Page 1 Dual-Band Wireless AC/N Gigabit Ethernet Gateway Version 1.00 Edition 1, 08/2015 Quick Start Guide User’s Guide Default Login Details LAN IP Address http://192.168.1.1 (Router Mode) http://192.168.1.2 www.zyxel.com (Access Point Mode) User Name supervisor, admin Password supervisor, 1234 Copyright © 2015 ZyXEL Communications Corporation...
Page 2 Related Documentation • Quick Start Guide The Quick Start Guide shows how to connect the EMG3425-Q10A and access the Web Configurator wizards. It contains information on setting up your network and configuring for Internet access.
Page 3: Table Of Contents
Contents Overview Contents Overview User’s Guide ............................11 Introduction .............................12 Introducing the Web Configurator ......................19 EMG3425-Q10A Modes ..........................23 Router Mode ............................24 Access Point Mode ..........................31 Tutorials ..............................38 Technical Reference ..........................50 Monitor ..............................51 WAN ................................57 Wireless LAN ............................68 LAN .................................88 DHCP Server ............................94 NAT .................................99...
Page 4: Table Of Contents
1.1 Overview ............................12 1.1.1 Dual-Band ..........................13 1.2 Applications ............................13 1.3 Ways to Manage the EMG3425-Q10A ....................13 1.4 Good Habits for Managing the EMG3425-Q10A ................14 1.5 Resetting the EMG3425-Q10A ......................14 1.5.1 How to Use the RESET Button ....................14 1.6 The WPS Button ..........................14 1.7 LEDs ..............................15...
Page 5 6.2 Set Up a Wireless Network Using WPS ....................38 6.2.1 Push Button Configuration (PBC) ....................38 6.2.2 PIN Configuration ........................39 6.3 Connect to EMG3425-Q10A Wireless Network without WPS ............40 6.3.1 Configure Your Notebook ......................42 6.4 Using Multiple SSIDs on the EMG3425-Q10A ..................44 6.4.1 Configuring Security Settings of Multiple SSIDs ..............45...
Page 6 10.7 IGMP Snooping Screen ........................92 Chapter 11 DHCP Server ............................94 11.1 Overview ............................94 11.1.1 What You Can Do ........................94 11.1.2 What You Need To Know .......................94 11.2 DHCP Server General Screen ......................94 11.3 DHCP Server Advanced Screen ....................95 EMG3425-Q10A User’s Guide...
Page 7 15.2.1 Add Interface Group ......................115 15.2.2 Add Interface Group Criteria ....................116 Chapter 16 Firewall .............................. 117 16.1 Overview ............................. 117 16.1.1 What You Can Do ........................ 117 16.1.2 What You Need To Know ..................... 117 16.2 General Screen ..........................119 EMG3425-Q10A User’s Guide...
Page 8 21.1 Overview ............................147 21.2 What You Can Do in this Chapter ....................147 21.3 What You Need to Know .......................147 21.3.1 Remote Management and NAT ...................148 21.3.2 System Timeout ........................148 21.4 WWW Screen ..........................148 21.5 Telnet Screen ..........................151 EMG3425-Q10A User’s Guide...
Page 9 25.1 Overview ............................176 25.2 What You Can Do .........................176 25.3 General Screen ..........................176 25.4 Account Screen ..........................177 25.4.1 Account Setup Screen ......................178 25.5 Time Setting Screen ........................178 25.6 Firmware Upgrade Screen ......................180 25.7 Configuration Backup/Restore Screen ..................181 EMG3425-Q10A User’s Guide...
Page 10 26.2 Power, Hardware Connections, and LEDs ..................187 26.3 EMG3425-Q10A Access and Login ....................188 26.4 Internet Access ..........................189 26.5 Resetting the EMG3425-Q10A to Its Factory Defaults ..............191 26.6 Wireless Connections ........................191 26.7 USB Device Problems ........................193 Appendix A Pop-up Windows, JavaScript and Java Permissions ...........194 Appendix B Setting Up Your Computer’s IP Address ..............203...
Page 11: User's Guide
User’s Guide...
Page 12: Introduction
There is one USB 2.0 port on the side panel of your EMG3425-Q10A, and the other one is on the rear panel of your EMG3425-Q10A. You can connect USB (version 2.0 or lower) memory sticks, USB hard drives, or USB devices for file sharing.
Page 13: Dual-Band
Chapter 1 Introduction 1.1.1 Dual-Band The EMG3425-Q10A is a dual-band AP and able to function both 2.4G and 5G networks at the same time. You could use the 2.4 GHz band for regular Internet surfing and downloading while using the 5 GHz band for time sensitive traffic like high-definition video, music, and gaming.
Page 14: Good Habits For Managing The Emg3425-Q10A
Make sure the power LED is on. Press the RESET button for one to four seconds to restart/reboot the EMG3425-Q10A. Press the RESET button for longer than five seconds to set the EMG3425-Q10A back to its factory- default configurations. 1.6 The WPS Button Your EMG3425-Q10A supports Wi-Fi Protected Setup (WPS), which is an easy way to set up a secure wireless network.
Page 15: Leds
1.7 LEDs Look at the LED lights on the front panel to determine the status of the EMG3425-Q10A. Use the LED button on the rear panel of the device to turn the LED lights on or off. If you have already pushed the LED button to the ON position but none of the LEDS are on, make sure the EMG3425- Q10A is receiving power and the power is turned on.
Page 16 The EMG3425-Q10A is sending or receiving IP traffic. The EMG3425-Q10A does not have an IP connection. WLAN 2.4/5G The EMG3425-Q10A is ready, but is not sending/receiving data through the 5G wireless LAN. Blinking The EMG3425-Q10A is sending/receiving data through the 5G wireless LAN.
Page 17: Wall Mounting
Make sure the screws are fastened well enough to hold the weight of the EMG3425-Q10A with the connection cables. Align the holes on the back of the EMG3425-Q10A with the screws on the wall. Hang the EMG3425- Q10A on the screws.
Page 18 Chapter 1 Introduction Figure 4 Wall Mounting Example EMG3425-Q10A User’s Guide...
Page 19: Introducing The Web Configurator
Internet Explorer. 2.2 Login Accounts There are two system accounts that you can use to log in to the EMG3425-Q10A: “admin” and “supervisor”. These two accounts have different privilege levels. The web configurator screens vary depending on which account you use to log in.
Page 20: Login Screen
Chapter 2 Introducing the Web Configurator The EMG3425-Q10A is in router mode by default. Type "http://192.168.1.1" as the website address. If the EMG3425-Q10A is in access point, the IP address is 192.168.1.2. See Chapter 3 on page 23 for more information about the modes of the EMG3425-Q10A.
Page 21: Password Screen
Administrator Inactivity Timer field expires (default five minutes; go to Chapter 25 on page 176 to change this). Simply log back into the EMG3425-Q10A if this happens. 2.3.2.1 Weather Edit You can change the temperature unit and select the location for which you want to know the weather.
Page 22 LABEL DESCRIPTION Change Unit Choose which temperature unit you want the EMG3425-Q10A to display. Change Location Select the location for which you want to know the weather. If the city you want is not listed, choose one that is closest to it.
Page 23: Emg3425-Q10A Modes
This refers to the operating mode of the EMG3425-Q10A, which can act as a: • Router: This is the default device mode of the EMG3425-Q10A. Use this mode to connect the local network to another network, like the Internet. Go to Section 4.2 on page 24...
Page 24: Router Mode
Router Mode 4.1 Overview The EMG3425-Q10A is set to router mode by default. Routers are used to connect the local network to another network (for example, the Internet). In the figure below, the EMG3425-Q10A connects the local network (LAN1 ~ LAN4) to the Internet.
Page 25 Click this button to refresh the status screen statistics. Click this icon to see the Status page. The information in this screen depends on the device mode you select. EMG3425-Q10A User’s Guide...
Page 26 LAN is set - Access Point Mode. MAC Address This shows the 2.4GHz wireless adapter MAC Address of your device. SSID This shows a descriptive name used to identify the EMG3425-Q10A in the 2.4GHz wireless LAN. Channel This shows the channel number which you select manually.
Page 27: Navigation Panel
This displays what percentage of the EMG3425-Q10A’s processing ability is currently used. When this percentage is close to 100%, the EMG3425-Q10A is running at full load, and the throughput is not going to improve anymore. If you want some applications to have more throughput, you should turn off other applications (for example, using bandwidth management.)
Page 28 WLAN 5G Use this screen to view the wireless stations that are currently associated Station Status to the EMG3425-Q10A’s 5GHz wireless LAN. IGMP Statistics Use this screen to view the EMG3425-Q10A’s IGMP multicast group and IGMP traffic statistics. CONFIGURATION Network Management This screen allows you to configure ISP parameters, WAN IP address assignment, DNS servers, the WAN MAC address, and VLAN settings.
