FCC ID: I88LTE5388-S905 4G LTE-A Indoor Router

Users Guide LTE Series Default Login Details LAN IP Address Login Password http://192.168.1.1 admin See the Zyxel Device label Version 1.00_2.00 Ed 7, 8/2020 Copyright 2020 Zyxel Communications Corporation IMPORTANT!

READ CAREFULLY BEFORE USE. KEEP THIS GUIDE FOR FUTURE REFERENCE. This is a series Users Guide. Screenshots and graphics in this book may differ slightly from what you see due to differences in your product firmware or your computer operating system. Every effort has been made to ensure that the information in this manual is accurate. Related Documentation Quick Start Guide More Information The Quick Start Guide shows how to connect the Zyxel Device. Go to support.zyxel.com to find other information on the Zyxel Device. LTE Series Users Guide 2 Document Conventions Warnings and Notes These are how warnings and notes are shown in this guide. Warnings tell you about things that could harm you or your Zyxel Device. Note: Notes tell you other important information (for example, other things you may need to configure or helpful tips) or recommendations. Syntax Conventions The LTE device in this users guide may be referred to as the Zyxel Device in this guide. Product labels, screen names, field labels and field choices are all in bold font. A right angle bracket ( > ) within a screen name denotes a mouse click. For example, Network Setting

> Routing > DNS Route means you first click Network Setting in the navigation panel, then the Routing submenu and finally the DNS Route tab to get to that screen. Icons Used in Figures Figures in this user guide may use the following generic icons. The Zyxel Device icon is not an exact representation of your Zyxel Device. Zyxel Device Generic Router Switch Server Firewall USB Storage Device Printer LTE Series Users Guide 3 Contents Overview Contents Overview Users Guide ......................................................................................................................................12 Introduction ........................................................................................................................................... 13 The Web Configurator ......................................................................................................................... 21 Quick Start ............................................................................................................................................. 31 Tutorials .................................................................................................................................................. 35 Technical Reference ........................................................................................................................52 Connection Status ................................................................................................................................ 53 Broadband ............................................................................................................................................ 64 Home Networking ................................................................................................................................. 76 Routing ................................................................................................................................................... 98 Network Address Translation (NAT) ................................................................................................... 106 Dynamic DNS Setup ........................................................................................................................... 116 SAS CBSD ............................................................................................................................................. 120 Firewall ................................................................................................................................................. 126 MAC Filter ............................................................................................................................................ 137 Certificates .......................................................................................................................................... 139 Log ....................................................................................................................................................... 148 Traffic Status ....................................................................................................................................... 151 ARP Table ............................................................................................................................................ 154 Routing Table ...................................................................................................................................... 156 Cellular WAN Status ........................................................................................................................... 159 System .................................................................................................................................................. 164 User Account ...................................................................................................................................... 165 Remote Management ....................................................................................................................... 168 Time Settings ........................................................................................................................................ 173 E-mail Notification .............................................................................................................................. 176 Log Setting .......................................................................................................................................... 179 Firmware Upgrade .............................................................................................................................. 182 Backup/Restore .................................................................................................................................. 184 Diagnostic ........................................................................................................................................... 187 Troubleshooting .................................................................................................................................. 189 Appendices .....................................................................................................................................195 LTE Series Users Guide 4 Table of Contents Table of Contents Document Conventions ......................................................................................................................3 Contents Overview .............................................................................................................................4 Table of Contents .................................................................................................................................5 Part I: Users Guide.......................................................................................... 12 Chapter 1 Introduction ........................................................................................................................................13 1.1 Overview ......................................................................................................................................... 13 1.2 Application for the Zyxel Device .................................................................................................. 14 1.3 Manage the Zyxel Device ............................................................................................................. 14 1.4 Good Habits for Managing the Zyxel Device ............................................................................. 15 1.5 Front and Bottom Panels ............................................................................................................... 15 1.5.1 LEDs (Lights) ........................................................................................................................... 17 1.5.2 Panel Ports & Buttons ............................................................................................................ 17 1.5.3 Turning On/Off WiFi ............................................................................................................... 18 1.5.4 The RESET Button .................................................................................................................... 19 Chapter 2 The Web Configurator........................................................................................................................21 2.1 Overview ......................................................................................................................................... 21 2.1.1 Access the Web Configurator ............................................................................................. 21 2.2 Web Configurator Layout .............................................................................................................. 23 2.2.1 Settings Icon .......................................................................................................................... 23 2.2.2 Widget Icon ........................................................................................................................... 28 Chapter 3 Quick Start ..........................................................................................................................................31 3.1 Overview ......................................................................................................................................... 31 3.2 Quick Start Setup ............................................................................................................................ 31 3.3 Time Zone ........................................................................................................................................ 31 3.4 The Internet Connection Setup ..................................................................................................... 32 3.4.1 Successful Internet Connection .......................................................................................... 32 3.4.2 Unsuccessful Internet Connection ...................................................................................... 33 3.5 Quick Start Setup-Wireless ............................................................................................................. 33 3.6 Quick Start Setup-Finish .................................................................................................................. 34 LTE Series Users Guide 5 Table of Contents Chapter 4 Tutorials ...............................................................................................................................................35 4.1 Overview ......................................................................................................................................... 35 4.2 Set Up a Wireless Network Using WPS ........................................................................................... 35 4.2.1 Push Button Configuration (PBC) ........................................................................................ 36 4.2.2 PIN Configuration .................................................................................................................. 37 4.3 Connect to the Zyxel Devices WiFi Network .............................................................................. 38 4.4 Configure a Firewall Rule ............................................................................................................... 41 4.5 Configure MAC Filter ...................................................................................................................... 42 4.6 Upgrade Firmware on the Zyxel Device ...................................................................................... 43 4.7 Back up a Configuration File ......................................................................................................... 44 4.8 Restore Configuration .................................................................................................................... 44 4.9 Configure DHCP ............................................................................................................................. 45 4.9.1 Add Devices to Your Static DHCP List ................................................................................. 46 4.10 Configure Static Route for Routing to Another Network ......................................................... 47 4.11 Access the Zyxel Device Using DDNS ......................................................................................... 49 4.11.1 Register a DDNS Account on www.dyndns.org .............................................................. 50 4.11.2 Configure DDNS on Your Zyxel Device ............................................................................. 50 4.11.3 Test the DDNS Settings ........................................................................................................ 51 Part II: Technical Reference........................................................................... 52 Chapter 5 Connection Status..............................................................................................................................53 5.1 Connection Status Overview ........................................................................................................ 53 5.1.1 Connectivity .......................................................................................................................... 53 5.1.2 System Info ............................................................................................................................. 54 5.1.3 Cellular Info ............................................................................................................................ 56 5.1.4 WiFi Settings ........................................................................................................................... 60 5.1.5 LAN ......................................................................................................................................... 61 Chapter 6 Broadband..........................................................................................................................................64 6.1 Overview ......................................................................................................................................... 64 6.1.1 What You Can Do in this Chapter ....................................................................................... 64 6.1.2 What You Need to Know ..................................................................................................... 65 6.1.3 Before You Begin ................................................................................................................... 65 6.2 Broadband ...................................................................................................................................... 65 6.3 Cellular WAN ................................................................................................................................... 66 6.4 Cellular APN .................................................................................................................................... 67 6.5 Cellular SIM Configuration ............................................................................................................. 68 LTE Series Users Guide 6 Table of Contents 6.6 Cellular Band Configuration .......................................................................................................... 69 6.7 Cellular PLMN Configuration ......................................................................................................... 70 6.8 Cellular IP Passthrough ................................................................................................................... 73 6.9 Cellular Lock .................................................................................................................................... 74 Chapter 7 Home Networking ..............................................................................................................................76 7.1 Overview ......................................................................................................................................... 76 7.1.1 What You Can Do in this Chapter ....................................................................................... 76 7.1.2 What You Need To Know ..................................................................................................... 76 7.2 LAN Setup ........................................................................................................................................ 77 7.3 Static DHCP ..................................................................................................................................... 81 7.3.1 Before You Begin ................................................................................................................... 81 7.4 UPnP ................................................................................................................................................. 83 7.5 Technical Reference ...................................................................................................................... 84 7.6 Turn on UPnP in Windows 7 Example ............................................................................................ 85 7.6.1 Auto-discover Your UPnP-enabled Network Device ........................................................ 86 7.7 Turn on UPnP in Windows 10 Example .......................................................................................... 88 7.7.1 Auto-discover Your UPnP-enabled Network Device ........................................................ 90 7.8 Web Configurator Easy Access in Windows 7 ............................................................................. 93 7.9 Web Configurator Easy Access in Windows 10 ........................................................................... 95 Chapter 8 Routing ................................................................................................................................................98 8.1 Overview ......................................................................................................................................... 98 8.2 Configure Static Route .................................................................................................................. 98 8.2.1 Add/Edit Static Route ........................................................................................................... 99 8.3 DNS Route ...................................................................................................................................... 101 8.3.1 Add/Edit DNS Route ........................................................................................................... 101 8.4 Policy Route .................................................................................................................................. 102 8.4.1 Add/Edit Policy Route ........................................................................................................ 104 8.5 RIP Overview ................................................................................................................................. 105 8.5.1 RIP ......................................................................................................................................... 105 Chapter 9 Network Address Translation (NAT) ................................................................................................106 9.1 Overview ....................................................................................................................................... 106 9.1.1 What You Can Do in this Chapter ..................................................................................... 106 9.1.2 What You Need To Know ................................................................................................... 106 9.2 Port Forwarding Overview ........................................................................................................... 107 9.2.1 Port Forwarding ................................................................................................................... 108 9.2.2 Add/Edit Port Forwarding ................................................................................................... 108 9.3 Port Triggering ............................................................................................................................... 110 LTE Series Users Guide 7 Table of Contents 9.3.1 Add/Edit Port Triggering Rule ............................................................................................. 112 9.4 DMZ ................................................................................................................................................ 113 9.5 ALG ................................................................................................................................................. 114 Chapter 10 Dynamic DNS Setup.........................................................................................................................116 10.1 DNS Overview ............................................................................................................................. 116 10.1.1 What You Can Do in this Chapter ................................................................................... 116 10.1.2 What You Need To Know ................................................................................................. 116 10.2 DNS Entry ..................................................................................................................................... 117 10.2.1 Add/Edit DNS Entry ........................................................................................................... 117 10.3 Dynamic DNS .............................................................................................................................. 118 Chapter 11 SAS CBSD ..........................................................................................................................................120 11.1 SAS CBSD Overview .................................................................................................................... 120 11.1.1 What You Can Do in this Chapter ................................................................................... 120 11.1.2 What You Need to Know ................................................................................................. 120 11.2 The SAS CBSD Procedure Screen .............................................................................................. 121 11.3 The SAS CBSD Configuration Screen ........................................................................................ 122 Chapter 12 Firewall ..............................................................................................................................................126 12.1 Overview ..................................................................................................................................... 126 12.1.1 What You Need to Know About Firewall ........................................................................ 126 12.2 Firewall ......................................................................................................................................... 127 12.2.1 What You Can Do in this Chapter ................................................................................... 127 12.3 Firewall General Settings ............................................................................................................ 127 12.4 Protocol (Customized Services) ................................................................................................ 129 12.4.1 Add Customized Service .................................................................................................. 129 12.5 Access Control (Rules) ............................................................................................................... 130 12.5.1 Add New ACL Rule Screen .............................................................................................. 131 12.6 DoS ............................................................................................................................................... 133 12.7 Firewall Technical Reference .................................................................................................... 134 12.7.1 Firewall Rules Overview .................................................................................................... 134 12.7.2 Guidelines For Security Enhancement With Your Firewall ............................................ 135 12.7.3 Security Considerations .................................................................................................... 135 Chapter 13 MAC Filter .........................................................................................................................................137 13.1 MAC Filter Overview ................................................................................................................... 137 13.2 MAC Filter .................................................................................................................................... 137 13.2.1 Add New Rule ................................................................................................................... 138 LTE Series Users Guide 8 Table of Contents Chapter 14 Certificates .......................................................................................................................................139 14.1 Certificates Overview ................................................................................................................ 139 14.1.1 What You Can Do in this Chapter ................................................................................... 139 14.2 Local Certificates ....................................................................................................................... 139 14.2.1 Create Certificate Request ............................................................................................. 140 14.2.2 View Certificate Request ................................................................................................. 141 14.3 Trusted CA ................................................................................................................................... 143 14.4 Import Trusted CA Certificate ................................................................................................... 144 14.5 View Trusted CA Certificate ...................................................................................................... 144 14.6 Certificates Technical Reference ............................................................................................. 145 14.6.1 Verify a Certificate ............................................................................................................ 146 Chapter 15 Log ....................................................................................................................................................148 15.1 Log Overview .............................................................................................................................. 148 15.1.1 What You Can Do in this Chapter ................................................................................... 148 15.1.2 What You Need To Know ................................................................................................. 148 15.2 System Log .................................................................................................................................. 149 15.3 Security Log ................................................................................................................................. 149 Chapter 16 Traffic Status .....................................................................................................................................151 16.1 Traffic Status Overview ............................................................................................................... 151 16.1.1 What You Can Do in this Chapter ................................................................................... 151 16.2 WAN Status .................................................................................................................................. 151 16.3 LAN Status .................................................................................................................................... 152 Chapter 17 ARP Table ..........................................................................................................................................154 17.1 ARP Table Overview ................................................................................................................... 154 17.1.1 How ARP Works .................................................................................................................. 154 17.2 ARP Table .................................................................................................................................... 155 Chapter 18 Routing Table....................................................................................................................................156 18.1 Routing Table Overview ............................................................................................................ 156 18.2 Routing Table .............................................................................................................................. 156 Chapter 19 Cellular WAN Status ........................................................................................................................159 19.1 Cellular WAN Status Overview .................................................................................................. 159 19.2 Cellular WAN Status .................................................................................................................... 159 LTE Series Users Guide 9 Table of Contents Chapter 20 System...............................................................................................................................................164 20.1 System Overview ........................................................................................................................ 164 20.2 System .......................................................................................................................................... 164 Chapter 21 User Account....................................................................................................................................165 21.1 User Account Overview ............................................................................................................. 165 21.2 User Account .............................................................................................................................. 165 21.2.1 User Account Add/Edit .................................................................................................... 166 Chapter 22 Remote Management .....................................................................................................................168 22.1 Overview ..................................................................................................................................... 168 22.2 MGMT Services ............................................................................................................................ 168 22.3 MGMT Services for IP Passthrough ............................................................................................ 169 22.4 Trust Domain ................................................................................................................................ 170 22.5 Add Trust Domain ....................................................................................................................... 171 22.6 Trust Domain for IP Passthrough ................................................................................................ 171 22.7 Add Trust Domain ....................................................................................................................... 172 Chapter 23 Time Settings.....................................................................................................................................173 23.1 Time Settings Overview .............................................................................................................. 173 23.2 Time .............................................................................................................................................. 173 Chapter 24 E-mail Notification ...........................................................................................................................176 24.1 E-mail Notification Overview ..................................................................................................... 176 24.2 E-mail Notification ...................................................................................................................... 176 24.2.1 E-mail Notification Edit ...................................................................................................... 177 Chapter 25 Log Setting .......................................................................................................................................179 25.1 Log Setting Overview ................................................................................................................. 179 25.2 Log Setting ................................................................................................................................... 179 Chapter 26 Firmware Upgrade ...........................................................................................................................182 26.1 Overview ..................................................................................................................................... 182 26.2 Firmware Upgrade ...................................................................................................................... 182 LTE Series Users Guide 10 Table of Contents Chapter 27 Backup/Restore ...............................................................................................................................184 27.1 Backup/Restore Overview ........................................................................................................ 184 27.2 Backup/Restore .......................................................................................................................... 184 27.3 Reboot ......................................................................................................................................... 185 Chapter 28 Diagnostic.........................................................................................................................................187 28.1 Diagnostic Overview .................................................................................................................. 187 28.2 Ping/TraceRoute/Nslookup Test ................................................................................................ 187 Chapter 29 Troubleshooting................................................................................................................................189 29.1 Overview ..................................................................................................................................... 189 29.2 Power and Hardware Connections ......................................................................................... 189 29.3 Zyxel Device Access and Login ................................................................................................ 189 29.4 Internet Access ........................................................................................................................... 191 29.5 UPnP ............................................................................................................................................. 192 29.6 SIM Card ...................................................................................................................................... 193 29.7 Cellular Signal ............................................................................................................................. 193 Part III: Appendices ...................................................................................... 195 Appendix A Customer Support ..................................................................................................... 196 Appendix B IPv6............................................................................................................................... 202 Appendix C Legal Information ...................................................................................................... 209 Index .................................................................................................................................................213 LTE Series Users Guide 11 PART I Users Guide 12 C H A P T E R 1 Introduction 1.1 Overview Zyxel Device refers to these models as outlined below. OUTDOOR INDOOR LTE7461-M602 LTE5388-S905 LTE7480-S905 LTE7485-S905 The following table describes the feature differences of the Zyxel Device by model. Table 1 Zyxel Device Comparison Table LTE7461-M602 LTE7480-S905 LTE7485-S905 LTE5388-S905 400/150 Mbps

(FDD-LTE) 573/15.1 Mbps 573/15.1 Mbps

(TDD-LTE config. #2)

(TDD-LTE config. #2) 580/30 Mbps Firmware Version 2.00 2.00 1.00 1.00 The Zyxel Device is an LTE (Long Term Evolution) router that supports (but not limited to) the following:

V V V V V V V V V V

V Gigabit Ethernet Port 2.4G WLAN LTE Speed IP Passthrough PoE Injector Wall Mount Pole Mount TR069 V V V V V V V V V V V V V V Gigabit Ethernet connection DHCP (Dynamic Host Configuration Protocol) server NAT (Network Address Translation) DMZ (Demilitarized Zone) Port Forwarding/Triggering ALG (Application Layer Gateway) Embedded Bridge/Router mode Dynamic DNS (Domain Name System) for the first APN (Access Point Name) Static/Dynamic Route setting for RIP (Routing Information Protocol) Remote Management under Bridge mode Address Resolution Protocol (ARP) LTE Series Users Guide 13 Chapter 1 Introduction Firewall that uses Stateful Packet Inspection (SPI) technology Protects against Denial of Service (DoS) attacks Filter of LAN MAC address, LAN IP address and URLs Local and remote device management Firmware upgrade via TR-069 and Web Configurator The embedded Web-based Configurator enables straightforward management and maintenance. Just insert the SIM card (with an active data plan) and make the hardware connections. See the Quick Start Guide for how to do the hardware installation, wall/pole mounting, and Internet setup. Note: These are the theoretical downlink/uplink rates. LTE speed is affected by strength of signal, network congestion, LTE band(s) or frequency(-ies) to which your Zyxel Device is connected, and so forth. 1.2 Application for the Zyxel Device Wireless WAN The Zyxel Device can connect to the Internet through a 2G/3G/4G LTE SIM card to access a wireless WAN connection. Just insert a SIM card into the SIM card slot at the bottom of the Zyxel Device. Note: You must insert the SIM card into the card slot before turning on the Zyxel Device. You can install two external antennas to improve your wireless WAN signal strength. See Table 1 on page 13 for the feature differences. Internet Access Your Zyxel Device provides shared Internet access by connecting to an LTE network. A computer can connect to the Zyxel Devices PoE injector or a LAN port for configuration via the Web Configurator. Figure 1 Zyxel Devices Internet Access Application WiFi LTE (4G)/3G/2G 1.3 Manage the Zyxel Device Use the Web Configurator for management of the Zyxel Device using a (supported) web browser. LTE Series Users Guide 14 Chapter 1 Introduction 1.4 Good Habits for Managing the Zyxel Device Do the following things regularly to make the Zyxel Device more secure and to manage the Zyxel Device more effectively. Change the password. Use a password thats not easy to guess and that consists of different types of characters, such as numbers and letters. Write down the password and put it in a safe place. Back up the configuration (and make sure you know how to restore it). Refer to Section 27.2 on page 184. Restoring an earlier working configuration may be useful if the Zyxel Device becomes unstable or even crashes. If you forget your password to access the Web Configurator, you will have to reset the Zyxel Device to its factory default settings. If you backed up an earlier configuration file, you would not have to totally re-configure the Zyxel Device. You could simply restore your last configuration. Write down any information your ISP provides you. 1.5 Front and Bottom Panels The LED indicators are located on the front (LTE5388-S905)/ or the bottom panel (LTE7461-M602 /

LTE7480-S905 / LTE7485-S905). Front / Top Panels Figure 2 Top Panel (LTE5388-S905) LTE Series Users Guide 15 Chapter 1 Introduction Figure 3 Front Panel (LTE5388-S905) Bottom / Rear /Side Panels Figure 4 Bottom Panel (LTE7461-M602 / LTE7485-S905 / LTE7480-S905) Figure 5 Bottom Panel (LTE5388-S905) LED Figure 6 Rear Panel (LTE5388-S905) LTE Series Users Guide 16 Chapter 1 Introduction 1.5.1 LEDs (Lights) Table 2 LTE7461-M602 / LTE7480-S905 / LTE7485-S905 LED Descriptions COLOR Red Green Amber LED Power STATUS Blinking Blinking On On Blinking COLOR Green Table 3 LTE5388-S905 LED Descriptions DESCRIPTION The Zyxel Device is booting or self-testing. The Zyxel Device encountered an error. The Zyxel Device is trying to connect to the Internet. The Zyxel Device is connected to the Internet. The Zyxel Device WiFi is on. STATUS DESCRIPTION The Zyxel Device is receiving power and ready for use. Blinking The Zyxel Device is booting. The Zyxel Device is not receiving power. Internet Green There is an Internet connection. There is no Internet connection. LTE Signal Strength Green The signal strength is excellent. Orange Red The signal strength is fair. The signal strength is poor. WiFi/WPS Green The wireless network is activated. Blinking A valid SIM card is inserted, but no signal is detected. Blinking The WPS process is in progress. The WiFi/WPS is not activated. LAN Green The Zyxel Device recognizes an Ethernet cable through the LAN port. On Off On Off On On On On Off On 1.5.2 Panel Ports & Buttons The connection ports are located on the bottom/rear panels. The following table describes the items on the bottom panel. Table 4 Panel Ports and Buttons LABELS DESCRIPTION LAN WiFi WPS For LTE5388-S905, connect an RJ45 cable to a computer to connect to the internal network In using a LAN port. Press the WLAN (WiFi) button for more than five seconds to enable the wireless function. To set up a WiFi connection between the Zyxel Device and a wireless client, press the WPS button for longer than five seconds for LTE5388-S905. After the wireless function is enabled, press the WLAN button for more than one second but less than five seconds to quickly set up a secure wireless connection between the Zyxel Device and a WPS-compatible client. To enable WPS, press the WPS button for less than five seconds for LTE5388-S905. RESET Press the button for more than five seconds to return the Zyxel Device to the factory defaults. LTE Series Users Guide 17 Chapter 1 Introduction Table 4 Panel Ports and Buttons (continued) LABELS DESCRIPTION POWER Button Press the POWER button after the power adapter is connected to start the Zyxel Device. POWER /DC IN Connect the power adapter and press the POWER button to start the Zyxel Device. Reboot SIM card Press the RESET button for more than 2 seconds but less than 5 seconds, it will cause the system to reboot. Insert a micro-SIM card into the slot with the chip facing down and the beveled corner in the top left corner. 1.5.3 Turning On/Off WiFi Use the WPS or WiFi/WPS button on the Zyxel Device to turn on or turn off the wireless network. Note: Use the WiFi function of the LTE7461-M602 / LTE7480-S905 /LTE7485-S905 / LTE5388-S905 for configuration (for example, connect to the LTE Ally app of your mobile device to nd the optimal LTE signal strength and manage your LTE7461-M602 / LTE7480-S905 /

LTE7485-S905 / LTE5388-S905). Note: Wi-Fi is for local management use only. Figure 7 LTE7461-M602 / LTE7480-S905 / LTE7485-S905 WiFi Button Figure 8 LTE5388-S905 WPS button To turn on WiFi:

seconds and release it. Make sure the POWER LED is on and not blinking. Press the WiFi or WiFi/WPS button for more than 5 LTE Series Users Guide 18 Chapter 1 Introduction For LTE7461-M602 / LTE7480-S905 / LTE7485-S905:

Once WiFi is turned on, the LED blinks amber. For LTE5388-S905:

Once WiFi is turned on, the LED turns green. To activate WPS (WiFi must be already on):

You can also quickly set up a secure wireless connection between the Zyxel Device and a WPS-

compatible client by adding one device at a time. Press the WiFi or WiFi/WPS button for more than 1 second but less than 5 seconds and release it

(pressing more than 5 seconds will turn off WiFi). Press the WPS button on another WPS-enabled device within range of the Zyxel Device. For LTE7461-M602 / LTE7480-S905 / LTE7485-S905:

Once a wireless connection is ready, the LED blinks amber. For LTE5388-S905:

Once a wireless connection is ready, the WPS LED blinks green. To turn off the wireless network:

Press the WiFi or WiFi/WPS button for more than 5 seconds. For LTE7461-M602 / LTE7480-S905 / LTE7485-S905:

The amber LED turns off when the wireless network is off. For LTE5388-S905:

The WLAN LED turns off when the wireless network is off. 1.5.4 The RESET Button If you forget your password or cannot access the Web Configurator, you will need to use the RESET button of the Zyxel Device as shown in the following figure to reload the factory-default configuration file. This means that you will lose all configurations that you had previously saved. The password will be reset to the default (see the Zyxel Device label) and the IP address will be reset to 192.168.1.1. Figure 9 Reset Button (LTE7461-M602 / LTE7480-S905 / LTE7485-S905) LTE Series Users Guide 19 Chapter 1 Introduction Figure 10 Reset Button (LTE5388-S905) 1 Make sure the Zyxel Device is connected to power and POWER LED is on. 2 To set the Zyxel Device back to the factory default settings, press the RESET button for 5 seconds. Note: If you press the RESET button for more than 2 seconds but less than 5 seconds, it will cause the system to reboot/restart. LTE Series Users Guide 20 C H A P T E R 2 The Web Configurator 2.1 Overview The Web Configurator is an HTML-based management interface that allows easy system setup and management via Internet browser. Use a browser that supports HTML5, such as Internet Explorer 11, Mozilla Firefox, or Google Chrome. The recommended screen resolution is 1024 by 768 pixels. In order to use the Web Configurator you need to allow:

Web browser pop-up windows from your Zyxel Device. JavaScript (enabled by default). Java permissions (enabled by default). 2.1.1 Access the Web Configurator 2 4 1 Make sure your Zyxel Device hardware is properly connected (refer to the Quick Start Guide). Launch your web browser. If the Zyxel Device does not automatically re-direct you to the login screen, go to http://192.168.1.1. 3 A password screen displays. Select the language you prefer (upper right). To access the Web Configurator and manage the Zyxel Device, type the default username admin and the randomly assigned default password (see the Zyxel Device label) in the Login screen and click Login. If you have changed the password, enter your password and click Login. Figure 11 Password Screen Note: The first time you enter the password, you will be asked to change it. Make sure the new password must contain at least one uppercase letter, one lowercase letter and one number. LTE Series Users Guide 21 Chapter 2 The Web Configurator 5 The Connection Status screen appears. Use this screen to configure basic Internet access and wireless settings. Figure 12 Connection Status LTE Series Users Guide 22 Chapter 2 The Web Configurator 2.2 Web Configurator Layout Figure 13 Screen Layout A C B As illustrated above, the main screen is divided into these parts:

A - Settings Icon (Navigation Panel & Side Bar) B - Widget Icon C - Main Window 2.2.1 Settings Icon 2.2.1.1 Side Bar Click this icon (

) to see the side bar and navigation panel. The side bar provides some icons on the right hand side. LTE Series Users Guide 23 Chapter 2 The Web Configurator Figure 14 Side Bar The icons provide the following functions. Table 5 Web Configurator Icons in the Title Bar ICON DESCRIPTION Wizard: Click this icon to open screens where you can configure the Zyxel Devices time zone and wireless settings. See Chapter 3 on page 31 for more information about the Wizard screens. Theme: Click this icon to select a color that you prefer and apply it to the Web Configurator. Language: Select the language you prefer. Restart: Click this icon to reboot the Zyxel Device without turning the power off. Logout: Click this icon to log out of the Web Configurator. LTE Series Users Guide 24 Chapter 2 The Web Configurator 2.2.1.2 Navigation Panel Use the menu items on the navigation panel to open screens to configure Zyxel Device features. The following tables describe each menu item. Table 6 Navigation Panel Summary TAB FUNCTION LINK Home Network Setting Broadband Broadband Use this screen to configure basic Internet access and wireless settings. This screen also shows the network status of the Zyxel Device and computers/devices connected to it. Use this screen to view and configure ISP parameters, WAN IP address assignment, and other advanced properties. Cellular WAN Use this screen to configure an LTE WAN connection. Cellular APN Cellular SIM Cellular Band Cellular PLMN Cellular IP Passthrough Use this screen to configure the Access Point Name (APN) provided by your service provider. Use this screen to enter a PIN for your SIM card to prevent others from using it. Use this screen to configure the LTE frequency bands that can be used for Internet access as provided by your service provider. Use this screen to view available PLMNs and select your preferred network. Use this screen to enable IP Passthrough mode (bridge mode). Cellular Lock Use this screen to enable or disable PCI Lock. Home Networking LAN Setup Use this screen to configure LAN TCP/IP settings, and other advanced properties. Static DHCP Use this screen to assign specific IP addresses to individual MAC addresses. UPnP Use this screen to turn UPnP and UPnP NAT-T on or off. Routing Static Route Use this screen to view and set up static routes on the Zyxel Device. DNS Route Use this screen to forward DNS queries for certain domain names through a specific WAN interface to its DNS server(s). Policy Route Use this screen to configure policy routing on the Zyxel Device. Use this screen to configure Routing Information Protocol to exchange routing information with other routers. NAT Port Forwarding Use this screen to make your local servers visible to the outside world. Port Triggering Use this screen to change your Zyxel Devices port triggering settings. Use this screen to configure a default server which receives packets from ports that are not specified in the Port Forwarding screen. Use this screen to enable or disable SIP ALG. DNS DNS Entry Use this screen to view and configure DNS routes. Dynamic DNS Use this screen to allow a static hostname alias for a dynamic IP address. Security Firewall Use this screen to configure the security level of your firewall. Use this screen to add Internet services and configure firewall rules. Access Control Use this screen to enable specific traffic directions for network services. Use this screen to activate protection against Denial of Service (DoS) attacks. RIP DMZ ALG General Protocol DoS LTE Series Users Guide 25 Chapter 2 The Web Configurator Table 6 Navigation Panel Summary (continued) LINK TAB FUNCTION MAC Filter MAC Filter Use this screen to block or allow traffic from devices of certain MAC addresses to the Zyxel Device. Certificates Local Certificates Use this screen to view a summary list of certificates and manage certificates and certification requests. Trusted CA Use this screen to view and manage the list of the trusted CAs. System Monitor Log System Log Use this screen to view the status of events that occurred to the Zyxel Device. You can export or email the logs. Security Log Use this screen to view all security related events. You can select the level and category of the security events in their proper drop-down list window. Levels include:

Emergency Alert Critical Error Warning Notice Informational Debugging Categories include:

Account Attack Firewall MAC Filter Traffic Status WAN Use this screen to view the status of all network traffic going through the WAN port of the Zyxel Device. LAN Use this screen to view the status of all network traffic going through the LAN ports of the Zyxel Device. ARP table ARP table Use this screen to view the ARP table. It displays the IP and MAC address of each DHCP connection. Routing Table Routing Table Use this screen to view the routing table on the Zyxel Device. Cellular Statistics Use this screen to look at the cellular Internet connection status. Cellular WAN Status Maintenance System System Use this screen to set the Zyxel Device name and Domain name. User Account User Account Use this screen to change the user password on the Zyxel Device. Remote Management MGMT Services Use this screen to enable specific traffic directions for network services. MGMT Services for IP Passthrough Use this screen to enable various approaches to access this Zyxel Device remotely from a WAN and/or LAN connection. Trust Domain Use this screen to view a list of public IP addresses which are allowed to access the Zyxel Device through the services configured in the Maintenance > Remote Management screen. Trust Domain for IP Passthrough Use this screen to enable public IP addresses to access this Zyxel Device remotely from a WAN and/or LAN connection. Time Time Use this screen to change your Zyxel Devices time and date. Email Notification Email Notification Use this screen to configure up to two mail servers and sender addresses on the Zyxel Device. LTE Series Users Guide 26 Chapter 2 The Web Configurator Table 6 Navigation Panel Summary (continued) LINK TAB FUNCTION Log Setting Log Setting Use this screen to change your Zyxel Devices log settings. Use this screen to upload firmware to your Zyxel Device. Firmware Upgrade Firmware Upgrade Backup/Restore Backup/Restore Use this screen to backup and restore your Zyxel Devices configuration

(settings) or reset the factory default settings. Reboot Reboot Use this screen to reboot the Zyxel Device without turning the power off. Diagnostic Ping&Traceroute

&Nslookup Use this screen to identify problems with the DSL connection. You can use Ping, TraceRoute, or Nslookup to help you identify problems. 2.2.1.3 Dashboard Use the menu items in the navigation panel on the right to open screens to configure the Zyxel Devices features. Figure 15 Navigation Panel 2.2.2 Widget Icon Click this icon (

) in the lower left corner to arrange the screen order. LTE Series Users Guide 27 Chapter 2 The Web Configurator Figure 16 Widget Icon The following screen appears. Select a block and hold it to move around. Click the Check icon (

the lower left corner to save the changes.

