinternetaccess.ItcanbeHSUPA,HSDPA,UMTS,eDGe,GPRSorDisconnected.

Signal strength Themobilenetwork(UMTSorGSM)signalqualityavailableatthedevicelocation.Thissignalqualityaffectstheperformanceoftheunit.Iftwoormorebarsaregreen,theconnectionisusuallyacceptable.

SIM info ShowstheSIMcardstatusonthedevice.

LAN IP Address ShowstheIPaddressforLANinterface.

WAN IP Address ShowstheIPaddressforWANinterface.

Default Gateway ShowstheIPaddressofthedefaultgatewayfortheWANinterface.

Primary DNS Server

ShowstheIPaddressoftheprimaryDNSserver.

Secondary DNS server

ShowstheIPaddressofthesecondaryDNSserver.

Date/Time Thetimeaccordingtothedevice’sinternalclock

NeXTGT m S E T T I n G S

TELSTRA TURBO 7 WIRELESS GATEWAY (3G10WVT) - USER GUIDE��

Next G™ Set t INGS

ThismenuincludesNextG™serviceSetupandPINConfiguration.

NOTe: Sections9.3and9.4.2alsoprovideinformationabouttheNextG™service.

4 .1 NeXTG™SeRVICe SeTUPSelectyourNextG™servicesettingsaccordingtopredefinedorcustomprofiles. Setupinstructionsareprovidedinthefollowingsectionsforyourassistance.

TELSTRA TURBO 7 WIRELESS GATEWAY (3G10WVT) - USER GUIDE �3

4.1.1 Profile Setup

Telstrawillprovidetheinformationrequiredtocompletethefirsttimesetupinstructionsbelow.Thisincludesprofile,usernameandpassword.Onlycompletethosestepsforwhichyouhaveinformationandskiptheothers.

1. IfyourSIMcardisnotinsertedintothegateway,pleaseturnthegatewayoff.TheninserttheSIMandturnthegatewayon.

2.TypetheAPNintheAPNfield.AuthenticationMethodshouldbeprovidedbyTelstra;orjustleaveitAUTOifnotacquired.Ifyouhavenotreceivedtheusernameandpassword,leavethesefieldsempty.

3. SelectIPcompressionandDatacompressiontobeONorOff.Bydefaulttheyaresettooff.

4. ClicktheSavebuttontosavethenewsettings.

5. PresstheConnectbuttontoconnecttoInternet.TheDeviceInfofor3GnetworkboxintheWUIBasicscreenshouldindicateanactiveconnection,asshownbelow.The3GandInternetLeDsonthefrontpaneloftheGatewayshouldalsobeblinking.

.

IftheLeDsareoff,theneitheryourprofilesettingsareincorrect,theSIMcardisnotworkingortheservicenetworkisunavailable.Ineithercase,contactTechnicalSupportforfurtherinstructions.

NOTe: IftheLeDslightinanon/offpatternmovingfromlefttorightthisindicatesthatyourSIMisPINLocked,pleaseseePINLockOffonpage24forinstructiononhowtofixthis


4 .2 P INCONFIGURATIONThisscreenallowsforchangestothe3GSIMcardPINcodeprotectionsettings.

NOTe: IfyouhaveenteredtheincorrectPIN3times,yourSIMcardwillbelockedforyoursecurity.PleasecallTelstraforassistance.

4.2.1 PIN Code Protection

PINcodeprotectionpreventstheuseofaSIMcardbyunauthorizedpersons.Tousethe3Ginternetservicewiththisgatewayhowever,thePINcodeprotectionmustbedisabled.IftheSIMcard inserted into the Gateway is locked with a PIn code, the web user interface will display the followingscreenafterlogin.

PIN Lock Off

IfyouwishtoconnecttotheInternetusingaPINlockedSIMcard,youmustfirstturnPINcodeprotectionOff.SelectPINlockOff,enterthePINCodetwice.Pleasekeepinmindyouonlyhave3attemptsbeforeyourSIMcardislocked.Theremainingattempts’numbershowshowmanyattemptsleft.ContactTelstraifyourequireassistance.YoucanselectRememberPINCodetoONsoyoudon’tneedtoinputthePINcodeeverytimewhenthegatewayturnson.Afterwards,clickApply.Thefollowingdialogboxshouldnowappear.


PIN Lock On

AfteryouarefinishedusingyourSIMcardforInternetservice,youmaywishtolockitagain.Inthiscase,firstgotothe3GSettings-PINConfigurationscreen,asshownbelow.SelectPINlockON,enterthePINcodetwice.YoucanselectRememberPINcodetoYessoyoudon’tneedtoinputthePINcodeeverytimewhenthegatewayturnson.ThenclickSave.

Afteryoudoso,thefollowingdialogboxshouldappear.

YoucannowreturnyourSIMcardtoyourcellularphoneorothermobiledevice.


4.2.2 PIN Code Change

IfyouwishtochangeyourPINcodeforgreatersecurity,enablethePINCodeprotection.GototheprevioussectionandfollowtheprocedurelistedunderPINLockOn.

AfterlockingtheSIMcard,selectPIN Code Change and enter your Old and new PIn codes in thefieldsprovided.keepinmindyouonlyhave3attemptsbeforeyourSIMcardislocked.Theremainingattempts’numbershowshowmanyattemptsleft.ContactTelstraifyourequireassistance.Afterwards,clickApplytoactivatethechange.

nOTE: If you forget to change the pIn Code without first turning on pIn lock protection, you will see this dialog box as a helpful reminder.

nOTE: If your pIn Code change request was successful the following dialog box will display.

W I R E L E SS


WIRELESS

TheWirelesssubmenuprovidesaccesstoWirelessLocalAreaNetwork(LAN)configurationsettingsincluding:

• Wirelessnetworkname

• Channelrestrictions(basedoncountry)

• Security

• Accesspointorbridgingbehaviour

• Stationinformation

TELSTRA TURBO 7 WIRELESS GATEWAY (3G10WVT) - USER GUIDE �9

5.1 SeTUPThisscreenallowsyoutoconfigurebasicfeaturesofthewirelessLANinterface.Youcanenableor disable the wireless LAn interface, hide the network from active scans, set the wireless networkname(alsoknownasSSID)andrestrictthechannelsetbasedoncountryrequirements.TheWirelessGuestNetworkfunctionaddsextranetworkingsecuritywhenconnectingtoremotehosts.

Option Description

Enable Wireless Acheckboxthatenables(default)ordisablesthewirelessLANinterface.Whenselected,theWebUIdisplaysHideAccesspoint,SSID,BSSIDandCountrysettings.

Hide Access Point

Select Hide Access Point to protect the access point from detection by wireless active scans.TocheckAPstatusinWindowsXP,openNetworkConnectionsfromthestartMenuandselectViewAvailableNetworkConnections.If the access point is hidden, it willnotbelistedthere.Toconnectaclienttoahiddenaccesspoint,thestationmustaddtheaccesspointmanuallytoitswirelessconfiguration.

SSID [1-32 characters]

Setsthewirelessnetworkname.SSIDstandsforServiceSetIdentifier.AllstationsmustbeconfiguredwiththecorrectSSIDtoaccesstheWLAN.IftheSSIDdoesnotmatch,thatuserwillnotbegrantedaccess.

BSSID TheBSSIDisa48bitidentityusedtoidentifyaparticularBSS(BasicServiceSet)withinanarea.InInfrastructureBSSnetworks,theBSSIDistheMAC(MediaAccesscontrol) address of the AP (Access Point) and in Independent BSS or ad hoc networks, theBSSIDisgeneratedrandomly.

Country Adrop-downmenuthatpermitsworldwideandspecificnationalsettings.

Wireless Guest Network

TheGuestSSID(VirtualAccessPoint)canbeenabledbyselectingtheenableWirelessGuestNetworkcheckbox.RenametheWirelessGuestNetworkasyouwish.NOTe:RemotewirelesshostscannotscanGuestSSIDs.


5.2 SeCURITYThisGatewayincludesanumberofoptionstohelpprovideasecureconnectiontotheNextG™Network.

Securityfeaturesinclude:

• WeP/WPA/WPA2dataencryption

• SPIFirewall

• VPNPass-Through

• MACaddressIPfiltering

• Authenticationprotocols–PAP/CHAP

YoucanauthenticateorencryptyourserviceontheWi-FiProtectedAccessalgorithm,whichprovidesprotectionagainstunauthorizedaccesssuchaseavesdropping.

ThefollowingscreenappearswhenSecurityisselected.TheSecuritypageallowsyoutoconfiguresecurityfeaturesofyourGateway’swirelessLANinterface.Youcansetthenetworkauthenticationmethod,selectdataencryption,specifywhetheranetworkkeyisrequiredtoauthenticatetothiswirelessnetworkandspecifytheencryptionstrength.

ClickSave/Applytoconfigurethewirelesssecurityoptions.


Select SSID YourServiceSetIdentifier(SSID),setsyourWirelessNetworkName.YoucanconnectmultipledevicesincludingLaptops,DesktopPCsandPDAstoyourWirelessGateway.Togetadditionaldevicesconnected,scanforanetwork,andlocatetheSSIDshownonyourWirelessSecurityCard.IftheSSIDdoesnotmatch,accessisdenied.

Network Authentication

Thisoptionisusedforauthenticationtothewirelessnetwork.eachauthenticationtypehasitsownsettingsasillustratedbelow.Forexample,selecting802.1XauthenticationwillrevealtheRADIUSServerIPaddress,Portandkeyfields.

WePencryptionwillalsobeenabled.

ThesettingsforWPAauthenticationareshownbelow.

WEP Encryption

Thisoptionindicateswhetherdatasentoverthenetworkisencrypted.Thesamenetworkkeyisusedfordataencryptionandnetworkauthentication.Whilstfournetworkkeyscanbedefined,onlyonecanbeusedatanyonetime.

Usethenetworkkeyfoundinthedropdownlist.

Encryption Strength

Thisdrop-downlistboxwilldisplaywhenWePencryptionisenabled.