Page 29 Use this screen to schedule the times the Wireless LAN is enabled. Use this screen to configure LAN IP address and subnet mask. IP Alias Use this screen to have the EMG3425-Q10A apply IP alias to create LAN subnets. IPv6 LAN Use this screen to configure the IPv6 address for the EMG3425-Q10A on the LAN.
Page 30 Wake On LAN Use this screen to enable Wake on LAN to remotely turn on a device on the local network. TR069 Use this screen to configure the EMG3425-Q10A to be managed by an ACS (Auto Configuration Server). UPnP UPnP Use this screen to enable UPnP on the EMG3425-Q10A.
Page 31: Access Point Mode
Access Point Mode 5.1 Overview Use your EMG3425-Q10A as an access point (AP) if you already have a router or gateway on your network. In this mode your EMG3425-Q10A bridges a wired network (LAN) and wireless LAN (WLAN) in the same subnet. See the figure below for an example.
Page 32: Setting Your Emg3425-Q10A To Ap Mode
Log into the Web Configurator if you haven’t already. See the Quick start Guide for instructions on how to do this. To use your EMG3425-Q10A as an access point, go to Maintenance > Sys OP Mode and select Access Point Mode.
Page 33: Configuring Your Wlan And Maintenance Settings
• See Chapter 25 on page 176 for information on configuring your Maintenance settings. 5.4 AP Mode Status Screen Click to open the Status screen. Figure 14 Status Screen: Access Point Mode EMG3425-Q10A User’s Guide...
Page 34 LAN is set - Access Point Mode. MAC Address This shows the 2.4GHz wireless adapter MAC Address of your device. SSID This shows a descriptive name used to identify the EMG3425-Q10A in the 2.4GHz wireless LAN. Channel This shows the channel number which you select manually.
Page 35: Navigation Panel
This displays what percentage of the EMG3425-Q10A’s processing ability is currently used. When this percentage is close to 100%, the EMG3425-Q10A is running at full load, and the throughput is not going to improve anymore. If you want some applications to have more throughput, you should turn off other applications (for example, using bandwidth management.)
Page 36 Static IP Address Click this if you want to specify the IP address of your EMG3425-Q10A. Or if your ISP or network administrator gave you a static IP address to access the network or the Internet.
Page 37 Chapter 5 Access Point Mode Table 10 Network > LAN > IP (continued) LABEL DESCRIPTION Apply Click Apply to save your changes to the EMG3425-Q10A. Cancel Click Cancel to reload the previous configuration for this screen. EMG3425-Q10A User’s Guide...
Page 38: Tutorials
39. This is the more secure method, since one device can authenticate the other. 6.2.1 Push Button Configuration (PBC) Make sure that your EMG3425-Q10A is turned on. Make sure the WIFI button (at the back panel of the EMG3425-Q10A) is pushed in, and that the device is placed within range of your notebook.
Page 39: Pin Configuration
Chapter 6 Tutorials Note: Your EMG3425-Q10A has a WPS button located on its panel, as well as a WPS button in its configuration utility. Both buttons have exactly the same function; you can use one or the other. Note: It doesn’t matter which button is pressed first. You must press the second button within two minutes of pressing the first one.
Page 40: Connect To Emg3425-Q10A Wireless Network Without Wps
Click Start buttons (or button next to the PIN field) on both the wireless client utility screen and the EMG3425-Q10A’s WPS Station screen within two minutes. The EMG3425-Q10A authenticates the wireless client and sends the proper configuration settings to the wireless client. This may take up to two minutes. Then the wireless client is able to communicate with the EMG3425-Q10A securely.
Page 41 Web Configurator through your LAN connection (see Section 2.3 on page 19). Make sure the WIFI switch (at the back panel of the EMG3425-Q10A) is set to ON. Open the Configuration > Network > Wireless LAN 2.4G > General screen in the AP’s Web Configurator.
Page 42: Configure Your Notebook
Windows built-in utility (Windows Zero Configuration (WZC)) to connect to the wireless netwok. The EMG3425-Q10A supports IEEE 802.11a, IEEE 802.11b, IEEE 802.11g, IEEE 802.11n and IEEE 802.11ac wireless clients. Make sure that your notebook or computer’s wireless adapter supports one of these standards.
Page 43 View Available Wireless Networks. The Wireless Network Connection screen displays. Click Refresh network list to view the available wireless APs within range. Select SSID_Example3 and click Connect. Type the security key in the following screen. Click Connect. EMG3425-Q10A User’s Guide...
Page 44: Using Multiple Ssids On The Emg3425-Q10A
You can configure more than one SSID on a EMG3425-Q10A. See Section 9.4 on page This allows you to configure multiple independent wireless networks on the EMG3425-Q10A as if there were multiple APs (virtual APs). Each virtual AP has its own SSID, wireless security type and MAC filtering settings.
Page 45: Configuring Security Settings Of Multiple Ssids
Connect your computer to the LAN port of the EMG3425-Q10A using an Ethernet cable. The default IP address of the EMG3425-Q10A in router mode is “192.168.1.1”. In this case, your computer must have an IP address in the range between “192.168.1.2” and “192.168.1.254”.
Page 46 Configure the screen as follows. In this example, you enable Intra-BSS Traffic for SSID_Worker to allow wireless clients in the same wireless network to communicate with each other. Click Apply. 10 Click the Edit icon of the second entry to configure wireless and security settings for SSID_VoIP. EMG3425-Q10A User’s Guide...
Page 47 13 Configure the screen as follows. In this example, you enable Intra-BSS Traffic for SSID_Guest to allow wireless clients in the same wireless network to communicate with each other. Select Enable Guest WLAN to allow clients to access the Internet only. Click Apply. EMG3425-Q10A User’s Guide...
Page 48 SSID_VoIP from the SSID Select drop-down list, enable MAC address filtering and set the Filter Action to Allow. Enter the VoIP device’s MAC address in the Mac Address field and click Apply to allow only the VoIP device to associate with the EMG3425-Q10A using this SSID. EMG3425-Q10A User’s Guide...
Page 49 Chapter 6 Tutorials EMG3425-Q10A User’s Guide...
Page 50: Technical Reference
Technical Reference...
Page 51: Monitor
55) to view multicasting details. 7.3 The Log Screen The Web Configurator allows you to look at all of the EMG3425-Q10A’s logs in one location. 7.3.1 View Log Use the View Log screen to see the logged messages for the EMG3425-Q10A. The log wraps around and deletes the old entries after it fills.
Page 52: Dhcp Table
TCP/IP configuration at start-up from a server. You can configure the EMG3425-Q10A’s LAN as a DHCP server or disable it. When configured as a server, the EMG3425-Q10A provides the TCP/ IP configuration for the clients. If DHCP service is disabled, you must have another DHCP server on that network, or else the computer must be manually configured.
Page 53: Packet Statistics
Reserve Select this if you want to reserve the IP address for this specific MAC address. Apply Click Apply to save your changes back to the EMG3425-Q10A. Cancel Click Cancel to reload the previous configuration for this screen. 7.5 Packet Statistics Click Monitor >...
Page 54: Wlan Station Status
(Details...) hyperlink in the Status screen. View the wireless stations that are currently associated to the EMG3425-Q10A’s 2.4GHz or 5GHz wireless network in the Association List. Association means that a wireless client (for example, your network or computer with a wireless network card) has connected successfully to the AP (or wireless router) using the same SSID, channel and security settings.
Page 55: Igmp Statistics
MAC Address This field displays the MAC address of an associated wireless station. Association Time This field displays the time a wireless station first associated with the EMG3425-Q10A’s WLAN. 7.7 IGMP Statistics Use this screen to look at the current number of IGMP-related packets received for each IGMP multicast group and from each LAN host.
Page 56 This section shows statistics about the number of IGMP-related packets received from each LAN host. This field is a sequential value, and it is not associated with a specific IGMP Statistics. Multicast Group This field displays the IP address of a LAN computer that has sent the EMG3425-Q10A IGMP-related packets. Last Report Time This field displays when the EMG3425-Q10A received the latest packet from this LAN IP address for this IGMP multicast group.
Page 57: Wan
H A PT ER 8.1 Overview This chapter discusses the EMG3425-Q10A’s WAN screens. Use these screens to configure your EMG3425-Q10A for Internet access. A WAN (Wide Area Network) connection is an outside connection to another network or the Internet. It connects your private networks such as a LAN (Local Area Network) and other networks, so that a computer in one location can communicate with computers in other locations.
Page 58 (and service name) for user authentication. WAN IP Address The WAN IP address is an IP address for the EMG3425-Q10A, which makes it accessible from an outside network. It is used by the EMG3425-Q10A to communicate with other devices in other networks.
Page 59: Management Wan
A and D. IGMP (Internet Group Multicast Protocol) is a network-layer protocol used to establish membership in a multicast group - it is not used to carry user data. The EMG3425-Q10A supports both IGMP version 1 (IGMP-v1) and IGMP version 2 (IGMP-v2).