) in LTE Series Users Guide 28 Chapter 2 The Web Configurator Figure 17 The Screen Order LTE Series Users Guide 29 C H A P T E R 3 Quick Start 3.1 Overview Use the Wizard screens to configure the Zyxel Devices time zone and wireless settings. Note: See the technical reference chapters (starting on Chapter 5 on page 53) for background information on the features in this chapter. 3.2 Quick Start Setup You can click the Wizard icon in the side bar to open the Wizard screens. See Section 2.2.1.1 on page 23 for more information about the side bar. After you click the Wizard icon, the following screen appears. Click Lets go to proceed with settings on time zone and wireless networks. It will take you a few minutes to complete the settings on the Wizard screens. You can click Skip to leave the Wizard screens. Figure 18 Wizard - Home 3.3 Time Zone Select the time zone of your location. Click Next. LTE Series Users Guide 31 Chapter 3 Quick Start Figure 19 Wizard - Time Zone 3.4 The Internet Connection Setup Select the Internet connection mode of the Zyxel Device. Click Next to continue. Figure 20 Wizard - Internet 3.4.1 Successful Internet Connection The Zyxel Device has Internet access. Figure 21 Wizard - Successful Internet Connection LTE Series Users Guide 32 Chapter 3 Quick Start 3.4.2 Unsuccessful Internet Connection The Zyxel Device didnt detect a WAN connection. Figure 22 Wizard - Internet Connection is down 3.5 Quick Start Setup-Wireless Turn WiFi on or off. If you keep it on, record the WiFi Name and Password in this screen so you can configure your wireless clients to connect to the Zyxel Device. If you want to show or hide your WiFi password, click the Eye icon (

). Figure 23 Wizard - Wireless Note: You can also enable the wireless service using any of the following methods:

Click Network Setting > Wireless to open the General screen. Then select Enable in the Wireless field. Or, Press the WiFi button located under the RESET button (see Section 1.5.4 on page 19 for the location and for how long the wireless function is turned on) for one second. LTE Series Users Guide 33 Chapter 3 Quick Start 3.6 Quick Start Setup-Finish Your Zyxel Device saves your settings and attempts to connect to the Internet. LTE Series Users Guide 34 C H A P T E R 4 Tutorials 4.1 Overview This chapter provides tutorials for setting up your Zyxel Device. Set Up a Wireless Network Using WPS Connect to the Zyxel Devices WiFi Network Configure a Firewall Rule Configure MAC Filter Upgrade Firmware on the Zyxel Device Back up a Configuration File Restore Configuration Configure DHCP Configure Static Route for Routing to Another Network Access the Zyxel Device Using DDNS 4.2 Set Up a Wireless Network Using WPS This section gives you an example of how to set up wireless network using WPS. This example uses the Zyxel Device as the AP and a WPS-enabled Android smartphone as the wireless client. There are two WPS methods for creating a secure connection via the web configurator or utility. This tutorial shows you how to do both. Push Button Configuration (PBC) - create a secure wireless network simply by pressing a button. See Section 4.2.1 on page 36. This is the easier method. PIN Configuration - create a secure wireless network simply by entering a wireless client's PIN (Personal Identification Number) in the Zyxel Devices interface. See Section 4.2.2 on page 37. This is the more secure method, since one device can authenticate the other. LTE Series Users Guide 35 Chapter 4 Tutorials 4.2.1 Push Button Configuration (PBC) 1 Make sure that your Zyxel Device is turned on. Make sure the wireless LAN is turned on by pressing the WiFi/WPS button for two seconds, and that the device is placed within range of your notebook . For more information about WiFi/WPS settings, see Section 1.5.3 on page 18. 2 WPS is enabled by default on the Zyxel Device. If not, log into the Zyxel Devices Web Configurator and press the Push Button in the Configuration > Network Setting > Wireless > WPS screen. You can either press the WPS button on the Zyxel Devices top/side panel or press WPS in the screen. 3 Go to your phone settings and turn on WiFi. Open the WiFi networks list and tap WPS Push Button or the WPS icon (

). Note: It doesnt matter which button is pressed first. You must press the second button within two minutes of pressing the first one. The Zyxel Device sends the proper configuration settings to the wireless client. This may take up to two minutes. Then the wireless client is able to communicate with the Zyxel Device securely. The following figure shows you an example to set up wireless network and security by pressing a button on both Zyxel Device and wireless client (the Android smartphone in this example). Figure 24 Example WPS Process: PBC Method Wireless Client WITHIN 2 MINUTES SECURITY INFO COMMUNICATION LTE Series Users Guide 36 LTE LTE Chapter 4 Tutorials 4.2.2 PIN Configuration When you use the PIN configuration method, you need to check the clients PIN number and use the Zyxel Devices configuration interface. 1 Go to your phone settings and turn on WiFi. Open the WiFi networks list and tap WPS PIN Entry to get a PIN number. minutes. 2 Enter the clients PIN number in the PIN field in the Configuration > Network Setting > Broardband >

Cellular SIM screen on the Zyxel Device. 3 Click Start button (or the button next to the PIN field) on the Zyxel Devices Cellular SIM screen within two The Zyxel Device authenticates the wireless client and sends the proper configuration settings to the wireless client. This may take up to two minutes. Then the wireless client is able to communicate with the Zyxel Device securely. The following figure shows you the example to set up wireless network and security on Zyxel Device and wireless client (ex. the Android smartphone in this example) by using PIN Method. LTE Series Users Guide 37 Chapter 4 Tutorials Figure 25 Example WPS Process: PIN Method Wireless Client WITHIN 2 MINUTES LTE LTE LTE LTE LTE WPS Enter WPS PIN from other device:

WPS START Authentication by PIN SECURITY INFO COMMUNICATION LTE Series Users Guide 38 4.3 Connect to the Zyxel Devices WiFi Network In this example, youve configured the Zyxel Devices WiFi Network to the following settings. SSID SSID_Example Chapter 4 Tutorials Channel Security 6 WPA2-PSK

(Pre-Shared Key: ThisismyWPA-PSKpre-sharedkey) Note: In this example, we use a Windows 7 laptop that has a built-in wireless adapter as the wireless client. 1 The Zyxel Device supports IEEE 802.11b, IEEE 802.11g, and IEEE 802.11n wireless clients. Make sure that your notebook or computers wireless adapter supports one of these standards. 2 Click the WiFi icon in your computers system tray. The Wireless Network Connection screen displays. Click the refresh button to update the list of the available wireless APs within range. 3 4 Select SSID_Example and click Connect. 5 The following screen displays if WPS is enabled on the Zyxel Device but you didnt press the WPS button. Click Connect using a security key instead. LTE Series Users Guide 39 Chapter 4 Tutorials 6 Type the security key in the following screen. Click OK. 7 Check the status of your wireless connection in the screen below. LTE Series Users Guide 40 Chapter 4 Tutorials 8 If the wireless client keeps trying to connect to or acquiring an IP address from the Zyxel Device, make sure you entered the correct security key. If the connection has limited or no connectivity, make sure the DHCP server is enabled on the Zyxel Device. If your connection is successful, open your Internet browser and enter http://www.zyxel.com or the URL of any other website in the address bar. If you are able to access the web site, your wireless connection is successfully configured. 4.4 Configure a Firewall Rule You can enable the firewall to protect your LAN computers from malicious attacks from the Internet if you want to allow specific traffic in from the Internet. 1 Click Configuration > Security > Firewall to open the General screen. 2 Select IPv4 Firewall/IPv6 Firewall to enable the firewall, and click Apply. 3 Open the Access Control screen to create a rule. 4 Click Add New ACL Rule to set up a rule. Filter Name: Enter a name to identify the firewall rule. Source IP Address: Enter the IP address of the computer that initializes traffic for the application or service. LTE Series Users Guide 41 Chapter 4 Tutorials Select Destination IP Address: Enter the IP address of the computer to which traffic for the application or service is entering. Protocol: Select the protocol (TCP, UDP or ICMP) used to transport the packets. Custom Source Port: Enter the port number/range of the source that define the traffic type. Custom Destination Port: Enter the port number/range of the destination that define the traffic type. 5 Select Enable Rate Limit to activate the rules you created. Click OK. 4.5 Configure MAC Filter You can block certain web features and specific website addresses. 1 Go to the Configuration > Security > MAC Filter screen. Click Add New Rule. Type the Host Name and the corresponding MAC Address that you want to block in the MAC Filter screen. 2 3 Select the Active check box and click Apply. LTE Series Users Guide 42 Chapter 4 Tutorials 4.6 Upgrade Firmware on the Zyxel Device Upload the router firmware to the Zyxel Device for feature enhancements. 1 Download the firmware file at www.zyxel.com in a compressed file. Decompress the file. 2 Go to the Maintenance > Firmware Upgrade screen. 3 Click Browse and select a .bin file to upload. Click Upload. 4 This process may take up to two minutes to finish. After two minutes, log in again and check your new firmware version in the Status screen. LTE Series Users Guide 43 Chapter 4 Tutorials 4.7 Back up a Configuration File Back up a configuration file in case you want to return to your previous settings. 1 Go to the Maintenance > Backup/Restore screen. 2 Click Backup in the Backup Configuration section, and a configuration file will be saved to your computer. 4.8 Restore Configuration You can upload a previously saved configuration file from your computer to your Zyxel Device to restore that previous configuration. 1 Go to the Maintenance > Backup/Restore screen. 2 Click Browse in Restore Configuration section, and select the configuration file that you want to upload. Click Upload. LTE Series Users Guide 44 Chapter 4 Tutorials LTE Series Users Guide 45 3 The Zyxel Device will restart automatically after the configuration file is successfully uploaded. Wait for one minute before logging into the Zyxel Device again. 4.9 Configure DHCP You can enable the DHCP (Dynamic Host Configuration Protocol) in your Zyxel Device to assign IP addresses and DNS servers to systems that support DHCP client capability. DHCP allows clients to obtain TCP/IP configuration at start-up from a server. The following figure shows how Client A uses DHCP to join the Zyxel Devices network. First Client A searches for an available DHCP, and sends a DHCP Discover broadcast message asking for an IP address to connect to. Then the DHCP selects an IP address from its pool of IP addresses for Client A. The DHCP sends a DHCP Offer including the IP address selected and a lease time, which is the period of time Client A will be able to use this IP address, After Client A has received DHCP offers for an IP address, it chooses one and sends out a DHCP Request including the IP address it chose. Finally the DHCP confirms Chapter 4 Tutorials through a DHCP Ack (Acknowledge) message that the host can use the IP address for the previously specified lease time. To configure the DHCP in your Zyxel Device:

1 Log into the Zyxel Devices Web Configurator. 2 Click Network Setting > Home Networking > LAN Setup. Select Enable DHCP Server State. 3 4 5 4 5 Enter a range of addresses from which your DHCP will assign to devices in your network. Note: Do not include the Zyxel Devices LAN IP address in your range of addresses. Type the DHCP Server Lease Time, the period of time (in minutes) a device can use one of the IP addresses from the DHCP pool. The lease time helps recycle unused IP addresses so that other can use them again. Click Apply. 4.9.1 Add Devices to Your Static DHCP List IP addresses from the DHCP pool can be reused after they have completed their lease time. Add your devices to your Static DHCP List so they have the same IP address everytime they connect to your network. To add a device to your Static DHCP List:

1 Log into the Zyxel Devices Web Configurator. 2 Go to Network Setting > Home Networking > Static DHCP screen. 3 Click Static DHCP Configuration in the Static DHCP Configuration screen. Select Active and type the IP address you want to assign to your device. Type the MAC Address of your device to which the LTE7460 assigns the IP address and click OK. LTE Series Users Guide 46 4.10 Configure Static Route for Routing to Another Network In order to extend your Intranet and control traffic flowing directions, you may connect a router to the Zyxel Devices LAN. The router may be used to separate two area networks. This tutorial shows how to configure a static routing rule for two network routings. In the following figure, router R is connected to the Zyxel Devices LAN. R connects to two networks, N1

(192.168.1.x/24) and N2 (192.168.10.x/24). If you want to send traffic from computer A (in N1 network) to computer B (in N2 network), the traffic is sent to the Zyxel Devices WAN default gateway by default. In this case, B will never receive the traffic. Chapter 4 Tutorials LTE Series Users Guide 47 Chapter 4 Tutorials You need to specify a static routing rule on the Zyxel Device to specify R as the router in charge of forwarding traffic to N2. In this case, the Zyxel Device routes traffic from A to R and then R routes the traffic to B. This tutorial uses the following example IP settings:

Table 7 IP Settings in this Tutorial DEVICE / COMPUTER IP ADDRESS The Zyxel Devices LAN 192.168.1.1 A B Rs N1 Rs N2 192.168.1.34 192.168.1.253 192.168.10.2 192.168.10.33 To configure a static route to route traffic from N1 to N2:

1 Log into the Zyxel Devices Web Configurator. 2 Go to Network Setting > Routing > Static Route screen. 3 Click Add New Static Route in the Static Route screen. 4 Configure the Static Route Setup screen using the following settings:

4a Type 192.168.10.2 and subnet mask 255.255.255.0 for the destination, N2. 4b Type 192.168.1.253 (Rs N1 address) in the Gateway IP Address field. 4c Click OK. Now B should be able to receive traffic from A. You may need to additionally configure Bs firewall settings to allow specific traffic to pass through. LTE Series Users Guide 48 Chapter 4 Tutorials 4.11 Access the Zyxel Device Using DDNS If you connect your Zyxel Device to the Internet and it uses a dynamic WAN IP address, it is inconvenient for you to manage the device from the Internet. The Zyxel Devices WAN IP address changes dynamically. Dynamic DNS (DDNS) allows you to access the Zyxel Device using a domain name. To use this feature, you have to apply for DDNS service at www.dyndns.org. This tutorial covers:

Registering a DDNS Account on www.dyndns.org Configuring DDNS on Your Zyxel Device Testing the DDNS Setting Note: If you have a private WAN IP address, then you cannot use DDNS. LTE Series Users Guide 49 Chapter 4 Tutorials 4.11.1 Register a DDNS Account on www.dyndns.org 1 Open a browser and type http://www.dyndns.org. 2 Apply for a user account. This tutorial uses UserName1 and 12345 as the username and password. 3 Log into www.dyndns.org using your account. 4 Add a new DDNS host name. This tutorial uses the following settings as an example. Hostname: zyxelrouter.dyndns.org Service Type: Host with IP address IP Address: Enter the WAN IP address that your Zyxel Device is currently using. You can find the IP address on the Zyxel Devices Web Configurator Home page. 5 Then you will need to configure the same account and host name on the Zyxel Device later. 4.11.2 Configure DDNS on Your Zyxel Device Configure the following settings in the Network Setting > DNS > Dynamic DNS screen. Select Enable Dynamic DNS. Select www.DynDNS.com as Service Provider. Type zyxelrouter.dyndns.org in the Host Name field. Type the user name (UserName1) and password (12345). Click Apply. LTE Series Users Guide 50 Chapter 4 Tutorials 4.11.3 Test the DDNS Settings Now you should be able to access the Zyxel Device from the Internet. To test this:

1 Open a web browser on the computer (using the IP address a.b.c.d) that is connected to the Internet. Type http://zyxelrouter.dyndns.org and press [Enter]. 2 3 The Zyxel Devices login page should appear. You can then log into the Zyxel Device and manage it. LTE Series Users Guide 51 PART II Technical Reference 52 C H A P T E R 5 Connection Status 5.1 Connection Status Overview After you log into the Web Configurator, the Connection Status screen appears. You can configure basic Internet access and wireless settings in this screen. It also shows the network status of the Zyxel Device and computers/devices connected to it. 5.1.1 Connectivity Figure 26 Connectivity Use this screen to view the network connection status of the Zyxel Device and its clients. Click the Arrow icon (

connected to the Zyxel Device.

) to view IP addresses and MAC addresses of the wireless and wired devices Figure 27 Connectivity: Connected Devices You can change the icon and name of a connected device. Place your mouse within the device block, and an Edit icon (

) will appear. Click the Edit icon, and youll see there are several icon choices for you to select. Enter a name in the Device Name field for a connected device. Click to enable (

) i Internet Blocking for a connected device. Click Save to save your changes. LTE Series Users Guide 53 Chapter 5 Connection Status Figure 28 Connectivity: Edit 5.1.2 System Info Use this screen to view the basic system information of the Zyxel Device. Figure 29 System Info Click the Arrow icon (

LAN, and WLAN).

) to view more information on the status of your firewall and interfaces (WAN, LTE Series Users Guide 54 Chapter 5 Connection Status Figure 30 System Info: Detailed Information Each field is described in the following table. Table 8 System Info: Detailed Information LABEL DESCRIPTION Host Name This field displays the Zyxel Device system name. It is used for identification. Model Name This shows the model number of your Zyxel Device. Serial Number This field displays the serial number of the Zyxel Device. Firmware Version This is the current version of the firmware inside the Zyxel Device. System Up Time Interface Status This field displays how long the Zyxel Device has been running since it last started up. The Zyxel Device starts up when you plug it in, when you restart it (Maintenance > Reboot), or when you reset it. Virtual ports are shown here. You can see the ports in use and their transmission rate. WAN Information (These fields display when you have a WAN connection.) Mode This field displays the current mode of your Zyxel Device. IP Address This field displays the current IP address of the Zyxel Device in the WAN. IP Subnet Mask This field displays the current subnet mask in the WAN. IPv6 Address This field displays the current IPv6 address of the Zyxel Device in the WAN. This field displays the first DNS server address assigned by the ISP. This field displays the second DNS server address assigned by the ISP. This field displays the first DNS server IPv6 address assigned by the ISP. Primary DNS server Secondary DNS server Primary DNSv6 server LTE Series Users Guide 55 Chapter 5 Connection Status Table 8 System Info: Detailed Information (continued) LABEL DESCRIPTION This field displays the second DNS server IPv6 address assigned by the ISP. Secondary DNSv6 server LAN Information IP Address This is the current IP address of the Zyxel Device in the LAN. Subnet Mask This is the current subnet mask in the LAN. DHCP This field displays what DHCP services the Zyxel Device is providing to the LAN. The possible values are:

Server - The Zyxel Device is a DHCP server in the LAN. It assigns IP addresses to other computers in the LAN. Relay - The Zyxel Device acts as a surrogate DHCP server and relays DHCP requests and responses between the remote server and the clients. None - The Zyxel Device is not providing any DHCP services to the LAN. Security WLAN Information MAC Address Status SSID Channel Security Firewall This displays the firewalls current security level. This shows the wireless adapter MAC (Media Access Control) Address of the wireless interface. This displays whether the WLAN is activated. This is the descriptive name used to identify the Zyxel Device in a wireless LAN. This is the channel number currently used by the wireless interface. This displays the type of security mode the wireless interface is using in the wireless LAN. 802.11 Mode This displays the type of 802.11 mode the wireless interface is using in the wireless LAN. WPS This displays whether WPS is activated on the wireless interface. 5.1.3 Cellular Info Figure 31 Cellular Info Use this screen to view the LTE connection details and LTE signal strength value that you can use as reference for positioning the Zyxel Device, as well as SIM card and module information. Click the Arrow icon (

) to view the more information on the LTE connection. LTE Series Users Guide 56 Chapter 5 Connection Status Figure 32 Cellular Info: Detailed Information The following table describes the labels in this screen. Table 9 Cellular Info: Detailed Information LABEL DESCRIPTION Module Information IMEI This shows the International Mobile Equipment Identity of the Zyxel Device. This shows the software version of the LTE module. Module SW Version SIM Status SIM Card Status This displays the SIM card status:

None - the Zyxel Device does not detect that there is a SIM card inserted. Available - the SIM card could either have or doesnt have PIN code security. Locked - the SIM card has PIN code security, but you did not enter the PIN code yet. Blocked - you entered an incorrect PIN code too many times, so the SIM card has been locked;

call the ISP for a PUK (Pin Unlock Key) to unlock the SIM card. Error - the Zyxel Device detected that the SIM card has errors. IMSI This displays the International Mobile Subscriber Identity (IMSI) of the installed SIM card. An IMSI is a unique ID used to identify a mobile subscriber in a mobile network. ICCID Integrated Circuit Card Identifier (ICCID). This is the serial number of the SIM card. PIN Protection A PIN (Personal Identification Number) code is a key to a SIM card. Without the PIN code, you cannot use the SIM card. Shows Enable if the service provider requires you to enter a PIN to use the SIM card. Shows Disable if the service provider lets you use the SIM without inputting a PIN. PIN Remaining Attempts This is how many more times you can try to enter the PIN code before the ISP blocks your SIM card. IP Passthrough Status LTE Series Users Guide 57 Chapter 5 Connection Status Table 9 Cellular Info: Detailed Information LABEL DESCRIPTION IP Passthrough Enable This displays if IP Passthrough is enabled on the Zyxel Device. IP Passthrough allows a LAN computer on the local network of the Zyxel Device to have access to web services using the public IP address. When IP Passthrough is configured, all traffic is forwarded to the LAN computer and will not go through NAT. IP Passthrough Mode This displays the IP Passthrough mode. This displays Dynamic and the Zyxel Device will allow traffic to be forwarded to the first LAN computer requesting an IP address from the Zyxel Device. This displays Fixed and the Zyxel Device will allow traffic to be forwarded to a specific LAN computer on the local network of the Zyxel Device. Cellular Status Cellular Status This displays the status of the cellular Internet connection. Data Roaming This displays if data roaming is enabled on the Zyxel Device. 4G roaming is to use your Zyxel Device in an area which is not covered by your service provider. Enable roaming to ensure that your Zyxel Device is kept connected to the Internet when you are traveling outside the geographical coverage area of the network to which you are registered. Operator This displays the name of the service provider. PLMN This displays the PLMN number. Service Information Access Technology This displays the type of the mobile network (such as LTE, UMTS, GSM) to which the Zyxel Device is connecting. Band RSSI Cell ID This displays the current LTE band of your Zyxel Device (WCDMA2100). This displays the strength of the 3G/LTE signal strength between an associated cellular station and the Zyxel Device. This shows the cell ID, which is a unique number used to identify the Base Transceiver Station to which the Zyxel Device is connecting. The value depends on the Current Access Technology:

For GPRS, it is the Cell Identity as specified in 3GPP-TS.25.331. For UMTS, it is the Cell Identity as defined in SIB3 3GPP-TS.25.331, 3GPP-TS.24.008. For LTE, it is the 28-bit binary number Cell Identity as specified in SIB1 in 3GPP-TS.36.331. The value is 0 (zero) or N/A if there is no network connection. Physical Cell ID This shows the Physical Cell ID (PCI), which are queries and replies between the Zyxel Device and the mobile network it is connecting to. The normal range is 1 to 504. UL Bandwidth

(MHz) DL Bandwidth

(MHz) This shows the LTE channel bandwidth from device to base station. According to 3GPP specifications, the bandwidths defined by the standard are 1.4, 3, 5, 10, 15, and 20 MHz. The wider the bandwidth the higher the throughput. This shows the LTE channel bandwidth from base station to LTE device. According to 3GPP specifications, the bandwidths defined by the standard are 1.4, 3, 5, 10, 15, and 20 MHz. The wider the bandwidth the higher the throughput. LTE Series Users Guide 58 Chapter 5 Connection Status Table 9 Cellular Info: Detailed Information LABEL RFCN DESCRIPTION This displays the Radio Frequency Channel Number of DL carrier frequency used by the mobile network to which the Zyxel Device is connecting. The value depends on the Current Access Technology:

For GPRS, it is the ARFCN (Absolute Radio-Frequency Channel Number) as specified in 3GPP-

For UMTS, it is the UARFCN (UTRA Absolute Radio-Frequency Channel Number) as specified in For LTE, it is the EARFCN (E-UTRA Absolute Radio-Frequency Channel Number) as specified in TS.45.005. 3GPP-TS.25.101. 3GPP-TS.36.101. The value is 0 (zero) or N/A if there is no network connection. RSRP This displays the Reference Signal Receive Power (RSRP), which is the average received power of all Resource Element (RE) that carry cell-specific Reference Signals (RS) within the specified bandwidth. The received RSRP level of the connected E-UTRA cell, in dBm, is as specified in 3GPP-TS.36.214. The reporting range is specified in 3GPP-TS.36.133. An undetectable signal is indicated by the lower limit, example -140 dBm. This parameter is for LTE only. The normal range is -30 to -140. The value is -140 if the Current Access Technology is not LTE. The value is N/A if there is no network connection. RSRQ This displays the Reference Signal Receive Quality (RSRQ), which is the ratio of RSRP to the E-UTRA carrier RSSI and indicates the quality of the received reference signal. The received RSRQ level of the connected E-UTRA cell, in 0.1 dB, is as specified in 3GPP-TS.36.214. An undetectable signal is indicated by the lower limit, example -240. This parameter is for LTE only. The normal range is -30 to -240. The value is -240 if the Current Access Technology is not LTE. The value is N/A if there is no network connection. RSCP This displays the Received Signal Code Power, which measures the power of channel used by the Zyxel Device. The received signal level, in dBm, is of the CPICH channel (Ref. 3GPP TS 25.133). An undetectable signal is indicated by the lower limit, example -120 dBm. This parameter is for UMTS only. The normal range is -30 to -120. The value is -120 if the Current Access Technology is not UMTS. The value is N/A if there is no network connection. EcNo This displays the ratio (in dB) of the received energy per chip and the interference level. TAC LAC The measured EcNo is in 0.1 dB and is received in the downlink pilot channel. An undetectable signal is indicated by the lower limit, example -240 dB. This parameter is for UMTS only. The normal range is -30 to -240. The value is -240 if the Current Access Technology is not UMTS or there is no network connection. This displays the Tracking Area Code (TAC), which is used to identify the country of a mobile subscriber. The physical cell ID of the connected E-UTRAN cell, is as specified in 3GPP-TS.36.101. This parameter is for LTE only. The value is 0 (zero) or N/A if the Current Access Technology is not LTE or there is no network connection. This displays the 2-octet Location Area Code (LAC), which is used to identify a location area within a PLMN. The LAC of the connected cell is as defined in SIB 1 [3GPP-TS.25.331]. The concatenation of PLMN ID (MCC+MNC) and LAC uniquely identifies the LAI (Location Area ID) [3GPP-TS.23.003]. This parameter is for UMTS or GPRS. The value is 0 (zero) if the Current Access Technology is not UMTS or GPRS. The value is N/A if there is no network connection. LTE Series Users Guide 59 Chapter 5 Connection Status Table 9 Cellular Info: Detailed Information LABEL RAC DESCRIPTION This displays the RAC (Routing Area Code), which is used in mobile network packet domain service (PS) to identify a routing area within a location area. In a mobile network, it uses LAC (Location Area Code) to identify the geographical location for the old 3G voice only service, and use RAC to identify the location of data service like HSDPA or LTE. The RAC of the connected UTRAN cell is as defined in SIB 1 [3GPP-TS.25.331]. The concatenation of PLMN ID (MCC+MNC), LAC, and RAC uniquely identifies the RAI (Routing Area ID) [3GPP-

TS.23.003]. This parameter is for UMTS or GPRS. The value is 0 (zero) if the Current Access Technology is not UMTS or GPRS. The value is N/A if there is no network connection. The Base Station Identity Code (BSIC), which is a code used in GSM to uniquely identify a base station. This parameter is for GPRS only. The value is 0 (zero) if the Current Access Technology is not GPRS. The value is N/A if there is no network connection. This displays the Signal to Interference plus Noise Ratio (SINR) in dB. This is also a measure of signal quality and used by the UE (User Equipment) to calculate the Channel Quality Indicator (CQI) that it reports to the network. A negative value means more noise than signal. This displays the Channel Quality Indicator (CQI). It is an indicator carrying the information on how good/bad the communication channel quality is. MCS stands for modulation coding scheme. The base station selects MCS based on current radio conditions. The higher the MCS the more bits can be transmitted per time unit. This displays the Rank Indication, one of the control information that a UE will report to eNodeB

(Evolved Node-B) on either PUCCH (Physical Uplink Control Channel) or PUSCH (Physical Uplink Shared Channel) based on uplink scheduling. BSIC SINR CQI MCS RI PMI This displays the Precoding Matrix Indicator (PMI). PMI is for transmission modes 4 (closed loop spatial multiplexing), 5 (multi-user MIMO), and 6

(closed loop spatial multiplexing using a single layer). PMI determines how cellular data are encoded for the antennas to improve downlink rate. 5.1.4 WiFi Settings Use this screen to enable or disable the main wireless network. When the switch turns blue (

function is enabled. Otherwise, its not. You can use this screen or the QR code on the upper right corner to check the SSIDs (WiFi network name) and passwords of the main wireless networks. If you want to show or hide your WiFi passwords, click the Eye icon (

), the

). Figure 33 WiFi Settings Click the Arrow icon (

the Eye icon (

) to display the characters as you enter the WiFi Password.