Thekeystrengthisproportionaltothenumberofbinarybitscomprisingthekey.

Thismeansthatkeyswithagreaternumberofbitshaveagreaterdegreeofsecurityandareconsiderablymoredifficulttocrack.encryptionstrengthcanbesettoeither64-bitor128-bit.A64-bitkeyisequivalentto5ASCIIcharactersor10hexadecimalnumbers.A128-bitkeycontains13ASCIIcharactersor26hexadecimalnumbers.FYI:eachkeycontainsa24-bitheader(aninitiationvector)whichenablesparalleldecodingofmultiplestreamsofencrypteddata.

TELSTRA TURBO 7 WIRELESS GATEWAY (3G10WVT) - USER GUIDE3�

5.3 CONFIGURATIONThefollowingscreenappearswhenyouselectConfiguration.ThisscreenallowsyoutocontrolthefollowingadvancedfeaturesoftheWirelessLocalAreaNetwork(WLAN)interface:

• Selectthechannelwhichyouwishtooperatefrom

• Forcethetransmissionratetoaparticularspeed

• Setthefragmentationthreshold

• SettheRTSthreshold

• Setthewake-upintervalforclientsinpower-savemode

• Setthebeaconintervalfortheaccesspoint

• SetXpressmode

• Programshortorlongpreambles

ClickSave/Applytosettheadvancedwirelessconfiguration.


Option Description

AP Isolation SelectOnorOff.Byenablingthisfeature,wirelessclientsassociatedwiththeAccessPointcanbelinked.

Band ThenewamendmentallowsIeee802.11gunitstofallbacktospeedsof11Mbps,soIeee802.11bandIeee802.11gdevicescancoexistinthesamenetwork.Thetwostandardsapplytothe2.4GHzfrequencyband.Ieee802.11gcreatesdata-rateparityat2.4GHzwiththeIeee802.11astandard,whichhasa54Mbpsrateat5GHz.(Ieee802.11ahasotherdifferencescomparedtoIeee802.11borg,suchasofferingmorechannels.)

Channel Allowsselectionofaspecificchannel(1-14)orAutomode.

Auto Channel Timer (min)

TheAutoChanneltimesthelengthittakestoscaninminutes.

54g Rate In Auto (default) mode, your Gateway uses the maximum data rate and lowers thedataratedependentonthesignalstrength.Theappropriatesettingisdependentonsignalstrength.Otherratesarediscretevaluesbetween1to54Mbps.

Multicast Rate Settingformulticastpackettransmissionrate.(1-54Mbps)

Basic Rate Setsbasictransmissionrate.

Fragmentation Threshold

Athreshold(inbytes)determineswhetherpacketswillbefragmentedandatwhatsize.Packetsthatexceedthefragmentationthresholdofan802.11WLANwillbesplitintosmallerunitssuitableforthecircuitsize.Packetssmallerthanthespecifiedfragmentationthresholdvaluehoweverarenotfragmented.

Valuesbetween256and2346canbeenteredbutshouldremainatadefaultsettingof2346.SettingtheFragmentationThresholdtoolowmayresultinpoorperformance.

RTS Threshold RequestToSend(RTS)specifiesthepacketsizethatexceedsthespecifiedRTSthreshold,whichthentriggerstheRTS/CTSmechanism.SmallerpacketsaresentwithoutusingRTS/CTS.Thedefaultsettingof2347(maxlength)willdisablestheRTSThreshold.

DTIM Interval DeliveryTrafficIndicationMessage(DTIM)isalsoknownasBeaconRate.Theentryrangeisavaluebetween1and65535.ADTIMisacountdownvariablethatinformsclientsofthenextwindowforlisteningtobroadcastandmulticastmessages.WhentheAPhasbufferedbroadcastormulticastmessagesforassociatedclients,itsendsthenextDTIMwithaDTIMIntervalvalue.APClientshearthebeaconsandawakentoreceivethebroadcastandmulticastmessages.Thedefaultis1.

Beacon Interval Theamountoftimebetweenbeacontransmissionsinismilliseconds.Thedefaultis100msandtheacceptablerangeis1–65535.Thebeacontransmissionsidentifythepresenceofanaccesspoint.Bydefault,networkdevicespassivelyscanallRFchannelslisteningforbeaconscomingfromaccesspoints.Beforeastationenterspowersavemode,thestationneedsthebeaconintervaltoknowwhentowakeuptoreceivethebeacon.

Xpress™ Technology

Broadcom’sXpress™Technologyiscompliantwithdraftspecificationsoftwoplannedwirelessindustrystandards.Ithasbeendesignedtoimprovewirelessnetworkefficiency.Defaultisdisabled.


Option Description

54g Mode SelectAutomodeforgreatestcompatibility.SelectPerformancemodeforthefastestperformanceamong54gcertifiedequipment.SelectLRSmodeifyouareexperiencingdifficultywithlegacy802.11bequipment.Ifthisdoesnotwork,youmayalsotry802.11bonlymode.

54g Protection InAutomode,thegatewaywilluseRTS/CTStoimprove802.11gperformanceinmixed802.11g/802.11bnetworks.TurningprotectionOffwillmaximize802.11gthroughputundermostconditions.

Preamble Type Shortpreambleisintendedforapplicationswheremaximumthroughputisdesiredbutitdoesnotworkwithlegacyequipment.Longpreambleworkswiththecurrent1and2Mbit/sDSSSspecificationasdescribedinIeeeStd802.11-1999

Transmit Power Setthepoweroutput(bypercentage)asdesired.


5 .4 MACF ILTeRThisscreenappearswhenMediaAccessControl(MAC)Filterisselected.Thisoptionallowsaccesstoberestrictedbasedupontheunique48-bitMACaddress.

ToaddaMACAddressfilter,clicktheAddbuttonshownbelow.

Todeleteafilter,selectitfromthetablebelowandclicktheRemovebutton.

Option Description

MAC Restrict Mode Disabled–DisablesMACfiltering

Allow–PermitsaccessforthespecifiedMACaddresses.

NOTe: Addawirelessdevice’sMACaddressbeforeclickingtheAllowradiobuttonorelseyouwillneedtoconnecttotheGateway’swebuserinterfaceusingthesuppliedyellowethernetcableandaddthewirelessdevice’sMACaddress.

Deny–RejectsaccessforthespecifiedMACaddresses

MAC Address ListstheMACaddressessubjecttotheMACRestrictMode.TheAddbuttonpromptsanentryfieldthatrequiresyoutypeinaMACaddressinatwo-character,6-byteconvention:xx:xx:xx:xx:xx:xxwherexxarehexadecimalnumbers.Amaximumof60MACaddressescanbeadded.

entertheMACaddressonthescreenbelowandclickSave/Apply.


5.5 WIReLeSSBRIDGeThefollowingscreenappearswhenselectingWirelessBridge,andgoesintoadetailedexplanationofhowtoconfigurewirelessbridgefeaturesofthewirelessLANinterface.

ClickSave/Applytoimplementnewconfigurationsettings.

Feature Options

AP Mode SelectingWirelessBridge(WirelessDistributionSystem)disablesAccessPoint(AP)functionalitywhileselectingAccessPointenablesAPfunctionality.InAccessPointmode,wirelessbridgefunctionalitywillstillbeavailableandwirelessstationswillbeabletoassociatetotheAP.

Bridge Restrict SelectingDisabledinBridgeRestrictdisablesWirelessBridgerestriction,whichmeansthatanywirelessbridgewillbegrantedaccess.Selectingenabledorenabled(Scan)allowswirelessbridgerestriction.OnlythosebridgesselectedinRemoteBridgeswillbegrantedaccess.ClickRefreshtoupdatethestationlistwhenBridgeRestrictisenabled.


5.6 STATION INFOThefollowingscreenappearswhenyouselectStationInfo,andshowsauthenticatedwirelessstationsandtheirstatus.

ClicktheRefreshbuttontoupdatethelistofstationsintheWLAN.

BSSID TheBSSIDisa48-bitidentityusedtoidentifyaparticularBSS(BasicServiceSet)withinanarea.InInfrastructureBSSnetworks,theBSSIDistheMAC(MediaAccessControl)addressoftheAP(AccessPoint);andinIndependentBSSoradhocnetworks,theBSSIDisgeneratedrandomly.

Associated ListsallthestationsthatareassociatedwiththeAccessPoint,alongwiththeamountoftimesincepacketsweretransferredtoandfromeachstation.Ifastationisidlefortoolong,itisremovedfromthislist.

Authorized Liststhosedeviceswithauthorizedaccess.

m A n A G E m E n T


MAnAGEMEnT

TheManagementmenuhasthefollowingmaintenancefunctionsandprocesses:

6.1DeviceSettings

6.2AccessControl

6.3SimpleNetworkManagementProtocol(SNMP)

6.4SimpleNetworkTimeProtocol(SNTP)

6.5SaveandReboot

6 .1 DeVICe SeTTINGSTheDeviceSettingsscreensallowyoutobackup,retrieveandrestorethedefaultsettingsofyourGateway.ItalsoprovidesafunctionforyoutoupdateyourGateway’ssettings.

6.1.1 Backup Settings

ThefollowingscreenappearswhenBackupisselected.ClicktheBackupSettingsbuttontosavethecurrentconfigurationsettings.

YouwillbepromptedtodefinethelocationofabackupfiletosavetoyourPC.


6.1.2 Update Settings

ThefollowingscreenappearswhenselectingUpdatefromthesubmenu.ByclickingontheBrowsebutton,youcanlocateapreviouslysavedfilenameastheconfigurationbackupfile.ClickontheUpdatesettingstoloadit.

6.1.3 Restore Default

ThefollowingscreenappearswhenselectingRestoreDefault.ByclickingontheRestoreDefaultSettingsbutton,youcanrestoreyourGatewaysdefaultfirmwaresettings.Torestoresystemsettings,rebootyourGateway.

NOTe: Thedefaultsettingscanbefoundinsection3.1DefaultSettings.