Page 60: Add/Edit Wan Connection
This shows the status of the connection. Modify Click the Edit icon to configure the connection. Click the Delete icon to delete this connection from the EMG3425-Q10A. A window displays asking you to confirm that you want to delete the connection. 8.4.1 Add/Edit WAN Connection Click the Add New WAN Entries in the Configuration >...
Page 61 Select IPv4 Only if you want the EMG3425-Q10A to run IPv4 only. Select Dual Stack to allow the EMG3425-Q10A to run IPv4 and IPv6 at the same time. Select IPv6 Only if you want the EMG3425-Q10A to run IPv6 only.
Page 62 Use IPv6 Rapid Deployment (6rd) when the local network uses IPv6 and the ISP has an IPv4 network. When the EMG3425-Q10A has an IPv4 WAN address and you set IPv6/IPv4 mode to IPv4 Only, you can enable 6rd to encapsulate IPv6 packets in IPv4 packets to cross the ISP’s IPv4 network.
Page 63: Pppoe Encapsulation
IPv6 DNS server This is not available when you select IPv4 Only in the IPv6/IPv4 field. Obtain IPv6 DNS Select this to have the EMG3425-Q10A get the IPv6 DNS server addresses from the ISP info Automatically automatically. Use the following...
Page 64 Operationally, PPPoE saves significant effort for both you and the ISP or carrier, as it requires no specific configuration of the broadband modem at the customer site. By implementing PPPoE directly on the EMG3425-Q10A (rather than individual computers), the computers on the LAN do not need PPPoE software installed, since the EEMG3425-Q10A does that part of the task.
Page 65 Select IPv4 Only if you want the EMG3425-Q10A to run IPv4 only. Select Dual Stack to allow the EMG3425-Q10A to run IPv4 and IPv6 at the same time. Select IPv6 Only if you want the EMG3425-Q10A to run IPv6 only.
Page 66 Use IPv6 Rapid Deployment (6rd) when the local network uses IPv6 and the ISP has an IPv4 network. When the EMG3425-Q10A has an IPv4 WAN address and you set IPv6/IPv4 mode to IPv4 Only, you can enable 6rd to encapsulate IPv6 packets in IPv4 packets to cross the ISP’s IPv4 network.
Page 67 IPv6 DNS server This is not available when you select IPv4 Only in the IPv6/IPv4 field. Obtain IPv6 DNS Select this to have the EMG3425-Q10A get the IPv6 DNS server addresses from the ISP info Automatically automatically. Use the following...
Page 68: Wireless Lan
This chapter discusses how to configure the wireless network settings in your EMG3425-Q10A. The EMG3425-Q10A is able to function both 2.4GHz and 5GHz network at the same time. You can have different wireless and wireless security settings for 2.4GHz and 5GHz wireless LANs. Click Configuration >...
Page 69: What You Can Do
EMG3425-Q10A and the wireless clients, and make other basic configuration changes (Section 9.2 on page 73). • Use the More AP screen to set up multiple wireless networks on your EMG3425-Q10A (Section 9.4 on page 79). • Use the MAC Filter screen to allow or deny wireless stations based on their MAC addresses from connecting to the EMG3425-Q10A (Section 9.5 on page...
Page 70: User Authentication
Some wireless devices, such as scanners, can detect wireless networks but cannot use wireless networks. These kinds of wireless devices might not have MAC addresses. Hexadecimal characters are 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, A, B, C, D, E, and F. EMG3425-Q10A User’s Guide...
Page 71 Guest WLAN allows you to set up a wireless network where users can access to Internet via the EMG3425-Q10A (Z), but not other networks connected to the Z. In the following figure, a guest user can access the Internet from the guest wireless network A via Z but not the home or company network N.
Page 72 Depending on the devices in your network, you can either press a button (on the device itself, or in its configuration utility) or enter a PIN (Personal Identification EMG3425-Q10A User’s Guide...
Page 73: General Wireless Lan Screen
9.2 General Wireless LAN Screen Use this screen to configure the SSID and wireless security of the wireless LAN. Note: If you are configuring the EMG3425-Q10A from a computer connected to the wireless LAN and you change the EMG3425-Q10A’s SSID, channel or security settings, you will lose your wireless connection when you press Apply to confirm.
Page 74 Refer to the Connection Wizard chapter for more information on channels. This option is only available if Auto Channel Selection is disabled. Auto Channel Select this check box for the EMG3425-Q10A to automatically choose the channel with Selection the least interference. Deselect this check box if you wish to manually select the channel using the Channel Selection field.
Page 75: Wireless Security
Select No Security to allow wireless clients to communicate with the access points without any data encryption. Note: If you do not enable any wireless security on your EMG3425-Q10A, your network is accessible to any wireless networking device that is within range.
Page 76: Wpa-Psk/Wpa2-Psk
DESCRIPTION Security Mode Choose No Security from the drop-down list box. Apply Click Apply to save your changes back to the EMG3425-Q10A. Cancel Click Cancel to reload the previous configuration for this screen. 9.3.2 WPA-PSK/WPA2-PSK Select WPA-PSK or WPA2-PSK from the Security Mode list.
Page 77: Wpa/Wpa2
Table 21 Network > Wireless LAN 2.4G/5G > General: WPA-PSK/WPA2-PSK (continued) LABEL DESCRIPTION Apply Click Apply to save your changes back to the EMG3425-Q10A. Cancel Click Cancel to reload the previous configuration for this screen. 9.3.3 WPA/WPA2 Select WPA or WPA2 from the Security Mode list.
Page 78 This check box is available only when you select WPA2-PSK or WPA2 in the Security Mode field. Select the check box to have both WPA2 and WPA wireless clients be able to communicate with the EMG3425-Q10A even when the EMG3425-Q10A is using WPA2- PSK or WPA2. Group Key Update...
Page 79: More Ap Screen
This shows whether the SSID profile is active (a yellow bulb) or not (a gray bulb). SSID An SSID profile is the set of parameters relating to one of the EMG3425-Q10A’s BSSs. The SSID (Service Set IDentifier) identifies the Service Set with which a wireless device is associated.
Page 80 Enter a descriptive name (up to 32 printable characters found on a typical English language keyboard) for the wireless LAN. Hide SSID Select this check box to hide the SSID in the outgoing beacon frame so a station cannot obtain the SSID through scanning using a site survey tool. EMG3425-Q10A User’s Guide...
Page 81: Mac Filter Screen
Click Cancel to reload the previous configuration for this screen. 9.5 MAC Filter Screen The MAC filter screen allows you to configure the EMG3425-Q10A to give exclusive access to devices (Allow) or exclude devices from accessing the EMG3425-Q10A (Deny). Every Ethernet device has a unique MAC (Media Access Control) address.
Page 82 Select Allow to permit access to the EMG3425-Q10A, MAC addresses not listed will be denied access to the EMG3425-Q10A. Select Deny to block access to the EMG3425-Q10A, MAC addresses not listed will be allowed to access the EMG3425-Q10A. MAC Filter Summary This is the index number of the MAC address.
Page 83: Wireless Lan Advanced Screen
Tx Power Set the output power of the EMG3425-Q10A in this field. If there is a high density of APs in an area, decrease the output power of the EMG3425-Q10A to reduce interference with other APs. Select one of the following 100%, 90%, 75%, 50%, 25% or 10%.
Page 84: Wps Screen
DESCRIPTION WMM QoS Select Enable to have the EMG3425-Q10A automatically give a service a priority level according to the ToS value in the IP header of packets it sends. WMM QoS (Wifi MultiMedia Quality of Service) gives high priority to voice and video, which makes them run more smoothly.
Page 85 PIN Number This is the WPS PIN (Personal Identification Number) of the EMG3425-Q10A. Enter this PIN in the configuration utility of the device you want to connect to the EMG3425-Q10A using WPS. The PIN is not necessary when you use WPS push-button method.
Page 86: Wps Station Screen
Table 28 Network > Wireless LAN 2.4G/5G > WPS (continued) LABEL DESCRIPTION Apply Click Apply to save your changes back to the EMG3425-Q10A. Cancel Click Cancel to reload the previous configuration for this screen. 9.9 WPS Station Screen Use this screen when you want to add a wireless station using WPS. To open this screen, click Network >...
Page 87 If you have chosen Off earlier for the WLAN Status the Wireless LAN will turn off between the two times you enter in these fields. Apply Click Apply to save your changes back to the EMG3425-Q10A. Cancel Click Cancel to reload the previous configuration for this screen.
Page 88: Lan
• Use the IP screen to change the IP address for your EMG3425-Q10A (Section 10.4 on page 90). • Use the IP Alias screen to have the EMG3425-Q10A apply IP alias to create LAN subnets (Section 10.5 on page 90).
Page 89: What You Need To Know
WAN network as shown next. Figure 47 LAN and WAN IP Addresses The LAN parameters of the EMG3425-Q10A are preset in the factory with the following values: • IP address of 192.168.1.1 with subnet mask of 255.255.255.0 (24 bits) • DHCP server enabled with 32 client IP addresses starting from 192.168.1.33.