) to configure the SSIDs and/or passwords for your main wireless networks. Click LTE Series Users Guide 60 Chapter 5 Connection Status Figure 34 WiFi Settings: Configuration Each field is described in the following table. Table 10 WiFi Settings: Configuration DESCRIPTION LABEL 2.4G WiFi WiFi Name Click this switch to enable or disable the 2.4 GHz wireless network. When the switch turns blue

, the function is enabled. Otherwise, its not. The SSID (Service Set IDentity) identifies the service set with which a wireless device is associated. Wireless devices associating to the access point (AP) must have the same SSID. Enter a descriptive name (up to 32 English keyboard characters) for the wireless LAN. WiFi Password If you selected Random Password, this field displays a pre-shared key generated by the Zyxel Device. If you did not select Random Password, you can manually type a pre-shared key from 8 to 64 case-sensitive keyboard characters. Click the Eye icon to show or hide the password for your wireless network. When the Eye icon is slashed

, youll see the password in plain text. Otherwise, its hidden. Random Password Select this option to have the Zyxel Device automatically generate a password. The WiFi Password field will not be configurable when you select this option. Hide WiFi network name Select this check box to hide the SSID in the outgoing beacon frame so a station cannot obtain the SSID through scanning using a site survey tool. Note: Disable WPS in the Network Setting > Wireless > WPS screen to hide the SSID. Save Click Save to save your changes. 5.1.5 LAN Use this screen to view the LAN IP address, subnet mask, and DHCP settings of your Zyxel Device. LTE Series Users Guide 61 Chapter 5 Connection Status Figure 35 LAN Click the Arrow icon (

) to configure the LAN IP settings and DHCP setting for your Zyxel Device. Figure 36 LAN Setup Each field is described in the following table. Table 11 Status Screen LABEL DESCRIPTION LAN IP Setup IP Address Subnet Mask IP Addressing Values Beginning IP Address Ending IP Address DHCP Server State DHCP Server Lease Time Enter the LAN IPv4 IP address you want to assign to your Zyxel Device in dotted decimal notation, for example, 192.168.1.1 (factory default). Type the subnet mask of your network in dotted decimal notation, for example 255.255.255.0

(factory default). Your Zyxel Device automatically computes the subnet mask based on the IP Address you enter, so do not change this field unless you are instructed to do so. This field specifies the first of the contiguous addresses in the IP address pool. This field specifies the last of the contiguous addresses in the IP address pool. This is the period of time DHCP-assigned addresses is used. DHCP automatically assigns IP addresses to clients when they log in. DHCP centralizes IP address management on central computers that run the DHCP server program. DHCP leases addresses, for a period of time, which means that past addresses are recycled and made available for future reassignment to other systems. LTE Series Users Guide 62 Chapter 5 Connection Status Table 11 Status Screen (continued) LABEL DESCRIPTION Days/Hours/

Minutes Enter the lease time of the DHCP server. Save Click Save to save your changes. LTE Series Users Guide 63 C H A P T E R 6 Broadband 6.1 Overview This chapter discusses the Zyxel Devices Broadband screens. Use these screens to configure your Zyxel Device for Internet access. A WAN (Wide Area Network) connection is an outside connection to another network or the Internet. It connects your private networks, such as a LAN (Local Area Network) and other networks, so that a computer in one location can communicate with computers in other locations. Figure 37 LAN and WAN 6.1.1 What You Can Do in this Chapter Use the Broadband screen to view a WAN interface. You can also configure the WAN settings on the Zyxel Device for Internet access (Section 6.2 on page 65). Use the Cellular WAN screen to configure an LTE WAN connection (Section 6.3 on page 66). Use the Cellular APN screen to configure the APN setting (Section 6.4 on page 67). Use the Cellular SIM screen to enter the PIN of your SIM card (Section 6.4 on page 67). Use the Cellular Band screen to view or edit an LTE WAN interface. You can also configure the WAN settings on the Zyxel Device for Internet access (Section 6.2 on page 65). Use the Cellular PLMN screen to display available Public Land Mobile Networks (Section 6.7 on page 70). Use the Cellular IP Passthrough screen to configure an LTE WAN connection (Section 6.8 on page 73) LTE Series Users Guide 64 Chapter 6 Broadband Use the Cellular Lock screen to configure the base station you choose to connect to (Section 6.9 on page 74). Table 12 WAN Setup Overview LAYER-2 INTERFACE INTERNET CONNECTION CONNECTION DSL LINK TYPE MODE ENCAPSULATION CONNECTION SETTINGS Ethernet N/A Routing IPoE WAN IPv4/IPv6 IP address, NAT, DNS server and routing feature. 6.1.2 What You Need to Know The following terms and concepts may help as you read this chapter. The WAN IP address is an IP address for the Zyxel Device, which makes it accessible from an outside network. It is used by the Zyxel Device to communicate with other devices in other networks. The ISP dynamically assigns it each time the Zyxel Device tries to access the Internet. Access Point Name (APN) is a unique string which indicates an LTE network. An APN is required for LTE stations to enter the LTE network and then the Internet. You may need to know your Internet access settings such as LTE APN, WAN IP address and SIM cards PIN code if the INTERNET light on your Zyxel Device is off. Get this information from your service provider. WAN IP Address APN 6.1.3 Before You Begin 6.2 Broadband Use this screen to change your Zyxel Devices Internet access settings. The summary table shows you the configured WAN services (connections) on the Zyxel Device. Use information provided by your ISP to configure WAN settings. Click Network Setting > Broadband to access this screen. LTE Series Users Guide 65 Chapter 6 Broadband Figure 38 Network Setting > Broadband LABEL

Name Type Mode 802.1p 802.1q NAT Default Gateway IPv6 MLD Proxy The following table describes the labels in this screen. Table 13 Network Setting > Broadband DESCRIPTION This is the index number of the entry. This is the service name of the connection. This shows whether it is a cellular or Ethernet connection. This shows the connection is in routing mode. Encapsulation This is the method of encapsulation used by this connection. This indicates the 802.1p priority level assigned to traffic sent through this connection. This displays N/A when there is no priority level assigned. This indicates the VLAN ID number assigned to traffic sent through this connection. This displays N/A when there is no VLAN ID number assigned. IGMP Proxy This shows whether the Zyxel Device act as an IGMP proxy on this connection. This shows whether NAT is activated or not for this connection. This shows whether the Zyxel Device use the WAN interface of this connection as the system default gateway. This shows whether IPv6 is activated or not for this connection. IPv6 is not available when the connection uses the bridging service. This shows whether Multicast Listener Discovery (MLD) is activated or not for this connection. MLD is not available when the connection uses the bridging service. Modify Click the Edit or Modify icon to configure the WAN connection. Click the Delete icon to remove the WAN connection. 6.3 Cellular WAN Click Network Setting > Broadband > Cellular WAN to display the following screen. Use this screen to enable data roaming and network monitoring when the Zyxel Device cannot ping a base station. Note: Roaming charges may apply when Data Roaming is enabled. LTE Series Users Guide 66 Chapter 6 Broadband Figure 39 Network Setting > Broadband > Cellular WAN The following table describes the fields in this screen. Table 14 Network Setting > Broadband > Cellular WAN DESCRIPTION LABEL Antenna Roaming Antenna Select Select between External or Internal Antenna for your Zyxel Device. Data Roaming Click this to enable (

) data roaming on the Zyxel Device. 4G roaming is to use your mobile device in an area which is not covered by your service provider. Enable roaming to ensure that your Zyxel Device is kept connected to the Internet when you are traveling outside the geographical coverage area of the network to which you are registered. Apply Cancel Click this to save your changes. Click this to exit this screen without saving. 6.4 Cellular APN Click Network Setting > Broadband > Cellular APN to display the following screen. Note: APN information can be obtained from the service provider. Automatic APN Mode is not supported when operating in 3G only mode. LTE Series Users Guide 67 Chapter 6 Broadband Figure 40 Network Setting > Broadband > Cellular APN Table 15 Network Setting > Broadband > Cellular APN DESCRIPTION LABEL APN Settings

Enable Mode PDP Type Modify Cancel APN This field allows you to display the Access Point Name (APN) in the profile. Authentication Type Select the type of authentication method peers use to connect to the Zyxel Device in LTE connections. This is the index number of the entry. This field indicates whether the cellular APN setting is enabled or not. If the cellular APN setting is disabled, the Zyxel Device will configure the APN (Access Point Name) of an LTE network automatically. Otherwise, enter the APN manually in the field. Enter the Access Point Name (APN) provided by your service provider. Connections with different APNs may provide different services (such as Internet access or MMS

(Multi-Media Messaging Service)) and charging method. You can enter up to 30 printable ASCII characters. Spaces are allowed. In Password Authentication Protocol (PAP) peers identify themselves with a user name and password. In Challenge Handshake Authentication Protocol (CHAP) additionally to user name and password the Zyxel Device sends regular challenges to make sure an intruder has not replaced a peer. Otherwise select PAP/CHAP or None. Select IPv4 if you want the Zyxel Device to run IPv4 (Internet Protocol version 4 addressing system) only. Select IPv4/IPv6 if you want the Zyxel Device to run both IPv4 and IPv6 (Internet Protocol version 4 and 6 addressing system) at the same time. Click the Edit icon to change the APN settings. Click this to exit this screen without saving. 6.5 Cellular SIM Configuration Enter a PIN for your SIM card to prevent others from using it. LTE Series Users Guide 68 Chapter 6 Broadband Entering the wrong PIN code 3 consecutive times locks the SIM card after which you need a PUK (Personal Unlocking Key) from the service provider to unlock it. Click Network Setting > Broadband > Cellular SIM. The following screen opens. Figure 41 Network Setting > Broadband > Cellular SIM Note: The PIN is automatically saved in the Zyxel Device. Entering the wrong PIN exceeding a set number of times will lock the SIM card. The following table describes the fields in this screen. Table 16 Network Setting > Broadband > Cellular SIM LABEL DESCRIPTION PIN Management PIN Protection A PIN (Personal Identification Number) code is a key to a SIM card. Without the PIN code, you cannot use the SIM card. Click to enable (

) if the service provider requires you to enter a PIN to use the SIM card. Click to disable if the service provider lets you use the SIM without inputting a PIN. If you enabled PIN verification, enter the 4-digit PIN code (0000 for example) provided by your ISP. If you enter the PIN code incorrectly too many times, the ISP may block your SIM card and not let you use the account to access the Internet. This is how many more times you can try to enter the PIN code before the ISP blocks your SIM card. Click Apply to save your changes. Click Cancel to return to the previous screen without saving. PIN Attempts Remaining Apply Cancel 6.6 Cellular Band Configuration Either select Auto to have the Zyxel Device connect to an available network using the default settings on the SIM card or select the type of the network (4G, 3G, or 2G) to which you want the Zyxel Device to connect. Click Network Setting > Broadband > Cellular Band. The following screen opens. LTE Series Users Guide 69 Chapter 6 Broadband Figure 42 Network Setting > Broadband > Cellular Band The following table describes the fields in this screen. Table 17 Network Setting > Broadband > Cellular Band LABEL DESCRIPTION Access Technology Preferred Access Technology Select the type of the network (4G, 3G, or 2G) to which you want the Zyxel Device to connect and click Apply to save your settings. Otherwise, select Auto to have the Zyxel Device connect to an available network using the default settings on the SIM card. If the currently registered mobile network is not available or the mobile networks signal strength is too low, the Zyxel Device switches to another available mobile network. Band Management Band Auto Selection Select the LTE bands to use for the Zyxel Devices WAN connection. Click to enable (

) automatic LTE frequency band selection as provided by your service provider. Otherwise, select disabled. Apply Cancel Click this to save your changes. Click this to exit this screen without saving. 6.7 Cellular PLMN Configuration Each service provider has its own unique Public Land Mobile Network (PLMN) number. Either select PLMN Auto Selection to have the Zyxel Device connect to the service provider using the default settings on the SIM card or manually view available PLMNs and select your service provider. Click Network Setting > Broadband > Cellular PLMN. The screen appears as shown next. Figure 43 Network Setting > Broadband > Cellular PLMN LTE Series Users Guide 70 Chapter 6 Broadband The following table describes the labels in this screen. Table 18 Network Setting > Broadband > Cellular PLMN LABEL DESCRIPTION PLMN Management PLMN Auto Selection Click to enable (

available mobile network.

) and have the Zyxel Device automatically connect to the first Select disabled to display the network list and manually select a preferred network. Apply Cancel Click Apply to save your changes back to the Zyxel Device. Click Cancel to exit this screen without saving. After selecting to disable the following warning appears. Click OK to continue. Figure 44 Network Setting > Broadband > Cellular PLMN > Manual Scan Warning Click Scan to check for available PLMNs in the area surrounding theZyxel Device, and then display them in the network list. Select from the network list and click Apply. LTE Series Users Guide 71 Chapter 6 Broadband Figure 45 Network Setting > Broadband > Cellular PLMN > Manual Scan The following table describes the labels in this screen. Table 19 Network Setting > Broadband > Cellular PLMN > Manual Scan DESCRIPTION LABEL

Status Name Type PLMN Apply Cancel Click the radio button so the Zyxel Device connects to this ISP. This shows Current to show the ISP the Zyxel Device is currently connected to. This shows Forbidden to indicate the Zyxel Device cannot connect to this ISP. This shows Available to indicate an available ISP your Zyxel Device can connect to. This shows the ISP name. This shows the type of network the ISP provides. This shows the PLMN number. Click Apply to save your changes back to the Zyxel Device. Click Cancel to exit this screen without saving. LTE Series Users Guide 72 Chapter 6 Broadband 6.8 Cellular IP Passthrough Enable IP Passthrough to allow Internet traffic to go to a LAN computer behind the Zyxel Device without going through NAT. Click Network Setting > Broadband > Cellular IP Passthrough to display the following screen. Note: This screen is not available when the fourth LAN port acts as an Ethernet WAN port. See Table 1 on page 13 for the feature differences of the Zyxel Devices. Figure 46 Network Setting > Broadband > Cellular IP Passthrough Note: Changing the IP Passthrough settings may affect the network setting of client devices. After selecting to enable the following warning appears. Click OK to continue. Figure 47 Network Setting > Broadband > Cellular IP Passthrough > Enable Warning The following table describes the fields in this screen. Table 20 Network Setting > Broadband > Cellular IP Passthrough LABEL DESCRIPTION IP Passthrough Management IP Passthrough IP Passthrough allows a LAN computer on the local network of the Zyxel Device to have access to web services using the public IP address. When IP Passthrough is configured, all traffic is forwarded to the LAN computer and will not go through NAT. LTE Series Users Guide 73 Chapter 6 Broadband Table 20 Network Setting > Broadband > Cellular IP Passthrough (continued) LABEL DESCRIPTION Passthrough Mode Select Dynamic to allow traffic to be forwarded to any LAN computer on the local network of the Zyxel Device. Select Fixed to allow traffic to be forwarded to a specific LAN computer on the local network of the Zyxel Device. Note: This field will show upon enabling IP Passthrough in the previous field. Passthrough to fixed MAC Enter the MAC address of a LAN computer on the local network of the Zyxel Device upon selecting Fixed in the previous field. Note: This field will show upon selecting Fixed in the previous field. Apply Cancel Click this to save your changes. Click this to exit this screen without saving. 6.9 Cellular Lock Cellular Lock locks the CPE to the base station that it is currently connected to. This is useful if the CPE is within range of multiple base stations, and you would prefer the CPE to connect to one base station over the others. Click Network Setting > Broadband > Cellular Lock. The following screen displays. Figure 48 Cellular Lock The following table describes the fields in this screen. Table 21 Cellular Lock DESCRIPTION LABEL PCI Lock Add New Rule Physical Cell ID RFCN Select this to enable or disable PCI (Physical Cell Identifier) Lock. Select this if you want to add a new rule or to configure cellular lock rules. Use this to enter the PCI number of the base station you choose to connect to

(0~504). Use RFCN (Radio Frequency Channel Number) to enter the LTE frequency of the selected PCI number(1~65535). LTE Series Users Guide 74 Chapter 6 Broadband Table 21 Cellular Lock LABEL Cancel Apply DESCRIPTION Click this to exit this screen without saving. Click this to save your changes. LTE Series Users Guide 75 C H A P T E R 7 Home Networking 7.1 Overview A Local Area Network (LAN) is a shared communication system to which many computers are attached. A LAN is usually located in one immediate area such as a building or floor of a building. The LAN screens can help you configure a LAN DHCP server and manage IP addresses. 7.1.1 What You Can Do in this Chapter Use the LAN Setup screen to set the LAN IP address, subnet mask, and DHCP settings (Section 7.2 on page 77). Use the Static DHCP screen to assign IP addresses on the LAN to specific individual computers based on their MAC addresses (Section 7.3 on page 81). Use the UPnP screen to enable UPnP (Section 7.4 on page 83). 7.1.2 What You Need To Know The following terms and concepts may help as you read this chapter. 7.1.2.1 About LAN IP Address Subnet Mask Similar to the way houses on a street share a common street name, so too do computers on a LAN share one common network number. This is known as an Internet Protocol address. The subnet mask specifies the network number portion of an IP address. Your Zyxel Device will compute the subnet mask automatically based on the IP address that you entered. You do not need to change the subnet mask computed by the Zyxel Device unless you are instructed to do otherwise. LTE Series Users Guide 76 Chapter 7 Home Networking DHCP DNS DHCP (Dynamic Host Configuration Protocol) allows clients to obtain TCP/IP configuration at start-up from a server. This Zyxel Device has a built-in DHCP server capability that assigns IP addresses and DNS servers to systems that support DHCP client capability. DNS (Domain Name System) maps a domain name to its corresponding IP address and vice versa. The DNS server is extremely important because without it, you must know the IP address of a computer before you can access it. The DNS server addresses you enter when you set up DHCP are passed to the client machines along with the assigned IP address and subnet mask. 7.1.2.2 About UPnP How do I know if I'm using UPnP?

UPnP hardware is identified as an icon in the Network Connections folder (Windows 7). Each UPnP compatible device installed on your network will appear as a separate icon. Selecting the icon of a UPnP device will allow you to access the information and properties of that device. Cautions with UPnP The automated nature of NAT traversal applications in establishing their own services and opening firewall ports may present network security issues. Network information and configuration may also be obtained and modified by users in some network environments. When a UPnP device joins a network, it announces its presence with a multicast message. For security reasons, the Zyxel Device allows multicast messages on the LAN only. All UPnP-enabled devices may communicate freely with each other without additional configuration. Disable UPnP if this is not your intention. UPnP and Zyxel Zyxel has achieved UPnP certification from the Universal Plug and Play Forum UPnP Implementers Corp. (UIC). Zyxel's UPnP implementation supports Internet Gateway Device (IGD) 1.0. See Section 7.6 on page 85 for examples on installing and using UPnP. 7.2 LAN Setup A LAN IP address is the IP address of a networking device in the LAN. You can use the Zyxel Device's LAN IP address to access its Web Configurator from the LAN. The DHCP server settings define the rules on assigning IP addresses to LAN clients on your network. Use this screen to set the Local Area Network IP address and subnet mask of your Zyxel Device. Configure DHCP settings to have the Zyxel Device or a DHCP server assign IP addresses to devices. Click Network Setting > Home Networking to open the LAN Setup screen. LTE Series Users Guide 77 Chapter 7 Home Networking Figure 49 Network Setting > Home Networking > LAN Setup LTE Series Users Guide 78 Chapter 7 Home Networking The following table describes the fields in this screen. Table 22 Network Setting > Home Networking > LAN Setup LABEL DESCRIPTION Interface Group Group Name This displays the name of the group that your Zyxel Device belongs to. LAN IP Setup IP Address Subnet Mask DHCP Server State DHCP IP Addressing Values Beginning IP Address Auto reserve IP for the same host DHCP Server Lease Time DNS Values DNS Enter the LAN IP address you want to assign to your Zyxel Device in dotted decimal notation, for example, 192.168.1.1 (factory default). Type the subnet mask of your network in dotted decimal notation, for example 255.255.255.0

(factory default). Your Zyxel Device automatically computes the subnet mask based on the IP address you enter, so do not change this field unless you are instructed to do so. Select Enable to have your Zyxel Device assign IP addresses, an IP default gateway and DNS servers to LAN computers and other devices that are DHCP clients. If you select Disable, you need to manually configure the IP addresses of the computers and other devices on your LAN. If you select DHCP Relay, the Zyxel Device acts as a surrogate DHCP server and relays DHCP requests and responses between the remote server and the clients. When DHCP is used, the following fields need to be set:

This field specifies the first of the contiguous addresses in the IP address pool. Ending IP Address This field specifies the last of the contiguous addresses in the IP address pool. Enable this if you want to reserve the IP address for the same host. Days/Hours/Minutes DHCP server leases an address to a new device for a period of time, called the DHCP lease time. When the lease expires, the DHCP server might assign the IP address to a different device. The Zyxel Device supports DNS proxy by default. The Zyxel Device sends out its own LAN IP address to the DHCP clients as the first DNS server address. DHCP clients use this first DNS server to send domain-name queries to the Zyxel Device. The Zyxel Device sends a response directly if it has a record of the domain-name to IP address mapping. If it does not, the Zyxel Device queries an outside DNS server and relays the response to the DHCP client. Select From ISP if your ISP dynamically assigns DNS server information (and the Zyxel Device's WAN IP address). Select Static if you have the IP address of a DNS server. Enter the DNS server's IP address in the field to the right. Select DNS Proxy to have the DHCP clients use the Zyxel Devices own LAN IP address. The Zyxel Device works as a DNS relay. LAN IPv6 Mode Setup IPv6 Active Use this field to Enable or Disable IPv6 activation on the Zyxel Device. When IPv6 activation is used, the following fields need to be set:

LTE Series Users Guide 79 Chapter 7 Home Networking Table 22 Network Setting > Home Networking > LAN Setup (continued) LABEL DESCRIPTION Link Local Address Type A link-local address uniquely identifies a device on the local network (the LAN). It is similar to a private IP address in IPv6. You can have the same link-local address on multiple interfaces on a device. A link-local unicast address has a predefined prefix of fe80::/10. The link-local unicast address format is as follows. Select EUI64 to allow the Zyxel Device to generate an interface ID for the LAN interfaces link-local address using the EUI-64 format. Otherwise, enter an interface ID for the LAN interfaces link-local address if you select Manual. LAN Global Identifier Type LAN IPv6 Prefix Setup LAN IPv6 Address Assign Setup Select EUI64 to have the Zyxel Device generate an interface ID using the EUI-64 format for its global address. Select Manual to manually enter an interface ID for the LAN interfaces global IPv6 address. Select Delegate prefix from WAN to automatically obtain an IPv6 network prefix from the service provider or an uplink router. Select Static to configure a fixed IPv6 address for the Zyxel Devices LAN IPv6 address. Select how you want to obtain an IPv6 address:

Stateless: The Zyxel Device uses IPv6 stateless autoconfiguration. RADVD (Router Advertisement Daemon) is enabled to have the Zyxel Device send IPv6 prefix information in router advertisements periodically and in response to router solicitations. DHCPv6 server is disabled. Stateful: The Zyxel Device uses IPv6 stateful autoconfiguration. The DHCPv6 server is enabled to have the Zyxel Device act as a DHCPv6 server and pass IPv6 addresses to DHCPv6 clients. LAN IPv6 DNS Assign Setup Select how the Zyxel Device provide DNS server and domain name information to the clients:

From Router Advertisement: The Zyxel Device provides DNS information through router advertisements. From DHCPv6 Server: The Zyxel Device provides DNS information through DHCPv6. From RA & DHCPv6 Server: The Zyxel Device provides DNS information through both router advertisements and DHCPv6. DHCPv6 Configuration DHCPv6 Active shows the status of the DHCPv6. DHCPv6 Server displays if you configured the Zyxel Device to act as a DHCPv6 server which assigns IPv6 addresses and/or DNS information to clients. RADVD Active shows whether RADVD is enabled or not. IPv6 Router Advertisement State IPv6 DNS Values IPv6 DNS Server 1~3 Specify the IP addresses up to three DNS servers for the DHCP clients to use. Use one of the following ways to specify these IP addresses. User Defined - Select this if you have the IPv6 address of a DNS server. Enter the DNS server IPv6 addresses the Zyxel Device passes to the DHCP clients. From ISP - Select this if your ISP dynamically assigns IPv6 DNS server information. Proxy - Select this if the DHCP clients use the IP address of this interface and the Zyxel Device works as a DNS relay. Otherwise, select None if you do not want to configure IPv6 DNS servers. LTE Series Users Guide 80 Chapter 7 Home Networking Table 22 Network Setting > Home Networking > LAN Setup (continued) LABEL DESCRIPTION DNS Query Scenario Select how the Zyxel Device handles clients DNS information requests. IPv4/IPv6 DNS Server: The Zyxel Device forwards the requests to both the IPv4 and IPv6 DNS servers and sends clients the first DNS information it receives. IPv6 DNS Server Only: The Zyxel Device forwards the requests to the IPv6 DNS server and sends clients the DNS information it receives. IPv4 DNS Server Only: The Zyxel Device forwards the requests to the IPv4 DNS server and sends clients the DNS information it receives. IPv6 DNS Server First: The Zyxel Device forwards the requests to the IPv6 DNS server first and then the IPv4 DNS server. Then it sends clients the first DNS information it receives. IPv4 DNS Server First: The Zyxel Device forwards the requests to the IPv4 DNS server first and then the IPv6 DNS server. Then it sends clients the first DNS information it receives. Apply Cancel Click Apply to save your changes. Click Cancel to restore your previously saved settings. 7.3 Static DHCP When any of the LAN clients in your network want an assigned fixed IP address, add a static lease for each LAN client. Knowing the LAN clients MAC addresses is necessary. This table allows you to assign IP addresses on the LAN to individual computers based on their MAC addresses. Every Ethernet device has a unique MAC (Media Access Control) address. The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02. 7.3.1 Before You Begin Find out the MAC addresses of your network devices if you intend to add them to the Static DHCP screen. Use this screen to change your Zyxel Devices static DHCP settings. Click Network Setting > Home Networking > Static DHCP to open the following screen. Figure 50 Network Setting > Home Networking > Static DHCP LTE Series Users Guide 81 Chapter 7 Home Networking The following table describes the labels in this screen. Table 23 Network Setting > Home Networking > Static DHCP LABEL DESCRIPTION Click this to configure a static DHCP entry. Static DHCP Configuration

Status MAC Address This is the index number of the entry. Active The MAC (Media Access Control) or Ethernet address on a LAN (Local Area Network) is unique to your computer (six pairs of hexadecimal notation). A network interface card such as an Ethernet adapter has a hardwired address that is assigned at the factory. This address follows an industry standard that ensures no other adapter has a similar address. IP Address This field displays the IP address relative to the # field listed above. Modify Click the Edit icon to configure the connection. Click the Delete icon to remove the connection. If you click Static DHCP Configuration in the Static DHCP screen, the following screen displays. Figure 51 Static DHCP: Static DHCP Configuration The following table describes the labels in this screen. Table 24 Static DHCP: Configuration DESCRIPTION LABEL Active Select Enable to activate static DHCP in your Zyxel Device. Group Name This displays the Group Name, usually Default. IP Type The IP Type is normally IPv4 (non-configurable). Select Device Info Select between Manual Input which allows you to enter the next two fields (MAC Address and IP Address); or selecting an existing device would show its MAC address and IP address. MAC Address Enter the MAC address of a computer on your LAN if you select Manual Input in the previous field. Enter the IP address that you want to assign to the computer on your LAN with the MAC address that you will also specify if you select Manual Input in the previous field. IP Address OK Cancel Click OK to save your changes. Click Cancel to exit this screen without saving. LTE Series Users Guide 82 Chapter 7 Home Networking 7.4 UPnP Universal Plug and Play (UPnP) is an open networking standard that uses TCP/IP for simple peer-to-peer network connectivity between networking devices or software applications which have UPnP enabled. A UPnP device can dynamically join a network, obtain an IP address, advertise its services, and learn about other devices on the network. A device can also leave a network automatically when it is no longer in use. See Section 7.6 on page 85 for more information on UPnP. Use the following screen to configure the UPnP settings on your Zyxel Device. Click Network Setting >

Home Networking > UPnP to display the screen shown next. Figure 52 Network Setting > Home Networking > UPnP The following table describes the labels in this screen. Table 25 Network Settings > Home Networking > UPnP DESCRIPTION LABEL UPnP State UPnP UPnP NAT-T State UPnP NAT-T Select Enable to activate UPnP. Be aware that anyone could use a UPnP application to open the Web Configurator's login screen without entering the Zyxel Device's IP address (although you must still enter the password to access the Web Configurator). Select Enable to activate UPnP with NAT enabled. UPnP NAT traversal automates the process of allowing an application to operate through NAT. UPnP network devices can automatically configure network addressing, announce their presence in the network to other UPnP devices and enable exchange of simple product and service descriptions.