OnceyouhaveselectedtheRestoreDefaultSettingsbutton,thefollowingscreenwillappear.Closethewindowandwait2minutesbeforereopeningyourbrowser.Ifrequired,reconfigureyourcomputer’sIPaddresstomatchyournewconfiguration(seesection3.2TCP/IPSettingsfordetails).

Afterasuccessfulreboot,thebrowserwillreturntotheDeviceInfoscreen.Ifthebrowserdoesnotrefreshtothedefaultscreen,closeandrestartthebrowser.

NOTe: TheRestoreDefaultfunctionhasthesameeffectastheresetbutton.Iftheresetbuttoniscontinuouslypushedformorethan5seconds(andnotmorethan12seconds),thebootloaderwillerasetheconfigurationsettingssavedonflashmemory.


6.1.4 Update Firmware

ThefollowingscreenappearswhenselectingUpdateFirmware.Byfollowingthestepsonthisscreen,youcanupdateyourGateway’sfirmware.Manualdeviceupgradesfromalocallystoredfilecanalsobeperformedusingthefollowingscreen.

1: Obtainanupdatedsoftwareimagefile

2: enterthepathandfilenameofthefirmwareimagefileintheSoftwareFileNamefieldorclicktheBrowsebuttontolocatetheimagefile.

3: ClicktheUpdateSoftwarebuttononcetouploadandinstallthefile.NOTe: Theupdateprocesswilltakeabout2minutestocomplete.TheGatewaywillrebootandthebrowserwindowwill

refreshtothedefaultscreenuponsuccessfulinstallation. ItisrecommendedthatyoucomparetheSoftwareVersionatthetopoftheBasicscreen(WUIhomepage)withthefirmwareversioninstalled,toconfirmtheinstallationwassuccessful.


6 .2 ACCeSSCONTROLTheAccessControloptionfoundintheManagementdropdownmenuconfiguresaccessrelatedparametersinthefollowingthreeareas:

• Services

• IPAddresses

• Passwords

AccessControlisusedtocontrollocalandremotemanagementsettingsforyourGateway.

6.2.1 Services

The Service control List (ScL) allows you to enable or disable your Local Area network (LAn) or WideAreaNetwork(WAN)servicesbytickingthecheckboxasillustratedbelow.Theseaccessservicesareavailable:FTP,HTTP,ICMP,SSH,TeLNeT,andTFTP.ClickSave/Applytocontinue.


6.2.2 IP Address

TheIPAddressoptionlimitslocalaccessbyIPaddress.WhentheAccessControlModeisenabled,onlytheIPaddresseslistedherecanaccessthedevice.BeforeenablingAccessControlMode,addIPaddresseswiththeAddbutton.

On this screen, enter the IP address Subnet mask and the different interface for which you wish to allow permission.ClickSave/Applytocontinue.


6.2.3 Passwords

ThePasswordsoptionconfiguresyouraccountaccesspasswordforyourGateway.Accesstothedeviceislimitedtothefollowingthreeuseraccounts:

• administobeusedforlocalunrestrictedaccesscontrol

• supportistobeusedforremotemaintenanceofthedevice

• useristobeusedtoviewinformationandupdatedevicefirmware

Usethefieldsillustratedinthescreenbelowtochangeorcreateyourpassword.Passwordsmustbe16charactersorlesswithnospaces.ClickSave/Applytocontinue.


6 .3 CONFIGUReSNMPAGeNTONTHe3G10WVTTheSimpleNetworkManagementProtocol(SNMP)allowsanetworkadministratortomonitoranetworkbyretrievingsettingsonremotenetworkdevices.Todothis,theadministratortypicallyrunsanSNMPmanagementstationprogramsuchasMIBbrowseronalocalhosttoobtaininformationfromtheSNMPagent,inthiscasethe3G10WVT(ifSNMPenabled).AnSNMP‘community’performsthefunctionofauthenticatingSNMPtraffic.A‘communityname’actsasapasswordthatistypicallysharedamongSNMPagentsandmanagers.

Bydefault,SNMPagentisenabledonthegateway.

S E T T I n G U P S n m P A G E n T1. Openawebbrowser(Ie/Firefox/Safari),typeinLANaddressofthegateway(http://10.0.0.138

bydefault)tologintothewebinterface.

2. Theloginusernameandpasswordbydefaultisadmin/admin.

3. GotoAdvancedSettings>SNMP.enableSNMPagentandsetupalloptionsaccordingtothescreenshotbelow.

4. ClickSave/Applytoactivatethesesettings.


6 .4 S IMPLeNeTWORkTIMePROTOCOL (SNTP)ThisscreenallowsyoutoconfigurethetimesettingsofyourGateway.ToautomaticallysynchronizewithInternettimeservers,ticktheboxasillustratedbelow.

Thefollowingoptionsshouldnowappear(seescreenshotbelow):

First NTP time server: Selecttherequiredserver.

Second NTP time server: Selectsecondtimeserver,ifrequired.

Time zone offset: Selectthelocaltimezone.

ConfiguretheseoptionsandthenclickSave/Applytoactivate.

NOTe: SNTPmustbeactivatedtouseParentalControl(section7.3.2).

6 .5 SAVeANDReBOOTThisfunctionsavesthecurrentconfigurationsettingsandrebootsyourGateway.

NOTe1: ItmaybenecessarytoreconfigureyourTCP/IPsettingstoadjustforthenewconfiguration.Forexample,ifyoudisabletheDynamicHostConfigurationProtocol(DHCP)serveryouwillneedtoapplyStaticIPsettings.

NOTe2: Ifyouloseallaccesstoyourwebuserinterface,simplypresstheresetbuttonontherearpanelfor5-7secondstorestoredefaultsettings.

We

b U

se

r In

te

rfa

ce

A D VA n c E D S E T U P


ADVA nCED S ETU p

ThischapterexplainsadvancedsetupforyourGateway:

7 .1 LOCAL AReANeTWORk (LAN)ThisscreenallowsyoutoconfiguretheLocalAreaNetwork(LAN)interfaceonyourGateway.


Seethefielddescriptionsbelowformoredetails.

Note:Ifyouchangeyourgateway’sIPaddress(firstoptiononthechart),theinstallationsoftware/connectionmanagermaynotbeabletocommunicatewiththegateway.Pleaseresetthegateway’sIPaddressto10.0.0.138ifthisoccurs.

Option Description

IP Address Enter the IP address for the LAn interfaceSubnet Mask Enter the subnet mask for the LAn interfaceEnable UPnP TicktheboxtoenableUniversalPlugandPlayEnable Half-Bridge The Telstra Turbo 7 Wireless Gateway with Voice can be set up as a half-

transparentbridgetocopewithsomespecialapplicationssuchasVPNpass-through.Bydefaulthalf-bridgeisoff.PleaserefertoAppendixBformoreinformation.

Enable Internet Group Management Protocol (IGMP) Snooping

enablebytickingthebox

StandardMode:Instandardmode,multicasttrafficwillfloodtoallbridgeportswhennoclientsubscribestoamulticastgroup.

BlockingMode:Inblockingmode,themulticastdatatrafficwillbeblocked.Whentherearenoclientsubscriptionstoamulticastgroup,itwillnotfloodtothebridgeports.

Dynamic Host Configuration Protocol (DHCP) Server

SelectenableDHCPserverandenteryourstartingandendingIPaddressesandtheleasetime.ThissettingconfiguresthegatewaytoautomaticallyassignIP,defaultgatewayandDNSserveraddressestoevery DHcP client on your LAn

Enable NAT Toenable/disableNetworkAddressTranslation(NAT,pleasereferto7.2forNATsetting).BydefaultNATisenabled.

Option 42, 66,150,160 TheseoptionsareusedforspecialDHCPsetup.

Static IP Lease List TospecifytheIPaddressassignedthroughDHCPaccordingtotheMACaddressofthehostsconnectedtotheGateway.

Enable DHCP Server Relay

TorelayDHCPrequestsfromthesubnetwithnoDHCPserveronittoaDHCPserveronothersubnets.DHCPServerRelayisdisabledbydefault.Toaccessenable DHcP relay, please un-tick nAT enable first, that means to disable NATfirst,andthenpresssavebutton.TheenableDHCPserverRelayoptionwillthenshowuponthesamepageasbelow:


ConfigureasecondIPaddressbytickingthecheckboxshownbelowandenterthefollowinginformation:

IP Address: enterthesecondaryIPaddressfortheLANinterface.

Subnet Mask: enterthesecondarysubnetmaskfortheLANinterface.

NOTe: TheSavebuttonsavesnewsettingstoallowcontinuedconfiguration,whiletheSave/Rebootbuttonnotonlysavesnewsettingsbutalsorebootsthedevicetoapplythenewconfiguration(i.e.allnewsettings).

7 .2 NeTWORkADDReSSTRANSLATION (NAT )

7.2.1 Port Forwarding

PortForwardingallowsyoutodirectincomingtrafficfromtheInternetside(identifiedbyProtocolandexternalport)totheinternalserverwithaprivateIPaddressontheLANside.TheInternalportisrequiredonlyiftheexternalportneedstobeconvertedtoadifferentportnumberusedbytheserverontheLANside.Amaximumof32entriescanbeconfigured.

ToaddaVirtualServer,clicktheAddbutton.Thefollowingscreenwilldisplay.


Options Description

Select a Service

Or

Custom Server

Usershouldselecttheservicefromthelist.

Or

create a custom server and enter a name for the server

Server IP Address entertheIPaddressfortheserver.

External Port Start

enterthestartingexternalportnumber(whenyouselectCustomServer).Whenaserviceisselectedtheportrangesareautomaticallyconfigured.

External Port End entertheendingexternalportnumber(whenyouselectCustomServer).Whenaserviceisselectedtheportrangesareautomaticallyconfigured.

Protocol Usercanselectfrom:TCP,TCP/UDPorUDP.

Internal Port Start

entertheinternalportstartingnumber(whenyouselectCustomServer).Whenaserviceisselectedtheportrangesareautomaticallyconfigured

Internal Port End entertheinternalportendingnumber(whenyouselectCustomServer).Whenaserviceisselectedtheportrangesareautomaticallyconfigured.