Page 90: Lan Ip Screen
Cancel Click Cancel to begin configuring this screen afresh. 10.5 IP Alias Screen Use this screen to have the EMG3425-Q10A apply IP alias to create LAN subnets. Click LAN > IP Alias. Figure 49 Network > LAN > IP Alias...
Page 91: Ipv6 Lan Screen
Enter the minimum time in seconds between router advertisement messages. LAN IPv6 Address Assignment Enable DHCPv6-PD Select this option to use DHCPv6 prefix delegation. The EMG3425-Q10A will obtain an IPv6 prefix from the ISP or a connected uplink router for the LAN. EMG3425-Q10A User’s Guide...
Page 92: Igmp Snooping Screen
Enter the valid lifetime for the prefix. Link Local Only Select this option to only use the link local address on the EMG3425-Q10A interfaces in the LAN. Select this option to identify a unique local address of the EMG3425-Q10A in the LAN.
Page 93 Select this option to activate IGMP snooping. This allows the EMG3425-Q10A to passively learn multicast group. IGMP Mode Select Standard Mode to have the EMG3425-Q10A forward multicast packets to a port that joins the multicast group and broadcast unknown multicast packets from the WAN to all LAN ports.
Page 94: Dhcp Server
TCP/IP configuration at start-up from a server. You can configure the EMG3425-Q10A’s LAN as a DHCP server or disable it. When configured as a server, the EMG3425-Q10A provides the TCP/ IP configuration for the clients. If DHCP service is disabled, you must have another DHCP server on your LAN, or else the computer must be manually configured.
Page 95: Dhcp Server Advanced Screen
Enable the DHCP server unless your ISP instructs you to do otherwise. Select Disable to stop the EMG3425-Q10A acting as a DHCP server. When configured as a server, the EMG3425-Q10A provides TCP/IP configuration for the clients. If not, DHCP service is disabled and you must have another DHCP server on your LAN, or else the computers must be manually configured.
Page 96 Type the LAN IP address of a computer on your LAN. DNS Server DNS Servers The EMG3425-Q10A passes a DNS (Domain Name System) server IP address (in the Assigned by DHCP order you specify here) to the DHCP clients. The EMG3425-Q10A only passes this Server information to the LAN DHCP clients when you enable DHCP Server.
Page 97: Dhcp Client List Screen
Q10A's LAN IP address displays in the field to the right (read-only). The EMG3425-Q10A tells the DHCP clients on the LAN that the EMG3425-Q10A itself is the DNS server. When a computer on the LAN sends a DNS query to the EMG3425-Q10A, the EMG3425-Q10A forwards the query to the EMG3425-Q10A's system DNS server (configured in the WAN screen) and relays the response back to the computer.
Page 98 Reserve Select this if you want to reserve the IP address for this specific MAC address. Apply Click Apply to save your changes back to the EMG3425-Q10A. Cancel Click Cancel to reload the previous configuration for this screen. EMG3425-Q10A User’s Guide...
Page 99: Nat
You assign the LAN IP addresses to the devices (A to D) connected to your EMG3425-Q10A. The ISP assigns the WAN IP address. The NAT network appears as a single host on the Internet. All traffic coming from A to D going out to the Internet use the IP address of the EMG3425-Q10A, which is 192.168.1.1.
Page 100: What You Need To Know
Chapter 12 NAT • Use the Port Forwarding screen to set a default server and change your EMG3425-Q10A’s port forwarding settings to forward incoming service requests to the server(s) on your local network (Section 12.3 on page 102). • Use the Port Trigger screen to change your EMG3425-Q10A’s trigger port settings (Section 12.5.3 on page...
Page 101: General
IP source address in each packet and then forwards it to the Internet. The EMG3425-Q10A keeps track of the original addresses and port numbers so incoming reply packets can have their original values restored. The following figure illustrates this.
Page 102: Port Forwarding Screen
To change your EMG3425-Q10A’s port forwarding settings, click Network > NAT > Port Forwarding. The screen appears as shown. Note: If you do not assign a Default Server, the EMG3425-Q10A discards all packets received for ports that are not specified in this screen or remote management.
Page 103 Server IP Address This field displays the inside IP address of the server. Modify Click the Edit icon to open the edit screen where you can modify an existing rule. Click the Delete icon to remove a rule. EMG3425-Q10A User’s Guide...
Page 104: Port Forwarding Edit Screen
Table 40 Network > NAT > Port Forwarding (continued) LABEL DESCRIPTION Apply Click Apply to save your changes back to the EMG3425-Q10A. Cancel Click Cancel to begin configuring this screen afresh. 12.3.1 Port Forwarding Edit Screen This screen lets you edit a port forwarding rule. Click a rule’s Edit icon in the Port Forwarding screen to open the following screen.
Page 105: Port Trigger Screen
Chapter 12 NAT 12.4 Port Trigger Screen To change your EMG3425-Q10A’s trigger port settings, click Network > NAT > Port Trigger. The screen appears as shown. Note: Only one LAN computer can use a trigger port (range) at a time.
Page 106: Technical Reference
Chapter 12 NAT 12.5 Technical Reference The following section contains additional technical information about the EMG3425-Q10A features described in this chapter. 12.5.1 NATPort Forwarding: Services and Port Numbers A port forwarding set is a list of inside (behind NAT on the LAN) servers, for example, web or FTP, that you can make accessible to the outside world even though NAT makes your whole inside network appear as a single machine to the outside world.
Page 107: Trigger Port Forwarding
Trigger port forwarding solves this problem by allowing computers on the LAN to dynamically take turns using the service. The EMG3425-Q10A records the IP address of a LAN computer that sends traffic to the WAN to request a service with a specific port number and protocol (a "trigger" port).
Page 108: Two Points To Remember About Trigger Ports
Chapter 12 NAT 12.5.5 Two Points To Remember About Trigger Ports Trigger events only happen on data that is coming from inside the EMG3425-Q10A and going to the outside. If an application needs a continuous data stream, that port (range) will be tied up so that another computer on the LAN can’t trigger it.
Page 109: Ddns
IP address. Users can always use the same domain name instead of a different dynamic IP address that changes each time to connect to the EMG3425-Q10A or a server in your network. Note: The EMG3425-Q10A must have a public global IP address and you should have your registered DDNS account information on hand.
Page 110 (","). Username Enter your user name. Password Enter the password assigned to you. Apply Click Apply to save your changes back to the EMG3425-Q10A. Cancel Click Cancel to begin configuring this screen afresh. EMG3425-Q10A User’s Guide...
Page 111: Static Route
This chapter shows you how to configure static routes for your EMG3425-Q10A. The EMG3425-Q10A usually uses the default gateway to route outbound traffic from computers on the LAN to the Internet. To have the EMG3425-Q10A send data to devices not reachable through the default gateway, use static routes.
Page 112: Add/Edit Static Route
This is the WAN interface through which the traffic is routed. Modify Click the Edit icon to open a screen where you can modify an existing rule. Click the Delete icon to remove a rule from the EMG3425-Q10A. Apply Click Apply to save your changes back to the EMG3425-Q10A.
Page 113 Gateway IP Enter the IP address of the next-hop gateway. The gateway is a router or switch on the Address same segment as your EMG3425-Q10A's interface(s). The gateway helps forward packets to their destinations. Use Interface Select a WAN interface through which the traffic is sent. You must have the WAN interface(s) already configured in the WAN screens.
Page 114: Interface Group
Interface Group 15.1 Overview By default, all LAN and WAN interfaces on the EMG3425-Q10A are in the same group and can communicate with each other. Each group acts as an independent network on the EMG3425-Q10A. 15.2 The Interface Group Screen You can manually add a LAN and/or WLAN interface to a new group.
Page 115: Add Interface Group
To remove a LAN or wireless LAN interface from the Grouped LAN Interfaces, use the righ-facing arrow. Click this button to create a new rule. Delete Click the Delete icon to remove this rule from the EMG3425-Q10A. DHCP Option Rules EMG3425-Q10A User’s Guide...
Page 116: Add Interface Group Criteria
Back Click this button to return to the previous screen without saving any changes. Apply Click this button to save your settings back to the EMG3425-Q10A. Cancel Click Cancel to begin configuring this screen afresh. 15.2.2 Add Interface Group Criteria Click the Add button in the Interface Group screen to open the following screen.
Page 117: Firewall
Firewall 16.1 Overview Use these screens to enable and configure the firewall that protects your EMG3425-Q10A and your LAN from unwanted or malicious traffic. Enable the firewall to protect your LAN computers from attacks by hackers on the Internet and control access between the LAN and WAN.
Page 118 Internet. This allows it to act as a secure gateway for all data passing between the Internet and the LAN. The EMG3425-Q10A has one Ethernet WAN port and four Ethernet LAN ports, which are used to physically separate the network into two areas.The WAN (Wide Area Network) port attaches to the broadband (cable or DSL) modem to the Internet.