This field displays the index number of the entry. Description This field displays the description of the UPnP NAT-T connection. Destination IP Address This field displays the IP address of the other connected UPnP-enabled device. External Port This field displays the external port number that identifies the service. LTE Series Users Guide 83 Chapter 7 Home Networking Table 25 Network Settings > Home Networking > UPnP LABEL DESCRIPTION Internal Port This field displays the internal port number that identifies the service. This field displays the protocol of the NAT mapping rule. Choices are TCP or UDP. Protocol Apply Cancel Click Apply to save your changes. Click Cancel to restore your previously saved settings. 7.5 Technical Reference This section provides some technical background information about the topics covered in this chapter. LANs, WANs and the Zyxel Device The actual physical connection determines whether the Zyxel Device ports are LAN or WAN ports. There are two separate IP networks, one inside the LAN network and the other outside the WAN network as shown next. Figure 53 LAN and WAN IP Addresses Private IP Addresses Every machine on the Internet must have a unique address. If your networks are isolated from the Internet, for example, only between your two branch offices, you can assign any IP addresses to the hosts without problems. However, the Internet Assigned Numbers Authority (IANA) has reserved the following three blocks of IP addresses specifically for private networks:

10.0.0.0 10.255.255.255 172.16.0.0 172.31.255.255 192.168.0.0 192.168.255.255 You can obtain your IP address from the IANA, from an ISP or it can be assigned from a private network. If you belong to a small organization and your Internet access is through an ISP, the ISP can provide you LTE Series Users Guide 84 Chapter 7 Home Networking with the Internet addresses for your local networks. On the other hand, if you are part of a much larger organization, you should consult your network administrator for the appropriate IP addresses. Note: Regardless of your particular situation, do not create an arbitrary IP address; always follow the guidelines above. For more information on address assignment, please refer to RFC 1597, Address Allocation for Private Internets and RFC 1466, Guidelines for Management of IP Address Space. 7.6 Turn on UPnP in Windows 7 Example This section shows you how to use the UPnP feature in Windows 7. UPnP server is installed in Windows 7. Activate UPnP on the Zyxel Device by clicking Network Setting > Home Networking > UPnP. Make sure the computer is connected to the LAN port of the Zyxel Device. Turn on your computer and the Zyxel Device. 1 Click the start icon, Control Panel and then the Network and Sharing Center. 2 Click Change Advanced Sharing Settings. 3 Select Turn on network discovery and click Save Changes. Network discovery allows your computer to find other computers and devices on the network and other computers on the network to find your computer. This makes it easier to share files and printers. LTE Series Users Guide 85 7.6.1 Auto-discover Your UPnP-enabled Network Device Before you follow these steps, make sure you already have UPnP activated on the Zyxel Device and in your computer. Make sure your computer is connected to the LAN port of the Zyxel Device. 1 Open Windows Explorer and click Network. 2 Right-click the Zyxel Device icon and select Properties. Figure 54 Network Connections Chapter 7 Home Networking LTE Series Users Guide 86 Chapter 7 Home Networking 3 In the Internet Connection Properties window, click Settings to see port mappings. Figure 55 Internet Connection Properties 4 You may edit or delete the port mappings or click Add to manually add port mappings. Figure 56 Internet Connection Properties: Advanced Settings LTE Series Users Guide 87 Chapter 7 Home Networking Figure 57 Internet Connection Properties: Advanced Settings: Add Note: When the UPnP-enabled device is disconnected from your computer, all port mappings will be deleted automatically. 5 Click OK. Check the network icon on the system tray to see your Internet connection status. Figure 58 System Tray Icon 6 To see more details about your current Internet connection status, right click the network icon in the system tray and click Open Network and Sharing Center. Click Local Area Network. Figure 59 Internet Connection Status 7.7 Turn on UPnP in Windows 10 Example This section shows you how to use the UPnP feature in Windows 10. UPnP server is installed in Windows 10. Activate UPnP on the Zyxel Device by clicking Network Setting > Home Networking > UPnP. Make sure the computer is connected to the LAN port of the Zyxel Device. Turn on your computer and the Zyxel Device. LTE Series Users Guide 88 Chapter 7 Home Networking 1 Click the start icon, Settings and then Network & Internet. 2 Click Network and Sharing Center. 3 Click Change advanced sharing settings. LTE Series Users Guide 89 Chapter 7 Home Networking 4 Under Domain, select Turn on network discovery and click Save Changes. Network discovery allows your computer to find other computers and devices on the network and other computers on the network to find your computer. This makes it easier to share files and printers. 7.7.1 Auto-discover Your UPnP-enabled Network Device Before you follow these steps, make sure you already have UPnP activated on the Zyxel Device and in your computer. LTE Series Users Guide 90 Chapter 7 Home Networking Make sure your computer is connected to the LAN port of the Zyxel Device. 1 Open File Explorer and click Network. 2 Right-click the Zyxel Device icon and select Properties. Figure 60 Network Connections 3 In the Internet Connection Properties window, click Settings to see port mappings. Figure 61 Internet Connection Properties 4 You may edit or delete the port mappings or click Add to manually add port mappings. LTE Series Users Guide 91 Chapter 7 Home Networking Figure 62 Internet Connection Properties: Advanced Settings Figure 63 Internet Connection Properties: Advanced Settings: Add Note: When the UPnP-enabled device is disconnected from your computer, all port mappings will be deleted automatically. 5 Click OK. Check the network icon on the system tray to see your Internet connection status. Figure 64 System Tray Icon 6 To see more details about your current Internet connection status, right click the network icon in the system tray and click Open Network & Internet settings. Click Network and Sharing Center and click the Connections. LTE Series Users Guide 92 Chapter 7 Home Networking Figure 65 Internet Connection Status 7.8 Web Configurator Easy Access in Windows 7 With UPnP, you can access the Web-based Configurator on the Zyxel Device without needing to find out the IP address of the Zyxel Device first. This comes helpful if you do not know the IP address of the Zyxel Device. Follow the steps below to access the Web Configurator. 1 Open Windows Explorer. 2 Click Network. LTE Series Users Guide 93 Chapter 7 Home Networking Figure 66 Network Connections 3 An icon with the description for each UPnP-enabled device displays under Network Infrastructure. 4 Right-click the icon for your Zyxel Device and select View device webpage. The Web Configurator login screen displays. Figure 67 Network Connections: My Network Places 5 Right-click the icon for your Zyxel Device and select Properties. Click the Network Device tab. A window displays with information about the Zyxel Device. LTE Series Users Guide 94 Chapter 7 Home Networking Figure 68 Network Connections: My Network Places: Properties: Example 7.9 Web Configurator Easy Access in Windows 10 Follow the steps below to access the Web Configurator. 1 Open File Explorer. 2 Click Network. LTE Series Users Guide 95 Chapter 7 Home Networking Figure 69 Network Connections 3 An icon with the description for each UPnP-enabled device displays under Network Infrastructure. 4 Right-click the icon for your Zyxel Device and select View device webpage. The Web Configurator login screen displays. Figure 70 Network Connections: Network Infrastructure 5 Right-click the icon for your Zyxel Device and select Properties. Click the Network Device tab. A window displays information about the Zyxel Device. LTE Series Users Guide 96 Chapter 7 Home Networking Figure 71 Network Connections: Network Infrastructure: Properties: Example LTE Series Users Guide 97 C H A P T E R 8 Routing 8.1 Overview The Zyxel Device usually uses the default gateway to route outbound traffic from computers on the LAN to the Internet. To have the Zyxel Device send data to devices not reachable through the default gateway, use static routes. For example, the next figure shows a computer (A) connected to the Zyxel Devices LAN interface. The Zyxel Device routes most traffic from A to the Internet through the Zyxel Devices default gateway (R1). You create one static route to connect to services offered by your ISP behind router R2. You create another static route to communicate with a separate network behind a router R3 connected to the LAN. Figure 72 Example of Static Routing Topology A R3 LAN WAN R1 R2 8.2 Configure Static Route Use this screen to view and configure static route rules on the Zyxel Device. A static route is used to save time and bandwidth usage when LAN devices within an Intranet are transferring files or packets, especially when there are more than two Internet connections in your home or office network. Click Network Setting > Routing to open the Static Route screen. LTE Series Users Guide 98 Chapter 8 Routing Figure 73 Network Setting > Routing > Static Route The following table describes the labels in this screen. Table 26 Network Setting > Routing > Static Route LABEL DESCRIPTION Add New Static Route

Status Name Subnet Mask/

Prefix Length Gateway Click this to set up a new static route on the Zyxel Device. This is the number of an individual static route. This field indicates whether the rule is active (yellow bulb) or not (gray bulb). This is the name of the static route. Destination IP This parameter specifies the IP network address of the final destination. Routing is always based on network number. This parameter specifies the IP network subnet mask of the final destination. This is the IP address of the gateway. The gateway is a router or switch on the same network segment as the Zyxel Device's LAN or WAN port. The gateway helps forward packets to their destinations. Interface This is the WAN interface through which the traffic is routed. Modify Click the Edit icon to go to the screen where you can set up a static route on the Zyxel Device. Click the Delete icon to remove a static route from the Zyxel Device. 8.2.1 Add/Edit Static Route Click Add New Static Route in the Static Route screen, the following screen appears. Configure the required information for a static route. Note: The Gateway IP Address must be within the range of the selected interface in Use Interface. LTE Series Users Guide 99 Chapter 8 Routing Figure 74 Network Setting > Routing > Static Route > Add New Static Route The following table describes the labels in this screen. Table 27 Network Setting > Routing > Static Route > Add New Static Route DESCRIPTION Select Enable to activate your static route. LABEL Active Route Name IP Type Use Gateway IP Address Gateway IP Address Assign a name for your static route (up to 15 characters). Special characters are allowed except the following: double quote (") back quote (`) apostrophe or single quote (') less than

(<) greater than (>) caret or circumflex accent (^) dollar sign ($) vertical bar (|) ampersand (&) semicolon (;) Select between IPv4 or IPv6. Compared to IPv4, IPv6 (Internet Protocol version 6), is designed to enhance IP address size and features. The increase in IPv6 address size to 128 bits (from the 32-

bit IPv4 address) allows up to 3.4 x 1038 IP addresses. The Zyxel Device can use IPv4/IPv6 dual stack to connect to IPv4 and IPv6 networks, and supports IPv6 rapid deployment (6RD). Destination IP Address This parameter specifies the IP network address of the final destination. Routing is always based on network number. If you need to specify a route to a single host, use a subnet mask of 255.255.255.255 in the subnet mask field to force the network number to be identical to the host ID. IP Subnet Mask Enter the IP subnet mask here. Select Enable to enable forwarding packets to a gateway IP address or a bound interface. You can decide if you want to forward packets to a gateway IP address or a bound interface. If you want to configure Gateway IP Address, enter the IP address of the next-hop gateway. The gateway is a router or switch on the same network segment as the Zyxel Device's LAN or WAN port. The gateway helps forward packets to their destinations. Use Interface You can decide if you want to forward packets to a gateway IP address (Default) or a bound interface (Cellular WAN). If you want to configure bound interface, choose an interface through which the traffic is sent. You must have the WAN interfaces already configured in the Broadband screen. OK Cancel Click this to save your changes. Click this to exit this screen without saving. LTE Series Users Guide 100 Chapter 8 Routing 8.3 DNS Route Use this screen to view and configure DNS routes on the Zyxel Device. A DNS route entry defines a policy for the Zyxel Device to forward a particular DNS query to a specific WAN interface. Click Network Setting

> Routing > DNS Route to open the DNS Route screen. Figure 75 Network Setting > Routing > DNS Route The following table describes the labels in this screen. Table 28 Network Setting > Routing > DNS Route LABEL DESCRIPTION Click this to create a new entry. Add New DNS Route

Status This is the number of an individual DNS route. This field indicates whether the rule is active (yellow bulb) or not (gray bulb). Domain Name This is the domain name to which the DNS route applies. WAN Interface This is the WAN interface through which the matched DNS request is routed. Subnet Mask This parameter specifies the IP network subnet mask. Modify Click the Edit icon to configure a DNS route on the Zyxel Device. Click the Delete icon to remove a DNS route from the Zyxel Device. 8.3.1 Add/Edit DNS Route Click Add New DNS Route in the DNS Route screen, use this screen to configure the required information for a DNS route. LTE Series Users Guide 101 Chapter 8 Routing Figure 76 Network Setting > Routing > DNS Route > Add New DNS Route The following table describes the labels in this screen. Table 29 Network Setting > Routing > DNS Route > Add New DNS Route LABEL Active DESCRIPTION Enable DNS route in your Zyxel Device. Domain Name Enter the domain name you want to resolve. You can use the wildcard character, an * (asterisk) as the left most part of a domain name, such as *.example.com. The Zyxel Device forwards DNS queries for any domain name ending in example.com to the WAN interface specified in this route. Subnet Mask Type the subnet mask of the network for which to use the DNS route in dotted decimal notation, for example 255.255.255.255. WAN Interface Select a WAN interface through which the matched DNS query is sent. You must have the WAN interface(s) already configured in the Broadband screen. OK Cancel Click this to save your changes. Click this to exit this screen without saving. 8.4 Policy Route By default, the Zyxel Device routes packets based on the shortest path to the destination address. Policy routes allow you to override the default behavior and route packets based on other criteria, such as the source address. For example, you can use policy-based routing to direct traffic from specific users through specific connections or distribute traffic across multiple paths for load sharing. Policy-based routing is applied to outgoing packets before the default routing rules are applied. LTE Series Users Guide 102 Chapter 8 Routing The Policy Route screen let you view and configure routing policies on the Zyxel Device. Click Network Setting > Routing > Policy Route to open the following screen. Figure 77 Network Setting > Routing > Policy Route This field displays whether the DNS route is active or not. A yellow bulb signifies that this DNS route is active. A gray bulb signifies that this DNS route is not active. The following table describes the labels in this screen. Table 30 Network Setting > Routing > Policy Route LABEL DESCRIPTION Add New Policy Route

Status Click this to create a new policy forwarding rule. This is the index number of the entry. Name This is the name of the rule. Source IP This is the source IP address. Source Subnet Mask This is the source subnet mask address. Protocol This is the transport layer protocol. Source Port This is the source port number. Source MAC This is the source MAC address. Source Interface This is the interface from which the matched traffic is sent. WAN Interface This is the WAN interface through which the traffic is routed. Modify Click the Edit icon to edit this policy. Click the Delete icon to remove a policy from the Zyxel Device. A window displays asking you to confirm that you want to delete the policy. LTE Series Users Guide 103 Chapter 8 Routing 8.4.1 Add/Edit Policy Route Click Add New Policy Route in the Policy Route screen or click the Edit icon next to a policy. Use this screen to configure the required information for a policy route. Figure 78 Policy Route: Add/Edit The following table describes the labels in this screen. Table 31 Policy Route: Add/Edit DESCRIPTION LABEL Active Click this to enable (turns blue) activation of the policy route. Otherwise, click to disable (turns gray). Route Name Enter a descriptive name of up to 8 printable English keyboard characters, not including spaces. Source IP Address Source Subnet Mask Enter the source IP address. Enter the source subnet mask address. Protocol Select the transport layer protocol (TCP, UDP, or None). Source Port Enter the source port number. Source MAC Enter the source MAC address. Type the name of the interface from which the matched traffic is sent. Source Interface

(ex: br0 or LAN1~LAN4) WAN Interface Select a WAN interface through which the traffic is sent. You must have the WAN interface(s) already configured in the Broadband screens. Cancel OK Click Cancel to exit this screen without saving. Click OK to save your changes. LTE Series Users Guide 104 Chapter 8 Routing 8.5 RIP Overview 8.5.1 RIP Routing Information Protocol (RIP, RFC 1058 and RFC 1389) allows the Zyxel Device to exchange routing information with other routers. To activate RIP for the WAN interface, select the supported RIP version and operation. Click Network Setting > Routing > RIP to open the RIP screen. Select the desired RIP version and operation by clicking the check box. To stop RIP on the WAN interface, clear the check box. Click the Apply button to start/stop RIP and save the configuration. Figure 79 Network Setting > Routing > RIP The following table describes the labels in this screen. Table 32 Network Setting > Routing > RIP DESCRIPTION This is the index of the interface in which the RIP setting is used. Interface This is the name of the interface in which the RIP setting is used. LABEL

Version The RIP version controls the format and the broadcasting method of the RIP packets that the Zyxel Device sends (it recognizes both formats when receiving). RIPv1 is universally supported but RIPv2 carries more information. RIPv1 is probably adequate for most networks, unless you have an unusual network topology. When set to Both, the Zyxel Device will broadcast its routing table periodically and incorporate the RIP information that it receives Operation Select Passive to have the Zyxel Device update the routing table based on the RIP packets received from neighbors but not advertise its route information to other routers in this interface. Select Active to have the Zyxel Device advertise its route information and also listen for routing updates from neighboring routers. Enable Select the check box to activate the settings. Disable Default Gateway Select the check box to set the Zyxel Device to not send the route information to the default gateway. Cancel Apply Click Cancel to exit this screen without saving. Click Apply to save your changes back to the Zyxel Device. LTE Series Users Guide 105 C H A P T E R 9 Network Address Translation

(NAT) 9.1 Overview NAT (Network Address Translation - NAT, RFC 1631) is the translation of the IP address of a host in a packet, for example, the source address of an outgoing packet, used within one network to a different IP address known within another network. 9.1.1 What You Can Do in this Chapter Use the Port Forwarding screen to configure forward incoming service requests to the servers on your local network (Section 9.2 on page 107). Use the Port Triggering screen to add and configure the Zyxel Devices trigger port settings (Section 9.3 on page 110). Use the DMZ screen to configure a default server (Section 9.4 on page 113). Use the ALG screen to enable or disable the SIP ALG (Section 9.5 on page 114). 9.1.2 What You Need To Know The following terms and concepts may help as you read this chapter. Inside/Outside and Global/Local Inside/outside denotes where a host is located relative to the Zyxel Device, for example, the computers of your subscribers are the inside hosts, while the web servers on the Internet are the outside hosts. Global/local denotes the IP address of a host in a packet as the packet traverses a router, for example, the local address refers to the IP address of a host when the packet is in the local network, while the global address refers to the IP address of the host when the same packet is traveling in the WAN side. NAT In the simplest form, NAT changes the source IP address in a packet received from a subscriber (the inside local address) to another (the inside global address) before forwarding the packet to the WAN side. When the response comes back, NAT translates the destination address (the inside global address) back to the inside local address before forwarding it to the original inside host. LTE Series Users Guide 106 Chapter 9 Network Address Translation (NAT) Port Forwarding A port forwarding set is a list of inside (behind NAT on the LAN) servers, for example, web or FTP, that you can make visible to the outside world even though NAT makes your whole inside network appear as a single computer to the outside world. 9.2 Port Forwarding Overview Use Port Forwarding to forward incoming service requests from the Internet to the server(s) on your local network. Port forwarding is commonly used when you want to host online gaming, P2P file sharing, or other servers on your network. You may enter a single port number or a range of port numbers to be forwarded, and the local IP address of the desired server. The port number identifies a service; for example, web service is on port 80 and FTP on port 21. In some cases, such as for unknown services or where one server can support more than one service (for example both FTP and web service), it might be better to specify a range of port numbers. You can allocate a server IP address that corresponds to a port or a range of ports. Please refer to RFC 1700 for further information about port numbers. Note: Many residential broadband ISP accounts do not allow you to run any server processes

(such as a Web or FTP server) from your location. Your ISP may periodically check for servers and may suspend your account if it discovers any active services at your location. If you are unsure, refer to your ISP. Configure Servers Behind Port Forwarding (Example) Let's say you want to assign ports 21-25 to one FTP, Telnet and SMTP server (A in the example), port 80 to another (B in the example), a default server IP address of 192.168.1.35 to a third (C in the example), and a default server IP address of 192.168.1.36 to a fourth (D in the example). You assign the LAN IP addresses and the ISP assigns the WAN IP address. The NAT network appears as a single host on the Internet. Figure 80 Multiple Servers Behind NAT Example LTE Series Users Guide 107 Chapter 9 Network Address Translation (NAT) 9.2.1 Port Forwarding Click Network Setting > NAT to open the Port Forwarding screen. Note: TCP port 7547 is reserved for system use. Figure 81 Network Setting > NAT > Port Forwarding The following table describes the fields in this screen. Table 33 Network Setting > NAT > Port Forwarding LABEL DESCRIPTION Add New Rule Click this to add a new port forwarding rule.

Status This is the index number of the entry. This field indicates whether the rule is active or not. A yellow bulb signifies that this rule is active. A gray bulb signifies that this rule is not active. Service Name This is the services name. This shows User Defined if you manually added a service. You can change this by clicking the edit icon. Originating IP This is the sources IP address. WAN Interface Select the WAN interface for which to configure NAT port forwarding rules. Server IP Address This is the servers IP address. Start Port End Port Translation Start Port Translation End Port Protocol This is the first external port number that identifies a service. This is the last external port number that identifies a service. This is the first internal port number that identifies a service. This is the last internal port number that identifies a service. This field displays the protocol (TCP, UDP, TCP+UDP) used to transport the packets for which you want to apply the rule. Modify Click the Edit icon to edit the port forwarding rule. Click the Delete icon to delete an existing port forwarding rule. Note that subsequent address mapping rules move up by one when you take this action. 9.2.2 Add/Edit Port Forwarding Create or edit a port forwarding rule. Specify either a port or a range of ports, a server IP address, and a protocol to configure a port forwarding rule. Click Add New Rule in the Port Forwarding screen or the Edit icon next to an existing rule to open the following screen. LTE Series Users Guide 108 Chapter 9 Network Address Translation (NAT) Figure 82 Port Forwarding: Add/Edit Note: To configure port forwarding, you need to have the same configurations in the Start Port, End Port, Translation Start Port, and Translation End Port fields. To configure port translation, you need to have different configurations in the Start Port, End Port, Translation Start Port, and Translation End Port fields. Here is an example to configure port translation. Configure Start Port to 100, End Port to 120, Translation Start Port to 200, and Translation End Port to 220. Note: TCP port 7547 is reserved for system use. The following table describes the labels in this screen. Table 34 Port Forwarding: Add/Edit DESCRIPTION LABEL Active Select or clear this field to turn the port forwarding rule on or off. Service Name Select a service to forward or select User Defined and enter a name in the field to the right. WAN Interface Select the WAN interface for which to configure NAT port forwarding rules. LTE Series Users Guide 109 Chapter 9 Network Address Translation (NAT) Table 34 Port Forwarding: Add/Edit (continued) LABEL Start Port DESCRIPTION Configure this for a user-defined entry. Enter the original destination port for the packets. To forward only one port, enter the port number again in the End Port field. To forward a series of ports, enter the start port number here and the end port number in the End Port field. End Port Configure this for a user-defined entry. Enter the last port of the original destination port range. To forward only one port, enter the port number in the Start Port field above and then enter it again in this field. To forward a series of ports, enter the last port number in a series that begins with the port number in the Start Port field above. Translation Start Port Configure this for a user-defined entry. This shows the port number to which you want the Zyxel Device to translate the incoming port. For a range of ports, enter the first number of the range to which you want the incoming ports translated. Configure this for a user-defined entry. This shows the last port of the translated port range. Translation End Port Configure Originating IP Protocol OK Cancel Server IP Address Enter the inside IP address of the virtual server here. Click the Enable check box to enter the originating IP in the next field. Originating IP Enter the originating IP address here. Select the protocol supported by this virtual server. Choices are TCP, UDP, or TCP/UDP. Click this to save your changes. Click this to exit this screen without saving. 9.3 Port Triggering Some services use a dedicated range of ports on the client side and a dedicated range of ports on the server side. With regular port forwarding, you set a forwarding port in NAT to forward a service (coming in from the server on the WAN) to the IP address of a computer on the client side (LAN). The problem is that port forwarding only forwards a service to a single LAN IP address. In order to use the same service on a different LAN computer, you have to manually replace the LAN computer's IP address in the forwarding port with another LAN computer's IP address. Trigger port forwarding allows computers on the LAN to dynamically take turns using the service. The Zyxel Device records the IP address of a LAN computer that sends traffic to the WAN to request a service with a specific port number and protocol (a \"trigger\" port). When the Zyxel Device's WAN port receives a response with a specific port number and protocol (\"open\" port), the Zyxel Device forwards the traffic to the LAN IP address of the computer that sent the request. After that computers connection for that service closes, another computer on the LAN can use the service in the same manner. This way you do not need to configure a new IP address each time you want a different LAN computer to use the application. For example:

LTE Series Users Guide 110 Chapter 9 Network Address Translation (NAT) Figure 83 Trigger Port Forwarding Process: Example 1 2 3 4 Jane requests a file from the Real Audio server (port 7070). Port 7070 is a trigger port and causes the Zyxel Device to record Janes computer IP address. The Zyxel Device associates Jane's computer IP address with the "open" port range of 6970-7170. The Real Audio server responds using a port number ranging between 6970-7170. The Zyxel Device forwards the traffic to Janes computer IP address. 5 Only Jane can connect to the Real Audio server until the connection is closed or times out. The Zyxel Device times out in three minutes with UDP (User Datagram Protocol) or two hours with TCP/IP (Transfer Control Protocol/Internet Protocol). Click Network Setting > NAT > Port Triggering to open the following screen. Use this screen to view your Zyxel Devices trigger port settings. Note: TCP port 7547 is reserved for system use. Note: The sum of trigger ports in all rules must be less than 1000 and every open port range must be less than 1000. When the protocol is TCP/UDP, the ports are counted twice. Figure 84 Network Setting > NAT > Port Triggering LTE Series Users Guide 111 Chapter 9 Network Address Translation (NAT) The following table describes the labels in this screen. Table 35 Network Setting > NAT > Port Triggering LABEL DESCRIPTION Add New Rule Click this to create a new rule. This is the index number of the entry.

Status This field displays whether the port triggering rule is active or not. A yellow bulb signifies that this rule is active. A gray bulb signifies that this rule is not active. Service Name This field displays the name of the service used by this rule. WAN Interface This field shows the WAN interface through which the service is forwarded. Trigger Start Port The trigger port is a port (or a range of ports) that causes (or triggers) the Zyxel Device to record the IP address of the LAN computer that sent the traffic to a server on the WAN. This is the first port number that identifies a service. Trigger End Port This is the last port number that identifies a service. Trigger Proto. This is the trigger transport layer protocol. Open Start Port The open port is a port (or a range of ports) that a server on the WAN uses when it sends out a particular service. The Zyxel Device forwards the traffic with this port (or range of ports) to the client computer on the LAN that requested the service. This is the first port number that identifies a service. Open End Port This is the last port number that identifies a service. Open Protocol This is the open transport layer protocol. Modify Click the Edit icon to edit this rule. Click the Delete icon to delete an existing rule. 9.3.1 Add/Edit Port Triggering Rule This screen lets you create new port triggering rules. Click Add New Rule in the Port Triggering screen or click a rules Edit icon to open the following screen. Use this screen to configure a port or range of ports and protocols for sending out requests and for receiving responses. LTE Series Users Guide 112 Chapter 9 Network Address Translation (NAT) Figure 85 Port Triggering: Add/Edit The following table describes the labels in this screen. Table 36 Port Triggering: Add/Edit DESCRIPTION LABEL Active Click to enable (blue switch) or disable (gray switch) to activate or deactivate the rule. Service Name Enter a name to identify this rule using keyboard characters (A-Z, a-z, 1-2 and so on). WAN Interface Select a WAN interface for which you want to configure port triggering rules. Trigger Start Port The trigger port is a port (or a range of ports) that causes (or triggers) the Zyxel Device to record the IP address of the LAN computer that sent the traffic to a server on the WAN. Type a port number or the starting port number in a range of port numbers. Trigger End Port Type a port number or the ending port number in a range of port numbers. Trigger Protocol Select the transport layer protocol from TCP, UDP, or TCP/UDP. Open Start Port The open port is a port (or a range of ports) that a server on the WAN uses when it sends out a particular service. The Zyxel Device forwards the traffic with this port (or range of ports) to the client computer on the LAN that requested the service. Type a port number or the starting port number in a range of port numbers. Open End Port Type a port number or the ending port number in a range of port numbers. Open Protocol Select the transport layer protocol from TCP, UDP, or TCP/UDP. Cancel OK Click Cancel to exit this screen without saving. Click OK to save your changes. 9.4 DMZ Use this screen to specify the IP address of a default server to receive packets from ports not specified in the Port Triggering screen. The DMZ (DeMilitarized Zone) is a network between the WAN and the LAN that is accessible to devices on both the WAN and LAN with firewall protection. Devices on the WAN LTE Series Users Guide 113 Chapter 9 Network Address Translation (NAT) can initiate connections to devices on the DMZ but not to those on the LAN. You can put public servers, such as email, web, and FTP servers, on the DMZ to provide services on both the WAN and LAN. To use this feature, you first need to assign a DMZ host. Click Network Setting > NAT >

DMZ to open the DMZ screen. Note: Use an IPv4 address for the DMZ server. Note: Enter the IP address of the default server in the Default Server Address field, and click Apply to activate the DMZ host. Otherwise, clear the IP address in the Default Server Address field, and click Apply to deactivate the DMZ host. Figure 86 Network Setting > NAT > DMZ The following table describes the fields in this screen. Table 37 Network Setting > NAT > DMZ LABEL DESCRIPTION Default Server Address Enter the IP address of the default server which receives packets from ports that are not specified in the Port Forwarding screen. Note: If you do not assign a default server, the Zyxel Device discards all packets received for ports not specified in the virtual server configuration. Apply Cancel Click this to save your changes back to the Zyxel Device. Click Cancel to restore your previously saved settings. 9.5 ALG Click Network Setting > NAT > ALG to open the ALG screen. Use this screen to enable and disable the NAT Application Layer Gateway (ALG) in the Zyxel Device. Application Layer Gateway (ALG) allows certain applications such as File Transfer Protocol (FTP), Session Initiation Protocol (SIP), or file transfer in Instant Messaging (IM) applications to pass through the Zyxel Device. LTE Series Users Guide 114 Chapter 9 Network Address Translation (NAT) Figure 87 Network Setting > NAT > ALG The following table describes the fields in this screen. Table 38 Network Setting > NAT > ALG DESCRIPTION LABEL SIP ALG PPTP ALG Apply Cancel Click this (switch turns blue) to make sure SIP (VoIP) works correctly with port-forwarding and address-mapping rules. Otherwise, click this to turn off (switch turns gray) the SIP ALG. Click this to turn on (switch turns blue) the PPTP ALG on the Zyxel Device to detect PPTP traffic and help build PPTP sessions through the Zyxel Devices NAT. Click Apply to save your changes back to the Zyxel Device. Click Cancel to restore your previously saved settings. LTE Series Users Guide 115 C H A P T E R 10 Dynamic DNS Setup 10.1 DNS Overview DNS DNS (Domain Name System) is for mapping a domain name to its corresponding IP address and vice versa. The DNS server is extremely important because without it, you must know the IP address of a machine before you can access it. In addition to the system DNS server(s), each WAN interface (service) is set to have its own static or dynamic DNS server list. You can configure a DNS static route to forward DNS queries for certain domain names through a specific WAN interface to its DNS server(s). The Zyxel Device uses a system DNS server

(in the order you specify in the Broadband screen) to resolve domain names that do not match any DNS routing entry. After the Zyxel Device receives a DNS reply from a DNS server, it creates a new entry for the resolved IP address in the routing table. Dynamic DNS Dynamic DNS allows you to use a dynamic IP address with one or many dynamic DNS services so that anyone can contact you (in NetMeeting, CU-SeeMe, etc.). You can also access your FTP server or Web site on your own computer using a domain name (for instance myhost.dhs.org, where myhost is a name of your choice) that will never change instead of using an IP address that changes each time you reconnect. Your friends or relatives will always be able to call you even if they don't know your IP address. You first need to have registered a dynamic DNS account with www.dyndns.org. This is for people with a dynamic IP from their ISP or DHCP server that would still like to have a domain name. The Dynamic DNS service provider will give you a password or key. 10.1.1 What You Can Do in this Chapter Use the DNS Entry screen to view, configure, or remove DNS routes (Section 10.2 on page 117). Use the Dynamic DNS screen to enable DDNS and configure the DDNS settings on the Zyxel Device

(Section 10.3 on page 118). 10.1.2 What You Need To Know DYNDNS Wildcard Enabling the wildcard feature for your host causes *.yourhost.dyndns.org to be aliased to the same IP address as yourhost.dyndns.org. This feature is useful if you want to be able to use, for example, www.yourhost.dyndns.org and still reach your hostname. LTE Series Users Guide 116 Chapter 10 Dynamic DNS Setup If you have a private WAN IP address, then you cannot use Dynamic DNS. 10.2 DNS Entry DNS (Domain Name System) is used for mapping a domain name to its corresponding IP address and vice versa. Use this screen to view and configure DNS routes on the Zyxel Device. Click Network Setting >

DNS to open the DNS Entry screen. Note: The host name should consist of the hosts local name and the domain name. For example, Mycomputer.home is a host name where Mycomputer is the hosts local name, and .home is the domain name. Figure 88 Network Setting > DNS > DNS Entry The following table describes the fields in this screen. Table 39 Network Setting > DNS > DNS Entry LABEL DESCRIPTION Add New DNS Entry Click this to create a new DNS entry.

