Intelbras WiFiber 1200R User manual

User's Manual
WiFiber 1200R

Version of this manual: 1.31
WiFiber 1200R
GPON/EPON Wireless AC 867 Mbps Optical Modem
Congratulations, you have just purchased a product with Intelbras quality and safety
The WiFiber 1200R has 1 PON uplink port serving at speeds: 2.5/1.25 Gbps Downstream/Upstream, as well as 2 Gigabit
Ethernet ports,1 FXS port and 2 wireless interfaces, one in the IEEE b/g/n standard and the other a/n/ac. The Intelbras
WiFiber 1200R is designed for advanced implementations and provides a low cost and high performance alternative for
GPON/EPON solution with 5.0Ghz wifi. Its installation and management can be done through the web interface, quickly and
easily.
ATTENTION: this product comes with a factory default password. For your safety, it is ESSENTIAL that you
change it as soon as you install the product.
This equipment does not have the right to be protected against harmful interference and cannot cause
interference to properly authorized systems.
This product is homologated by Anatel, the homologation number is on the product label, for inquiries use
the link sistemas.anatel.gov.br/sch.

INDEX
EXPORT TO PDF
CAUTION AND SECURITY
Version
PABX
Smart Terminals
WARRANTY TERMS
TALK WITH US
 EXPORT TO PDF
To export this manual to PDF file format, click on the icon in the upper right corner of your screen, or use the print feature
that browsers such as Google Chrome® and Mozilla Firefox® have. To access it, press the CTRL + P keys or click here. If
you prefer, use the browser menu, accessing the Print tab, which is usually located in the upper right corner of the screen.
On the screen that will open, follow the steps below, according to the browser:
®
Data protection and security
Guidelines that apply to Intelbras employees
Guidelines that control data processing
User misuse and hacking
Laser safety warning
TECHNICAL SPECIFICATIONS
INSTALLATION
:
Google Chrome in the print screen, in the Destination field, click Change, select the Save as PDF option in the Local
Destinations section, and click Save. The operating system screen will open asking you to define the name and where to
save the file.
Mozilla Firefox® : in the print screen, click Print, in the General tab, select the Print to file option, in the File field, define
the name and location where the file should be saved, select PDF as the output format and click Print.
 CAUTION AND SECURITY

This section presents the standards adopted in the web manager and in this manual.
Data protection and security
» Abide by local laws concerning the protection and use of such data and the regulations that prevail in the country.
» The purpose of data protection legislation is to prevent infringements on individual privacy rights based on the misuse
of personal data.
» LGPD - General Law of Personal Data Protection: this product processes personal data, however, Intelbras does not
have access to the data originated from this product. This product has encrypted personal data storage.
User misuse and hacking
Guidelines that apply to Intelbras employees
» Intelbras employees are subject to secure commerce practices and data confidentiality under the terms of the company's
work procedures.
» It is imperative that the following rules are observed to ensure that the statutory provisions regarding services (whether
in-house services or remote administration and maintenance) are strictly followed. This preserves the client's interests and
provides additional personal protection.
Guidelines that control data processing
» Ensure that only authorized persons have access to customer data.
» Use password assignment facilities, without allowing any exceptions. Never give out passwords to unauthorized people.
» Ensure that no unauthorized person has the means to process (store, modify, transmit, disable, or delete) or use
customer data.
» Prevent unauthorized persons from gaining access to data media, for example, backup disks or protocol printouts.
» Ensure that data media that are no longer needed are completely destroyed and that documents are not stored or left in
generally accessible locations.
» Working together with the client builds trust.