Page 119: General Screen
Keep the firewall in a secured (locked) room. 16.2 General Screen Use this screen to enable or disable the EMG3425-Q10A’s firewall, and set up firewall logs. Click Security > Firewall to open the General screen. Figure 71 Security > Firewall > General l The following table describes the labels in this screen.
Page 120 Respond to Ping The EMG3425-Q10A will not respond to any incoming Ping requests when Disable is selected. Select LAN to reply to incoming LAN Ping requests. Select WAN to reply to incoming WAN Ping requests. Otherwise select LAN&WAN to reply to all incoming LAN and WAN Ping requests.
Page 121 DESCRIPTION Source IP Address Enter the IP address of the computer that initializes traffic for the application or service. The EMG3425-Q10A applies the firewall rule to traffic initiating from this computer. Protocol Select the protocol (TCP, UDP or ICMP) used to transport the packets for which you want to apply the firewall rule.
Page 122: Content Filtering
Java A programming language and development environment for building downloadable Web components or Internet and intranet business applications of all kinds. Cookies Used by Web servers to track usage and provide service based on ID. EMG3425-Q10A User’s Guide...
Page 123 When a proxy server is located on the WAN it is possible for LAN users to circumvent content filtering by pointing to this proxy server. Apply Click Apply to save your changes. Cancel Click Cancel to begin configuring this screen afresh EMG3425-Q10A User’s Guide...
Page 124: Ipv6 Firewall
This chapter shows you how to enable and create IPv6 firewall rules to block unwanted IPv6 traffic. 18.2 IPv6 Firewall Screen Click Configuration > Security > IPv6 Firewall. The Service screen appears as shown. Figure 74 Configuration > Security > IPv6 Firewall EMG3425-Q10A User’s Guide...
Page 125 "ping". Respond to Ping on The EMG3425-Q10A will not respond to any incoming Ping requests when Disable is selected. Select LAN to reply to incoming LAN Ping requests. Select WAN to reply to incoming WAN Ping requests. Otherwise select LAN&WAN to reply to all incoming LAN and WAN Ping requests.
Page 126 Chapter 18 IPv6 Firewall Table 52 Configuration > Security > IPv6 Firewall (continued) LABEL DESCRIPTION Delete Click Delete to remove the firewall rule. Cancel Click Cancel to restore your previously saved settings. EMG3425-Q10A User’s Guide...
Page 127: Parental Control
The file path is the characters that come after the first slash in the URL. For example, with the URL www.zyxel.com.tw/news/pressroom.php, the file path is news/pressroom.php. Since the EMG3425-Q10A checks the URL’s domain name (or IP address) and file path separately, it will not find items that go across the two. For example, with the URL www.zyxel.com.tw/news/...
Page 128: Add/Edit A Parental Control Rule
Click Add new rules in the Parental Control screen to add a new rule or click the Edit icon next to an existing rule to edit it. Use this screen to configure a restricted access schedule and/or URL filtering settings to block the users on your network from accessing certain web sites. EMG3425-Q10A User’s Guide...
Page 129 The following table describes the fields in this screen. Table 54 Security > Parental Control: Add/Edit new rules LABEL DESCRIPTION General Active Select the checkbox to activate this parental control rule. Parental Enter a descriptive name for the rule. Control Profile Name EMG3425-Q10A User’s Guide...
Page 130: Add/Edit A Service
Custom, enter the LAN user’s MAC address. If you select All, the rule applies to all LAN users. Internet Access Schedule Select check boxes for the days that you want the EMG3425-Q10A to perform parental control. Time Drag the time bar to define the time that the LAN user is allowed access.
Page 131: Technical Reference
By default, the EMG3425-Q10A checks the URL’s domain name or IP address when performing keyword blocking. This means that the EMG3425-Q10A checks the characters that come before the first slash in the URL. For example, with the URL www.zyxel.com.tw/news/pressroom.php, content filtering only searches for keywords within www.zyxel.com.tw.
Page 132 Chapter 19 Parental Control File Name URL Checking Filename URL checking has the EMG3425-Q10A check all of the characters in the URL. For example, filename URL checking searches for keywords within the URL www.zyxel.com.tw/ news/pressroom.php. Use the ip urlfilter customize actionFlags 8 [disable | enable] command to extend (or not extend) the keyword blocking search to include the URL's complete filename.
Page 133: Bandwidth Management
Assign priority and define actions to be performed for a classified traffic flow. The EMG3425-Q10A assigns each packet a priority and then queues the packet accordingly. Packets assigned a high priority are processed more quickly than those with low priority if there is congestion, allowing time-sensitive applications to flow more smoothly.
Page 134 Bursty traffic may cause network congestion. Traffic shaping regulates packets to be transmitted with a pre-configured data transmission rate using buffers (or queues). Your EMG3425-Q10A uses the Token Bucket algorithm to allow a certain amount of large bursts while keeping a limit at the average rate.
Page 135: Bandwidth Mgmt General Screen
You can also set this number lower than the interfaces’ actual transmission speed. This will cause the EMG3425-Q10A to not use some of the interfaces’ available bandwidth. If you leave this field blank, the EMG3425-Q10A automatically sets this number to be 95% of the WAN interfaces’ actual upstream transmission speed.
Page 136: The Queue Setup Screen
You can also set this number lower than the WAN interfaces’ actual transmission speed. This will cause the EMG3425-Q10A to not use some of the interfaces’ available bandwidth. If you leave this field blank, the EMG3425-Q10A automatically sets this to the LAN interfaces’ maximum supported connection speed.
Page 137: Add/Edit A Queue
This field displays Drop Tail (DT). Drop Tail (DT) is a simple queue management Management algorithm that allows the EMG3425-Q10A buffer to accept as many packets as it can until it is full. Once the buffer is full, new packets that arrive are dropped until there is space in the buffer again (packets are transmitted out of it).
Page 138: The Class Setup Screen
(such as Telnet) to form a flow. You can give different priorities to traffic that the EMG3425-Q10A forwards out through the WAN interface. Give high priority to voice and video to make them run more smoothly. Similarly, give low priority to many large file downloads so that they do not reduce the quality of other applications.
Page 139: Add/Edit A Classifier
20.5.1 Add/Edit a Classifier Click Add New Classifier in the Class Setup screen or the Edit icon next to a classifier to open the following screen. Figure 82 Management > Bandwidth MGMT > Class Setup: Add/Edit new class EMG3425-Q10A User’s Guide...
Page 140 If you select TCP or UDP in the IP Protocol field, select the check box and enter the port number(s) of the source. Select the check box and enter the source MAC address of the packet. Address EMG3425-Q10A User’s Guide...
Page 141 DSCP Mark This field is available only when you select IP in the Ether Type field. If you select Mark, enter a DSCP value with which the EMG3425-Q10A replaces the DSCP field in the packets. If you select Unchange, the EMG3425-Q10A keep the DSCP field in the packets.
Page 142: Technical Reference
LABEL DESCRIPTION VLAN ID If you select Remark, enter a VLAN ID number with which the EMG3425-Q10A replaces the VLAN ID of the frames. If you select Remove, the EMG3425-Q10A deletes the VLAN ID of the frames before forwarding them out.
Page 143 Automatic Priority Queue Assignment If you enable QoS on the EMG3425-Q10A, the EMG3425-Q10A can automatically base on the IEEE 802.1p priority level, IP precedence and/or packet length to assign priority to traffic which does not match a class.
Page 144: Token Bucket
The following table shows you the internal layer-2 and layer-3 QoS mapping on the EMG3425- Q10A. On the EMG3425-Q10A, traffic assigned to higher priority queues gets through faster while traffic in lower index queues is dropped if the network is congested.
Page 145 • If there are no tokens in the bucket, the EMG3425-Q10A stops transmitting until enough tokens are generated. • If not enough tokens are available, the EMG3425-Q10A treats the packet in either one of the following ways: In traffic shaping: •...
Page 146 • If the PBS bucket has enough tokens, the EMG3425-Q10A checks the CBS bucket. The packet is marked green and can be transmitted if the number of tokens in the CBS bucket is equal to or greater than the size of the packet (in bytes).
Page 147: Remote Management
(Section 21.5 on page 151). • Your EMG3425-Q10A can act as an SNMP agent, which allows a manager station to manage and monitor the EMG3425-Q10A through the network. Use the SNMP screen to configure SNMP settings. You can also specify from which IP addresses the access can come (Section 21.6 on...
Page 148: Remote Management And Nat
There is a default system management idle timeout of five minutes (three hundred seconds). The EMG3425-Q10A automatically logs you out if the management session remains idle for longer than this timeout period. The management session does not time out when a statistics screen is polling.