HostName IP Address Modify This is the index number of the entry. This indicates the host name or domain name. This indicates the IP address assigned to this computer. Click the Edit icon to edit the rule. Click the Delete icon to delete an existing rule. 10.2.1 Add/Edit DNS Entry You can manually add or edit the Zyxel Devices DNS name and IP address entry. Click Add New DNS Entry in the DNS Entry screen or the Edit icon next to the entry you want to edit. The screen shown next appears. LTE Series Users Guide 117 Chapter 10 Dynamic DNS Setup Figure 89 DNS Entry: Add/Edit The following table describes the labels in this screen. Table 40 DNS Entry: Add/Edit LABEL DESCRIPTION Host Name Enter the host name of the DNS entry. IPv4 Address Enter the IPv4 address of the DNS entry. Cancel OK Click Cancel to exit this screen without saving. Click OK to save your changes. 10.3 Dynamic DNS Dynamic DNS can update your current dynamic IP address mapping to a hostname. Configure a DDNS service provider on your Zyxel Device. Click Network Setting > DNS > Dynamic DNS. The screen appears as shown. LTE Series Users Guide 118 Chapter 10 Dynamic DNS Setup Figure 90 Network Setting > DNS > Dynamic DNS The following table describes the fields in this screen. Table 41 Network Setting > DNS > Dynamic DNS LABEL DESCRIPTION Dynamic DNS Setup Dynamic DNS Select Enable to use dynamic DNS. Service Provider Select your Dynamic DNS service provider from the drop-down list box. Host Name Type the domain name assigned to your Zyxel Device by your Dynamic DNS provider. You can specify up to two host names in the field separated by a comma (","). Type your user name. Type the password assigned to you. Select the check box to enable DynDNS Wildcard. Check with your Dynamic DNS service provider to have traffic redirected to a URL (that you can specify) while you are off line. Username Password Enable Wildcard Option Enable Off Line Option (Only applies to custom DNS) Dynamic DNS Status User Authentication Result This shows Success if the account is correctly set up with the Dynamic DNS provider account. Last Updated Time This shows the last time the IP address the Dynamic DNS provider has associated with the hostname was updated. Current Dynamic IP This shows the IP address your Dynamic DNS provider has currently associated with the hostname. Cancel Apply Click Cancel to exit this screen without saving. Click Apply to save your changes. LTE Series Users Guide 119 C H A P T E R 12 Firewall 12.1 Overview This chapter shows you how to enable the Zyxel Device firewall. Use the firewall to protect your Zyxel Device and network from attacks by hackers on the Internet and control access to it. The firewall:

allows traffic that originates from your LAN computers to go to all other networks. blocks traffic that originates on other networks from going to the LAN. By default, the Zyxel Device blocks DoS attacks whether the firewall is enabled or disabled. The following figure illustrates the firewall action. User A can initiate an IM (Instant Messaging) session from the LAN to the WAN (1). Return traffic for this session is also allowed (2). However other traffic initiated from the WAN is blocked (3 and 4). Figure 93 Default Firewall Action 12.1.1 What You Need to Know About Firewall DoS ICMP Denials of Service (DoS) attacks are aimed at devices and networks with a connection to the Internet. Their goal is not to steal information, but to disable a device or network so users no longer have access to network resources. The Zyxel Device is pre-configured to automatically detect and thwart all known DoS attacks. Internet Control Message Protocol (ICMP) is a message control and error-reporting protocol between a host server and a gateway to the Internet. ICMP uses Internet Protocol (IP) datagrams, but the messages are processed by the TCP/IP software and directly apparent to the application user. LTE Series Users Guide 126 Chapter 12 Firewall DoS Thresholds For DoS attacks, the Zyxel Device uses thresholds to determine when to drop sessions that do not become fully established. These thresholds apply globally to all sessions. You can use the default threshold values, or you can change them to values more suitable to your security requirements. 12.2 Firewall 12.2.1 What You Can Do in this Chapter Use the General screen to configure the security level of the firewall on the Zyxel Device (Section 12.3 on page 127).

(Section 12.4 on page 129). on page 130). page 133). Use the Protocol screen to add or remove predefined Internet services and configure firewall rules Use the Access Control screen to view and configure incoming/outgoing filtering rules (Section 12.5 Use the DoS screen to activate protection against Denial of Service (DoS) attacks (Section 12.6 on 12.3 Firewall General Settings Use the firewall to protect your Zyxel Device and network from attacks by hackers on the Internet and control access to it. Use this screen to set the security level of the firewall on the Zyxel Device. Firewall rules are grouped based on the direction of travel of packets. A higher firewall level means more restrictions on the Internet activities you can perform. Click Security > Firewall > General to display the following screen. Use the slider to select the level of firewall protection. LTE Series Users Guide 127 Chapter 12 Firewall Figure 94 Security > Firewall > General Note: LAN to WAN is your access to all Internet services. WAN to LAN is the access of other computers on the Internet to devices behind the Zyxel Device. When the security level is set to High, Telnet, FTP, HTTP, HTTPS, DNS, IMAP, POP3, SMTP, and/or IPv6 ICMPv6 (Ping) traffic from the LAN are still allowed. The following table describes the labels in this screen. Table 44 Security > Firewall > General LABEL DESCRIPTION Enable firewall protection when using IPv4 (Internet Protocol version 4). Enable firewall protection when using IPv6 (Internet Protocol version 6). IPv4 Firewall IPv6 Firewall High This setting blocks all traffic to and from the Internet. Only local network traffic and LAN to WAN service

(Telnet, FTP, HTTP, HTTPS, DNS, POP3, SMTP) is permitted. Medium This is the recommended setting. It allows traffic to the Internet but blocks anyone from the Internet from accessing any services on your local network. Low This setting allows traffic to the Internet and also allows someone from the Internet to access services on your local network. This would be used with Port Forwarding, Default Server. Apply Click this to save your changes. Cancel Click this to restore your previously saved settings. LTE Series Users Guide 128 Chapter 12 Firewall 12.4 Protocol (Customized Services) You can configure customized services and port numbers in the Protocol screen. Each set of protocol rules listed in the table are reusable objects to be used in conjunction with ACL rules in the Access Control screen. For a comprehensive list of port numbers and services, visit the IANA (Internet Assigned Number Authority) website. Click Security > Firewall > Protocol to display the following screen. Note: Removing a protocol rule will also remove associated ACL rules. Figure 95 Security > Firewall > Protocol The following table describes the labels in this screen. Table 45 Security > Firewall > Protocol LABEL DESCRIPTION Click this to configure a customized service. Name This is the name of your customized service. Description This is a description of your customized service. Add New Protocol Entry Ports/

Protocol Number Modify Click this to edit a customized service. 12.4.1 Add Customized Service This shows the port number or range and the IP protocol (TCP or UDP) that defines your customized service. Add a customized rule or edit an existing rule by specifying the protocol and the port numbers. Click Add New Protocol Entry in the Protocol screen to display the following screen. LTE Series Users Guide 129 Chapter 12 Firewall Figure 96 Security > Firewall > Protocol: Add New Protocol Entry The following table describes the labels in this screen. Table 46 Security > Firewall > Protocol: Add New Protocol Entry LABEL DESCRIPTION Service Name Type a unique name for your custom port. Description Enter a description for your custom port. Protocol Choose the protocol (TCP, UDP, ICMP, ICMPv6, or Other) that defines your customized port from the drop down list box. Protocol Number Type a single port number or the range of port numbers (0-255) that define your customized service. OK Cancel Click this to save your changes. Click this to exit this screen without saving. 12.5 Access Control (Rules) An Access Control List (ACL) rule is a manually-defined rule that can accept, reject, or drop incoming or outgoing packets from your network. This screen displays a list of the configured incoming or outgoing filtering rules. Note the order in which the rules are listed. Click Security > Firewall > Access Control to display the following screen. Note: The ordering of your rules is very important as rules are applied in turn. Figure 97 Security > Firewall > Access Control LTE Series Users Guide 130 Chapter 12 Firewall The following table describes the labels in this screen. Table 47 Security > Firewall > Rules LABEL DESCRIPTION Rules Storage Space Usage This read-only bar shows how much of the Zyxel Device's memory for recording firewall rules it is currently using. When you are using 80% or less of the storage space, the bar is green. When the amount of space used is over 80%, the bar is red. Add New ACL Rule Select an index number and click Add New ACL Rule to add a new firewall rule after the selected index number. For example, if you select 6, your new rule becomes number 7 and the previous rule 7 (if there is one) becomes rule 8. This field displays the rule index number. The ordering of your rules is important as rules are applied in turn. This field displays the rule name. This field displays the source IP addresses to which this rule applies. This field displays the destination IP addresses to which this rule applies. This field displays the protocol (All, TCP, UDP, TCP/UDP, ICMP, ICMPv6, or any) used to transport the packets for which you want to apply the rule. Displays whether the firewall silently discards packets (Drop), discards packets and sends a TCP reset packet or an ICMP destination-unreachable message to the sender (Reject), or allow the passage of (Accept) packets that match this rule.

Name Src IP Dest IP Service Action Modify Click the Edit icon to edit the firewall rule. Click the Delete icon to delete an existing firewall rule. 12.5.1 Add New ACL Rule Screen Use this screen to configure firewall rules. In the Access Control screen, select an index number and click Add New ACL Rule or click a rules Edit icon to display this screen and refer to the following table for information on the labels. LTE Series Users Guide 131 Chapter 12 Firewall Figure 98 Security > Firewall > Access Control > Add New ACL Rule The following table describes the labels in this screen. Table 48 Security > Firewall > Access Control > Add New ACL Rule Filter Name Type a unique name for your filter rule. DESCRIPTION LABEL Order Select Source IP Address Source IP Address Assign the order of your rules as rules are applied in turn. If you want the source to come from a particular (single) IP, select Specific IP Address. If not, select from a detected device. If you selected Specific IP Address in the previous item, enter the source devices IP address here. Otherwise this field will be hidden if you select the detected device. Select Destination Device If you want your rule to apply to packets with a particular (single) IP, select Specific IP Address. If not, select a detected device. Destination IP Address If you selected Specific IP Address in the previous item, enter the destination devices IP address here. Otherwise this field will be hidden if you select the detected device. LTE Series Users Guide 132 Chapter 12 Firewall Table 48 Security > Firewall > Access Control > Add New ACL Rule (continued) LABEL IP Type DESCRIPTION Select between IPv4 or IPv6. Compared to IPv4, IPv6 (Internet Protocol version 6), is designed to enhance IP address size and features. The increase in IPv6 address size to 128 bits (from the 32-bit IPv4 address) allows up to 3.4 x 1038 IP addresses. The Zyxel Device can use IPv4/IPv6 dual stack to connect to IPv4 and IPv6 networks, and supports IPv6 rapid deployment (6RD). Select Service Select a service from the Select Service box. Protocol Select the protocol (ALL, TCP/UDP, TCP, UDP, ICMP, or ICMPv6) used to transport the packets for which you want to apply the rule. Custom Source Port This is a single port number or the starting port number of a range that defines your rule. This is a single port number or the ending port number of a range that defines your rule. Custom Destination Port TCP Flag Policy Direction Enable Rate Limit Scheduler Rules Select the TCP Flag (SYN, ACK, URG, PSH, RST, FIN). Use the drop-down list box to select whether to discard (Drop), deny and send an ICMP destination-unreachable message to the sender (Reject), or allow the passage of

(Accept) packets that match this rule. Select WAN to LAN to apply the rule to traffic from WAN to LAN. Select LAN to WAN to apply the rule to traffic from LAN to WAN. Select WAN to Router to apply the rule to traffic from WAN to router. Select LAN to Router to apply the rule to traffic from LAN to router. Click to enable (switch turns blue) the setting of maximum number of packets per maximum number of minute/second to limit the throughput of traffic that matches this rule. If not, the next item will be disabled. packet(s) per (1-512) Enter the maximum number of packets (1-512) per minute/second. Add New Rule Select a schedule rule for this ACL rule from the drop-down list box. You can configure a new schedule rule by clicking Add New Rule. OK Cancel Click this to save your changes. Click this to exit this screen without saving. 12.6 DoS DoS (Denial of Service) attacks can flood your Internet connection with invalid packets and connection requests, using so much bandwidth and so many resources that Internet access becomes unavailable. Use the DoS screen to activate protection against DoS attacks. Click Security > Firewall > DoS to display the following screen. Figure 99 Security > Firewall > DoS LTE Series Users Guide 133 Chapter 12 Firewall The following table describes the labels in this screen. Table 49 Security > Firewall > DoS LABEL DESCRIPTION DoS Protection Blocking Enable this to protect against DoS attacks. The Zyxel Device will drop sessions that surpass maximum thresholds. Apply Cancel Click this to save your changes. Click this to restore your previously saved settings. 12.7 Firewall Technical Reference This section provides some technical background information about the topics covered in this chapter. 12.7.1 Firewall Rules Overview Your customized rules take precedence and override the Zyxel Devices default settings. The Zyxel Device checks the source IP address, destination IP address and IP protocol type of network traffic against the firewall rules (in the order you list them). When the traffic matches a rule, the Zyxel Device takes the action specified in the rule. Firewall rules are grouped based on the direction of travel of packets to which they apply:

LAN to Router LAN to WAN WAN to LAN WAN to Router By default, the Zyxel Devices stateful packet inspection allows packets traveling in the following directions:

LAN to Router These rules specify which computers on the LAN can manage the Zyxel Device (remote management). Note: You can also configure the remote management settings to allow only a specific computer to manage the Zyxel Device. These rules specify which computers on the LAN can access which computers or services on the WAN. By default, the Zyxel Devices stateful packet inspection drops packets traveling in the following directions:

LAN to WAN WAN to LAN These rules specify which computers on the WAN can access which computers or services on the LAN. Note: You also need to configure NAT port forwarding (or full featured NAT address mapping rules) to allow computers on the WAN to access devices on the LAN. LTE Series Users Guide 134 Chapter 12 Firewall WAN to Router By default the Zyxel Device stops computers on the WAN from managing the Zyxel Device. You could configure one of these rules to allow a WAN computer to manage the Zyxel Device. Note: You also need to configure the remote management settings to allow a WAN computer to manage the Zyxel Device. You may define additional rules and sets or modify existing ones but please exercise extreme caution in doing so. For example, you may create rules to:

Block certain types of traffic, such as IRC (Internet Relay Chat), from the LAN to the Internet. Allow certain types of traffic, such as Lotus Notes database synchronization, from specific hosts on the Internet to specific hosts on the LAN. Allow everyone except your competitors to access a web server. Restrict use of certain protocols, such as Telnet, to authorized users on the LAN. These custom rules work by comparing the source IP address, destination IP address and IP protocol type of network traffic to rules set by the administrator. Your customized rules take precedence and override the Zyxel Devices default rules. 12.7.2 Guidelines For Security Enhancement With Your Firewall 1 Change the default password via the Web Configurator. Think about access control before you connect to the network in any way. Limit who can access your router. 4 Don't enable any local service (such as telnet or FTP) that you don't use. Any enabled service could present a potential security risk. A determined hacker might be able to find creative ways to misuse the enabled services to access the firewall or the network. For local services that are enabled, protect against misuse. Protect by configuring the services to communicate only with specific peers, and protect by configuring rules to block packets for the services at specific interfaces. Protect against IP spoofing by making sure the firewall is active. Keep the firewall in a secured (locked) room. 12.7.3 Security Considerations 2 3 5 6 7 Note: Incorrectly configuring the firewall may block valid access or introduce security risks to the Zyxel Device and your protected network. Use caution when creating or deleting firewall rules and test your rules after you configure them. Consider these security ramifications before creating a rule:

LTE Series Users Guide 135 Chapter 12 Firewall 1 Does this rule stop LAN users from accessing critical resources on the Internet? For example, if IRC

(Internet Relay Chat) is blocked, are there users that require this service?

2 Is it possible to modify the rule to be more specific? For example, if IRC is blocked for all users, will a rule that blocks just certain users be more effective?

3 Does a rule that allows Internet users access to resources on the LAN create a security vulnerability? For example, if FTP ports (TCP 20, 21) are allowed from the Internet to the LAN, Internet users may be able to connect to computers with running FTP servers. 4 Does this rule conflict with any existing rules?

Once these questions have been answered, adding rules is simply a matter of entering the information into the correct fields in the Web Configurator screens. LTE Series Users Guide 136 C H A P T E R 13 MAC Filter 13.1 MAC Filter Overview You can configure the Zyxel Device to permit access to clients based on their MAC addresses in the MAC Filter screen. This applies to wired and wireless connections. Every Ethernet device has a unique MAC (Media Access Control) address. The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02. You need to know the MAC addresses of the LAN client to configure this screen. 13.2 MAC Filter Enable MAC Address Filter and add the host name and MAC address of a LAN client to the table if you wish to allow or deny them access to your network. You can choose to enable or disable the filters per entry; make sure that the check box under Active is selected if you want to use a filter. Select Security >

MAC Filter. The screen appears as shown. Figure 100 Security > MAC Filter LTE Series Users Guide 137 Chapter 13 MAC Filter The following table describes the labels in this screen. Table 50 Security > MAC Filter LABEL DESCRIPTION MAC Address Filter Select Enable to activate the MAC filter function. MAC Restrict Mode Select Allow to only permit the listed MAC addresses access to the Zyxel Device. Select Deny to permit anyone access to the Zyxel Device except the listed MAC addresses. Add New Rule Click this button to create a new entry. This is the index number of the MAC address. Set Active Host Name MAC Address Select Active to enable the MAC filter rule. The rule will not be applied if Allow is not selected under MAC Restrict Mode. Enter the host name of the wireless or LAN clients that are allowed access to the Zyxel Device. Enter the MAC addresses of the wireless or LAN clients that are allowed access to the Zyxel Device in these address fields. Enter the MAC addresses in a valid MAC address format, that is, six hexadecimal character pairs, for example, 12:34:56:78:9a:bc. Delete Cancel Apply Click the Delete icon to delete an existing rule. Click Cancel to restore your previously saved settings. Click Apply to save your changes. 13.2.1 Add New Rule You can choose to enable or disable the filters per entry; make sure that the check box under Active is selected if you want to use a filter, as shown in the example below. Select Security > MAC Filter > Add New Rule. The screen appears as shown. Figure 101 Security > MAC Filter > Add New Rule The following table describes the labels in this screen. Table 51 Security > MAC Filter > Add New Rule LABEL Set Active Host Name MAC Address Delete Cancel Apply DESCRIPTION This is the index number of the MAC address. Select Active to enable the MAC filter rule. The rule will not be applied if Allow is not selected under MAC Restrict Mode. Enter the host name of the wireless or LAN clients that are allowed access to the Zyxel Device. Enter the MAC addresses of the wireless or LAN clients that are allowed access to the Zyxel Device in these address fields. Enter the MAC addresses in a valid MAC address format, that is, six hexadecimal character pairs, for example, 12:34:56:78:9a:bc. Click the Delete icon to delete an existing rule. Click Cancel to restore your previously saved settings. Click Apply to save your changes. LTE Series Users Guide 138 C H A P T E R 14 Certificates 14.1 Certificates Overview The Zyxel Device can use certificates (also called digital IDs) to authenticate users. Certificates are based on public-private key pairs. A certificate contains the certificate owners identity and public key. Certificates provide a way to exchange public keys for use in authentication. 14.1.1 What You Can Do in this Chapter Use the Local Certificates screen to view and import the Zyxel Devices CA-signed (Certification Authority) certificates (Section 14.2 on page 139). Use the Trusted CA screen to save the certificates of trusted CAs to the Zyxel Device. You can also export the certificates to a computer (Section 14.3 on page 143). 14.2 Local Certificates Use this screen to view the Zyxel Devices summary list of certificates, generate certification requests, and import signed certificates. You can import the following certificates to your Zyxel Device:

Web Server - This certificate secures HTTP connections. SSH- This certificate secures remote connections. Click Security > Certificates to open the Local Certificates screen. Figure 102 Security > Certificates > Local Certificates LTE Series Users Guide 139 Chapter 14 Certificates The following table describes the labels in this screen. Table 52 Security > Certificates > Local Certificates LABEL DESCRIPTION Replace Private Key/Certificate file in PEM format Private Key is protected by password Choose File/

Browse Select the check box and enter the private key into the text box to store it on the Zyxel Device. The private key should not exceed 63 ASCII characters (not including spaces). Click this button to find the certificate file you want to upload. Import Certificate Click this button to save the certificate that you have enrolled from a certification authority from your computer to the Zyxel Device. Create Certificate Request Click this button to go to the screen where you can have the Zyxel Device generate a certification request. Current File This field displays the name used to identify this certificate. It is recommended that you give each certificate a unique name. Subject Issuer Valid From Valid To This field displays identifying information about the certificates owner, such as CN (Common Name), OU (Organizational Unit or department), O (Organization or company) and C

(Country). It is recommended that each certificate have a unique subject information. This field displays identifying information about the certificates issuing certification authority, such as a common name, organizational unit or department, organization or company and country. This field displays the date that the certificate becomes applicable. The text displays in red and includes a Not Yet Valid! message if the certificate has not yet become applicable. This field displays the date that the certificate expires. The text displays in red and includes an Expiring! or Expired! message if the certificate is about to expire or has already expired. Modify Click the View icon to open a screen with an in-depth list of information about the certificate. For a certification request, click Load Signed to import the signed certificate. Click the Remove icon to remove the certificate (or certification request). A window displays asking you to confirm that you want to delete the certificate. Note that subsequent certificates move up by one when you take this action. 14.2.1 Create Certificate Request Click Security > Certificates > Local Certificates and then Create Certificate Request to open the following screen. Use this screen to have the Zyxel Device generate a certification request. To create a certificate signing request, you need to enter a common name, organization name, state/province name, and the default US two-letter country code (The US country code is by default and not changeable when sold in the U.S.) for the certificate. LTE Series Users Guide 140 Chapter 14 Certificates Figure 103 Create Certificate Request The following table describes the labels in this screen. Table 53 Create Certificate Request LABEL DESCRIPTION Certificate Name enter it manually. Type up to 63 ASCII characters (not including spaces) to identify this certificate. Common Name Select Auto to have the Zyxel Device configure this field automatically. Or select Customize to Type the IP address (in dotted decimal notation), domain name or email address in the field provided. The domain name or email address can be up to 63 ASCII characters. The domain name or email address is for identification purposes only and can be any string. Organization Name Type up to 63 characters to identify the company or group to which the certificate owner belongs. You may use any character, including spaces, but the Zyxel Device drops trailing spaces. State/Province Name Type up to 32 characters to identify the state or province where the certificate owner is located. You may use any character, including spaces, but the Zyxel Device drops trailing spaces. Select a country to identify the nation where the certificate owner is located. Country/Region Name Cancel OK Click Cancel to exit this screen without saving. Click OK to save your changes. 14.2.2 View Certificate Request Use this screen to view in-depth information about the certificate request. The Certificate is used to verify the authenticity of the certification authority. The Private Key serves as your digital signature for authentication and must be safely stored. The Signing Request contains the certificate signing request value that you will copy upon submitting the certificate request to the CA (certificate authority). Click the View icon in the Local Certificates screen to open the following screen. LTE Series Users Guide 141 Chapter 14 Certificates Figure 104 Certificate Request: View The following table describes the fields in this screen. Table 54 Certificate Request: View DESCRIPTION LABEL Name Type Subject This field displays the identifying name of this certificate. This field displays general information about the certificate. ca means that a Certification Authority signed the certificate. This field displays information that identifies the owner of the certificate, such as Common Name

(CN), Organizational Unit (OU), Organization (O) and Country (C). Certificate This read-only text box displays the certificate in Privacy Enhanced Mail (PEM) format. PEM uses base 64 to convert the binary certificate into a printable form. You can copy and paste the certificate into an email to send to friends or colleagues or you can copy and paste the certificate into a text editor and save the file on a management computer for later distribution. Private Key This field displays the private key of this certificate. LTE Series Users Guide 142 Chapter 14 Certificates Table 54 Certificate Request: View (continued) LABEL DESCRIPTION Signing Request This field displays the CSR (Certificate Signing Request) information of this certificate. The CSR will be provided to a certificate authority, and it includes information about the public key, organization name, domain name, location, and country of this certificate. Back Click Back to return to the previous screen. 14.3 Trusted CA Click Security > Certificates > Trusted CA to open the following screen. This screen displays a summary list of certificates of the certification authorities that you have set the Zyxel Device to accept as trusted. The Zyxel Device accepts any valid certificate signed by a certification authority on this list as being trustworthy, which means you do not need to import any certificate that is signed by one of these certification authorities. Note: A maximum of 4 certificates can be added. Figure 105 Security > Certificates > Trusted CA The following table describes the labels in this screen. Table 55 Security > Certificates > Trusted CA LABEL DESCRIPTION Import Certificate Click this button to open a screen where you can save the certificate of a certification

Name Subject Type Modify authority that you trust to the Zyxel Device. This is the index number of the entry. This field displays the name used to identify this certificate. This field displays information that identifies the owner of the certificate, such as Common Name (CN), OU (Organizational Unit or department), Organization (O), State (ST) and Country

(C). It is recommended that each certificate have a unique subject information. This field displays general information about the certificate. ca means that a Certification Authority signed the certificate. Click the View icon to open a screen with an in-depth list of information about the certificate

(or certification request). Click the Remove icon to delete the certificate (or certification request). You cannot delete a certificate that one or more features is configured to use. LTE Series Users Guide 143 Chapter 14 Certificates 14.4 Import Trusted CA Certificate Click Import Certificate in the Trusted CA screen to open the Import Certificate screen. The Zyxel Device trusts any valid certificate signed by any of the imported trusted CA certificates. Certificates should be in one of the following formats: Binary X.509, PEM (base-64) encoded, Binary PKCS#7, or PEM (base-64) encoded PKCS#7. Note: You must remove any spaces from the certificates filename before you can import the certificate. Figure 106 Trusted CA > Import The following table describes the labels in this screen. Table 56 Security > Certificates > Trusted CA > Import LABEL DESCRIPTION Certificate File Path Type in the location of the file you want to upload in this field or click Choose File/Browse to find it. Choose File/

Browse Click this button to find the certificate file you want to upload. OK Click this to save the certificate on the Zyxel Device. Cancel Click this to exit this screen without saving. 14.5 View Trusted CA Certificate Use this screen to view in-depth information about the certification authoritys certificate. The certificate text box is read-only and can be distributed to others. Click Security > Certificates > Trusted CA to open the Trusted CA screen. Click the View icon to open the View Certificate screen. LTE Series Users Guide 144 Chapter 14 Certificates Figure 107 Trusted CA: View The following table describes the labels in this screen. Table 57 Trusted CA: View DESCRIPTION LABEL Name This field displays the identifying name of this certificate. This read-only text box displays the certificate or certification request in Privacy Enhanced Mail (PEM) format. PEM uses 64 ASCII characters to convert the binary certificate into a printable form. You can copy and paste the certificate into an email to send to friends or colleagues or you can copy and paste the certificate into a text editor and save the file on a management computer for later distribution (via USB thumb drive for example). Back Click this to return to the previous screen. 14.6 Certificates Technical Reference This section provides some technical background information about the topics covered in this chapter. Certification Authorities A Certification Authority (CA) issues certificates and guarantees the identity of each certificate owner. There are commercial certification authorities like CyberTrust or VeriSign and government certification authorities. LTE Series Users Guide 145 Chapter 14 Certificates Public and Private Keys When using public-key cryptology for authentication, each host has two keys. One key is public and can be made openly available; the other key is private and must be kept secure. Public-key encryption in general works as follows. Tim wants to send a private message to Jenny. Tim generates a public-private key pair. What is encrypted with one key can only be decrypted using the other. 1 2 3 4 Tim keeps the private key and makes the public key openly available. Tim uses his private key to encrypt the message and sends it to Jenny. Jenny receives the message and uses Tims public key to decrypt it. 5 Additionally, Jenny uses her own private key to encrypt a message and Tim uses Jennys public key to decrypt the message. The Zyxel Device uses certificates based on public-key cryptology to authenticate users attempting to establish a connection. The method used to secure the data that you send through an established connection depends on the type of connection. For example, a VPN tunnel might use the triple DES encryption algorithm. The certification authority uses its private key to sign certificates. Anyone can then use the certification authoritys public key to verify the certificates. Advantages of Certificates Certificates offer the following benefits. need to transmit private keys. Certificate File Format The Zyxel Device only has to store the certificates of the certification authorities that you decide to trust, no matter how many devices you need to authenticate. Key distribution is simple and very secure since you can freely distribute public keys and you never The certification authority certificate that you want to import has to be in PEM (Base-64) encoded X.509 file format. This Privacy Enhanced Mail format uses 64 ASCII characters to convert a binary X.509 certificate into a printable form. 14.6.1 Verify a Certificate Before you import a trusted CA or trusted remote host certificate into the Zyxel Device, you should verify that you have the actual certificate. This is especially true of trusted CA certificates since the Zyxel Device also trusts any valid certificate signed by any of the imported trusted CA certificates. You can use a certificates fingerprint to verify it. A certificates fingerprint is a message digest calculated using the MD5 or SHA1 algorithms. The following procedure describes how to check a certificates fingerprint to verify that you have the actual certificate. 1 Browse to where you have the certificate saved on your computer. LTE Series Users Guide 146 Chapter 14 Certificates 2 Make sure that the certificate has a .cer or .crt file name extension. Figure 108 Certificates on Your Computer 3 Double-click the certificates icon to open the Certificate window. Click the Details tab and scroll down to the Thumbprint Algorithm and Thumbprint fields. Figure 109 Certificate Details Use a secure method to verify that the certificate owner has the same information in the Thumbprint Algorithm and Thumbprint fields. The secure method may vary based on your situation. Possible examples would be over the telephone or through an HTTPS connection. LTE Series Users Guide 147 C H A P T E R 15 Log 15.1 Log Overview These screens allow you to determine the categories of events and/or alerts that the Zyxel Device logs and then display these logs or have the Zyxel Device send them to an administrator (through email) or to a syslog server. 15.1.1 What You Can Do in this Chapter Use the System Log screen to see the system logs (Section 15.2 on page 149). Use the Security Log screen to see the security-related logs for the categories that you select (Section 15.3 on page 149). 15.1.2 What You Need To Know The following terms and concepts may help as you read this chapter. An alert is a type of log that warrants more serious attention. They include system errors, attacks (access control) and attempted access to blocked web sites. Some categories such as System Errors consist of both logs and alerts. You may differentiate them by their color in the View Log screen. Alerts display in red and logs display in black. Alerts and Logs Syslog Overview The syslog protocol allows devices to send event notification messages across an IP network to syslog servers that collect the event messages. A syslog-enabled device can generate a syslog message and send it to a syslog server. Syslog is defined in RFC 3164. The RFC defines the packet format, content and system log related information of syslog messages. Each syslog message has a facility and severity level. The syslog facility identifies a file in the syslog server. Refer to the documentation of your syslog program for details. The following table describes the syslog severity levels. Table 58 Syslog Severity Levels CODE SEVERITY 0 1 2 3 4 Emergency: The system is unusable. Alert: Action must be taken immediately. Critical: The system condition is critical. Error: There is an error condition on the system. Warning: There is a warning condition on the system. LTE Series Users Guide 148 Chapter 15 Log Table 58 Syslog Severity Levels CODE SEVERITY 5 6 7 Notice: There is a normal but significant condition on the system. Informational: The syslog contains an informational message. Debugging: The message is intended for debug-level purposes. 15.2 System Log Use the System Log screen to see the system logs. You can filter the entries by selecting a severity level and/or category. Click System Monitor > Log to open the System Log screen. Figure 110 System Monitor > Log > System Log The following table describes the fields in this screen. Table 59 System Monitor > Log > System Log LABEL Level DESCRIPTION Category Clear Log Refresh Select the type of logs to display. Click this to delete all the logs. Click this to renew the log screen. Export Log Click this to export the selected log(s). Select a severity level from the drop-down list box. This filters search results according to the severity level you have selected. When you select a severity, the Zyxel Device searches through all logs of that severity or higher. Email Log Now Click this to send the log file(s) to the email address you specify in the Maintenance > Logs Setting screen.