»The access passwords to the product information allow the attainment and alteration of any facility, such as external
access to the company's system to obtain data and make calls, therefore, it is of utmost importance that the passwords are
made available only to those who are authorized to use them, under the risk of misuse.
»The product has security settings that can be enabled, and that will be addressed in this manual, however, it is essential
that the user ensures the security of the network on which the product is installed, since the manufacturer is not responsible
for the invasion of the product through hacker and cracker attacks.
Specifications Values
Dimensions (W x H x D) (73 x 25.2 x 90) mm
Operation Environment
Operation temperature 0°C ~ 45°C
Relative Humidity: 10% ~ 90% (Without condensation)
Storage Environment
Storage temperature: 0 ºC ~ 70 ºC
Relative humidity: 10% ~ 90% (Without condensation)
Power supply
(external)
Input: 100-240 V ~ 50/60 Hz
Output: 12 Vdc ~ 1 A
Maximum Consumption Power
12W
Ethernet/PON Chipset RTL9607C
Wireless Chipset RTL8812FR-CG & RTL8192FR-CG
Flash Memory 128 Mb
SDRAM Memory 128 Mb
Optical interface 1 SC/APC port
TX wavelength: 1310 nm
RX wavelength: 1490 nm
Laser safety warning
The Intelbras WiFiber 1200R has a laser emitting source that emits light energy in optical fiber cables. This energy is
within the infrared (invisible) region of the red (visible) electromagnetic spectrum.
Certain procedures performed during testing require the manipulation of optical fibers without the use of protective caps,
thus increasing the risk of exposure. Exposure to any visible or invisible laser may damage your eyes under certain
conditions.
Caution: Avoid direct exposure to the ends of optical connectors. Laser radiation may be present and could damage your
eyes. Never look directly into an active fiber optic or fiber optic connector of a device that is powered.
4. TECHNICAL SPECIFICATIONS

Specifications Values
Maximum receiver sensitivity - 8 dBm
Minimum receiver sensitivity -28 dBm
GPON
Compliant with ITU-T G.984
1.25 Gbps upstream (transmitter)
2.5 Gbps downstream (receiver)
Class B+ optical system
EPON
Compliant with IEEE.802.3ah.EPON
1.25 Gbps upstream (transmitter)
2.5 Gbps downstream (receiver)
Ethernet Interface
2 Gigabit Ethernet ports(10/100/1000BASE-T Ethernet)
2 RJ45 connectors
Compliant with IEEE 802.3 specifications
Auto MDI/MDIX
Autonegotiation
POTS interface (FXS) 1 Port with RJ11 connector
Configuration types
Bridge Mode
Router Mode
PPPoE Mode
Supported standards
Compatible with ITU-T G.984
Compatible with IEEE 802.3ah EPON
Compatible with IEEE 802.3 Ethernet
Compatible with IEEE 802.1q/p VLANs
Compatible with IEEE 802.3u Fast Ethernet
Compatible with IEEE 802.3ab 1000BASE-T
Supported GPON and
Ethernet/IP Protocols
GPON
» ITU-T G.984 (GPON)
» 32 T-CONTS per device
» 128 GEM Ports per device
»Flexible mapping between GEM Ports and T-CONTS with priority queue-based
scheduling
»Activation with automatic discovery of SN and password in compliance with
ITU-TG.984.3
»AES-128 decoding with key generation and switching
»FEC (Forward Error Correction)
»Multicast GEM Port Support

6SHFLILFDWLRQV 9DOXHV
Ethernet/IP
» Bridging and switching (802.1D / 802.1Q)
»Four traffic classes with 802.1p
» 802.3x Flow control
» VLAN tagging/untagging
Supported voice protocols
SIP (RFC 3261)
DTMF dialing
Voice codec: G.729, G.726, G.711 (u-law and a-law), G.722, G.723
T.38 Fax
Echo cancellation
Voice activity detection (VAD)
Comfort noise insertion (CNI)
Various classes of services:
»Call on hold;
»Call Forwarding;
»Call Transfer.
IPTV IGMP multicast
Management
OMCI (compliant with G.984.4)
Web UI
TR-069
CPE-MGR
Wireless Standard
IEEE 802.11a/b/g/n/ac
Radio mode
MU-MIMO
Antennas 4 fixed 5dBi antennas
Operation frequencies
2.4Ghz/5.0Ghz
Bandwidth
2.4Ghz: 20, 40MHz
5.0Ghz: 20, 40, 80Mhz
Transmission rate
2.4Ghz: Up to 300Mbps
5.0Ghz: Up to 867Mbps
Operation channels *K]:
1-13
Operation channels *K]:
36, 40, 44, 48, 149, 153, 157, 161
52, 56, 60, 64, 100, 104, 108, 112 (DFS)
Maximum power (E.I.R.P.)
2.4Ghz: 25dBm
5.0Ghz:24dBm
2.4Ghz receiver sensitivity
802.11b 11Mbps: -88dBm
802.11g 54Mbps: -75dBm
802.11n 20Mhz MCS7: -72dBm
802.11n 40Mhz MCS7: -70dBm