Page 149 Address HTTPS service. Otherwise, select Disable ALL. Or you can select Trust Domain to specify the IP address/domain of the computer that can access the EMG3425-Q10A. Click Add to add the IP address/domain to the trust domain. Trust Domain This is available only when you select Trust Domain in the Secured Client IP Address field.
Page 150 Address HTTPS service. Otherwise, select Disable ALL. Or you can select Trust Domain to specify the IP address/domain of the computer that can access the EMG3425-Q10A. Click Add to add the IP address/domain to the trust domain. Trust Domain This is available only when you select Trust Domain in the Secured Client IP Address field.
Page 151: Telnet Screen
This field displays the interface through which a computer may access the EMG3425-Q10A using this service. Secured Client IP Select Enable ALL to allow all computers to access the EMG3425-Q10A using the Address HTTPS service. Otherwise, select Disable ALL. Or you can select Trust Domain to specify the IP address/domain of the computer that can access the EMG3425-Q10A.
Page 152: Snmp Screen
Simple Network Management Protocol is a protocol used for exchanging management information between network devices. Your EMG3425-Q10A supports SNMP agent functionality, which allows a manager station to manage and monitor the EMG3425-Q10A through the network. The EMG3425- Q10A supports SNMP version one (SNMPv1) and version two (SNMPv2c). The next figure illustrates an SNMP management operation.
Page 153 The SNMP agent listens on port 161 by default. If you change the SNMP server port to a different number on the EMG3425-Q10A, for example 8161, then you must notify people who need to access the EMG3425-Q10A SNMP agent to use the same port. EMG3425-Q10A User’s Guide...
Page 154: Wake On Lan Screen
Table 65 Configuration > Management > Remote MGMT > SNMP (continued) LABEL DESCRIPTION Server Access Select the interface(s) through which a computer may access the EMG3425-Q10A using this service. Secured Ip Select All to allow all computers to access the EMG3425-Q10A.
Page 155: Tr069 Screen
Remote Procedure Calls (RPCs) between an ACS and a client device. RPCs are sent in Extensible Markup Language (XML) format over HTTP or HTTPS. An administrator can use an ACS to remotely set up the EMG3425-Q10A, modify settings, perform firmware upgrades as well as monitor and diagnose the EMG3425-Q10A. You have to enable the device to be managed by the ACS and specify the ACS IP address or domain name and username and password.
Page 156 Enter the time interval (in seconds) at which the EMG3425-Q10A sends information to the auto-configuration server. Inform Source Select SN or MAC for the EMG3425-Q10A to be the source of information via TR-069 on the WAN. ACS URL Enter the URL or IP address of the auto-configuration server.
Page 157 You cannot import a certificate with the same name as a certificate that is already in the EMG3425-Q10A. Upload Click Upload to begin the upload process. Apply Click Apply to save your customized settings and exit this screen. Cancel Click Cancel to exit this screen without saving. EMG3425-Q10A User’s Guide...
Page 158: Universal Plug-And-Play (Upnp)
When a UPnP device joins a network, it announces its presence with a multicast message. For security reasons, the EMG3425-Q10A allows multicast messages on the LAN only. EMG3425-Q10A User’s Guide...
Page 159: Upnp Screen
This section shows you how to use the UPnP feature in Windows XP. You must already have UPnP installed in Windows XP and UPnP activated on the EMG3425-Q10A. Make sure the computer is connected to a LAN port of the EMG3425-Q10A. Turn on your computer and the EMG3425-Q10A.
Page 160 In the Internet Connection Properties window, click Settings to see the port mappings there were automatically created. Figure 91 Internet Connection Properties You may edit or delete the port mappings or click Add to manually add port mappings. Figure 92 Internet Connection Properties: Advanced Settings EMG3425-Q10A User’s Guide...
Page 161: Web Configurator Easy Access
22.4.2 Web Configurator Easy Access With UPnP, you can access the web-based configurator on the EMG3425-Q10A without finding out the IP address of the EMG3425-Q10A first. This comes helpful if you do not know the IP address of the EMG3425-Q10A.
Page 162 Figure 96 Network Connections An icon with the description for each UPnP-enabled device displays under Local Network. Right-click on the icon for your EMG3425-Q10A and select Invoke. The web configurator login screen displays. Figure 97 Network Connections: My Network Places Right-click on the icon for your EMG3425-Q10A and select Properties.
Page 163 Chapter 22 Universal Plug-and-Play (UPnP) Figure 98 Network Connections: My Network Places: Properties: Example EMG3425-Q10A User’s Guide...
Page 164: Usb Media Sharing
USB device and your USB version (1.1 or 2.0). Media Server You can set up your EMG3425-Q10A to act as a media server to provide media (like video) to DLNA- compliant players, such as Windows Media Player, ZyXEL DMAs (Digital Media Adapters), Xboxes or PS3s.
Page 165: What You Can Do
The following figure is an overview of the EMG3425-Q10A’s file-sharing server feature. Computers A and B can access files on a USB device (C) which is connected to the EMG3425-Q10A (D). Figure 100 File Sharing Overview 23.2 What You Can Do...
Page 166: Before You Begin
Connect the USB device to one of the EMG3425-Q10A’s USB ports. The EMG3425-Q10A detects the USB device and makes its contents available for browsing. If you are connecting a USB hard drive that comes with an external power supply, make sure it is connected to an appropriate power source that is on.
Page 167: Dlna Screen
23.5 DLNA Screen Use this screen to have the EMG3425-Q10A act as a DLNA-compliant media server that lets DLNA- compliant media clients on your network play video, music, and photos from the EMG3425-Q10A (without having to copy them to another computer). Click Management > USB Media Sharing >...
Page 168 Specify the name to identify the EMG3425-Q10A in a work group. Work Group You can add the EMG3425-Q10A to an existing or a new workgroup on your network. Enter the name of the workgroup which your EMG3425-Q10A automatically joins. You can set the EMG3425-Q10A’s workgroup name to be exactly the same as the workgroup...
Page 169: Ftp Screen
Click Cancel to begin configuring this screen afresh. 23.7 FTP Screen Use this screen to set up file sharing via the EMG3425-Q10A using FTP and create user accounts. Click Management > USB Media Sharing > FTP. Figure 103 Management > USB Media Sharing > FTP The following table describes the labels in this screen.
Page 170: Example Of Accessing Your Shared Files From A Computer
Enter the maximum bandwidth (in Kbps) allowed for outgoing FTP traffic. Bandwidth Apply Click Apply to save your changes back to the EMG3425-Q10A. Cancel Click Cancel to begin configuring this screen afresh. 23.8 Example of Accessing Your Shared Files From a...
Page 171 [ENTER]. A screen asking for password authentication appears. Type the user name and password (Bob and 1234 in this example) and click OK. Note: Once you log into the shared folder via your EMG3425-Q10A, you do not have to relogin unless you restart your computer.
Page 172: Use Ftp To Share Files
23.8.2 Use FTP to Share Files You can use FTP to access the USB storage devices connected to the EMG3425-Q10A. In this example, we use the web browser to share files via FTP from the LAN. The way or screen you log into the FTP server (on the EMG3425-Q10A) varies depending on your FTP client.
Page 173 USB Media Sharing > FTP screen) and click Log On. The screen changes and shows you the folder for the USB storage device connected to your EMG3425-Q10A. Double-click the folder to display the contents in it. EMG3425-Q10A User’s Guide...
Page 174: Port Configuration
(10/100/1000 Mbps) and duplex mode (full duplex or half duplex) of the connected device. 24.2 Port Configuration Screen Use this screen to configure the EMG3425-Q10A port speed and duplex settings. Click Configuration > Management > Port Configuration. Figure 104 Management > Port Configuration The following table describes the labels on this screen.
Page 175 If the peer port does not support auto-negotiation or turns off this feature, the EMG3425-Q10A determines the connection speed by detecting the signal on the cable and using half duplex mode.
Page 176: Maintenance
• Use the Restart screen to reboot the EMG3425-Q10A without turning the power off (Section 25.8 on page 183). • Use the Sys OP Mode screen to select how you want to use your EMG3425-Q10A (Section 25.10 on page 184).
Page 177: Account Screen
Click Cancel to exit this screen without saving. 25.4 Account Screen It is strongly recommended that you change your EMG3425-Q10A's password. If you forget your EMG3425-Q10A's password (or IP address), you will need to reset the device. Section 25.8 on page 183 for details.
Page 178: Account Setup Screen
Click Cancel to exit this screen without saving. 25.5 Time Setting Screen Use this screen to configure the EMG3425-Q10A’s time based on your local time zone. To change your EMG3425-Q10A’s time and date, click Maintenance > Time. The screen appears as shown.
Page 179 (yyyy/mm/dd) When you select Manual, enter the new date in this field and then click Apply. Get from Time Select this radio button to have the EMG3425-Q10A get the time and date from the time Server server you specified below.
Page 180: Firmware Upgrade Screen
(usually) uses the system model name with a “*.bin” extension, e.g., “EMG3425-Q10A.bin”. The upload process uses HTTP (Hypertext Transfer Protocol) and may take up to two minutes. After a successful upload, the system will reboot.