Time Facility This field is a sequential value and is not associated with a specific entry. This field displays the time the log was recorded. The log facility allows you to send logs to different files in the syslog server. Refer to the documentation of your syslog program for more details. Level This field displays the severity level of the log that the device is to send to this syslog server. Category This field displays the type of the log. Messages This field states the reason for the log. 15.3 Security Log Use the Security Log screen to see the security-related logs for the categories that you select. You can filter the entries by selecting a severity level and/or category. Click System Monitor > Log > Security Log to open the following screen. LTE Series Users Guide 149 Chapter 15 Log Figure 111 System Monitor > Log > Security Log The following table describes the fields in this screen. Table 60 System Monitor > Log > Security Log LABEL Level DESCRIPTION Category Clear Log Refresh Select the type of logs to display. Click this to delete all the logs. Click this to renew the log screen. Export Log Click this to export the selected log(s). Select a severity level from the drop-down list box. This filters search results according to the severity level you have selected. When you select a severity, the Zyxel Device searches through all logs of that severity or higher. Email Log Now Click this to send the log file(s) to the email address you specify in the Maintenance > Logs Setting screen.

Time Facility This field is a sequential value and is not associated with a specific entry. This field displays the time the log was recorded. The log facility allows you to send logs to different files in the syslog server. Refer to the documentation of your syslog program for more details. Level This field displays the severity level of the log that the device is to send to this syslog server. Category This field displays the type of the log. Messages This field states the reason for the log. LTE Series Users Guide 150 C H A P T E R 16 Traffic Status 16.1 Traffic Status Overview Use the Traffic Status screens to look at the network traffic status and statistics of the WAN/LAN interfaces. 16.1.1 What You Can Do in this Chapter Use the WAN screen to view the WAN traffic statistics (Section 16.2 on page 151). Use the LAN screen to view the LAN traffic statistics (Section 16.3 on page 152). 16.2 WAN Status Click System Monitor > Traffic Status to open the WAN screen. The figures in this screen show the number of bytes received and sent through the Zyxel Devices WAN interface. The table below shows packet statistics for each WAN interface. Figure 112 System Monitor > Traffic Status > WAN LTE Series Users Guide 151 Chapter 16 Traffic Status The following table describes the fields in this screen. Table 61 System Monitor > Traffic Status > WAN LABEL DESCRIPTION Refresh Interval Select how often you want the Zyxel Device to update this screen. This shows the name of the WAN interface that is currently connected. Connected Interface Packets Sent Packets Received Disabled Interface Packets Sent Packets Received Data Error Drop Data Error Drop Data Error Drop Data Error Drop This indicates the number of transmitted packets on this interface. This indicates the number of frames with errors transmitted on this interface. This indicates the number of outgoing packets dropped on this interface. This indicates the number of received packets on this interface. This indicates the number of frames with errors received on this interface. This indicates the number of received packets dropped on this interface. This shows the name of the WAN interface that is currently disabled. This indicates the number of transmitted packets on this interface. This indicates the number of frames with errors transmitted on this interface. This indicates the number of outgoing packets dropped on this interface. This indicates the number of received packets on this interface. This indicates the number of frames with errors received on this interface. This indicates the number of received packets dropped on this interface. 16.3 LAN Status Click System Monitor > Traffic Status > LAN to open the following screen. This screen allows you to view packet statistics for each LAN or WLAN interface on the Zyxel Device. LTE Series Users Guide 152 Chapter 16 Traffic Status Figure 113 System Monitor > Traffic Status > LAN The following table describes the fields in this screen. Table 62 System Monitor > Traffic Status > LAN LABEL DESCRIPTION Refresh Interval Select how often you want the Zyxel Device to update this screen. Interface This shows the LAN or WLAN interface. Bytes Sent This indicates the number of bytes transmitted on this interface. Bytes Received This indicates the number of bytes received on this interface. Interface This shows the LAN or WLAN interfaces. Sent (Packets) Received (Packets) Data Error Drop Data Error Drop This indicates the number of transmitted packets on this interface. This indicates the number of frames with errors transmitted on this interface. This indicates the number of outgoing packets dropped on this interface. This indicates the number of received packets on this interface. This indicates the number of frames with errors received on this interface. This indicates the number of received packets dropped on this interface. LTE Series Users Guide 153 C H A P T E R 17 ARP Table 17.1 ARP Table Overview Address Resolution Protocol (ARP) is a protocol for mapping an Internet Protocol (IP) address to a physical machine address, known as a Media Access Control (MAC) address, on the local area network. An IP version 4 address is 32 bits long. MAC addresses are 48 bits long. The ARP table maintains an association between each MAC address and its corresponding IP address. 17.1.1 How ARP Works When an incoming packet destined for a host device on a local area network arrives at the device, the device's ARP program looks in the ARP table and, if it finds the address, sends it to the device. If no entry is found for the IP address, ARP broadcasts the request to all the devices on the LAN. The device fills in its own MAC and IP address in the sender address fields, and puts the known IP address of the target in the target IP address field. In addition, the device puts all ones in the target MAC field

(FF.FF.FF.FF.FF.FF is the Ethernet broadcast address). The replying device (which is either the IP address of the device being sought or the router that knows the way) replaces the broadcast address with the target's MAC address, swaps the sender and target pairs, and unicasts the answer directly back to the requesting machine. ARP updates the ARP table for future reference and then sends the packet to the MAC address that replied. LTE Series Users Guide 154 Chapter 17 ARP Table 17.2 ARP Table Use the ARP table to view the IPv4-to-MAC address mappings for each device connected to the Zyxel Device. The neighbor table shows the IPv6-to-MAC address mappings of each IPv6 neighbor. To open this screen, click System Monitor > ARP Table. Figure 114 System Monitor > ARP Table The following table describes the labels in this screen. Table 63 System Monitor > ARP Table DESCRIPTION This is the ARP table entry number. LABEL

IPv4/IPv6 Address Device This is the learned IPv4 or IPv6 IP address of a device connected to a port. MAC Address This is the MAC address of the device with the listed IP address. This is the type of interface used by the device. You can click the device type to go to its configuration screen. LTE Series Users Guide 155 C H A P T E R 18 Routing Table 18.1 Routing Table Overview Routing is based on the destination address only and the Zyxel Device takes the shortest path to forward a packet. 18.2 Routing Table The table below shows IPv4 and IPv6 routing information. The IPv4 subnet mask is 255.255.255.255 for a host destination and 0.0.0.0 for the default route. The gateway address is written as *(IPv4)/::(IPv6) if none is set. LTE Series Users Guide 156 Chapter 18 Routing Table Click System Monitor > Routing Table to open the following screen. Figure 115 System Monitor > Routing Table The following table describes the labels in this screen. Table 64 System Monitor > Routing Table LABEL DESCRIPTION IPv4/IPv6 Routing Table Destination This indicates the destination IPv4 address or IPv6 address and prefix of this route. Gateway This indicates the IPv4 address or IPv6 address of the gateway that helps forward this routes traffic. Subnet Mask This indicates the destination subnet mask of the IPv4 route. LTE Series Users Guide 157 Chapter 18 Routing Table Table 64 System Monitor > Routing Table (continued) LABEL Flag DESCRIPTION This indicates the route status. U-Up: The route is up.

!-Reject: The route is blocked and will force a route lookup to fail. G-Gateway: The route uses a gateway to forward traffic. H-Host: The target of the route is a host. R-Reinstate: The route is reinstated for dynamic routing. D-Dynamic (redirect): The route is dynamically installed by a routing daemon or redirect. M-Modified (redirect): The route is modified from a routing daemon or redirect. Metric The metric represents the "cost of transmission." A router determines the best route for transmission by choosing a path with the lowest "cost." The smaller the number, the lower the

"cost."

Interface This indicates the name of the interface through which the route is forwarded. LTE Series Users Guide 158 C H A P T E R 19 Cellular WAN Status 19.1 Cellular WAN Status Overview View the LTE connection details and LTE signal strength value that you can use as reference for positioning the Zyxel Device, as well as SIM card and module information. 19.2 Cellular WAN Status To open this screen, click System Monitor > Cellular WAN Status. Cellular information is available on this screen only when you insert a valid SIM card in the Zyxel Device. Figure 116 System Monitor > Cellular WAN Status LTE Series Users Guide 159 Chapter 19 Cellular WAN Status Figure 117 System Monitor > Cellular WAN Status (Service Information) The following table describes the labels in this screen. Table 65 System Monitor > Cellular WAN Status LABEL DESCRIPTION Refresh Interval Select the time interval the Zyxel Device will check and refresh the fields shown on this screen. Select None to stop detection. IMEI This shows the International Mobile Equipment Identity of the Zyxel Device. This shows the software version of the LTE module. Module Information Module SW Version SIM Status SIM Card Status This displays the SIM card status:

None - the Zyxel Device does not detect that there is a SIM card inserted. Available - the SIM card could either have or doesnt have PIN code security. Locked - the SIM card has PIN code security, but you did not enter the PIN code yet. Blocked - you entered an incorrect PIN code too many times, so the SIM card has been locked;

call the ISP for a PUK (Pin Unlock Key) to unlock the SIM card. Error - the Zyxel Device detected that the SIM card has errors. IMSI This displays the International Mobile Subscriber Identity (IMSI) of the installed SIM card. An IMSI is a unique ID used to identify a mobile subscriber in a mobile network. ICCID Integrated Circuit Card Identifier (ICCID). This is the serial number of the SIM card. PIN Protection A PIN (Personal Identification Number) code is a key to a SIM card. Without the PIN code, you cannot use the SIM card. Shows Enable if the service provider requires you to enter a PIN to use the SIM card. Shows Disable if the service provider lets you use the SIM without inputting a PIN. PIN Remaining Attempts This is how many more times you can try to enter the PIN code before the ISP blocks your SIM card. IP Passthrough Status LTE Series Users Guide 160 Chapter 19 Cellular WAN Status Table 65 System Monitor > Cellular WAN Status (continued) LABEL DESCRIPTION IP Passthrough Enable This displays if IP Passthrough is enabled on the Zyxel Device. IP Passthrough allows a LAN computer on the local network of the Zyxel Device to have access to web services using the public IP address. When IP Passthrough is configured, all traffic is forwarded to the LAN computer and will not go through NAT. IP Passthrough Mode This displays the IP Passthrough mode. This displays Dynamic and the Zyxel Device will allow traffic to be forwarded to the first LAN computer requesting an IP address from the Zyxel Device. This displays Fixed and the Zyxel Device will allow traffic to be forwarded to a specific LAN computer on the local network of the Zyxel Device. Cellular Status This displays the status of the cellular Internet connection. Data Roaming This displays if data roaming is enabled on the Zyxel Device. 4G roaming is to use your Zyxel Device in an area which is not covered by your service provider. Enable roaming to ensure that your Zyxel Device is kept connected to the Internet when you are traveling outside the geographical coverage area of the network to which you are registered. Operator This displays the name of the service provider. PLMN This displays the PLMN number. Access Technology This displays the type of the mobile network (such as LTE, UMTS, GSM) to which the Zyxel Device is connecting. Band RSSI Cell ID This displays the current LTE band of your Zyxel Device (WCDMA2100). This displays the strength of the WiFi signal between an associated wireless station and an AP. The normal range is -30dBm to -79dBm. If the value drops below -80dBm, try moving the associated wireless station closer to the Zyxel Device to get better signal strength. This shows the cell ID, which is a unique number used to identify the Base Transceiver Station to which the Zyxel Device is connecting. The value depends on the Current Access Technology:

For GPRS, it is the Cell Identity as specified in 3GPP-TS.25.331. For UMTS, it is the Cell Identity as defined in SIB3 3GPP-TS.25.331, 3GPP-TS.24.008. For LTE, it is the 28-bit binary number Cell Identity as specified in SIB1 in 3GPP-TS.36.331. The value is 0 (zero) or N/A if there is no network connection. Physical Cell ID This shows the Physical Cell ID (PCI), which are queries and replies between the Zyxel Device and the mobile network it is connecting to. The normal range is 1 to 504. UL Bandwidth

(MHz) DL Bandwidth

(MHz) This shows the LTE channel bandwidth from device to base station. According to 3GPP specifications, the bandwidths defined by the standard are 1.4, 3, 5, 10, 15, and 20 MHz. The wider the bandwidth the higher the throughput. This shows the LTE channel bandwidth from base station to LTE device. According to 3GPP specifications, the bandwidths defined by the standard are 1.4, 3, 5, 10, 15, and 20 MHz. The wider the bandwidth the higher the throughput. RFCN This displays the Radio Frequency Channel Number of DL carrier frequency used by the mobile network to which the Zyxel Device is connecting. The value depends on the Current Access Technology:

For GPRS, it is the ARFCN (Absolute Radio-Frequency Channel Number) as specified in 3GPP-

For UMTS, it is the UARFCN (UTRA Absolute Radio-Frequency Channel Number) as specified in For LTE, it is the EARFCN (E-UTRA Absolute Radio-Frequency Channel Number) as specified in TS.45.005. 3GPP-TS.25.101. 3GPP-TS.36.101. The value is 0 (zero) or N/A if there is no network connection. LTE Series Users Guide 161 Chapter 19 Cellular WAN Status Table 65 System Monitor > Cellular WAN Status (continued) LABEL RSRP DESCRIPTION This displays the Reference Signal Receive Power (RSRP), which is the average received power of all Resource Element (RE) that carry cell-specific Reference Signals (RS) within the specified bandwidth. The received RSRP level of the connected E-UTRA cell, in dBm, is as specified in 3GPP-TS.36.214. The reporting range is specified in 3GPP-TS.36.133. An undetectable signal is indicated by the lower limit, example -140 dBm. This parameter is for LTE only. The normal range is -30 to -140. The value is -140 if the Current Access Technology is not LTE. The value is N/A if there is no network connection. RSRQ This displays the Reference Signal Receive Quality (RSRQ), which is the ratio of RSRP to the E-UTRA carrier RSSI and indicates the quality of the received reference signal. The received RSRQ level of the connected E-UTRA cell, in 0.1 dB, is as specified in 3GPP-TS.36.214. An undetectable signal is indicated by the lower limit, example -240. This parameter is for LTE only. The normal range is -30 to -240. The value is -240 if the Current Access Technology is not LTE. The value is N/A if there is no network connection. RSCP This displays the Received Signal Code Power, which measures the power of channel used by the Zyxel Device. The received signal level, in dBm, is of the CPICH channel (Ref. 3GPP TS 25.133). An undetectable signal is indicated by the lower limit, example -120 dBm. This parameter is for UMTS only. The normal range is -30 to -120. The value is -120 if the Current Access Technology is not UMTS. The value is N/A if there is no network connection. EcNo This displays the ratio (in dB) of the received energy per chip and the interference level. TAC LAC RAC The measured EcNo is in 0.1 dB and is received in the downlink pilot channel. An undetectable signal is indicated by the lower limit, example -240 dB. This parameter is for UMTS only. The normal range is -30 to -240. The value is -240 if the Current Access Technology is not UMTS or there is no network connection. This displays the Tracking Area Code (TAC), which is used to identify the country of a mobile subscriber. The physical cell ID of the connected E-UTRAN cell, is as specified in 3GPP-TS.36.101. This parameter is for LTE only. The value is 0 (zero) or N/A if the Current Access Technology is not LTE or there is no network connection. This displays the 2-octet Location Area Code (LAC), which is used to identify a location area within a PLMN. The LAC of the connected cell is as defined in SIB 1 [3GPP-TS.25.331]. The concatenation of PLMN ID (MCC+MNC) and LAC uniquely identifies the LAI (Location Area ID) [3GPP-TS.23.003]. This parameter is for UMTS or GPRS. The value is 0 (zero) if the Current Access Technology is not UMTS or GPRS. The value is N/A if there is no network connection. This displays the RAC (Routing Area Code), which is used in mobile network packet domain service (PS) to identify a routing area within a location area. In a mobile network, it uses LAC (Location Area Code) to identify the geographical location for the old 3G voice only service, and use RAC to identify the location of data service like HSDPA or LTE. The RAC of the connected UTRAN cell is as defined in SIB 1 [3GPP-TS.25.331]. The concatenation of PLMN ID (MCC+MNC), LAC, and RAC uniquely identifies the RAI (Routing Area ID) [3GPP-

TS.23.003]. This parameter is for UMTS or GPRS. The value is 0 (zero) if the Current Access Technology is not UMTS or GPRS. The value is N/A if there is no network connection. LTE Series Users Guide 162 Chapter 19 Cellular WAN Status Table 65 System Monitor > Cellular WAN Status (continued) DESCRIPTION LABEL BSIC SINR CQI MCS RI The Base Station Identity Code (BSIC), which is a code used in GSM to uniquely identify a base station. This parameter is for GPRS only. The value is 0 (zero) if the Current Access Technology is not GPRS. The value is N/A if there is no network connection. This displays the Signal to Interference plus Noise Ratio (SINR) in dB. This is also a measure of signal quality and used by the UE (User Equipment) to calculate the Channel Quality Indicator (CQI) that it reports to the network. A negative value means more noise than signal. This displays the Channel Quality Indicator (CQI). It is an indicator carrying the information on how good/bad the communication channel quality is. MCS stands for modulation coding scheme. The base station selects MCS based on current radio conditions. The higher the MCS the more bits can be transmitted per time unit. This displays the Rank Indication, one of the control information that a UE will report to eNodeB

(Evolved Node-B) on either PUCCH (Physical Uplink Control Channel) or PUSCH (Physical Uplink Shared Channel) based on uplink scheduling. PMI This displays the Precoding Matrix Indicator (PMI). PMI is for transmission modes 4 (closed loop spatial multiplexing), 5 (multi-user MIMO), and 6

(closed loop spatial multiplexing using a single layer). PMI determines how cellular data are encoded for the antennas to improve downlink rate. LTE Series Users Guide 163 C H A P T E R 20 System 20.1 System Overview Use this screen to name your Zyxel Device (Host) and give it an associated domain name for identification purposes. 20.2 System Click Maintenance > System to open the following screen. Assign a unique name to the Zyxel Device so it can be easily recognized on your network. You can use up to 30 characters, including spaces. Figure 118 Maintenance > System The following table describes the labels in this screen. Table 66 Maintenance > System LABEL DESCRIPTION Host Name Type a host name for your Zyxel Device. Enter a descriptive name of up to 16 alphanumeric characters, not including spaces, underscores, and dashes. Domain Name Type a domain name for your host Zyxel Device. Cancel Apply Click Cancel to abandon this screen without saving. Click Apply to save your changes. LTE Series Users Guide 164 Chapter 21 User Account C H A P T E R 21 User Account 21.1 User Account Overview In the User Account screen, you can view the settings of the admin and other user accounts that you use to log into the Zyxel Device to manage it. 21.2 User Account Click Maintenance > User Account to open the following screen. Use this screen to create or manage user accounts and their privileges on the Zyxel Device. Figure 119 Maintenance > User Account The following table describes the labels in this screen. Table 67 Maintenance > User Account DESCRIPTION LABEL Add New Account

Active Click this button to add a new user account (up to 4 Administrator accounts and 4 User accounts). This is the index number. This indicates whether the user account is active or not. The check box is selected when the user account is enabled. It is cleared when it is disabled. User Name This displays the name of the account used to log into the Zyxel Device Web Configurator. Retry Times This displays the number of times consecutive wrong passwords can be entered for this account. 0 means there is no limit. LTE Series Users Guide 165 Chapter 21 User Account Table 67 Maintenance > User Account (continued) LABEL DESCRIPTION Idle Timeout Lock Period Group Modify Cancel Apply This displays the length of inactive time before the Zyxel Device will automatically log the user out of the Web Configurator. This field displays the length of time a user must wait before attempting to log in again after a number of consecutive wrong passwords have been entered as defined in Retry Times. This field displays whether this user has Administrator or User privileges. Click the Edit icon to configure the entry. Click the Delete icon to remove the entry. Click Cancel to restore your previously saved settings. Click Apply to save your changes. 21.2.1 User Account Add/Edit Add or change the name of the user account, set the security password and the retry times, and whether this user will have Administrator or User privileges. Click Add New Account or the Edit icon of an existing account in the Maintenance > User Account to open the following screen. Figure 120 Maintenance > User Account > Add/Edit The following table describes the labels in this screen. Table 68 Maintenance > User Account > Add/Edit DESCRIPTION LABEL Active User Name Password Click to enable (switch turns blue) or disable (switch turns gray) to activate or deactivate the user account. Enter a new name for the account (up to 15 characters). Special characters are allowed except the following: double quote (") back quote (`) apostrophe or single quote (') less than (<) greater than (>) caret or circumflex accent (^) dollar sign ($) vertical bar (|) ampersand (&) semicolon

(;) Type your new system password (up to 256 characters). Note that as you type a password, the screen displays a (*) for each character you type. After you change the password, use the new password to access the Zyxel Device. LTE Series Users Guide 166 Chapter 21 User Account Table 68 Maintenance > User Account > Add/Edit (continued) LABEL DESCRIPTION Verify Password Type the new password again for confirmation. Retry Times Idle Timeout Lock Period Enter the number of times consecutive wrong passwords can be entered for this account. 0 means there is no limit. Enter the length of inactive time before the Zyxel Device will automatically log the user out of the Web Configurator. Enter the length of time a user must wait before attempting to log in again after a number of consecutive wrong passwords have been entered as defined in Retry Times. Group Specify whether this user will have Administrator or User privileges. The Administrator privileges are the following:

Quick Start setup. The following screens are visible for setup:

Broadband, Wireless, Home Networking, Routing, NAT, DNS, Firewall, MAC Filter, Certificates, Voice, Log, Traffic Status, ARP Table, Routing Table, Cellular WAN Status, System, User Account, Remote Management, TR-069 Client, Time, Email Notification, Log Setting, Firmware Upgrade, Backup/Restore, Reboot, Diagnostic. The User privileges are the following:

The following screens are visible for setup:

Log, Traffic Status, ARP Table, Routing Table, Cellular WAN Status, User Account, Remote Management, Time, Email Notification, Log Setting, Firmware Upgrade, Backup/Restore, Reboot, Diagnostic. Cancel OK Click Cancel to restore your previously saved settings. Click OK to save your changes. LTE Series Users Guide 167 C H A P T E R 22 Remote Management 22.1 Overview Remote management controls through which interface(s), which web services (such as HTTP, HTTPS, FTP, Telnet, SSH and Ping) can access the Zyxel Device. Note: The Zyxel Device is managed using the Web Configurator. 22.2 MGMT Services Note: The MGMT Services screen will be hidden if you enable the IP Passthrough function in Network Setting > Broadband > Cellular IP Passthrough screen. Use this screen to configure the interfaces through which services can access the Zyxel Device. Click Maintenance > Remote Management to open the following screen. Figure 121 Maintenance > Remote Management LTE Series Users Guide 168 Chapter 22 Remote Management The following table describes the fields in this screen. Table 69 Maintenance > Remote Management LABEL DESCRIPTION WAN Interface used for services Select Any_WAN to have the Zyxel Device automatically activate the remote management service when any WAN connection is up. Select Multi_WAN and then select one or more WAN connections to have the Zyxel Device activate the remote management service when the selected WAN connections are up. Cellular WAN Enable the LTE WAN connection configured in Network Setting > Broadband > Cellular WAN to access the service on the Zyxel Device. ETHWAN Enable the LTE WAN connection configured in Network Setting > Broadband > Cellular WAN to access the service on the Zyxel Device. Service This is the service you may use to access the Zyxel Device. Select the Enable check box for the corresponding services that you want to allow access to the Zyxel Device from the LAN/WLAN. Select the Enable check box for the corresponding services that you want to allow access to the Zyxel Device from all WAN connections. Trust Domain Select the Enable check box for the corresponding services that you want to allow access to the Zyxel Device from the trusted host IP address. You may change the server port number for a service if needed, however you must use the same port number in order to use that service for remote management. Click Apply to save your changes back to the Zyxel Device. Click Cancel to restore your previously saved settings. LAN/WLAN WAN Port Apply Cancel 22.3 MGMT Services for IP Passthrough Configure which interfaces you can use to access the Zyxel Device in IP Passthrough mode (bridge mode) for a given service. You can also specify the service port numbers computers must use to connect to the Zyxel Device. IP Passthrough allows Internet traffic to go to a LAN computer behind the Zyxel Device without going through NAT. Make sure to enable IP Passthrough in Network Setting >

Broadband > Cellular IP Passthrough. See Section 6.8 on page 73 for details. Click Maintenance > Remote Management > MGMT Services for IP Passthrough to open the following screen. LTE Series Users Guide 169 Chapter 22 Remote Management Figure 122 Maintenance > Remote Management > MGMT Services for IP Passthrough The following table describes the fields in this screen. Table 70 Maintenance > Remote Management > MGMT Services for IP Passthrough DESCRIPTION This is the service you may use to access the Zyxel Device. Select the Enable check box for the corresponding services that you want to allow access to the Zyxel Device from all WAN connections. Trust Domain Select the Enable check box for the corresponding services that you want to allow access to the Zyxel Device from the trusted host IP address. You may change the server port number for a service if needed, however you must use the same port number in order to use that service for remote management. Click Apply to save your changes back to the Zyxel Device. Click Cancel to restore your previously saved settings. LABEL Service WAN Port Apply Cancel 22.4 Trust Domain Use this screen to view a list of public IP addresses which are allowed to access the Zyxel Device through the services configured in the Maintenance > Remote Management > MGMT Services screen. Click Maintenance > Remote Management > Trust Domain to open the following screen. Note: Enter the IP address of the management station permitted to access the local management services. If specific services from the trusted hosts are allowed access but the trust domain list is empty, all public IP addresses can access the Zyxel Device from the WAN using the specified services. Figure 123 Maintenance > Remote Management > Trust Domain LTE Series Users Guide 170 Chapter 22 Remote Management The following table describes the fields in this screen. Table 71 Maintenance > Remote Management > Trust Domain LABEL Add Trust Domain DESCRIPTION Click this to add a trusted host IP address. IP Address This field shows a trusted host IP address. Delete Click the Delete icon to remove the trusted host IP address. 22.5 Add Trust Domain Use this screen to add a public IP addresses or a complete domain name of a device which is allowed to access the Zyxel Device. Click the Add Trust Domain button in the Maintenance > Remote Management > Trust Domain screen to open the following screen. Figure 124 Maintenance > Remote Management > Trust Domain > Add Trust Domain The following table describes the fields in this screen. Table 72 Maintenance > Remote Management > Trust Domain > Add Trust Domain DESCRIPTION LABEL IP Address OK Cancel Enter a public IPv4/IPv6 IP address which is allowed to access the service on the Zyxel Device from the WAN. Click OK to save your changes back to the Zyxel Device. Click Cancel to restore your previously saved settings. 22.6 Trust Domain for IP Passthrough Use this screen to view a list of public IP addresses/complete domain names which are allowed to access the Zyxel Device in IP Passthrough mode (bridge mode). IP Passthrough allows Internet traffic to go to a LAN computer behind the Zyxel Device without going through NAT. Make sure to enable IP Passthrough in Network Setting > Broadband > Cellular IP Passthrough. See Section 6.8 on page 73 for details. Click Maintenance > Remote Management > Trust Domain for IP Passthrough to open the following screen. LTE Series Users Guide 171 Chapter 22 Remote Management Figure 125 Maintenance > Remote Management > Trust Domain for IP Passthrough The following table describes the fields in this screen. Table 73 Maintenance > Remote Management > Trust Domain for IP Passthrough LABEL DESCRIPTION Add Trust Domain Click this to add a trusted host IP address. IP Address Delete This field shows a trusted host IP address. Click the Delete icon to remove the trusted host IP address. 22.7 Add Trust Domain Use this screen to add a public IP address or a complete domain name of a device which is allowed to access the Zyxel Device. Click the Add Trust Domain button in the Maintenance > Remote Management

> Trust Domain for IP Passthrough screen to open the following screen. Figure 126 Maintenance > Remote Management > Trust Domain for IP Passthrough > Add Trust Domain The following table describes the fields in this screen. Table 74 Maintenance > Remote Management > Trust Domain for IP Passthrough > Add Trust Domain LABEL IP Address Cancel OK DESCRIPTION Enter a public IPv4/IPv6 IP address which is allowed to access the service on the Zyxel Device from the WAN. Click Cancel to restore your previously saved settings. Click OK to save your changes back to the Zyxel Device. LTE Series Users Guide 172 C H A P T E R 23 Time Settings 23.1 Time Settings Overview This chapter shows you how to configure system related settings, such as system time, password, name, the domain name and the inactivity timeout interval. 23.2 Time Use this screen to configure the Zyxel Devices time based on your local time zone. You can enter a time server address, select the time zone where the Zyxel Device is physically located, and configure Daylight Savings settings if needed. To change your Zyxel Devices time and date, click Maintenance > Time. The screen appears as shown. LTE Series Users Guide 173 Chapter 23 Time Settings Figure 127 Maintenance > Time The following table describes the fields in this screen. Table 75 Maintenance > Time LABEL DESCRIPTION Current Date/Time Current Time This displays the time of your Zyxel Device. Each time you reload this screen, the Zyxel Device synchronizes the time with the time server. Current Date This displays the date of your Zyxel Device. Each time you reload this screen, the Zyxel Device synchronizes the date with the time server. Time and Date Setup Time Protocol This displays the time protocol used by your Zyxel Device. LTE Series Users Guide 174 Chapter 23 Time Settings Table 75 Maintenance > Time (continued) LABEL DESCRIPTION First ~ Fifth Time Server Address Select an NTP time server from the drop-down list box. Otherwise, select Other and enter the IP address or URL (up to 29 extended ASCII characters in length) of your time server. Select None if you dont want to configure the time server. Check with your ISP/network administrator if you are unsure of this information. Choose the time zone of your location. This will set the time difference between your time zone and Greenwich Mean Time (GMT). Daylight Savings Daylight Saving Time is a period from late spring to early fall when many countries set their clocks ahead of normal local time by one hour to give more daytime light in the evening. Time Zone Time zone Active Start Rule Click this switch to enable or disable Daylight Saving Time. When the switch turns blue the function is enabled. Otherwise, its not.