5.0Ghz receiver sensitivity
802.11a 54Mbps: -75dBm
802.11n 40Mhz MCS7: -70dBm
802.11ac 80Mhz MCS9: -60dBm
Maximum capacity of
simultaneous clients
64
Security WEP/WPA2/WPA2 MIXED
5. ACCESSORIES
»Power Supply.
6. MANAGEMENT
In this manual we will address the configuration performed via computer locally. However, if you wish, you can perform the
process using the remote management available after activating and configuring the CPE-MGR function available in the
Intelbras OLT.
6.1. Remote access (web)
The WiFiber 1200R can be remotely managed through the web interface (HTTP) after its inclusion in the CPE-MGR
function available in the Intelbras OLT. Remote access uses VLAN 7 as the default remote management VLAN, allowing an
IP address to be automatically assigned when connected to the Intelbras OLT.
6.2. Local access (web)
The WiFiber 1200R can be managed locally via the web interface (HTTP). This document will use the web interface for
example settings.To access the web interface, once connected to your optical modem network via cable or Wi-Fi, open your
web browser and type http://192.168.1.1 in the address field, you will be prompted for the user name and password to
authenticate to the system, fill it in:
Username
admin
Password
intelbras
Specifications Values

Login Screen
Note: For security reasons, Intelbras recommends that the default password be changed.
6.3. First access (web)
When the user first logs in with the default password on the WiFiber 1200R, he will be asked to change the default
password (for security reasons) and to read and accept the terms of use available in the product through the hyperlink in
blue.

Screen to change the default password and read and accept the terms of use
7. CONFIGURATION
After authenticating to the system the WiFiber 1200R configuration interface will be displayed.
7.1. Product information
The Status menu provides information about the optical modem's settings, including the LAN, WAN, PON, and VoIP
interfaces, as well as system-related information such as firmware version, CPU usage, and memory. You can navigate
between the submenus to check each type of information available.

System Information
7.2. LAN Interface
Through this menu you can make settings for the LAN interface.
7.3. LAN Settings
This page is used to configure the optical Modem's LAN interface.

LAN interface global settings
»IP address: enter the IP address used on the LAN interface.
»Subnet mask: enter the netmask used by the LAN IP address
»IPv6 Link-Local mode: select the LAN interface IPv6 configuration mode: Auto or Static
- Auto: In this mode the local link interface will be automatically configured.
- Static: in this mode the user is allowed to assign an IPv6 address on the LAN interface.
»IPv6 DNS mode: Responsible for changing the way the DNS server is acquired.
- HGWProxy: Client connected on the LAN receives as DNS address the IPv6 Local Link of the ONT LAN.
- WANConnection: The ONT passes the DNS received by the WAN on to the LAN.
- Static: You choose the DNS server manually.
»Prefix mode: Defines how the IPv6 prefix will be given, for most scenarios the /64 prefix is used.
- WANDelegated: ONT passes the prefix from WAN to LAN.
- Static: You choose the IPv6 network prefix.
»WAN interface: Select the desired IPv6 WAN interface.
» IGMP Snooping: if enabled, the optical modem will analyze IGMP messages received from devices connected to
the LAN port, allowing them to join the multicast group (normally used in IPTV).
»Block Ethernet/wireless: if enabled, devices connected to the LAN port will not communicate with devices
connected through the wireless interface.
» Lan 1 and Lan 2: here you can set whether or not the Wifiber lan ports are available for traffic.
-Enable: the lan port works normally.
-Disable: the port is deactivated and no more traffic flows through it.
7.4. Wireless Interface
Through the WLAN menu you can configure the Easy Mesh and the 2.4GHz and 5GHz wireless interfaces.
7.4.1. Interface Settings
This page is used for configuration of the 2.4GHz and 5GHz wireless interfaces.
7.4.2. Basic Settings
On this page you can configure some basic parameters for connecting wireless clients.