7.2.2 Port Triggering

SomeapplicationsrequirespecificportsintheGateway’sfirewalltobeopenforaccessbyremoteparties.PortTriggeringopensupthe‘OpenPorts’inthefirewallwhenanapplicationontheLANinitiatesaTCP/UDPconnectiontoaremotepartyusingthe‘TriggeringPorts’.TheGatewayallowsthe remote party from the WAn side to establish new connections back to the application on the LANsideusingthe‘OpenPorts’.Amaximum32entriescanbeconfigured.

ToaddaTriggerPort,simplyclicktheAddbutton.Thefollowingwillbedisplayed.


Options Description

Select an Application

or

Custom Application

Usershouldselecttheapplicationfromthelist.

or

Usercanenterthenameoftheirchoice.

Trigger Port Start enterthestartingtriggerportnumber(whenyouselectcustomapplication).Whenanapplicationisselected,theportrangesareautomaticallyconfigured.

Trigger Port End entertheendingtriggerportnumber(whenyouselectcustomapplication).Whenanapplicationisselected,theportrangesareautomaticallyconfigured.

Trigger Protocol TCP,TCP/UDPorUDP.Open Port Start enterthestartingopenportnumber(whenyouselectcustomapplication).

Whenanapplicationisselected,theportrangesareautomaticallyconfigured.

Open Port End entertheendingopenportnumber(whenyouselectcustomapplication).Whenanapplicationisselected,theportrangesareautomaticallyconfigured.

Open Protocol TCP,TCP/UDPorUDP.

7.2.3 Demilitarized (DMZ) Host

YourGatewaywillforwardIPpacketsfromtheWideAreaNetwork(WAN)thatdonotbelongtoanyoftheapplicationsconfiguredintheVirtualServerstabletotheDMZhostcomputer.

enterthecomputer’sIPaddressandclickApplytoactivatetheDMZhost.

clear the IP address field and click Apply todeactivatetheDMZhost.


7 .3 SeCURITYYour Gateway can be secured with IP Filtering or Parental Controlfunctions.

7.3.1 IP Filtering

TheIPFilteringscreensetsfilterrulesthatlimitincomingandoutgoingIPtraffic.Multiplefilterrulescanbesetwithatleastonelimitingcondition.AllconditionsmustbefulfilledtoallowindividualIPpacketstopassthroughthefilter.

Outgoing IP Filter

ThedefaultsettingforOutgoingtrafficisACCEPTED.Underthiscondition,alloutgoingIPpacketsthat match the filter rules will be BLOCKED.

Toaddafilteringrule,clickthe Addbutton.Thefollowingscreenwilldisplay.


Options Description

Filter Name The filter rule label

Protocol TcP, TcP/UDP, UDP or IcmP

Source IP address Enter source IP address

Source Subnet Mask Enter source subnet mask

Source Port (port or port:port)

entersourceportnumberorportrange

Destination IP address Enter destination IP address

Destination Subnet Mask

Enter destination subnet mask

Destination port (port or port:port)

enterdestinationportnumberorrange

click Save/Applytosaveandactivatethefilter.

Incoming IP Filter

ThedefaultsettingforallIncomingtrafficisBLOCKED.UnderthisconditiononlythoseincomingIP packets that match the filter rules will be ACCEPTED.

Toaddafilteringrule,clicktheAddbutton.Thefollowingscreenwilldisplay.

PleaserefertotheOutgoingIPFiltertableforfielddescriptions.

click Save/Applytosaveandactivatethefilter.


7.3.2 Parental Control

Parental control allows you to restrict access from a device on your Local Area network (LAn) totheInternetthroughtheGatewayonselecteddaysatcertaintimes.MakesuretoactivatetheInternetTimeserversynchronizationasdescribedinsection6.4SNTP,sothatthescheduledtimesmatchyourlocaltime.

ClickAddtodisplaythefollowingscreen.entertheMACaddressofthedevicethatyouwishtorestrictaccessforandselectdaysoftheweekandtimestoapplytherestriction.

complete the fields listed below and click Save/Applytoapplythesettings.

Options Description

User Name A user-defined label for this restriction

Browser’s MAC Address

AllowseasyidentificationofMACaddressofthecomputerrunningthebrowser

Other MAC Address mAc address of another LAn device

Days of the Week Selectonemoremoredaysfortherestrictionstoapplyto.

Start Blocking Time Enter the time you want the restriction to start

End Blocking Time Enter the time you want the restriction to end


7 .4 ROUTINGDefault Gateway, Static Route and Dynamic RoutesettingscanbefoundintheRoutinglinkasillustratedbelow.

7.4.1 Default Gateway

If the Enable Automatic Assigned Default Gateway checkbox is selected, this device will accept adefaultGatewayassignment.Ifthecheckboxisnotselected,afieldwillappearallowingyoutoenterthestaticdefaultgatewayand/orWANinterface,thenclickSave/Apply.

nOTE: After enabling the Automatic Assigned Default Gateway, you must re-boot the Gateway to activate the assigned default Gateway.


7.4.2 Static Route

TheStaticRoutescreendisplaystheconfiguredstaticroutes.

ClicktheAddorRemovebuttonstochangesettings.

ClicktheAddbuttontodisplaythefollowingscreen.

enterDestinationNetworkAddress,SubnetMask,GatewayIPAddressand/orWANInterface.ThenclickSave/Applytoaddtheentrytotheroutingtable.


7.4.3 Dynamic Route

Toactivatethisoption,selecttheenabledradiobuttonforGlobalRIPMode.

Toconfigureanindividualinterface,selectthedesiredRIPversionandoperation,followedbyplacingacheckintheenabledcheckboxforthatinterface.ClickSave/Applytosavetheconfigurationandtostartorstopdynamicrouting.

7 .5 DOMAINNAMeSeRVeRS (DNS)7.5.1 DNS Server Configuration

IftheenableAutomaticAssignedDNScheckboxisselected,thisdevicewillacceptthefirstreceivedDNSassignmentfromtheWideAreaNetwork(WAN)interfaceduringtheconnectionprocess.Ifthecheckboxisnotselected,afieldwillappearallowingyoutoentertheprimaryandoptionalsecondaryDNSserverIPaddresses.ClickonSavetoapply.

nOTE: Click the Save button to save the new configuration. To make the new configuration effective, reboot your Gateway.


7.5.2 Dynamic DNS

The Dynamic DnS service allows a dynamic IP address to be aliased to a static hostname in any of aselectionofdomains,allowingthegatewaytobemoreeasilyaccessedfromvariouslocationsontheinternet.

note: The Add/Remove buttons will be displayed only if the gateway has been assigned an Ip address from the remote server.

ToaddadynamicDNSservice,clicktheAddbuttonandthisscreenwilldisplay.

Options Descriptions

D-DNS provider SelectadynamicDNSproviderfromthelist.

Hostname enterthenameforthedynamicDNSserver.

Interface Selecttheinterfacefromthelist.

Username entertheusernameforthedynamicDNSserver.

Password enterthepasswordforthedynamicDNSserver.


VO I c E


VOICE

TheTurbo7WirelessGatewaywithVoiceallowsyoutomaketelephonecallsovertheNextG™networkusingastandardAnalogueTelephoneviathebuiltinRJ-11Phoneport.

PleaserefertothedocumentationprovidedbythemanufacturerofyourAnalogueTelephoneforhelpwiththeoperationofyourtelephone.

8 .1 CONFIGURINGYOURTURBO7 WIReLeSSGATeWAYFORP L A c I n G VO I c E c A LL S

OnceyourGatewayhasbeencorrectlyconfiguredtoaccesstheNextG™networkasoutlinedinSection2.1–QuickSetup,youcanmakeandreceivetelephonecallsafterconnectingyourAnalogueTelephonetothesocketlabeledPhoneonthebackofyourTurbo7WirelessGatewaywithVoice.

ForvoicecallsovertheNextG™network,notethatyourSIMcardneedstobeprovisionedforVoiceCalling.PleaseconsultwithTelstraforverification.AlsopleasenotethatanytelephonecallsplacedusingtheGatewaywillincurcallusagechargesatmobilecallrates.PleasecontactTelstraformoreinformation.

STAT US


STATUS

THE STATUS MEnU HAS THE f OLLOWI nG SUBME nUS:

• Diagnostics

• SystemLog

• NextG™network

• Statistics

• Route

• ARP

• DHCP

• PING


9 .1 DIAGNOSTICSTheDiagnosticsmenuprovidesfeedbackontheconnectionstatusofthedevice.Theindividualtestsarelistedbelow.Ifatestdisplaysafailstatus:

1: ClickontheHelp link

2: Nowclick Re-run Diagnostic Tests at the bottom of the screen to re-test and confirm the error

3: Ifthetestcontinuestofail,followthetroubleshootingproceduresintheHelpscreen.


Test Description

ENET Connection Pass:IndicatesthattheethernetinterfacefromyourcomputerisconnectedtotheLANportofthisGateway.

Fail:IndicatesthattheGatewaydoesnotdetecttheethernetinterfaceonyourcomputer.

Wireless connection Pass:IndicatesthatthewirelesscardisON.

Down:IndicatesthatthewirelesscardisOFF.

Ping Default Gateway

Pass:IndicatesthattheGatewaycancommunicatewiththefirstentrypointtothenetwork.ItisusuallytheIPaddressoftheISP’slocalGateway.

Fail:IndicatesthattheGatewaywasunabletocommunicatewiththefirstentrypointonthenetwork.ItmaynothaveaneffectonyourInternetconnectivity.ThereforeifthistestfailsbutyouarestillabletoaccesstheInternet,thereisnoneedtotroubleshootthisissue.

Ping Primary Domain Name Server

Pass:IndicatesthattheGatewaycancommunicatewiththeprimaryDomainNameServer(DNS).