, Configure the day and time when Daylight Saving Time starts if you enabled Daylight Saving. You can select a specific date in a particular month or a specific day of a specific week in a particular month. The Time field uses the 24 hour format. Here are a couple of examples:

Daylight Saving Time starts in most parts of the United States on the second Sunday of March. Each time zone in the United States starts using Daylight Saving Time at 2 A.M. local time. So in the United States, set the day to Second, Sunday, the month to March and the time to 2 in the Hour field. Daylight Saving Time starts in the European Union on the last Sunday of March. All of the time zones in the European Union start using Daylight Saving Time at the same moment (1 A.M. GMT or UTC). So in the European Union you would set the day to Last, Sunday and the month to March. The time you select in the o'clock field depends on your time zone. In Germany for instance, you would select 2 in the Hour field because Germany's time zone is one hour ahead of GMT or UTC (GMT+1). End Rule Configure the day and time when Daylight Saving Time ends if you enabled Daylight Saving. You can select a specific date in a particular month or a specific day of a specific week in a particular month. The Time field uses the 24 hour format. Here are a couple of examples:

Daylight Saving Time ends in the United States on the first Sunday of November. Each time zone in the United States stops using Daylight Saving Time at 2 A.M. local time. So in the United States you would set the day to First, Sunday, the month to November and the time to 2 in the Hour field. Daylight Saving Time ends in the European Union on the last Sunday of October. All of the time zones in the European Union stop using Daylight Saving Time at the same moment (1 A.M. GMT or UTC). So in the European Union you would set the day to Last, Sunday, and the month to October. The time you select in the o'clock field depends on your time zone. In Germany for instance, you would select 2 in the Hour field because Germany's time zone is one hour ahead of GMT or UTC (GMT+1). Cancel Apply Click Cancel to exit this screen without saving. Click Apply to save your changes. LTE Series Users Guide 175 C H A P T E R 24 E-mail Notification 24.1 E-mail Notification Overview A mail server is an application or a computer that can receive, forward and deliver e-mail messages. To have the Zyxel Device send reports, logs or notifications via e-mail, you must specify an e-mail server and the e-mail addresses of the sender and receiver. 24.2 E-mail Notification Use this screen to view, remove and add e-mail account information on the Zyxel Device. This account can be set to send e-mail notifications for logs. Click Maintenance > E-mail Notification to open the E-mail Notification screen. Note: The default port number of the mail server is 25. Figure 128 Maintenance > E-mail Notification The following table describes the labels in this screen. Table 76 Maintenance > E-mail Notification LABEL DESCRIPTION Add New e-mail Click this button to create a new entry (up to 32 can be created). This displays the server name or the IP address of the mail server. Mail Server Address Port Security User name This displays the user name of the senders mail account. This field displays the port number of the mail server. This field displays the protocol used for encryption. LTE Series Users Guide 176 Chapter 24 E-mail Notification Table 76 Maintenance > E-mail Notification (continued) LABEL DESCRIPTION E-mail Address This field displays the e-mail address that you want to be in the from/sender line of the e-mail that the Zyxel Device sends. Remove Click this button to delete the selected entry(ies). 24.2.1 E-mail Notification Edit Click the Add button in the E-mail Notification screen. Use this screen to configure the required information for sending e-mail via a mail server. Figure 129 E-mail Notification > Add The following table describes the labels in this screen. Table 77 E-mail Notification > Add LABEL DESCRIPTION Mail Server Address Enter the server name or the IP address of the mail server for the e-mail address specified in the Account e-mail Address field. If this field is left blank, reports, logs or notifications will not be sent via e-mail. Port Enter the same port number here as is on the mail server for mail traffic. Authentication Username Enter the user name (up to 32 characters). This is usually the user name of a mail account you specified in the Account email Address field. Authentication Password Enter the password associated with the user name above. Account e-mail Address Enter the e-mail address that you want to be in the from/sender line of the e-mail notification that the Zyxel Device sends. If you activate SSL/TLS authentication, the e-mail address must be able to be authenticated by the mail server as well. Connection Security Select SSL to use Secure Sockets Layer (SSL) or Transport Layer Security (TLS) if you want encrypted communications between the mail server and the Zyxel Device. Select STARTTLS to upgrade a plain text connection to a secure connection using SSL/TLS. LTE Series Users Guide 177 Chapter 24 E-mail Notification Table 77 E-mail Notification > Add (continued) DESCRIPTION LABEL Cancel OK Click this button to begin configuring this screen afresh. Click this button to save your changes and return to the previous screen. LTE Series Users Guide 178 C H A P T E R 25 Log Setting 25.1 Log Setting Overview Use this screen to configure where the Zyxel Device sends logs, and which type of logs the Zyxel Device records. 25.2 Log Setting You can configure where the Zyxel Device sends logs and which type of logs the Zyxel Device records in the Logs Setting screen. If you have a server that is running a syslog service, you can also save log files to it by enabling Syslog Logging, and then entering the IP address of the server in the Syslog Server field. Select Remote to store logs on the syslog server, or select Local File to store logs on the Zyxel Device. Select Local File and Remote to store logs on both the Zyxel Device and the syslog server. To change your Zyxel Devices log settings, click Maintenance > Log Setting. The screen appears as shown. LTE Series Users Guide 179 Chapter 25 Log Setting Figure 130 Maintenance > Log Setting The following table describes the fields in this screen. Table 78 Maintenance > Log Setting LABEL DESCRIPTION Syslog Settings Syslog Logging Click the switch (it will turn blue) to enable syslog logging. Mode Select Remote to have the Zyxel Device send it to an external syslog server. Select Local File to have the Zyxel Device save the log file on the Zyxel Device itself. Select Local File and Remote to have the Zyxel Device save the log file on the Zyxel Device itself and send it to an external syslog server. Note: A warning appears upon selecting Remote or Local File and Remote. Just click OK to continue. LTE Series Users Guide 180 Chapter 25 Log Setting Table 78 Maintenance > Log Setting (continued) LABEL DESCRIPTION Syslog Server Enter the server name or IP address of the syslog server that will log the selected categories of logs. UDP Port Enter the port number used by the syslog server. E-mail Log Settings E-mail Log Setting Click the switch (it will turn blue) to allow the sending via e-mail the system and security logs to the e-mail address specified in Send Log to. Note: Make sure that the Mail Server Address field is not left blank in the Maintenance > E-mail Notifications screen. Mail Account Select a server specified in Maintenance > E-mail Notifications to send the logs to. System Log Mail Subject This field allows you to enter a descriptive name for the system log e-mail (for example Zyxel System Log). Up to 127 characters are allowed for the System Log Mail Subject including special characters inside the square brackets [!#%()*+,-./:=?@[]\{}~]. Security Log Mail Subject This field allows you to enter a descriptive name for the security log e-mail (for example Zyxel Security Log). Up to 127 characters are allowed for the Security Log Mail Subject including special characters inside the square brackets [!#%()*+,-./:=?@[]\{}~]. Send Log to This field allows you to enter the logs designated e-mail recipient. The logs format is plain text file sent as an e-mail attachment. Send Alarm to This field allows you to enter the alarms designated e-mail recipient. The alarms format is plain text file sent as an e-mail attachment. Alarm Interval Select the frequency of showing of the alarm. Active Log Apply Cancel System Log Select the categories of System Logs that you want to record. Security Log Select the categories of Security Logs that you want to record. Click Apply to save your changes. Click Cancel to restore your previously saved settings. LTE Series Users Guide 181 C H A P T E R 26 Firmware Upgrade 26.1 Overview This chapter explains how to upload new firmware to your Zyxel Device. You can download new firmware releases from your nearest Zyxel FTP site (or www.zyxel.com) to use to upgrade your Zyxel Devices performance. Only use firmware for your Zyxel Devices specific model. Refer to the label on the bottom of your Zyxel Device. 26.2 Firmware Upgrade This screen lets you upload new firmware to your Zyxel Device. Download the latest firmware file from the Zyxel website and upload it to your Zyxel Device using this screen. The upload process uses HTTP

(Hypertext Transfer Protocol) and may take up to three minutes. After a successful upload, the Zyxel Device will reboot. Click Maintenance > Firmware Upgrade to open the following screen. Do NOT turn off the Zyxel Device while firmware upload is in progress!

Figure 131 Maintenance > Firmware Upgrade LTE Series Users Guide 182 Chapter 26 Firmware Upgrade The following table describes the labels in this screen. Table 79 Maintenance > Firmware Upgrade DESCRIPTION Use these fields to upload firmware to the Zyxel Device. LABEL Upgrade Firmware Restore Default Settings After Firmware Upgrade Current Firmware Version File Path Click to enable this option that restores the factory-default to the Zyxel Device after upgrading the firmware. Note: Make sure to backup the Zyxel Devices configuration settings first in case the restore to factory-default process is not successful. Refer to Section 27.2 on page 184. This is the present firmware version. Type in the location of the file you want to upload in this field or click Choose File/Browse to find it. Choose File/

Browse Click this to find the .bin file you want to upload. Remember that you must decompress compressed (.zip) files before you can upload them. Upload Click this to begin the upload process. This process may take up to three minutes. After you see the firmware updating screen, wait a few minutes before logging into the Zyxel Device again. The Zyxel Device automatically restarts in this time causing a temporary network disconnect. In some operating systems, you may see the following icon on your desktop. Figure 132 Network Temporarily Disconnected After two minutes, log in again and check your new firmware version in the Status screen. If the upload was not successful, an error screen will appear. Click OK to go back to the Firmware Upgrade screen. LTE Series Users Guide 183 C H A P T E R 27 Backup/Restore 27.1 Backup/Restore Overview Information related to factory default settings and backup configuration are shown in this screen. You can also use this to restore previous device configurations. 27.2 Backup/Restore Click Maintenance > Backup/Restore. Information related to factory defaults, backup configuration, and restoring configuration appears in this screen, as shown next. Figure 133 Maintenance > Backup/Restore LTE Series Users Guide 184 Chapter 27 Backup/Restore Backup Configuration Backup Configuration allows you to back up (save) the Zyxel Devices current configuration to a file on your computer. Once your Zyxel Device is configured and functioning properly, it is highly recommended that you back up your configuration file before making configuration changes. Click Backup to save the Zyxel Devices current configuration to your computer. Restore Configuration allows you to upload a new or previously saved configuration file from your computer to your Zyxel Device. Restore Configuration Table 80 Restore Configuration LABEL DESCRIPTION File Path Type in the location of the file you want to upload in this field or click Choose File to find it. Choose File Click this to find the file you want to upload. Remember that you must decompress compressed (.ZIP) files before you can upload them. Upload Click this to begin the upload process. Reset Click this to reset your Zyxel Device settings back to the factory default. Do not turn off the Zyxel Device while configuration file upload is in progress. After the Zyxel Device configuration has been restored successfully, the login screen appears. Login again to restart the Zyxel Device. The Zyxel Device automatically restarts in this time causing a temporary network disconnect. In some operating systems, you may see the following icon on your desktop. Figure 134 Network Temporarily Disconnected If you restore the default configuration, you may need to change the IP address of your computer to be in the same subnet as that of the default Zyxel Device IP address (192.168.1.1). If the upload was not successful, an error screen will appear. Click OK to go back to the Configuration screen. 27.3 Reboot System Reboot allows you to reboot the Zyxel Device remotely without turning the power off. You may need to do this if the Zyxel Device hangs, for example. This does not affect the Zyxel Device's configuration. Click Maintenance > Reboot. Click Reboot to have the Zyxel Device reboot. LTE Series Users Guide 185 Chapter 27 Backup/Restore Figure 135 Maintenance > Reboot LTE Series Users Guide 186 C H A P T E R 28 Diagnostic 28.1 Diagnostic Overview The Diagnostic screens display information to help you identify problems with the Zyxel Device. 28.2 Ping/TraceRoute/Nslookup Test Use this screen to ping, traceroute, or nslookup for troubleshooting. Ping and traceroute are used to test whether a particular host is reachable. After entering an IP address and clicking one of the buttons to start a test, the results will be shown in the Ping/Traceroute Test area. Use nslookup to find the IP address for a host name and vice versa. Click Maintenance > Diagnostic to open the Ping/TraceRoute/Nslookup screen shown next. Figure 136 Maintenance > Diagnostic > Ping/Trace Route/Nslookup The following table describes the fields in this screen. Table 81 Maintenance > Diagnostic LABEL DESCRIPTION The result of tests is shown here in the info area. Ping/

TraceRoute Test TCP/IP LTE Series Users Guide 187 Chapter 28 Diagnostic Table 81 Maintenance > Diagnostic (continued) DESCRIPTION LABEL Address Ping Ping 6 Enter either an IP address or a host name to start a test. Click this button to perform a ping test on the IPv4 address or host name in order to test a connection. The ping statistics will show in the info area. Click this button to perform a ping test on the IPv6 address or host name in order to test a connection. The ping statistics will show in the info area. Trace Route Click this button to perform the IPv4 trace route function. This determines the path a packet takes to the specified host. Trace Route 6 Click this button to perform the IPv6 trace route function. This determines the path a packet takes to the specified host. Nslookup Click this button to perform a DNS lookup on the IP address or host name. Speed Test Click this button to perform an upload and download throughput test. LTE Series Users Guide 188 C H A P T E R 29 Troubleshooting 29.1 Overview This chapter offers some suggestions to solve problems you might encounter. The potential problems are divided into the following categories. Power and Hardware Connections Zyxel Device Access and Login Internet Access UPnP SIM Card Cellular Signal 29.2 Power and Hardware Connections The Zyxel Device does not turn on. For LTE7461-M602/LTE7480-S905/LTE7485-S905 1 Make sure you are using the PoE injector and cable (Power over Ethernet, PoE) included with the Zyxel Device. 2 Make sure the PoE is connected to the Zyxel Device and plugged in to an appropriate power source. Make sure the power source is turned on. Turn the Zyxel Device off and on. If the problem continues, contact the vendor. 3 4 29.3 Zyxel Device Access and Login I forgot the IP address for the Zyxel Device. LTE Series Users Guide 189 1 2 3 1 2 4 5 Chapter 29 Troubleshooting The default IP address is 192.168.1.1. If you changed the IP address and have forgotten it, you might get the IP address of the Zyxel Device by looking up the IP address of the default gateway for your computer. To do this in most Windows computers, click Start > Run, enter cmd, and then enter ipconfig. The IP address of the Default Gateway might be the IP address of the Zyxel Device (it depends on the network), so enter this IP address in your Internet browser. If this does not work, you have to reset the Zyxel Device to its factory defaults. Refer to Section 27.2 on page 184. I forgot the password. See the Zyxel Device label for the default admin password. If you changed the password, and cant remember the password, you have to reset the Zyxel Device to its factory defaults. Refer to Section 27.2 on page 184. I cannot see or access the Login screen in the Web Configurator. 1 Make sure you are using the correct IP address. The default IP address is 192.168.1.1. If you changed the IP address (Section 7.2 on page 77), use the new IP address. If you changed the IP address and have forgotten it, see the troubleshooting suggestions for I forgot the IP address for the Zyxel Device. 2 Check the hardware connections, see the Quick Start Guide. 3 Make sure your Internet browser does not block pop-up windows and has JavaScript and Java enabled. Reset the Zyxel Device to its factory default, and try to access the Zyxel Device with the default IP address. Refer to Section 27.2 on page 184. If the problem continues, contact the network administrator or vendor, or try the advanced suggestion. Advanced Suggestion Try to access the Zyxel Device using another service, such as Telnet. If you can access the Zyxel Device, check the remote management settings and firewall rules to find out why the Zyxel Device does not respond to HTTP. I can see the Login screen, but I cannot log in to the Zyxel Device. LTE Series Users Guide 190 Chapter 29 Troubleshooting 1 Make sure you have entered the user name and password correctly. The default user name is admin. These fields are case-sensitive, so make sure [Caps Lock] is not on. You cannot log in to the Web Configurator while someone is using Telnet to access the Zyxel Device. Log out of the Zyxel Device in the other session, or ask the person who is logged in to log out. Turn the Zyxel Device off and on. If this does not work, you have to reset the Zyxel Device to its factory default. See Section 27.2 on page 184. I cannot use FTP, Telnet, SSH or Ping to access the Zyxel Device. See the Remote Management Chapter 22 on page 168 for details on allowing web services (such as HTTP, HTTPS, FTP, Telnet, SSH and Ping) to access the Zyxel Device. Check the server Port number field for the web service in the Maintenance > Remote Management screen. You must use the same port number in order to use that web service for remote management. 29.4 Internet Access I cannot access the Internet. 1 Check the hardware connections and make sure the LEDs are behaving as expected. See the Quick Start Guide and Section 1.5.1 on page 17. 2 Check the SIM card. Maybe it has wrong settings (refer to Section 6.4 on page 67), the account has expired, it became loose (remove and reinsert it - refer to the Quick Start Guide) or it's missing (stolen). See Section 29.6 on page 193 for possible SIM card problems. 3 Make sure you entered your ISP account information correctly. These fields are case-sensitive, so make sure [Caps Lock] is not on. 4 If the problem continues, contact your ISP. I cannot access the Internet anymore. I had access to the Internet (with the Zyxel Device), but my Internet connection is not available anymore. 1 Check the hardware connections (refer to the Quick Start Guide). Turn the Zyxel Device off and on. If the problem continues, contact your ISP. LTE Series Users Guide 191 2 3 4 2 3 Chapter 29 Troubleshooting The Internet connection is slow or intermittent. 1 There might be a lot of traffic on the network. If the Zyxel Device is sending or receiving a lot of information, try closing some programs that use the Internet, especially peer-to-peer applications. 2 Check the signal strength. Look at the LEDs, and check the LED section for more information. If the signal strength is low, try moving the Zyxel Device closer to the ISPs base station if possible, and look around to see if there are any devices that might be interfering with the wireless network (for example, microwaves, other wireless networks, and so on). Turn the Zyxel Device off and on. 3 4 If the problem continues, contact the network administrator or vendor, or try the advanced suggestion

(refer to I cannot see or access the Login screen in the Web Configurator in this chapter). Note: Since your Zyxel Device is an outdoor-type, inclement weather like rain and hot weather may affect LTE signals. 29.5 UPnP When using UPnP and the Zyxel Device reboots, my computer cannot detect UPnP and refresh My Network Places > Local Network. 1 Make sure that UPnP is enabled in your computer. For Windows 7, see Section 7.6 on page 85. For Windows 10, see Section 7.7 on page 88. 2 Make sure that UPnP is enabled in the Network Settings > Home Networking > UPnP screen. See Section 7.4 on page 83 for details. 3 Disconnect the Ethernet cable from the Zyxel Devices Ethernet port or from your computer. 4 Re-connect the Ethernet cable. The Local Area Connection icon for UPnP disappears in the screen. Restart your computer. I cannot open special applications such as white board, file transfer and video when I use the MSN Messenger. LTE Series Users Guide 192 Chapter 29 Troubleshooting 1 Wait more than three minutes. 2 Restart the applications. 29.6 SIM Card The SIM card cannot be detected. 1 Disconnect the Zyxel Device from the power supply. 2 Remove the SIM card from its slot. 3 Clean the SIM card slot of any loose debris using compressed air. 4 Clean the gold connectors on the SIM card with a clean lint-free cloth. 5 Insert the SIM card into its slot and connect the Zyxel Device to the power supply to restart it. I get an Invalid SIM card alert. 1 Make sure you have an active plan with your ISP. 2 Make sure that the Zyxel Device is in the coverage area of a cellular network. 29.7 Cellular Signal How should I position the Zyxel Device to get a strong cellular signal?

1 Find the location of your nearest cellular base station(s), then install the Zyxel Device towards the direction of those sites. The nearest site or site with a direct line-of-sight is usually preferred. Note: It is best to test towards more than one cellular site, as the nearest site / line-of-sight is not always the best due to the terrain, interference, density of usage, etc. All of these factors influence the stability, availability and throughput of the link to the Zyxel Device. 2 Position the Zyxel Device towards a direction where coverage is expected (example the nearest town). 3 Conduct test measurements using the Web Configurators System Monitor > Cellular WAN Status screen to obtain a report of the cellular network signal strength and quality at various test positions. LTE Series Users Guide 193 Chapter 29 Troubleshooting Note: It is best to reboot the Zyxel Device before each test measurement is taken to ensure that it is not camping on the previous cellular site. This is because the Zyxel Device can lock onto the previous cellular site even when the new cellular site is at a much better signal level and quality. Although installing the Zyxel Device as high as possible is the usual rule of thumb, it is sometimes possible that the Zyxel Device is in a weak coverage spot at that specific height. Adjust the height to achieve the best service possible. Note: Cellular network signals and quality can fluctuate. A measurement taken now and a few moments later can differ substantially even if nothing apparent has changed this can be due to many aspects, such as fading, reflections, interference, capacity due to high network traffic, etc. It is possible that the network topology and usage changes over time, even from one minute to the next as network utilization increases. If poor performance is experienced at a later stage, re-test different installation locations again. It is possible that the current serving cellular site has become over utilized or is out-of-service. As the network design and topology changes, so will the experience change, either for the better or for the worse. LTE Series Users Guide 194 PART III Appendices Appendices contain general information. Some information may not apply to your Zyxel Device. 195 A P P E N D I X A Customer Support In the event of problems that cannot be solved by using this manual, you should contact your vendor. If you cannot contact your vendor, then contact a Zyxel office for the region in which you bought the device. See https://www.zyxel.com/homepage.shtml and also https://www.zyxel.com/about_zyxel/zyxel_worldwide.shtml for the latest information. Please have the following information ready when you contact an office. Required Information Product model and serial number. Warranty Information. Date that you received your device. Brief description of the problem and the steps you took to solve it. Corporate Headquarters (Worldwide) Taiwan Zyxel Communications Corporation https://www.zyxel.com Asia China Zyxel Communications (Shanghai) Corp. Zyxel Communications (Beijing) Corp. Zyxel Communications (Tianjin) Corp. https://www.zyxel.com/cn/zh/

India Zyxel Technology India Pvt Ltd https://www.zyxel.com/in/en/

Kazakhstan Zyxel Kazakhstan https://www.zyxel.kz LTE Series Users Guide 196 Appendix A Customer Support Korea Zyxel Korea Corp. http://www.zyxel.kr Malaysia Zyxel Malaysia Sdn Bhd. http://www.zyxel.com.my Pakistan Zyxel Pakistan (Pvt.) Ltd. http://www.zyxel.com.pk Philippines Zyxel Philippines http://www.zyxel.com.ph Singapore Zyxel Singapore Pte Ltd. http://www.zyxel.com.sg Taiwan Zyxel Communications Corporation https://www.zyxel.com/tw/zh/

Thailand Zyxel Thailand Co., Ltd https://www.zyxel.com/th/th/

Vietnam Belarus Zyxel BY Belgium https://www.zyxel.by Zyxel Communications B.V. https://www.zyxel.com/be/nl/

Zyxel Communications Corporation-Vietnam Office https://www.zyxel.com/vn/vi Europe LTE Series Users Guide 197 Appendix A Customer Support https://www.zyxel.com/be/fr/

Bulgaria Zyxel https://www.zyxel.com/bg/bg/

Czech Republic Zyxel Communications Czech s.r.o https://www.zyxel.com/cz/cs/

Denmark Zyxel Communications A/S https://www.zyxel.com/dk/da/

Estonia Zyxel Estonia https://www.zyxel.com/ee/et/

Finland Zyxel Communications https://www.zyxel.com/fi/fi/

France Zyxel France https://www.zyxel.fr Germany Zyxel Deutschland GmbH https://www.zyxel.com/de/de/

Hungary Zyxel Hungary & SEE https://www.zyxel.com/hu/hu/

Italy Zyxel Communications Italy https://www.zyxel.com/it/it/

Latvia Zyxel Latvia https://www.zyxel.com/lv/lv/

LTE Series Users Guide 198 Appendix A Customer Support Lithuania Zyxel Lithuania https://www.zyxel.com/lt/lt/

Netherlands Zyxel Benelux https://www.zyxel.com/nl/nl/

Norway Zyxel Communications https://www.zyxel.com/no/no/

Poland Zyxel Communications Poland https://www.zyxel.com/pl/pl/

Romania Zyxel Romania https://www.zyxel.com/ro/ro Russia Zyxel Russia Slovakia https://www.zyxel.com/ru/ru/

https://www.zyxel.com/sk/sk/

Spain Zyxel Communications ES Ltd https://www.zyxel.com/es/es/

Sweden Zyxel Communications https://www.zyxel.com/se/sv/

Switzerland Studerus AG https://www.zyxel.ch/de https://www.zyxel.ch/fr Zyxel Communications Czech s.r.o. organizacna zlozka LTE Series Users Guide 199 Appendix A Customer Support South America Turkey Zyxel Turkey A.S. https://www.zyxel.com/tr/tr/

UK Zyxel Communications UK Ltd. https://www.zyxel.com/uk/en/

Ukraine Zyxel Ukraine http://www.ua.zyxel.com Argentina Zyxel Communications Corporation https://www.zyxel.com/co/es/

Brazil Zyxel Communications Brasil Ltda. https://www.zyxel.com/br/pt/

Colombia Zyxel Communications Corporation https://www.zyxel.com/co/es/

Ecuador Zyxel Communications Corporation https://www.zyxel.com/co/es/

South America Zyxel Communications Corporation https://www.zyxel.com/co/es/

Middle East Israel Zyxel Communications Corporation http://il.zyxel.com/

LTE Series Users Guide 200 Appendix A Customer Support Middle East Zyxel Communications Corporation https://www.zyxel.com/me/en/

Zyxel Communications, Inc. - North America Headquarters https://www.zyxel.com/us/en/

North America USA Oceania Africa Australia Zyxel Communications Corporation https://www.zyxel.com/au/en/

South Africa Nology (Pty) Ltd. https://www.zyxel.com/za/en/

LTE Series Users Guide 201 A P P E N D I X B IPv6 Overview IPv6 Addressing IPv6 (Internet Protocol version 6), is designed to enhance IP address size and features. The increase in IPv6 address size to 128 bits (from the 32-bit IPv4 address) allows up to 3.4 x 1038 IP addresses. The 128-bit IPv6 address is written as eight 16-bit hexadecimal blocks separated by colons (:). This is an example IPv6 address 2001:0db8:1a2b:0015:0000:0000:1a2f:0000. IPv6 addresses can be abbreviated in two ways:

Leading zeros in a block can be omitted. So 2001:0db8:1a2b:0015:0000:0000:1a2f:0000 can be written as 2001:db8:1a2b:15:0:0:1a2f:0. Any number of consecutive blocks of zeros can be replaced by a double colon. A double colon can only appear once in an IPv6 address. So 2001:0db8:0000:0000:1a2f:0000:0000:0015 can be written as 2001:0db8::1a2f:0000:0000:0015, 2001:0db8:0000:0000:1a2f::0015, 2001:db8::1a2f:0:0:15 or 2001:db8:0:0:1a2f::15. Prefix and Prefix Length Similar to an IPv4 subnet mask, IPv6 uses an address prefix to represent the network address. An IPv6 prefix length specifies how many most significant bits (start from the left) in the address compose the network address. The prefix length is written as /x where x is a number. For example, 2001:db8:1a2b:15::1a2f:0/32 means that the first 32 bits (2001:db8) is the subnet prefix. Link-local Address A link-local address uniquely identifies a device on the local network (the LAN). It is similar to a private IP address in IPv4. You can have the same link-local address on multiple interfaces on a device. A link-

local unicast address has a predefined prefix of fe80::/10. The link-local unicast address format is as follows. Table 82 Link-local Unicast Address Format 1111 1110 10 0 Interface ID 10 bits 54 bits 64 bits Global Address A global address uniquely identifies a device on the Internet. It is similar to a public IP address in IPv4. A global unicast address starts with a 2 or 3. LTE Series Users Guide 202 Appendix B IPv6 Unspecified Address Loopback Address Multicast Address An unspecified address (0:0:0:0:0:0:0:0 or ::) is used as the source address when a device does not have its own address. It is similar to 0.0.0.0 in IPv4. A loopback address (0:0:0:0:0:0:0:1 or ::1) allows a host to send packets to itself. It is similar to 127.0.0.1 in IPv4. In IPv6, multicast addresses provide the same functionality as IPv4 broadcast addresses. Broadcasting is not supported in IPv6. A multicast address allows a host to send packets to all hosts in a multicast group. Multicast scope allows you to determine the size of the multicast group. A multicast address has a predefined prefix of ff00::/8. The following table describes some of the predefined multicast addresses. Table 83 Predefined Multicast Address MULTICAST ADDRESS DESCRIPTION FF01:0:0:0:0:0:0:1 All hosts on a local node. FF01:0:0:0:0:0:0:2 FF02:0:0:0:0:0:0:1 FF02:0:0:0:0:0:0:2 All routers on a local node. All hosts on a local connected link. All routers on a local connected link. FF05:0:0:0:0:0:0:2 All routers on a local site. FF05:0:0:0:0:0:1:3 All DHCP severs on a local site. The following table describes the multicast addresses which are reserved and cannot be assigned to a multicast group. Table 84 Reserved Multicast Address MULTICAST ADDRESS FF00:0:0:0:0:0:0:0 FF01:0:0:0:0:0:0:0 FF02:0:0:0:0:0:0:0 FF03:0:0:0:0:0:0:0 FF04:0:0:0:0:0:0:0 FF05:0:0:0:0:0:0:0 FF06:0:0:0:0:0:0:0 FF07:0:0:0:0:0:0:0 FF08:0:0:0:0:0:0:0 FF09:0:0:0:0:0:0:0 FF0A:0:0:0:0:0:0:0 FF0B:0:0:0:0:0:0:0 FF0C:0:0:0:0:0:0:0 FF0D:0:0:0:0:0:0:0 LTE Series Users Guide 203 Appendix B IPv6 Table 84 Reserved Multicast Address (continued) MULTICAST ADDRESS FF0E:0:0:0:0:0:0:0 FF0F:0:0:0:0:0:0:0 Subnet Masking Both an IPv6 address and IPv6 subnet mask compose of 128-bit binary digits, which are divided into eight 16-bit blocks and written in hexadecimal notation. Hexadecimal uses four bits for each character

(1 ~ 10, A ~ F). Each blocks 16 bits are then represented by four hexadecimal characters. For example, FFFF:FFFF:FFFF:FFFF:FC00:0000:0000:0000. In IPv6, an interface ID is a 64-bit identifier. It identifies a physical interface (for example, an Ethernet port) or a virtual interface (for example, the management IP address for a VLAN). One interface should have a unique interface ID. Interface ID EUI-64 The EUI-64 (Extended Unique Identifier) defined by the IEEE (Institute of Electrical and Electronics Engineers) is an interface ID format designed to adapt with IPv6. It is derived from the 48-bit (6-byte) Ethernet MAC address as shown next. EUI-64 inserts the hex digits fffe between the third and fourth bytes of the MAC address and complements the seventh bit of the first byte of the MAC address. See the following example. MAC 00

: 13

: 49

: 12

: 34

: 56 EUI-64 02

: 13

: 49

: FF

: FE

: 12

: 34

: 56 Identity Association An Identity Association (IA) is a collection of addresses assigned to a DHCP client, through which the server and client can manage a set of related IP addresses. Each IA must be associated with exactly one interface. The DHCP client uses the IA assigned to an interface to obtain configuration from a DHCP server for that interface. Each IA consists of a unique IAID and associated IP information. The IA type is the type of address in the IA. Each IA holds one type of address. IA_NA means an identity association for non-temporary addresses and IA_TA is an identity association for temporary addresses. An IA_NA option contains the T1 and T2 fields, but an IA_TA option does not. The DHCPv6 server uses T1 and T2 to control the time at which the client contacts with the server to extend the lifetimes on any addresses in the IA_NA before the lifetimes expire. After T1, the client sends the server (S1) (from which the addresses in the IA_NA were obtained) a Renew message. If the time T2 is reached and the server LTE Series Users Guide 204 does not respond, the client sends a Rebind message to any available server (S2). For an IA_TA, the client may send a Renew or Rebind message at the client's discretion. Appendix B IPv6 T1 T2 Renew to S1 Renew to S1 Renew to S1 Renew to S1 Renew to S1 Renew to S1 Rebind to S2 Rebind to S2 DHCP Relay Agent Prefix Delegation ICMPv6 A DHCP relay agent is on the same network as the DHCP clients and helps forward messages between the DHCP server and clients. When a client cannot use its link-local address and a well-known multicast address to locate a DHCP server on its network, it then needs a DHCP relay agent to send a message to a DHCP server that is not attached to the same network. The DHCP relay agent can add the remote identification (remote-ID) option and the interface-ID option to the Relay-Forward DHCPv6 messages. The remote-ID option carries a user-defined string, such as the system name. The interface-ID option provides slot number, port information and the VLAN ID to the DHCPv6 server. The remote-ID option (if any) is stripped from the Relay-Reply messages before the relay agent sends the packets to the clients. The DHCP server copies the interface-ID option from the Relay-

Forward message into the Relay-Reply message and sends it to the relay agent. The interface-ID should not change even after the relay agent restarts. Prefix delegation enables an IPv6 router to use the IPv6 prefix (network address) received from the ISP (or a connected uplink router) for its LAN. The Zyxel Device uses the received IPv6 prefix (for example, 2001:db2::/48) to generate its LAN IP address. Through sending Router Advertisements (RAs) regularly by multicast, the Zyxel Device passes the IPv6 prefix information to its LAN hosts. The hosts then can use the prefix to generate their IPv6 addresses. Internet Control Message Protocol for IPv6 (ICMPv6 or ICMP for IPv6) is defined in RFC 4443. ICMPv6 has a preceding Next Header value of 58, which is different from the value used to identify ICMP for IPv4. ICMPv6 is an integral part of IPv6. IPv6 nodes use ICMPv6 to report errors encountered in packet processing and perform other diagnostic functions, such as "ping". Neighbor Discovery Protocol (NDP) The Neighbor Discovery Protocol (NDP) is a protocol used to discover other IPv6 devices and track neighbors reachability in a network. An IPv6 device uses the following ICMPv6 messages types:

Neighbor solicitation: A request from a host to determine a neighbors link-layer address (MAC address) and detect if the neighbor is still reachable. A neighbor being reachable means it responds to a neighbor solicitation message (from the host) with a neighbor advertisement message. Neighbor advertisement: A response from a node to announce its link-layer address. LTE Series Users Guide 205 Appendix B IPv6 Router solicitation: A request from a host to locate a router that can act as the default router and forward packets. Router advertisement: A response to a router solicitation or a periodical multicast advertisement from a router to advertise its presence and other parameters. IPv6 Cache An IPv6 host is required to have a neighbor cache, destination cache, prefix list and default router list. The Zyxel Device maintains and updates its IPv6 caches constantly using the information from response messages. In IPv6, the Zyxel Device configures a link-local address automatically, and then sends a neighbor solicitation message to check if the address is unique. If there is an address to be resolved or verified, the Zyxel Device also sends out a neighbor solicitation message. When the Zyxel Device receives a neighbor advertisement in response, it stores the neighbors link-layer address in the neighbor cache. When the Zyxel Device uses a router solicitation message to query for a router and receives a router advertisement message, it adds the routers information to the neighbor cache, prefix list and destination cache. The Zyxel Device creates an entry in the default router list cache if the router can be used as a default router. When the Zyxel Device needs to send a packet, it first consults the destination cache to determine the next hop. If there is no matching entry in the destination cache, the Zyxel Device uses the prefix list to determine whether the destination address is on-link and can be reached directly without passing through a router. If the address is unlink, the address is considered as the next hop. Otherwise, the Zyxel Device determines the next-hop from the default router list or routing table. Once the next hop IP address is known, the Zyxel Device looks into the neighbor cache to get the link-layer address and sends the packet when the neighbor is reachable. If the Zyxel Device cannot find an entry in the neighbor cache or the state for the neighbor is not reachable, it starts the address resolution process. This helps reduce the number of IPv6 solicitation and advertisement messages. Multicast Listener Discovery The Multicast Listener Discovery (MLD) protocol (defined in RFC 2710) is derived from IPv4's Internet Group Management Protocol version 2 (IGMPv2). MLD uses ICMPv6 message types, rather than IGMP message types. MLDv1 is equivalent to IGMPv2 and MLDv2 is equivalent to IGMPv3. MLD allows an IPv6 switch or router to discover the presence of MLD listeners who wish to receive multicast packets and the IP addresses of multicast groups the hosts want to join on its network. MLD snooping and MLD proxy are analogous to IGMP snooping and IGMP proxy in IPv4. MLD filtering controls which multicast groups a port can join. MLD Messages A multicast router or switch periodically sends general queries to MLD hosts to update the multicast forwarding table. When an MLD host wants to join a multicast group, it sends an MLD Report message for that address. An MLD Done message is equivalent to an IGMP Leave message. When an MLD host wants to leave a multicast group, it can send a Done message to the router or switch. The router or switch then sends a group-specific query to the port on which the Done message is received to determine if other devices connected to this port should remain in the group. LTE Series Users Guide 206 1 2 5 6 Appendix B IPv6 Example - Enabling IPv6 on Windows 7 Windows 7 supports IPv6 by default. DHCPv6 is also enabled when you enable IPv6 on a Windows 7 computer. To enable IPv6 in Windows 7:

Select Control Panel > Network and Sharing Center > Local Area Connection. Select the Internet Protocol Version 6 (TCP/IPv6) checkbox to enable it. 3 Click OK to save the change. 4 Click Close to exit the Local Area Connection Status screen. Select Start > All Programs > Accessories > Command Prompt. Use the ipconfig command to check your dynamic IPv6 address. This example shows a global address

(2001:b021:2d::1000) obtained from a DHCP server. LTE Series Users Guide 207 Appendix B IPv6 C:\>ipconfig Windows IP Configuration Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :

IPv6 Address. : 2001:b021:2d::1000 Link-local IPv6 Address . : fe80::25d8:dcab:c80a:5189%11 IPv4 Address. : 172.16.100.61 Subnet Mask . : 255.255.255.0 Default Gateway . : fe80::213:49ff:feaa:7125%11 172.16.100.254 LTE Series Users Guide 208 A P P E N D I X C Legal Information Copyright Disclaimer Copyright 2020 by Zyxel Communications Corporation. The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of Zyxel Communications Corporation. Published by Zyxel Communications Corporation. All rights reserved. Zyxel does not assume any liability arising out of the application or use of any products, or software described herein. Neither does it convey any license under its patent rights nor the patent rights of others. Zyxel further reserves the right to make changes in any products described herein without notice. This publication is subject to change without notice. Regulatory Notice and Statement United States of America (LTE7461-M602, LTE7480-S905, LTE5388-S905, and LTE7485-S905) The following information applies if you use the product within USA area. FCC EMC Statement This device complies with part 15 of the FCC Rules. Operation is subject to the following two conditions:

(1) This device may not cause harmful interference, and

(2) This device must accept any interference received, including interference that may cause undesired operation. Changes or modifications not expressly approved by the party responsible for compliance could void the users authority to operate the equipment. This product has been tested and complies with the specifications for a Class B digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used according to the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this device does cause harmful interference to radio or television reception, which is found by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures:

Reorient or relocate the receiving antenna. Increase the separation between the equipment or devices. Connect the equipment to an outlet other than the receivers. Consult a dealer or an experienced radio/TV technician for assistance. The following information applies if you use the product with RF function within USA area. FCC Radiation exposure statement This equipment complies with FCC RF radiation exposure limits set forth for an uncontrolled environment.

(LTE7461-M602) This transmitter must be at least 30 cm from the user and must not be co-located or operating in conjunction with any other antenna or transmitter.

(LTE7480-S905 and LTE5388-S905)

(LTE7485-S905) This transmitter must be at least 20 cm from the user and must not be co-located or operating in conjunction with any other antenna or transmitter. This transmitter must be at least 23 cm from the user and must not be co-located or operating in conjunction with any other antenna or transmitter. CANADA (LTE7461-M602) The following information applies if you use the product within Canada area. Innovation, Science and Economic Development Canada ICES Statement CAN ICES-3 (B)/NMB-3(B) LTE Series Users Guide 209 Appendix C Legal Information Innovation, Science and Economic Development Canada RSS-GEN & RSS-247 Statement This device contains licence-exempt transmitter(s)/receiver(s) that comply with Innovation, Science and Economic Development Canada's licence-exempt RSS(s). Operation is subject to the following two conditions: (1) this device may not cause interference, and (2) this device must accept any interference, including interference that may cause undesired operation of the device. This radio transmitter (2468C-LTE7461M602)) has been approved by Innovation, Science and Economic Development Canada to operate with the antenna types listed below with the maximum permissible gain indicated. Antenna types not included in this list that have, a gain greater than the maximum gain indicated for any type listed, are strictly prohibited for use with this device. Chain No. Antenna Type Frequency Range WiFi Gain (dBi) LTE Gain (dBi) Connector Antenna Information WLAN-ANT0 PIFA 2.4 ~ 2.4835 GHz WLAN-ANT1 PIFA 2.4 ~ 2.4835 GHz WWAN Dipole 2500 ~ 2570 MHz 6 5 N.A. N.A. N.A. N.A. N.A. N.A. N.A. N.A. N.A. 3.5 9 3 8 9 6 3.6 iPEX iPEX iPEX iPEX iPEX iPEX iPEX iPEX iPEX 698 ~ 716 MHz 777 ~ 787 MHz 1850 ~ 1915 MHz 814 ~ 849 MHz 2305 ~ 2315 MHz 1710 ~ 1780 MHz If the product with 5G wireless function operating in 5150-5250 MHz and 5725-5850 MHz, the following attention must be paid, The device for operation in the band 5150-5250 MHz is only for indoor use to reduce the potential for harmful interference to co-channel mobile satellite systems. For devices with detachable antenna(s), the maximum antenna gain permitted for devices in the band 5725-5850 MHz shall be such that the equipment still complies with the e.i.r.p. limits as appropriate; and Where applicable, antenna type(s), antenna models(s), and the worst-case tilt angle(s) necessary to remain compliant with the e.i.r.p. elevation mask requirement set forth in Section 6.2.2.3 of RSS 247 shall be clearly indicated. If the product with 5G wireless function operating in 5250-5350 MHz and 5470-5725 MHz, the following attention must be paid. For devices with detachable antenna(s), the maximum antenna gain permitted for devices in the bands 5250-5350 MHz and 5470-5725 MHz shall be such that the equipment still complies with the e.i.r.p. limit. L'metteur/rcepteur exempt de licence contenu dans le prsent appareil est conforme aux CNR d'Innovation, Sciences et Dveloppement conomique Canada applicables aux appareils radio exempts de licence. L'exploitation est autorise aux deux conditions suivantes : (1) l'appareil ne doit pas produire de brouillage; (2) L'appareil doit accepter tout brouillage radiolectrique subi, mme si le brouillage est susceptible d'en compromettre le fonctionnement. Le prsent metteur radio (2468C-LTE7461M602) a t approuv par Innovation, Sciences et Dveloppement conomique Canada pour fonctionner avec les types d'antenne numrs ci dessous et ayant un gain admissible maximal. Les types d'antenne non inclus dans cette liste, et dont le gain est suprieur au gain maximal indiqu pour tout type figurant sur la liste, sont strictement interdits pour l'exploitation de l'metteur. Chane NB. Antenne Type Gamme de frquences WiFi Gain (dBi) LTE Gain (dBi) Connecteur informations antenne WLAN-ANT0 PIFA 2.4 ~ 2.4835 GHz WLAN-ANT1 PIFA 2.4 ~ 2.4835 GHz WWAN Dipole 2500 ~ 2570 MHz 6 5 N.A. N.A. N.A. N.A. N.A. N.A. N.A. N.A. N.A. 3.5 9 3 8 9 6 3.6 iPEX iPEX iPEX iPEX iPEX iPEX iPEX iPEX iPEX 698 ~ 716 MHz 777 ~ 787 MHz 1850 ~ 1915 MHz 814 ~ 849 MHz 2305 ~ 2315 MHz 1710 ~ 1780 MHz Lorsque la fonction sans fil 5G fonctionnant en 5150-5250 MHz and 5725-5850 MHz est active pour ce produit , il est ncessaire de porter une attention particulire aux choses suivantes Les dispositifs fonctionnant dans la bande de 5 150 5 250 MHz sont rservs uniquement pour une utilisation l'intrieur afin de rduire les risques de brouillage prjudiciable aux systmes de satellites mobiles utilisant les mmes canaux;

Pour les dispositifs munis d'antennes amovibles, le gain maximal d'antenne permis (pour les dispositifs utilisant la bande de 5 725 5 850 MHz) doit tre conforme la limite de la p.i.r.e. spcifie, selon le cas;

Lorsqu'il y a lieu, les types d'antennes (s'il y en a plusieurs), les numros de modle de l'antenne et les pires angles d'inclinaison ncessaires pour rester conforme l'exigence de la p.i.r.e. applicable au masque d'lvation, nonce la section 6.2.2.3 du CNR-247, doivent tre clairement indiqus. Lorsque la fonction sans fil 5G fonctionnant en 5250-5350 MHz et 5470-5725 MHz est active pour ce produit , il est ncessaire de porter une attention particulire aux choses suivantes. LTE Series Users Guide 210 Appendix C Legal Information Safety Warnings (All LTE Models) Pour les dispositifs munis dantennes amovibles, le gain maximal d'antenne permis pour les dispositifs utilisant les bandes de 5 250 5 350 MHz et de 5 470 5 725 MHz doit tre conforme la limite de la p.i.r.e. Industry Canada radiation exposure statement This equipment complies with ISED radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with a minimum distance of 30 cm between the radiator and your body. Dclaration dexposition aux radiations:

Cet quipement est conforme aux limites dexposition aux rayonnements ISED tablies pour un environnement non contrl. Cet quipement doit tre install et utilis avec un minimum de 30 cm de distance entre la source de rayonnement et votre corps. Do not use this product near water, for example, in a wet basement or near a swimming pool. Do not expose your Zyxel Device to dampness, dust or corrosive liquids. Do not store things on the device. Do not obstruct the Zyxel Device ventilation slots as insufficient airflow may harm your Zyxel Device. For example, do not place the Zyxel Device in an enclosed space such as a box or on a very soft surface such as a bed or sofa. Do not install, use, or service this Zyxel Device during a thunderstorm. There is a remote risk of electric shock from lightning. Connect ONLY suitable accessories to the Zyxel Device. Do not open the Zyxel Device or unit. Opening or removing covers can expose you to dangerous high voltage points or other risks. Only qualified service personnel should service or disassemble this Zyxel Device. Please contact your vendor for further information. Make sure to connect the cables to the correct ports. Place connecting cables carefully so that no one will step on them or stumble over them. Always disconnect all cables from this Zyxel Device before servicing or disassembling. Do not remove the plug and connect it to a power outlet by itself; always attach the plug to the power adapter first before connecting it to Do not allow anything to rest on the power adapter or cord and do NOT place the product where anyone can walk on the power adapter a power outlet. or cord. Please use the provided or designated connection cables/power cables/adapters. Connect it to the right supply voltage (for example, 110V AC in North America or 230V AC in Europe). If the power adapter or cord is damaged, it might cause electrocution. Remove it from the Zyxel Device and the power source, repairing the power adapter or cord is prohibited. Contact your local vendor to order a new one. The following warning statements apply, where the disconnect device is not incorporated in the Zyxel Device or where the plug on the power supply cord is intended to serve as the disconnect device,

- For permanently connected Zyxel Device, a readily accessible disconnect device shall be incorporated external to the Zyxel Device;

- For pluggable devices, the socket-outlet shall be installed near the Zyxel Device and shall be easily accessible. About the Symbols Various symbols are used in this product to ensure correct usage, to prevent danger to the user and others, and to prevent property damage. The meaning of these symbols are described below. It is important that you read these descriptions thoroughly and fully understand the contents. Explanation of the Symbols SYMBOL EXPLANATION Alternating current (AC):

AC is an electric current in which the flow of electric charge periodically reverses direction. DC if the unidirectional flow or movement of electric charge carriers. A wiring terminal intended for connection of a Protective Earthing Conductor. Direct current (DC):

Earth; ground:

Class II equipment:

The method of protection against electric shock in the case of class II equipment is either double insulation or reinforced insulation. Viewing Certifications Zyxel Limited Warranty Go to http://www.zyxel.com to view this products documentation and certifications. Zyxel warrants to the original end user (purchaser) that this product is free from any defects in material or workmanship for a specific period (the Warranty Period) from the date of purchase. The Warranty Period varies by region. Check with your vendor and/or the authorized Zyxel local distributor for details about the Warranty Period of this product. During the warranty period, and upon proof of purchase, should the product have indications of failure due to faulty workmanship and/or materials, Zyxel will, at its discretion, repair or replace the defective products or components without charge for either parts or labor, and to whatever extent it shall deem necessary to restore the product or components to proper operating condition. Any replacement will consist of a new or re-manufactured functionally equivalent product of equal or higher value, and will be solely at the discretion of Zyxel. This warranty shall not apply if the product has been modified, misused, tampered with, damaged by an act of God, or subjected to abnormal working conditions. LTE Series Users Guide 211 Appendix C Legal Information Note Repair or replacement, as provided under this warranty, is the exclusive remedy of the purchaser. This warranty is in lieu of all other warranties, express or implied, including any implied warranty of merchantability or fitness for a particular use or purpose. Zyxel shall in no event be held liable for indirect or consequential damages of any kind to the purchaser. To obtain the services of this warranty, contact your vendor. You may also refer to the warranty policy for the region in which you bought the Zyxel Device at http://www.zyxel.com/web/support_warranty_info.php. Registration Open Source Licenses Register your product online at www.zyxel.com to receive e-mail notices of firmware upgrades and related information. This product may contain in part some free software distributed under GPL license terms and/or GPL like licenses. Open source licenses are provided with the firmware package. You can download the latest firmware at www.zyxel.com. If you cannot find it there, contact your vendor or Zyxel Technical Support at support@zyxel.com.tw. To obtain the source code covered under those Licenses, please contact your vendor or Zyxel Technical Support at support@zyxel.com. LTE Series Users Guide 212 Index Index A access troubleshooting 189 Access Control (Rules) screen 130 activation firewalls 127 Add New ACL Rule screen 131 Address Resolution Protocol 154 Any_WAN Remote Management 169 APN information obtain 66 APN Settings 68 applications Internet access 14 wireless WAN 14 ARP Table 154, 156 ARP Table screen 155 Authentication Type APN 68 Application Layer Gateway (ALG) 114 B backup configuration 185 backup configuration 185 Backup/Restore screen 184 Band Configuration Screen 69 Broadband 64 C CA 145 Cellular Band screen 69 Cellular SIM screen 69 Cellular WAN 169 Cellular WAN Screen 66 Cellular WAN screen 66, 67 certificate details 147 factory default 140 file format 146 file path 144 import 140, 143 public and private keys 146 verification 146 certificate request create 140 view 141 certificates 139 advantages 146 authentication 139 CA 145 creating 140 public key 139 replacing 140 storage space 140 thumbprint algorithms 147 thumbprints 147 trusted CAs 144 verifying fingerprints 146 Certification Authority, see CA certifications viewing 211 client list 81 configuration backup 185 firewalls 127 restoring 185 static route 117 contact information 196 copyright 209 creating certificates 140 customer support 196 customized service add 129 Create Certificate Request screen 140 LTE Series Users Guide 213 customized services 129, 130 Firewall General screen 128 Index D Data Roaming enable 67 Denials of Service, see DoS DHCP 77 DHCP Server Lease Time 79 DHCP Server State 79 diagnostic 187 diagnostic screens 187 digital IDs 139 disclaimer 209 DMZ screen 114 DNS 77 DNS Values 79 domain name system, see DNS DoS 126 thresholds 127 DoS protection blocking enable 134 dynamic DNS 116 wildcard 116 e-mail log setting 181 E F factory-default RESET button 19 firewall enhancing security 135 security considerations 135 traffic rule direction 133 Firewall DoS screen 133 Dynamic Host Configuration Protocol, see DHCP DYNDNS wildcard 116 firewall rules direction of travel 134 firewalls 126, 127 actions 133 configuration 127 customized services 129, 130 DoS 126 thresholds 127 ICMP 126 rules 134 security 135 firmware 182 version 55 firmware version check 183 FTP 107 unusable 191 Firmware Upgrade screen 182 firmware upload 182 hardware connections troubleshooting 189 H I IANA 84 ICMP 126 Import Certificate screen 144 importing trusted CAs 144 Internet no access 191 wizard setup 31 Internet access 14 wizard setup 31 See IANA Internet Blocking 53 Internet connection slow or erratic 192 Internet Assigned Numbers Authority Internet Control Message Protocol, see ICMP LTE Series Users Guide 214 Internet Protocol version 6, see IPv6 IP address WAN 65 IP address access control 171 IP Passthrough mode 74 IP Passthrough screen 25, 73, 74 IPv4 firewall 128 IPv6 202 addressing 202 EUI-64 204 global address 202 interface ID 204 link-local address 202 Neighbor Discovery Protocol 202 ping 202 prefix 202 prefix length 202 unspecified address 203 IPv6 firewall 128 L LAN 76 client list 81 MAC address 82 status 56, 62 LAN IP address 79 LAN IPv6 Mode Setup 79 LAN Setup screen 77 LAN subnet mask 79 Local Area Network, see LAN Local Certificates screen 139 Log Setting screen 179 login 21 passwords 21 troubleshooting 189 Login screen no access 190 logs 148, 151, 159, 179 M MAC Address Index LAN 82 MAC address 82 Mac filter 137 managing the device good habits 15 using FTP. See FTP. MGMT Services screen 168, 169 MSN Messenger problem 192 Multi_WAN Remote Management 169 N NAT default server 114 DMZ host 114 multiple server example 107 NAT ALG screen 114 Network Address Translation, see NAT network disconnect temporary 183 Network Map 53 network map 25 network type select 70 Nslookup test 188 P password admin 190 good habit 15 lost 190 user 190 passwords 21 PIN Protection 69 Ping unusable 191 Ping test 188 Ping/TraceRoute/Nslookup screen 187 PLMN Configuration Screen 70 PoE injector 14, 189 LTE Series Users Guide 215 port forwarding rule add/edit 108 Port Forwarding screen 108 Port Triggering add new rule 112 Port Triggering screen 110 power problem troubleshooting 189 troubleshooting 189 Protocol (Customized Services) screen 129 restore default settings after firmware upgrade 183 restoring configuration 185 Routing Information Protocol. See RIP Routing Table screen 157 Protocol Entry add 129 R Reboot screen 185 RESET Button 19 restart system 185 RFC 1058. See RIP. RFC 1389. See RIP. RFC 1631 106 RFC 3164 148 RIP 105 router features 14 S security network 135 Security Log 149 setup firewalls 127 static route 117 SIM card status 57, 160 service access control 169, 171 Index SIM configuration 68 SSH unusable 191 Static DHCP 81 Configuration 82 Static DHCP screen 81 static route 98, 105 configuration 117 status 53 firmware version 55 LAN 56, 62 WAN 55 wireless LAN 56 syslog protocol 148 severity levels 148 syslog logging enable 180 syslog server system name or IP address 181 firmware 182 version 55 passwords 21 status 53 LAN 56, 62 WAN 55 wireless LAN 56 time 173 T Telnet unusable 191 The 65 thresholds DoS 127 time 173 Trace Route test 188 troubleshooting 189 Trust Domain add 171 Trust Domain screen 170 Trusted CA certificate view 144 LTE Series Users Guide 216 Index Trusted CA screen 143 Turning on UPnP Windows 7 example 85 U Universal Plug and Play, see UPnP upgrading firmware 182 UPnP 83 forum 77 security issues 77 State 83 undetectable 192 usage confirmation 77 UPnP screen 83 UPnP-enabled Network Device auto-discover 86, 90 status 55 Wide Area Network, see WAN 64 W WAN warranty 211 note 212 Web Configurator easy access 93 web configurator login 21 passwords 21 wireless LAN status 56 Wireless tutorial 35 wizard setup Internet 31 LTE Series Users Guide 217

FCC LABEL & Label LOCATION The label will be permanently affixed at a conspicuous location on the device. FCC ID: I88LTE5388-S905

Date: July 6, 2020 FCC ID: I88LTE5388-S905 A U T H O R I Z A T I O N L E T T E R To whom it may concern:

We, the undersigned, hereby authorize Amanda Wu of Bureau Veritas Consumer Products Services (H.K.) Ltd., Taoyuan Branch (BV CPS Taoyuan), to act on its behalf in all matters relating to the Federal Communication Commission (FCC) application for equipment authorization in connection with the FCC ID listed above, including signing of all documents relating to these matters. Any and all acts carried out by Amanda Wu of BV CPS Taoyuan on Zyxel Communications Corporations behalf, within the scope of the powers granted herein, shall have the same effect as acts of its own. If you have any questions regarding the authorization, please dont hesitate to contact us. Sincerely,

Emma Bao / Manager Zyxel Communications Corporation Tel: 886 3 578-3942 # 88582 E-mail: Emma.bao@zyxel.com.tw

Date: July 6, 2020 We, Zyxel Communications Corporation declare that the device does not support channel 12

~ 13 in 2.4GHz band and any non-US channels in all the operational mode(s) for the following product. FCC ID: I88LTE5388-S905 If you should have any question(s) regarding this declaration, please dont hesitate to contact us. Thank you!

Sincerely,

Emma Bao / Manager Zyxel Communications Corporation Tel: 886 3 578-3942 # 88582 E-mail: Emma.bao@zyxel.com.tw

Confidentiality Request Date: July 6, 2020 Federal Communications Commission Authorization and Evaluation Division FCC ID: I88LTE5388-S905 To Whom It May Concern, Long Term Confidentiality Pursuant to Sections 0.457 and 0.459 of the Commissions Rules, we hereby respectfully request confidential treatment of information accompanying this application as outlined below:

Schematics Block Diagram Operation Description Tune-up procedure template The above materials contain trade secrets and proprietary information not customarily released to the public. The public disclosure of these matters might be harmful to the Applicant and provide unjustified benefits to its competitors. We understand that pursuant to Rule 0.457, disclosure of this Application and all accompanying documentation will not be made before the date of the Grant for this application. Short Term Confidentiality Pursuant to Sections 0.457 and 0.459 of the Commissions Rules, we hereby respectfully request short-term confidential treatment of information accompanying this application as outlined below until 180 days after the Grant Date of Equipment Authorization in order to ensure sensitive business information remains confidential until the actual marketing of the device:

External Photos Internal Photos Test Setup Photos User Manual Sincerely,

Emma Bao / Manager Zyxel Communications Corporation Tel: 886 3 578-3942 # 88582 E-mail: Emma.bao@zyxel.com.tw