Basic Settings
»Disable WLAN: if disabled, wireless clients will not be able to connect to the optical modem.
»Band: select the wireless network communication standard.
»Mode: Only AP(Access Point) mode is available. In this mode wireless clients can connect to this equipment.
»Virtual SSID: in this option you can enable up to 4 virtual SSIDs.
» SSID: enter the wireless network name.
The characters that are accepted by the SSID field are:
•Capital letters: A to Z (26 characters).
•Lower case letters: a to z (26 characters).
•Numbers: 0 to 9 (10 characters).
•Symbols: (space) ! “ # $ % & ‘ ( ) * + , - . / : ; < = > ? @ [ \ ] ^ _` { | } ~ (33 characters).
Any other characters are not accepted.
»Bandwidth: Select the bandwidth. The 802.11 a/n/ac standard allows you to select three different bandwidths:
20MHz, 40MHz and 80MHz.

»Channel: select the desired channel or use the Auto option, which will try to find an unused or less busy channel.
»Power (%): select the radio transmission power.
»Connected clients: displays a list of wireless clients on the 5GHz interface that are currently associated.
7.4.3. Advanced settings
This page can be used by advanced users with wireless networking knowledge. We recommend that you do not change
this information as performance degradation caused by improper settings can occur.
Advanced Settings
»Fragmentation threshold: Enter the packet fragmentation threshold. Packets above this value will be
fragmented. Setting a value that is too low can result in poor network performance. The default value2346 is the
best option in most cases.
»RTS threshold: enter the threshold for activating flow control to help with the data collision problem. Packets above
this value will activate flow control.

»Beacon Interval: defines the time interval between a beacon frame transmission.
»DTIM Period: is the time period between when DTIMs are sent to network clients. Enter the time in second(s).
»Data Rate: select the maximum data transmission rate (in Mbps). The equipment will always try to transmit at
maximum speed, when possible. If necessary, the data rate will be reduced automatically (in-terference, packet loss).
Default value Auto.
»Preamble type: select the wait and sync time that precedes the transmission of each frame, the long one being 128
bits and the short one 56 bits.
» Broadcast SSID: if enabled, the SSID will be broadcast in the network.
»Client Isolation: se habilitado, impede que um cliente tenha conectividade com outro via interface Wireless,
mesmo que conectados ao mesmo SSID.
»Protection: ___________
»Aggregation: enabled by default. This is a part of the 802.11 n standard, allowing multiple frames to be sent by single
access to the medium, combining frames into a larger frame.
»Short GI: disabled by default. If enabled, enables the short guard interval.
» MU MIMO:
» TX beamforming: if enabled, allows you to focus a signal in a specific direction, which reflects in a higher quality of
signal to the receiver.
» Multicast to Unicast: if enabled, converts multicast packets to unicast in order to decrease packet loss, especially in
scenarios where streaming media exists.
» Band Steering: defines which band is the main band for devices to connect to.
»WMM support: allows traffic prioritization according to the offered service.
»802.11k support: if enabled, allows you to create an optimized channel list to help devices speed up the search for
nearby APs that are available as roaming destinations.
7.4.4. Security
On this page you can configure the security options. Enable at least one security method to prevent unauthorized access to
the wireless network.