Fail:IndicatesthattheGatewaywasunabletocommunicatewiththeprimaryDomainNameServer(DNS).ItmaynothaveaneffectonyourInternetconnectivity.ThereforeifthistestfailsbutyouarestillabletoaccesstheInternet,thereisnoneedtotroubleshootthisissue.


9.2 SYSTeMLOGThisfunctionallowsyoutoviewsystemeventsandconfigurerelatedoptions.FollowthestepsbelowtoenableandviewtheSystemLog.

1: ClickConfigureSystemLogtocontinue.

2: Selectthesystemlogoptions(seetablebelow)andclickSave/Apply.


Option Description

Log Indicateswhetherthesystemiscurrentlyrecordingevents.Youcanenableordisableeventlogging.Bydefault,itisdisabled.

Log level Allowsyoutoconfiguretheeventlevelandfilteroutunwantedeventsbelowthislevel.Theeventsrangingfromthehighestcriticallevel“emergency”downtothisconfiguredlevelwillberecordedtothelogbufferontheGateway’sSDRAM.Whenthelogbufferisfull,thenewesteventwillwrapuptothetopofthelogbufferandoverwritetheoldestevent.Bydefault,theloglevelis“Debugging”,whichisthelowestcriticallevel.Theloglevelsaredefinedasfollows:

emergencyisthemostseriouseventlevel,whereasDebuggingistheleastimportant.Forinstance,iftheloglevelissettoDebugging,alltheeventsfromthelowestDebuggingleveltothemostcriticallevelemergencylevelwillberecorded.Iftheloglevelissettoerror,onlyerrorandthelevelabovewillbelogged.

Display Level AllowsyoutoselecttheloggedeventsanddisplaysontheViewSystemLogwindowforeventsofthislevelandabovetothehighestemergencylevel.

Mode Allows you to specify whether events should be stored in the local memory, besenttoaremotesyslogserver,ortobothsimultaneously.

Ifremotemodeisselected,theviewsystemlogwillnotbeabletodisplayeventssavedintheremotesyslogserver.WheneitherRemotemodeorBothmodeisconfigured,theWeBUIwillprompttheyoutoentertheServerIPaddressandServerUDPport.

3: ClickViewSystemLog.Theresultsaredisplayedasfollows.


9.3 NeXTGT m STAT USSelectthisoptionfordetailedstatusinformationonyourGateways3Gconnection.

Consultthetableonthenextpagefordetailedfielddescriptions.


Status Description

Manufacturer Themanufactureroftheembedded3Gmodule.

Model Themodelnameoftheembedded3Gmodule.

FW Rev. Thefirmwareversionofthe3Gmodule.

IMEI TheIMeI(InternationalMobileequipmentIdentity)isa15digitnumberthatisusedtoidentifyamobiledeviceonanetwork.

FSN FactorySerialNumberofthe3Gmodule.

IMSI TheIMSI(InternationalMobileSubscriberIdentity)isaunique15-digitnumberusedtoidentifyanindividualuseronaGSMorUMTSnetwork.

HW Rev. Thehardwareversionofthe3Gmodule.

Temperature Thetemperatureofthe3GmoduleindegreesCelsius.

System Mode WcDmA/Europe

cDmA �000 / America

WCDMA band The3Gradiofrequencybandwhichsupportstri-bandUTMS/HSDPA/HSUPAfrequencies(850/1900/2100MHz),IMT2000is2100MHz,WCDMA800is850MHz,WCDMA1900is1900MHz.

GSM band The2GradiofrequencybandwhichsupportsQuad-bandGSM/GRPSfrequencies,includingGSM850,GSM900,DCS1800,PCS1900witheachnumberrepresentingtherespectivefrequencyinMHz.

WCDMA channel The3Gchannel.

GSM channel The2Gchannel.

GSM (PS) state PacketSwitchingstate

MM (CS) state CircuitSwitchingstate

Signal Strength The3G/2GservicesignalstrengthindBm.

Signal level in dBm

-109 ~ -103 -101 ~ -93 -91 ~ -87 -85 ~ -79 -77 ~ -52

5Signalbars

LED Low Medium High


Status Description

Signal Level (RSSI) 3GRadioSignalStrengthIndex

Value 2 ~ 5 6 ~ 10 11 ~ 13 14 ~ 17 18 ~ 31 99

Signal level in dBm

-109 ~ -103

-101 ~ -93 -91 ~ -87 -85 ~ -79 -77 ~ -52 unknown

5 Signal bars

LED Low Medium High

Quality (Ec/Io) Thetotalenergyperchipperpowerdensity(ec/Io)valueoftheactiveset’sthreestrongestcells.

Network Registration Status

ShoulddisplayasregisteredwithavalidunlockedSIMcard.

Network Name The3GinternetServiceProvider.

Country & Network Codes

eachcountryandnetworkhasauniquecode.

Cell ID Thenetworkinformationforthe“serving”cellID.

Primary Scrambling Code (PSC)

The PSc of the reference WcDmA cell

Data Session Status connected or Disconnected

HSUPA/HSDPA Categories

TheHSUPA/HSDPAcategoriescorrespondtodifferentdatatransmissionrateswithhighernumbersgenerallyindicatingfasterrates

Received Signal Code Power (RSCP)

TheRSCPoftheactiveset’sthreestrongestcells

Battery Connection Status (BCS)

BcS of the mT (mobile Termination)

Battery Charge Level (BCL)

BcL of the mT (mobile Termination)


9.4 STATISTICSThesescreensprovidedetailedinformationfor:

• LocalAreaNetwork(LAN)andWirelessLocalAreaNetwork(WLAN)

• 3GInterfacesnOTE: These statistics page refresh every 15 seconds.

9.4.1 LAN Statistics

ThisscreendisplaysstatisticsfortheethernetandWirelessLANinterfaces.

Interface Shows connection interfaces

Received/Transmitted

Bytes Rx/TX(receive/transmit)packetinbytes

Pkts Rx/TX(receive/transmit)packets

Errs Rx/TX(receive/transmit)packetswitherrors

Drops Rx/TX(receive/transmit)packetsdropped


9.4.2 Next G™ Statistics

ClickNextG™networkintheStatisticssubmenutodisplaythescreenbelow.

Service Shows the service type

Inbound Octets Numberofreceivedoctetsovertheinterface.

Packets Numberofreceivedpacketsovertheinterface.

Drops Receivedpacketswhicharedropped.

Error Receivedpacketswhichareerrors.

Outbound Octets NumberofTransmittedoctetsovertheinterface.

Packets NumberofTransmittedpacketsovertheinterface.

Drops Transmitted packets which are dropped

Error Transmittedpacketswhichareerrors.


9 .5 ROUTeSelectRoutetodisplaythepathstheGatewayhasfound.

Field Description

Destination Destination network or destination host

Gateway next hop IP address

Subnet Mask Subnet mask of Destination

Flag U:routeisup

!:rejectroute

G:usegateway

H:targetisahost

R:reinstateroutefordynamicrouting

D:dynamicallyinstalledbydaemonorredirect

M:modifiedfromroutingdaemonorredirect

Metric The‘distance’tothetarget(usuallycountedinhops).Itisnotusedbyrecentkernels,butmaybeneededbyroutingdaemons.

Service Shows the name for WAn connection

Interface Shows connection interfaces


9 .6 ARPClickARPtodisplaytheARPinformation.

Field Description

IP address Shows IP address of host pc

Flags complete

Incomplete

Permanent

Publish

HW Address Shows the mAc address of host pc

Device Shows the connection interface

9.7 DYNAMICHOSTCONFIGURATIONPROTOCOL (DHCP)ClickDHCPtodisplaytheDHCPinformation.

Field Description

Hostname Shows the device/host/Pc network name

MAC Address Shows the Ethernet mAc address of the device/host/Pc

IP address Shows IP address of device/host/Pc

Expires In Shows how much time is left for each DHcP Lease


9.8 PING

ThePINGmenuprovidesfeedbackofconnectiontesttoanIPaddressorahostname.

InputanIPaddressorahostname,e.gwww.google.comandpressSubmit.Theconnectiontestresultwillbeshownasbelow.

Theabovescreenisnotshowingsuccessfulpingresult

A P P E n D I c I E S


ThesestepsexplaintheprocedureforenablingthePrintServer.

1: enablePrintServerfromtheAdvancedmenuintheWebUserInterface.

Select Enable on-board print server checkbox and enter Printer name and Make and model

nOTE: The printer name can be any text string up to 40 characters. The Make and model can be any text string up to 128 characters.

FORWINDOWSXP:2: GotothePrintersandFaxesapplicationintheControlPanelandselecttheAddaprinter

function(aslocatedonthesidemenubelow).

AppEnDIx A : pRI nT S ERVER


3: ClickNexttocontinue,whenyouseethedialogboxbelow.

4: SelectNetworkPrinterandclickNext.


5: SelectConnecttoaprinterontheInternetandenteryourprinterlink.

(e.g.http://10.0.0.138:631/printers/printername)andclickNext.NOte: the printer name must be the same name entered in the web user interface “printer server setting” as in step 1.

6: ClickHave DiskandinserttheprinterdriverCD.


7: SelectdriverfiledirectoryonCD-ROMandclickOK.

8: Oncetheprinternameappears,clickOK.

9: ChooseYesorNofordefaultprintersettingandclickNext.


10:Click“Finish”.

11:CheckthestatusofprinterfromWindowsControlPanel,printerwindow.StatusshouldshowasReady.


FORMACOSX:2. BrowsetotheApplemenuandselectSystemPreferences.IntheSystemPreferencesmenu

clickonPrint&Fax.

3. WithyourPrinterdriverinstalled,pleaseaddyourprinterfromthePrinter&Faxmenu.

4. Click+toaddyourprinterfromthePrint&Faxmenu.


5. SelectInternetPrintingProtocol–IPPfromtheProtocoldropdownlist.

6. TypeintotheAddressfield“GatewayIPAddress:361”whereGatewayIPAddressistheIPaddressofyourGateway(default:10.0.0.138).Seescreenshotbelowforanexample.AlsoenterintotheQueuefield“/printers/PrinterName”,wherePrinterNameisthenameyougaveyourprinterintheinitialstepabove.