Page 181: Configuration Backup/Restore Screen
Backup configuration allows you to back up (save) the EMG3425-Q10A’s current configuration to a file on your computer. Once your EMG3425-Q10A is configured and functioning properly, it is highly recommended that you back up your configuration file before making configuration changes. The backup configuration file will be useful in case you need to return to your previous settings.
Page 182 Upload Click Upload to begin the upload process. Note: Do not turn off the EMG3425-Q10A while configuration file upload is in progress. After you see a “configuration upload successful” screen, you must then wait one minute before logging into the EMG3425-Q10A again. The EMG3425-Q10A automatically restarts in this time causing a temporary network disconnect.
Page 183: Restart Screen
25.9 System Operation Mode Overview The Sys OP Mode (System Operation Mode) function lets you configure your EMG3425-Q10A as an router or access point. You can choose between Router or Access Point Mode depending on your network topology and the features you require from your device.
Page 184: Sys Op Mode Screen
Figure 114 Access Point Mode 25.10 Sys OP Mode Screen Use this screen to select how you want to use your EMG3425-Q10A. Note: If you select the incorrect System Operation Mode you may not be able to connect to the Internet.
Page 185: Language Screen
Use this screen to change the language for the Web Configurator. Select the language you prefer and click Apply. The Web Configurator language changes after a while without restarting the EMG3425-Q10A. Figure 116 Maintenance > Language 25.12 Diagnostic Ping Screen Use this screen to ping an IP address.
Page 186 Table 80 Maintenance > Sys OP Mode LABEL DESCRIPTION Type the IP address of a computer that you want to perform ping in order to test a connection. IPv4_Ping Click this to ping the IP address that you entered. IPv6_Ping EMG3425-Q10A User’s Guide...
Page 187: Troubleshooting
Make sure you are using the power adaptor or cord included with the EMG3425-Q10A. Make sure the power adaptor or cord is connected to the EMG3425-Q10A and plugged in to an appropriate power source. Make sure the power source is turned on.
Page 188: Emg3425-Q10A Access And Login
IP address in your Internet browser. If your EMG3425-Q10A in Access Point Mode is a DHCP client, you can find your IP address from the DHCP server. This information is only available from the DHCP server which allocates IP addresses on your network.
Page 189: Internet Access
Appendix A on page 194. Make sure your computer is in the same subnet as the EMG3425-Q10A. (If you know that there are routers between your computer and the EMG3425-Q10A, skip this step.) • If there is a DHCP server on your network, make sure your computer is using a dynamic IP address.
Page 190 Internet access. Your computer and the EMG3425-Q10A should be in the same subnet. • If the EMG3425-Q10A is in Access Point Mode, make sure the WAN port is connected to a broadband modem or router with Internet access and your computer is set to obtain an dynamic IP address.
Page 191: Resetting The Emg3425-Q10A To Its Factory Defaults
Make sure the power LED is on. Press the RESET button for one to four seconds to restart/reboot the EMG3425-Q10A. Press the RESET button for longer than five seconds to set the EMG3425-Q10A back to its factory- default configurations. If the EMG3425-Q10A restarts automatically, wait for the EMG3425-Q10A to finish restarting, and log in to the Web Configurator.
Page 192 Make sure traffic between the WLAN and the LAN is not blocked by the firewall on the EMG3425- Q10A. Make sure you allow the EMG3425-Q10A to be remotely accessed through the WLAN interface. Check your remote management settings. • See the chapter on Wireless LAN in the User’s Guide for more information.
Page 193: Usb Device Problems
If the USB device requires a special driver, install the driver from the installation disc that came with the device. After driver installation, reconnect the USB device to the EMG3425-Q10A and try to connect to it again with your computer.
Page 194: Appendix A Pop-Up Windows, Javascript And Java Permissions
You can also check if pop-up blocking is disabled in the Pop-up Blocker section in the Privacy tab. In Internet Explorer, select Tools, Internet Options, Privacy. Clear the Block pop-ups check box in the Pop-up Blocker section of the screen. This disables any web pop-up blockers you may have enabled. EMG3425-Q10A User’s Guide...
Page 195 Enable Pop-up Blockers with Exceptions Alternatively, if you only want to allow pop-up windows from your device, see the following steps. In Internet Explorer, select Tools, Internet Options and then the Privacy tab. Select Settings…to open the Pop-up Blocker Settings screen. EMG3425-Q10A User’s Guide...
Page 196 Type the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.167.1. Click Add to move the IP address to the list of Allowed sites. Figure 121 Pop-up Blocker Settings EMG3425-Q10A User’s Guide...
Page 197 Click the Custom Level... button. Scroll down to Scripting. Under Active scripting make sure that Enable is selected (the default). Under Scripting of Java applets make sure that Enable is selected (the default). Click OK to close the window. EMG3425-Q10A User’s Guide...
Page 198 From Internet Explorer, click Tools, Internet Options and then the Security tab. Click the Custom Level... button. Scroll down to Microsoft VM. Under Java permissions make sure that a safety level is selected. Click OK to close the window. EMG3425-Q10A User’s Guide...
Page 199 JAVA (Sun) From Internet Explorer, click Tools, Internet Options and then the Advanced tab. Make sure that Use Java 2 for <applet> under Java (Sun) is selected. Click OK to close the window. Figure 125 Java (Sun) EMG3425-Q10A User’s Guide...
Page 200 You can enable Java, Javascript and pop-ups in one screen. Click Tools, then click Options in the screen that appears. Figure 126 Mozilla Firefox: TOOLS > Options Click Content to show the screen below. Select the check boxes as shown in the following screen. Figure 127 Mozilla Firefox Content Security EMG3425-Q10A User’s Guide...
Page 201 Open all pop-ups. Figure 128 Opera: Allowing Pop-Ups Enabling Java From Opera, click Tools, then Preferences. In the Advanced tab, select Content from the left- side menu. Select the check boxes as shown in the following screen. EMG3425-Q10A User’s Guide...
Page 202 Appendix A Pop-up Windows, JavaScript and Java Permissions Figure 129 Opera: Enabling Java To customize JavaScript behavior in the Opera browser, click JavaScript Options. Figure 130 Opera: JavaScript Options Select the items you want Opera’s JavaScript to apply. EMG3425-Q10A User’s Guide...
Page 203: Appendix B Setting Up Your Computer's Ip Address
PP EN D I X Setting Up Your Computer’s IP Address Note: Your specific EMG3425-Q10A may not support all of the operating systems described in this appendix. See the product specifications for more information about which operating systems are supported.
Page 204 Appendix B Setting Up Your Computer’s IP Address In the Control Panel, click the Network Connections icon. Right-click Local Area Connection and then select Properties. On the General tab, select Internet Protocol (TCP/IP) and then click Properties. EMG3425-Q10A User’s Guide...
Page 205 Appendix B Setting Up Your Computer’s IP Address The Internet Protocol TCP/IP Properties window opens. EMG3425-Q10A User’s Guide...
Page 206 In the Command Prompt window, type "ipconfig" and then press [ENTER]. You can also go to Start > Control Panel > Network Connections, right-click a network connection, click Status and then click the Support tab to view your IP address and connection information. EMG3425-Q10A User’s Guide...
Page 207 Appendix B Setting Up Your Computer’s IP Address Windows Vista This section shows screens from Windows Vista Professional. Click Start > Control Panel. In the Control Panel, click the Network and Internet icon. Click the Network and Sharing Center icon. Click Manage network connections. EMG3425-Q10A User’s Guide...
Page 208 Right-click Local Area Connection and then select Properties. Note: During this procedure, click Continue whenever Windows displays a screen saying that it needs your permission to continue. Select Internet Protocol Version 4 (TCP/IPv4) and then select Properties. EMG3425-Q10A User’s Guide...
Page 209 Appendix B Setting Up Your Computer’s IP Address The Internet Protocol Version 4 (TCP/IPv4) Properties window opens. EMG3425-Q10A User’s Guide...
Page 210 In the Command Prompt window, type "ipconfig" and then press [ENTER]. You can also go to Start > Control Panel > Network Connections, right-click a network connection, click Status and then click the Support tab to view your IP address and connection information. EMG3425-Q10A User’s Guide...
Page 211 This section shows screens from Windows 7 Enterprise. Click Start > Control Panel. In the Control Panel, click View network status and tasks under the Network and Internet category. Click Change adapter settings. Double click Local Area Connection and then select Properties. EMG3425-Q10A User’s Guide...
Page 212 Appendix B Setting Up Your Computer’s IP Address Note: During this procedure, click Continue whenever Windows displays a screen saying that it needs your permission to continue. Select Internet Protocol Version 4 (TCP/IPv4) and then select Properties. EMG3425-Q10A User’s Guide...
Page 213 Appendix B Setting Up Your Computer’s IP Address The Internet Protocol Version 4 (TCP/IPv4) Properties window opens. EMG3425-Q10A User’s Guide...