Wireless network authentication and encryption method settings
WEP security method options
» WEP: it is based on the 802.11 standard and uses the RC4 encryption algorithm. This is an old encryption
algorithm and can be decrypted in less than 10 minutes. We recommend using WPA2 or WPA2 Mixed methods.
» 802.1x authentication: if enabled, enables RADIUS-based authentication using WEP64 or WEP128 keys.
Requires RADIUS server.
»RADIUS Information: enter the RADIUS server information.
»Authentication: select the authentication method:
•Open system: open system authentication with WEP64 or WEP128 key.
•Shared key: shared key authentication with WEP64 or WEP128 key.
• Auto: automatic authentication with WEP64 or WEP128 key.
»Key Length: select the size of the key.
• 64 bit: defines the number of characters of the key, 5 ASCII or 10 Hexa.
• 128 bit: defines the number of characters of the key, 10 ASCII or 26 Hexa.

»Encryption key: enter the desired security key.
WPA2 security method options
» WPA2: this method is safe and required for use on 802.11n.
»Authentication mode: select the authentication method:
• Enterprise (RADIUS): if enabled, allows RADIUS-based authentication.
·IP address of the RADIUS server: enter the IP address where the RADIUS server is located.
·Port of the RADIUS server: insert the port configured for RADIUS server operation
·Password for the RADIUS server: enter the password configured for the RADIUS server.
• Personal (Pre-Shared Key): if enabled, allows you to use a predefined key for encryption during data
transmission.
» IEEE 802.11w: _________
» SHA256: ______________
»WPA2 Encryption Package: ______________
• TKIP: ___________
• AES: ___________
»Update Time: time for key exchange.
»Key format: select the predefined key format:
• Passphrase: allows the use of keys with 8 to 63 ASCII characters.
• HEXA: allows the use of a 64-character hexadecimal key.
»Password: enter the desired security key.
WPA2 mixed security method options
»Mixed WPA2: this method mixes WPA and WPA2.
»Authentication mode: select the authentication method:
»WPA Encryption Package: _____________
• TKIP: ___________
• AES: ___________
» WPA2 Encryption Package: _____________
• TKIP: ___________
• AES: ___________
• Enterprise (RADIUS): if enabled, enables RADIUS-based authentication.

·IP address of the RADIUS server: enter the IP address where the RADIUS server is located.
·RADIUS server port: enter the port configured for RADIUS server operation.
·RADIUS server password: enter the password configured for the RADIUS server.
• Personal (Pre-Shared Key): if enabled, allows you to use a predefined key for encryption during data
transmission.
»Update time: time for key exchange.
»Key format: select the predefined key format:
•Passphrase: allows the use of keys with 8 to 63 ASCII characters.
•HEXA: allows the use of a 64-character hexadecimal key.
»Password: enter the desired security key.
WPA3 security method options
» WPA3: It is the most up-to-date and safe method, offering more security for data exchange within the network by
adding a number of protection features, such as a new type of encryption and resistance to "brute force" attacks
»Encryption Package: _______
• AES: __________________
»Update Time: time for key exchange.
»Password: enter the desired security key.
WPA2+WPA3 Mixed Security Method Options
» WPA2+WPA3 Mixed: it is a transition method, where older devices that do not support WPA3 encryption technology
are allowed to use WPA2.
7.4.5. Access Control
On this page you can configure a wireless network access control list, based on the MAC address of the wireless client.

Access control list configuration
»Mode: select the operation mode from the list:
•Disabled: Disables the access control function.
•Allowed list: allows only MAC addresses registered on the list to access the wireless network.
•Denied List: does not allow MAC addresses that are registered on the list to access the wireless network.
»MAC address: Enter the desired MAC address. Use the format (e.g.: 00E086710502).
»Current access control list: displays the list of configured MAC addresses.
7.4.6. WPS
Through this process, you can add clients to the wireless network without the need for any specific configuration, such as
SSID, security mode or password. WPS (Wi-Fi Protected Setup) is an easy way to connect to an optical wireless modem.
To add a wireless client to the optical modem, the client must support WPS.