7. SelectyourprinterfromthePrintUsingdropdownlist.


8. ClickAddandchecktheprinterstatus.

PrintServersetupisnowcomplete.YouwillnowbeabletoprintfromcommonapplicationsbyselectingthisprinterfromthePrintdialoguebox.


f O R W I n D OW S V I STA2. Gotothecontrolpanel,andselectPrinters.OnceinthePrinterspage,clicktheAddaprinter

buttonasshownbelow.

3. SelectAddanetwork,wirelessorbluetoothprinter.

4. Clickontheradio-buttonlabelledSelectasharedprinterbyname,andtype“http://10.0.0.138:631/printers/PrinterName”intheboxbelow.ClickNext.

nOTE: The printername must be the same as the printer name entered in the Web User Interface above.


5. Next,selectthedriverthatcamewithyourprinter.Browsethroughthelisttoselectyourprinterdriver,orclick‘HaveDisk’ifyouhaveyourprinterdriverinstallationmedia.

6.Choosewhetheryouwantthisprintertobethedefaultprinter,andthenclickNext.


7.ClickFinish.Yourdeviceisnowconfiguredandreadyforuse.


ThesestepsexplaintheprocedureforenablingtheUSBStorage.

1: enableSambaServerfromWebUserInterface.

Select Enable Samba checkbox and enter netbios name and Directory name

Field DescriptionNetbios Name It is the hostname of the Pc

Thedefaultnameis“ntc-cpe”

Directory Name Thefoldernameof“root”directory.

Thedefaultnameis“ntc-cpe”

FORWINDOWSXP:2: Openaweb-browser(suchasInternetexplorer,FirefoxorSafari)andtypeintheaddress.

\\”NetbiosName”\”DirectoryName”\(eg.\\ntc-cpe\ntc-cpe)

note: There is no username and password required to access the USB drive, the user will be able to read/write the folder/files in the USB drive.

AppEnDIx B : USB STORAGE


FORMACOSX:2. FromtheFinder,selecttheGoandthenclickConnecttoServer

3. IntheaddressfieldoftheConnecttoServerdialog,typeintheaddress:

smb://“NetbiosName”/“DirectoryName”(egsmb://ntc-cpe/ntc-cpe)

4. Clickthe+buttontoaddthisservertothelistofFavouritesandthenclickConnect

5. SelecttheGuestradiobuttonandthenclickConnect


f O R W I n D OW S V I STA1. Openaweb-browser(suchasInternetexplorer,FirefoxorSafari)

2. Typeintheaddress“\\NetbiosName\DirectoryName\”(eg\\ntc-cpe\ntc-cpe)

note: There is no username and password required to access the USB drive. Any network user will be able to read/write the folder/files in the USB drive.


AppEnDIx C :CL I COMMA nDS VIA TELnET

Show all CLI commands

Description:ListallavailableCLIcommandsthatthe3Ggatewaysupports.

Synopsis:help|?

example:

>help

?

help

logout

reboot

ddns

dumpcfg

arp

defaultgateway

dhcpserver

dns

lan

passwd

remoteaccess

restoredefault

route

save

ping

sntp

sysinfo

tftp

wlan

sierra

version

build


serialnumber

End the telnet session

Description:endthetelnetsession

Synopsis:logout

example:

>logout

Reset/reboot device

Description:Torebootthegateway.

Synopsis:reboot

example:

>reboot

RadioSignalStrength

Description:Displaythe3Gradiosignalstrength.

Synopsis:sierrashow--signal

Example:

>sierrashow--signal

signal:23

note: Signal value is explain in the table below


Radio Band

Description:Displaythe3Gband

Synopsis:sierrashow--band

Example:

>sierrashow--band

band:IMT2000

Note:IMT2000isband2100andWCDMA800isband850

connection status

Description:Displaythe3Gnetworkconnectionstatus

Synopsis:sierrashow–link

sierrashow--gstatus

Examples:

>sierrashow--link

link:Connected

>sierrashow--gstatus

CurrentTime:450Temperature:45

BootupTime:1Mode:ONLINe

Systemmode:WCDMAPSstate:Attached

WCDMAband:WCDMA800GSMband:Unknown

WCDMAchannel:4436GSMchannel:65535

GMM(PS)state:ReGISTeReDNORMALSeRVICe

MM(CS)state:IDLeNORMALSeRVICe

WCDMAL1State:L1M_FACHRRCState:CeLL_FACH

RXlevel(dBm):-90


IMSI & IMEI read

Description:DisplaytheIMSIandIMeIvalue

Synopsis:sierrashow--imsi

sierra show --imei

Example:

>sierrashow--imsi

imsi:466974800524867

>sierrashow--imei

IMeI:354219010024303

network Information

• sierra show --hsdcat

Description:ToindicatethecurrentHSDPAcategory.

Synopsis:sierrashow--hsdcat

example:

>sierrashow--hsdcat

!HSDCAT:8

• sierra show --hsucat

Description:ToindicatethecurrentHSUPAcategory.

Synopsis:sierrashow--hsucat

Example:

>sierrashow--hsucat

!HSUCAT:5

• sierra show --mode

Description:Toreportthecurrentavailableandsupportednetworktechnologiesbeingused.

Synopsis:sierrashow--mode

example:

>sierrashow--mode

mode:UMTS

(Validvalues:“GSM”,“GPRS”,“eDGe”,“UMTS”,“HSDPA”,“HSUPA”)


• sierrashow--registration

Description:TodisplaytheNetworkRegistrationStatus,CountrycodeandNetworkcode.

Synopsis:sierrashow--registration

example:

>sierrashow--registration

NetworkName:TelstraMobile

CountryCode:505

NetworkCode:01

RegistrationStatus:registered.

APN (Access Point Name) read and set

Description:AllowsusertoreadandconfiguretheAPNonthe3Ggateway.Commandsinclude:

• sierrashow--apn<profile>

Description:TodisplaytheAPNvalueforcustomAPNprofile.

Synopsis:sierrashow[--apn<profile>]

<profile>1:telstra.pcpack2:telstra.datapack3:telstra.internet4:CustomAPN

example:DisplaythecurrentAPNfortheprofileCustomAPN

>sierrashow--apn1

Profile1APN:telstra.pcpack

• sierraset--apn<profile><apn>

Description:ToconfiguretheAPNvalueforcustomAPNprofile.

Synopsis:sierraset[--apn<profile><apn>]

<profile>4:CustomAPN

example:SettheCustomAPNtotest.test

>sierraset--apn4test.test


Authentication Method set and read

Description:Tosetandqueryauthenticationmethod(PAP/CHAP/AUTO)forPDP-IPpacketdatacallsiftheprofilesupports.

Synopsis:Authenticationmethodset:

sierraset--auth<profile><method>


<method>0:AUTO1:PAP2:CHAP

Authenticationmethodread:

sierrashow--auth<profile>


examples:ConfigurethecustomerprofiletoauthenticationPAP

>sierraset--auth41

Displaythecurrentauthenticationrequirementforthecustomerprofile

>sierrashow–auth4

Profile4:“PAP”

Set Radio Band for APN profile

Description:ToconfigurethefrequencybandforeachAPNprofile.

Synopsis:sierraset[--band<profile><band>]


<band>0:auto1:3G-850Only2:3G-850/2G-900/18003:3G-ALL4:2G-ALL

example:

Configurethecustomerprofiletoselectfrequencybandautomatically

>sierraset--band40

>reboot

(Pleaserebootthegatewaytomakethechangetotakeeffectafterconfiguringthebandsetting)


IP header/Data compression set and read

• sierraset--comp<profile><type><enable|disable>

Description:ToenableordisabletheIPheadercompressionanddatacompressionfunctions.

Synopsis:sierraset[--comp<profile><type><enable|disable>]


<type>0:IPHeADeR1:DATA

example:enabletheIPheadercompressionforCustomAPN

>sierraset--comp40enable

• sierrashow--comp<profile>

Description:TodisplaytheIPheaderordatacompressionstatus.

Synopsis:sierrashow--comp<profile>


examples:

>sierrashow--comp1

Profile1:IPHisOff,DATAisOff

Connect / Disconnect PPP session

Description:ToconnectordisconnectthePPPsession.Theprofiletobeusedtodevelopaconnectionisthelatestconfiguredbythesierrasetcommand.

Synopsis:sierraset[--connection<connect¦disconnect><num>]

<num>0:FirstAPN1:SecondaryAPN

examples:ToconnectthePPPsession

>sierraset–connectionconnect


PIN code configuration

• sierraset--PIN-LOCk<enable|disable><PINcode><save>

Description:ToenableordisablethePINcodeprotectionandsavetotheSIMcard.

Synopsis:sierraset[--PIN-LOCk<enable|disable><PINcode>]<save>

example:ToenabletheSIMPINprotectionwithPINcode0000

>sierraset--PIN-LOCkenable0000save

• sierraset--PIN<PINcode><save>

Description:TosavethePINcodeintogatewayconfigurationsettings.

Synopsis:sierraset[--PIN<PINcode><save>]

example:TosavethePINcode0000intogatewayconfigurationsetting

>sierraset--PIN0000save

• sierrashow--PIN-LOCk

Description:TodisplaythePINcodeprotectionstatus.

Synopsis:sierrashow--PIN-LOCk

example:

>sierrashow--PIN-LOCk

PIn code protection is disabled

• sierra show --SIm

Description:TodisplaytheSIMcardstatus.

Synopsis:sierrashow--SIM

example:

>sierrashow--SIM

SIm inserted (SIm card is correctly inserted to the USIm slot)

SIm not inserted (SIm card is not inserted to the USIm slot)

USIm is PIn locked (SIm card is locked by the PIn code)

IncorrectSIM(aSIMcardfromotherInternetserviceproviderisinserted,SIMcardcan’tberecognizedbythenetwork)

PUklocked(SIMcardislockedbythePUkcode)


• sierraset--PIN-CHG<oldPINcode><newPINcode>

Description:ChangethecurrentPINcodetothenewone.

Synopsis:sierraset[--PIN-CHG<oldPINcode><newPINcode>]

example:ChangethePINcodefrom0000to1111

>sierraset--PIN-CHG00001111

changedthePINcodesuccessfully

PUkcodeunlock

Description:enterthenewPUkcodeandconfigurethenewPINcodewhenthemodemis

PUklocked.

Synopsis:sierraset[--PUk<PUkkey><newPINcode>]

examples:UnlockthemodemwithPUkkey11111111andconfigurethePINcodeas0000

>sierraset--PUk111111110000

PUkunlocksuccessfully

The connection is up already!!

Wireless LAn mode set and read

Description:AllowsusertoconfiguretheWirelessLANinterfacesonthe3Ggateway.

Thiscommandcanbeusetoconfigurebasicfeature,securityfeature,wirelessbridgefeatureandMACfilterfeaturesofthewirelessLANinterface.

Synopsis:

>wlan

wlancommandusage:

wlanconfig[option]

wlansecurity[option]

wlanmacfilter[option]

wlanwds[option]

wlaninfo[option]

wlan–help

eachoptionwillbeexplainedseparatelybelow.

Note:Thesettingschangedfromthesecommandstakeeffectimmediatelyandwillbeupdatedonthewebpage

1.PleaseenablethewirelessBeFORechangingotherwirelesssettings.

2.Thewlancommandwillsavetheconfigurationintoflashmemoryandthenewsettingswillbesaved.

Sincethesettingschangedfromwlancommandtakeeffectimmediately,itisnotrecommendedtomodifythewirelesssettingsthroughtheWebUIatthesametime.


Configure basic Wireless LAN features

Description:ConfigurebasicwirelessLANfeaturessuchasenableordisablethewirelessLANinterface, hide the network from active scans, set the wireless network name (also known as SSID) andrestrictthechannelsetbasedoncountryrequirements.

Synopsis:

wlanconfig[--enable<0|1>][--hide<0|1>]

[--ssid<ssidStr>][--country<countryStr>]

[--isolate<0|1>]

[--channel<channelVal>][--rate<rateVal>]

[--mrate<rateVal>]

[--rts<rtsThreshold>][--frag<fragThreshold>]

[--dtim<dtimInterval>][--beacon<beaconInterval>]

[--xpress<on|off>][--gmode<auto|performance|lrs|802.11b>]

[--gprotect<off|auto>][--preamble<long|short>]

Options:

--enable<0|1>

Description:enableordisablewirelessLANinterface.

Validvalue:0or1

0–disabledthewirelessLANinterface.

1–enabledthewirelessLANinterface.

Defaultvalue:1

--hide<0|1>

Description:HidewirelessLANnetworkname(SSID).

Validvalue:0or1

0–nothidewirelessLANSSID.

1–hidewirelessLANSSID

Defaultvalue:0

--ssid<ssidStr>

Description:SetWirelessLANnetworkname(SSID).

Validvalue:32charactersstring

--country<countryStr>

Description:SetWirelessLANCountry,onlyacceptabbreviation.

Validvalue:2or3charactersstring(AUSTRALIAisabbreviatedtoAU).


--isolate<0|1>

Description:Setwirelessdevicesisolation.Whenenabled,wirelessdevicesconnectedtothegatewaywillnotbeabletocommunicatetoeachother

Validvalue:0or1

0–notisolatewirelessdevices.

1–isolatewirelessdevices

Defaultvalue:0

--channel<channelVal>

Description:SetthewirelessLANchannel.

Validvalue:0~14

0meansautoselectchannel.

Defaultvalue:0

--rate<rateVal>

Description:SetthewirelessLANdatarate.

Validvalue:0,1,2,5.5,6,9,11,12,18,24,36,48,54(Mbps)

0 means auto

Defaultvalue:0

--mrate<rateVal>

Description:SetthewirelessLANMulticastrate.

Validvalue:0,1,2,5.5,6,9,11,12,18,24,36,48,54(Mbps)

0 means auto

Defaultvalue:0

--rts<rtsThreshold>

Description:SetthewirelessLANRTSthreshold.

Validvalue:0~2347

Defaultvalue:234

--frag<fragThreshold>

Description:SetthewirelessLANfragmentthreshold.

Validvalue:256~2346

Defaultvalue:2346

--dtim<dtimInterval>

Description:SetthewirelessLANDTIMinterval.

Validvalue:1~255


Defaultvalue:1

--beacon<beaconInterval>

Description:SetthewirelessLANbeaconinterval.

Validvalue:1~65535

Defaultvalue:100

--xpress<on|off>

Description:enableordisablethexpressfeature

Validvalue:on/off

Defaultvalue:off

--gmode<auto|performance|lrs|802.11b>

Description:SetthewirelessLANGmode

Defaultvalue:auto

--gprotect<off|auto>

Description:enableordisablethegprotectfeature

Defaultvalue:auto

--preamble<long|short>

Description:SetthewirelessLANpreamble

Defaultvalue:long


eXAMPLe1 :UserwantstoenablethewirelessLAN,configurethewirelessLANnetworkname(SSID)as“TestAP”,configurewirelessLANchannelto5andthenhidetheSSID:

wlanconfig--enable1

wlanconfig--ssid“TestAP”

wlanconfig--channel5--hide1

Ormergetheabovecommands

wlanconfig--enable1--ssid“TestAP”--channel5--hide1

ConfigurewirelessLANsecurity

Description:enableordisableandconfigurethewirelessLANsecurity.Thisgatewaysupportsdifferenttypesofsecuritysuchas:WeP,802.1X,WPAandWPA2.

Synopsis:

wlan security open

[--wep<enabled|disabled>][--keybit<64|128>]

[--nkey1<keyStr>][--nkey2<keyStr>]


[--keyidx<1|2|3|4>]

wlan security shared (wep have to enable)




[--keyidx<1|2|3|4>]

wlan security radius (wep have to enable)

[--rasip<serverIp>][--raspt<portVal>][--raskey<”raskeyStr”>]



[--keyidx<2|3>]

wlan security wpa / wpa� / wpa�mix

[--wlPreauth<0|1>][--wlNetReauth<interval>]

[--wpaenc<tkip|aes|tkip+aes>][--rekey<interval>]

[--rasip<serverIp>][--raspt<portVal>][--raskey<”raskeyStr”>]



[--keyidx<2|3>]

wlan security psk / psk� / psk�mix


[--wpaenc<tkip|aes|tkip+aes>][--rekey<interval>]

[--pskey<”pskeyStr”>]



[--keyidx<2|3>]

Options:

--wep<enabled|disabled>

Description:enableordisableWePencryption

--keybit<64|128>

Description:SettheWePencryptionstrength

--nkey1<keyStr>

--nkey2<keyStr>

--nkey3<keyStr>

--nkey4<keyStr>

Description:SettheWePkey.

Note:5ASCIIcharactersor10hexadecimaldigitsfor64-bitencryptionkeys.

13ASCIIcharactersor26hexadecimaldigitsfor128-bitencryptionkeys

--keyidx<1|2|3|4>

Description:SetthecurrentWePkeyindex.

--rasip<serverIp>

Description:SettheRADIUSserverIPaddress.

--raspt<portVal>

Description:SettheRADIUSserverport.

Validvalue:1~65535

Defaultvalue:1812

--raskey<raskeyStr>

Description:SettheRADIUSkey.

Validvalue:stringof79characters.

--wpaenc<tkip|aes|tkip+aes>

Description:SettheWPAencryption

3G10WVT-HSPA7.2MbpsWi-FiGatewaywithVoiceUSeRGUIDe

--rekey<interval>

Description:SettheGroupRekeyInterval


Defaultvalue:0

--pskey<”pskeyStr”>

Description:SettheWPAPre-Sharedkey

Validvalue:stringof8~63characters.

Note:1.wlPreauthcanonlybeusedwithWPA2.

2.WhenusingWPA-PSkorWPA2-PSk,WPAPre-Sharedkey(pskey)mustbesetfirst.

3.WePMUSTbeenablewhensecurityissettoshared/802.1Xradiussecuritymode.

4.WePMUSTbedisablewhensecurityissettoWPA/WPA-PSksecuritymode

5.WhensettingkeyidxtoNforWePkey,ensurethatthenkeyNfieldhasastringvalue.

6.Alwaysissueacompletesecuritycommand.Forexample,onceWePisenabled,itwillstillbeenabledevenafterchangingthesecuritymode,untilthecommand“--wepdisabled”isreceivedbythegateway.

eXAMPLe2 :Aftersettingupthewirelessconfigurationinexample1,theuserwantstoconfigurethewirelessLANsecurity.

Scenario1:

WPA2withRadiusserverIPaddressof172.16.2.199

wlansecuritywpa2--rasip172.16.2.199--wlPreauth1

Scenario2:

WPA-PSkwith“123456789”asthepasskey.

wlansecuritypsk--pskey“123456789”--wpaencaes--wepdisabled

Scenario3:

802.1XwithRadiusserverIPof172.16.2.199andRADIUSkeyas“whatever”

wlansecurityradius--rasip172.16.2.199--raskey“whatever”--wepenabled


cO n f I G U R E W I R E L E SS L A n m A c f I LT E R Description:enable,disableandconfigurethewirelessLANMACfilterfeature.ThisfeatureenablesthegatewaytoallowordenyconnectionfromwirelessclientbasedontheMACaddress.

Synopsis:

wlanmacfilter[--mode<disabled|allow|deny>]

[--add<MACaddress>]

[--remove<MACaddress>]

Options:

--mode<disabled|allow|deny>

Description:DisableandsetthewirelessLANMACfiltermode.

ValidValue:

Disabled:disablewirelessLANMACfilter

Allow:onlyallowaccesstowirelessclientwiththeMACaddresslistedinthegateway

Deny:allowallwirelessclienttoconnectunlesstheMACaddressislistedinthegateway

DefaultValue:disabled

--add<MACaddress>

Description:addoneMACAddressentry

--remove<MACaddress>

Description:removeoneMACAddressentry

Note:ThesettingoftheMACfiltertakeseffectimmediately.Whensettingupthisfeaturethroughthewirelessinterface,becarefulofblockingthecomputer.

ChangingthemodewillmaketheMACaddresslistbereserved.

ToseethelistofMACaddresses,usethecommand“wlaninfo–macfilter”.


eXAMPLe3 :Afterexample2,theuserwanttoallowonlywirelessclientwithMACaddressof00:11:22:33:44:55tobeabletoconnecttothegateway

wlanmacfilter--modeallow--add00:11:22:33:44:55

Followingthecommandabove,iftheuserwantstodenywirelessclientwithMACaddressof00:11:22:33:44:55tobeabletoconnecttotheAP.

wlan macfilter --mode deny

ConfigureWirelessBridge(WirelessDistributionSystem/WDS)

Description:configurethewirelessbridge

Synopsis:

wlanwds[--mode<ap|wds>][--restrict<enabled|disabled>]

[--rmac1<MACaddress>][--rmac2<MACaddress>]

[--rmac3<MACaddress>][--rmac4<MACaddress>]

Options:

--mode<ap|wds>

Description:configurewirelessAPmode.

Defaultvalue:ap

--restrict<enabled|disabled>

Description:enableordisablebridgerestrictmode.

Defaultvalue:disabled

--rmac1<MACaddress>

--rmac2<MACaddress>

--rmac3<MACaddress>

--rmac4<MACaddress>

Description:setremotebridgeMACaddress

Note:The“--restrict”optionhavetobeenablebeforesettinganyrestrictMACaddress(--rmac1~4)ortherestrictMACaddresssettingwillbeignored.

ThebehaviorofWDSissimilartoconnectingtwoormoreAPusingahub.However,pleasebeawareoftheIPassignmenttopreventassigningtwoormorehosts/STAstothesameIPaddress.ToavoidIPaddressconflict,onlyenableDHCPserverinonegatewayanddisabletheothergatewayDHCPserver.

WDSCLI(commandlineinterface)doesNOTsupportenable(Scan)modeinBridgeRestrictwhileusingWUI(WebUI)does.WhenBridgeRestrictsettoenable(Scan)modeinWUI,theCLIwillshowBridgeRestrictdisabled.


eXAMPLe4 :After example 3, the user want to connect another AP which has DHcP disabled and the mAc addressis00:12:34:56:78:9a

wlanwds--modewds--restrictenabled--rmac100:12:34:56:78:9a

ShowwirelessLANinterfaceconfigurations

Description:showthecurrentconfigurationofthewirelessLANinterface

Synopsis:

wlaninfo[--config][--security]

[--macfilter][--wds][--station]

Options:

--config

Description:displaythelistofparametersfromconfigoption

example:

>wlaninfo--config

WlanConfigInfo:

Basic:

wlanconfigenable=1

wlanconfighide=0

wlanconfigssid=Series7Wireless7890

wlanconfigbssid=00:11:22:33:44:56

wlanconfigcountry=AU

Advance:

wlanconfigisolate=0

wlanconfigband=b

wlanconfigchannel=0

wlanconfigrate=0

wlanconfigmrate=0

wlanconfigbrate=default

wlanconfigrts=2347

wlanconfigfrag=2346

wlanconfigdtim=1

wlanconfigbeacon=100

wlanconfigxpress=off


wlanconfiggmode=auto

wlanconfiggprotect=auto

wlanconfigpreamble=long

3G10WVT-HSPA7.2MbpsWi-FiGatewaywithVoiceUSeRGUIDe

--security

Description:displaythelistofparametersfromsecurityoption

example:

>wlaninfo--security

WlanSecurityInfo:

wlansecurityauthmode=psk

wlansecuritywpa=aes

wlansecuritywpaGTkRekey=0

wlansecuritywpaPresharedkey=1234567890

wlansecurityWepstate=disabled

wlansecurityWepkeyBit=128

wlansecurityWepkey2=

wlansecurityWepkey3=

wlansecurityWepCurrentkeyindex=1

--macfilter

Description:displaythelistofparametersfrommacfilteroption

example:

>wlaninfo--macfilter

WlanmacfilterInfo:

wlanmacfiltermode=disabled

wlanmacfilterentry:

--wds

Description:displaythelistofparametersfromwdsopiton

example:

>wlaninfo--wds

WlanwdsInfo:

wlanwdsmode=ap

wlanwdsrestrictmode=disabled


--station

Description:displaythelistofauthenticatedwirelessstationsandtheirstatus

example:

>--wlaninfo--station

--wlaninfo--station:notfound

ConfigureAccessControl

Description:tolistandtoconfigureaccesscontrolfromLAN&WAN.

(1)Tosetuptheaccesscontrollist.

Synopsis:remoteaccessservice[--service<servicename>]<--interface<none|local|remote|both>>

<servicename>:FTP,HTTP,ICMP,TeLNeT,SSH,TFTP

<none|local|remote|both>:

• none:disabletheservice.

• local:enabletheserviceatLANsideonly

• remote:enabletheserviceatWANsideonly

• both:enabletheserviceatbothLANandWANsides.

(2)ToaddanentryofIPrangethattobeenabletomanagethegateway.Subnetmaskof255.255.255.255isforahostwiththespecificIPaddress.

Synopsis:remoteaccessiprange--add<IPaddress><Subnetmask><none|local|remote|both>

<none|local|remote|both>

• none:forbidtheIPrangetomanagethe3G10WVT.

• local:permittheIPrangetomanagethe3G10WVTfromLANsideonly.

• remote:permittheIPrangetomanagethe3G10WVTfromWANsideonly.

• both:permittheIPrangetomanagethe3G10WVTfrombothLANandWAN.

(3)TodeleteanentryofIPrangethattobeenabletomanagethegateway.

Synopsis:remoteaccessiprange--remove<IPaddress><Subnetmask>

(4)ToenableordisablethealltheIPrangesdefinedbycommand(2).

Synopsis:remoteaccessaccesscontrolmode<--enable<0|1>>


*Argument--enable1istoenabletheaccesslist;argument--enable0istodisabletheaccesslist;.Pleasenote(a)enablingaccesslistmodeisonlyforthecaseofatleastoneIPlistiscreated;(b)afterremovingthelastentryinthetable,theaccesslistmodewillbedisabledautomatically.ThisistoavoidnoIPbeingonthelistwhenaccessmodeisenabled;itwillcausethegatewaynobeingabletobemanagedbyanyIPaddress.Theonlysolutionunderthiscircumstanceistoreset3G10WVTTgatewaybacktofactorydefaultbypresstheresetbuttononthebackofthegatewayforover8seconds.

(5)Todisplayallcurrentsettingsforremoteaccess.

Synopsis:remoteaccessshow

(6)Toviewtheusageof“remoteacesss”command.

Synopsis:remoteaccess–help

configAPmode.

Defaultvalue:ap

--restrict<enabled|disabled>

configbridgerestrictmode.

Defaultvalue:disabled

--rmac1<MACaddress>

--rmac2<MACaddress>

--rmac3<MACaddress>

--rmac4<MACaddress>

configremotebridgeMACaddress

NOTe4 :Youshouldenabletheoption-“restrict”beforesettinganyrestrictMACaddress(setting--rmac1~4)oryourrestrictMACaddresssettingwillbeignored.

Aftertheversion–C40_R01,thewirelessdriver–3.91.15.0supportsbothBCM4318andBCM4306;Version-C39_R02withthewirelessdriver-3.61.13.0supportsonlyBCM4306;

ThebehaviorofwdsissimilartoconnecttwoormoreAPusingahub,beawareoftheIPassignmenttopreventassigningtwoormorehosts/STAstothesameIPaddress.YoucouldenableonlyoneDHCPserverinonegatewayanddisableallother’stoavoidtheconflictoftheIPassignment.

WDSCLIdoesNOTsupportenable(Scan)modeinBridgeRestrictwhileWeBdoes.IfyousetBridgeRestricttoenable(Scan)mode,theCLIwillshowBridgeRestrictdisabled.


eXAMPLe4 :After example 3, we want to use wds to connect with the other AP which has disabled the DHcP server(NOTe4)andhasMACaddress-00:12:34:56:78:9a;wecanachievethegoalusingthefollowingcommand.

wlanwds--modewds--restrictenabled--rmac100:12:34:56:78:9a

info:ShowtheconfigurationsofWLANinterfaceandtheinformationofstationsconnectedtothisAP.

Options for the info command

wlaninfo[--config][--security]

[--macfilter][--wds][--station]

--config

listparametersofconfigcommand

--security

list parameters of security command

--macfilter

list parameters of macfilter command

--wds

list parameters of wds command

--station

list authenticated wireless stations and their status

NOTe5 :Youcanusethiscommandtoviewyourwirelesssettings;nomatterthesettingsaremodifiedfromweborCLI,thecommandwillshowthelatestinformationforyou.


eXAMPLe5 :Afterexample4,ifweforgotourssid,wecanviewthessidwiththefollowingcommand.

wlaninfo--config

--help:DisplayusageforWLANinterface.

Scenario2toconfigureAPwithOPeN-disabledsecurity:

wlanconfig--enable1--ssid“WLAN_TLF”--hannel8

wlan security open --wep disabled

Scenario3toconfigureAPwithShred-WePsecurity


wlansecurityshared--wepenabled--nkey11234567890123--keyidx1

Scenario4toconfigureAPwith802.1Xsecurity


wlansecurityradius--rasip172.16.2.199--raskey“whatever”--wepenabled

Scenario5toconfigureAPwithWPA-PSksecurity


wlansecuritypsk--pskey“123456789”--wpaencaes

Scenario6toconfigureAPwithWPA2security


wlansecuritywpa2--rasip172.16.2.199--wlPreauth1



TECHnIC AL SUppORT:

Telst ra Bus ine ss Broadband:

1800 655 744

Documents

TURBO 7 WIRELESS GATEWAY WITH VOICE (3G10WVT)