Page 214 Click OK to close the Local Area Connection Properties window. Verifying Settings Click Start > All Programs > Accessories > Command Prompt. In the Command Prompt window, type "ipconfig" and then press [ENTER]. The IP settings are displayed as follows. EMG3425-Q10A User’s Guide...
Page 215 Mac OS X: 10.3 and 10.4 The screens in this section are from Mac OS X 10.4 but can also apply to 10.3. Click Apple > System Preferences. In the System Preferences window, click the Network icon. EMG3425-Q10A User’s Guide...
Page 216 Appendix B Setting Up Your Computer’s IP Address When the Network preferences pane opens, select Built-in Ethernet from the network connection type list, and then click Configure. For dynamically assigned settings, select Using DHCP from the Configure IPv4 list in the TCP/IP tab. EMG3425-Q10A User’s Guide...
Page 217 • In the Router field, type the IP address of your device. Click Apply Now and close the window. Verifying Settings Check your TCP/IP properties by clicking Applications > Utilities > Network Utilities, and then selecting the appropriate Network Interface from the Info tab. EMG3425-Q10A User’s Guide...
Page 218 Figure 131 Mac OS X 10.4: Network Utility Mac OS X: 10.5 and 10.6 The screens in this section are from Mac OS X 10.5 but can also apply to 10.6. Click Apple > System Preferences. In System Preferences, click the Network icon. EMG3425-Q10A User’s Guide...
Page 219 Appendix B Setting Up Your Computer’s IP Address When the Network preferences pane opens, select Ethernet from the list of available connection types. From the Configure list, select Using DHCP for dynamically assigned settings. EMG3425-Q10A User’s Guide...
Page 220 • In the IP Address field, enter your IP address. • In the Subnet Mask field, enter your subnet mask. • In the Router field, enter the IP address of your EMG3425-Q10A. Click Apply and close the window. Verifying Settings Check your TCP/IP properties by clicking Applications >...
Page 221 When the Network Settings window opens, click Unlock to open the Authenticate window. (By default, the Unlock button is greyed out until clicked.) You cannot make changes to your configuration unless you first enter your admin password. EMG3425-Q10A User’s Guide...
Page 222 Appendix B Setting Up Your Computer’s IP Address In the Authenticate window, enter your admin account name and password then click the Authenticate button. In the Network Settings window, select the connection that you want to configure, then click Properties. EMG3425-Q10A User’s Guide...
Page 223 Click OK to save the changes and close the Properties dialog box and return to the Network Settings screen. If you know your DNS server IP address(es), click the DNS tab in the Network Settings window and then enter the DNS server information in the fields provided. EMG3425-Q10A User’s Guide...
Page 224 Verifying Settings Check your TCP/IP properties by clicking System > Administration > Network Tools, and then selecting the appropriate Network device from the Devices tab. The Interface Statistics column shows data if your connection is working properly. EMG3425-Q10A User’s Guide...
Page 225 The following screens use the default openSUSE 10.3 installation. Note: Make sure you are logged in as the root administrator. Follow the steps below to configure your computer IP address in the KDE: Click K Menu > Computer > Administrator Settings (YaST). EMG3425-Q10A User’s Guide...
Page 226 Appendix B Setting Up Your Computer’s IP Address When the Run as Root - KDE su dialog opens, enter the admin password and click OK. When the YaST Control Center window opens, select Network Devices and then click the Network Card icon. EMG3425-Q10A User’s Guide...
Page 227 Appendix B Setting Up Your Computer’s IP Address When the Network Settings window opens, click the Overview tab, select the appropriate connection Name from the list, and then click the Configure button. When the Network Card Setup window opens, click the Address tab EMG3425-Q10A User’s Guide...
Page 228 Click Next to save the changes and close the Network Card Setup window. If you know your DNS server IP address(es), click the Hostname/DNS tab in Network Settings and then enter the DNS server information in the fields provided. EMG3425-Q10A User’s Guide...
Page 229 Click the KNetwork Manager icon on the Task bar to check your TCP/IP properties. From the Options sub-menu, select Show Connection Information. Figure 135 openSUSE 10.3: KNetwork Manager When the Connection Status - KNetwork Manager window opens, click the Statistics tab to see if your connection is working properly. EMG3425-Q10A User’s Guide...
Page 230 Appendix B Setting Up Your Computer’s IP Address Figure 136 openSUSE: Connection Status - KNetwork Manager EMG3425-Q10A User’s Guide...
Page 231: Appendix C Common Services
File Transfer Program, a program to enable fast transfer of files, including large files that may not be possible by e-mail. H.323 1720 NetMeeting uses this protocol. HTTP Hyper Text Transfer Protocol - a client/server protocol for the world wide web. EMG3425-Q10A User’s Guide...
Page 232 Simple Mail Transfer Protocol is the message- exchange standard for the Internet. SMTP enables you to move messages from one e-mail server to another. SNMP TCP/UDP Simple Network Management Program. SNMP-TRAPS TCP/UDP Traps for use with the SNMP (RFC:1215). EMG3425-Q10A User’s Guide...
Page 233 Its primary function is to allow users to log into remote host systems. TFTP Trivial File Transfer Protocol is an Internet file transfer protocol similar to FTP, but uses the UDP (User Datagram Protocol) rather than TCP (Transmission Control Protocol). VDOLIVE 7000 Another videoconferencing solution. EMG3425-Q10A User’s Guide...
Page 234: Appendix D Legal Information
ZyXEL further reserves the right to make changes in any products described herein without notice. This publication is subject to change without notice. Your use of the EMG3425-Q10A is subject to the terms and conditions of any related service providers. Trademarks Trademarks mentioned in this publication are used for identification purposes only and may be properties of their respective owners.
Page 235: European Union
Hér með lýsir, ZyXEL því yfir að þessi búnaður er í samræmi við grunnkröfur og önnur viðeigandi ákvæði tilskipunar (Icelandic) 1999/5/EC. Italiano Con la presente ZyXEL dichiara che questo attrezzatura è conforme ai requisiti essenziali ed alle altre disposizioni (Italian) pertinenti stabilite dalla direttiva 1999/5/CE. EMG3425-Q10A User’s Guide...
Page 236 The outdoor usage of the 2.4 GHz band requires an authorization from the Electronic Communications Office. Please check http:// www.esd.lv for more details. 2.4 GHz frekvenèu joslas izmantoðanai ârpus telpâm nepiecieðama atïauja no Elektronisko sakaru direkcijas. Vairâk informâcijas: http:// www.esd.lv. EMG3425-Q10A User’s Guide...
Page 237: Safety Warnings
Note: The country code selection is for non-US model only and is not available to all US model. Per FCC regulation, all Wi-Fi product marketed in US must fixed to US operation channels only. European Union - Disposal and Recycling Information WEEE Directive EMG3425-Q10A User’s Guide...
Page 238 Symbolen innebär att enligt lokal lagstiftning ska produkten och/eller dess batteri kastas separat från hushållsavfallet. När den här produkten når slutet av sin livslängd ska du ta den till en återvinningsstation. Vid tiden för kasseringen bidrar du till en bättre miljö och mänsklig hälsa genom att göra dig av med den på ett återvinningsställe. EMG3425-Q10A User’s Guide...
Page 239 Appendix D Legal Information Environmental Product Declaration EMG3425-Q10A User’s Guide...
Page 240: Zyxel Limited Warranty
You can download the latest firmware at www.zyxel.com. If you cannot find it there, contact your vendor or ZyXEL Technical Support at support@zyxel.com.tw. To obtain the source code covered under those Licenses, please contact your vendor or ZyXEL Technical Support at support@zyxel.com.tw. EMG3425-Q10A User’s Guide...
Page 241: Appendix E Customer Support
• Brief description of the problem and the steps you took to solve it. Corporate Headquarters (Worldwide) Taiwan • ZyXEL Communications Corporation • http://www.zyxel.com Asia China • ZyXEL Communications (Shanghai) Corp. ZyXEL Communications (Beijing) Corp. ZyXEL Communications (Tianjin) Corp. • http://www.zyxel.cn India • ZyXEL Technology India Pvt Ltd • http://www.zyxel.in Kazakhstan •...
Page 242 • ZyXEL Singapore Pte Ltd. • http://www.zyxel.com.sg Taiwan • ZyXEL Communications Corporation • http://www.zyxel.com Thailand • ZyXEL Thailand Co., Ltd • http://www.zyxel.co.th Vietnam • ZyXEL Communications Corporation-Vietnam Office • http://www.zyxel.com/vn/vi Europe Austria • ZyXEL Deutschland GmbH • http://www.zyxel.de Belarus • ZyXEL BY • http://www.zyxel.by...
Page 243 Appendix E Customer Support Belgium • ZyXEL Communications B.V. • http://www.zyxel.com/be/nl/ Bulgaria • ZyXEL България • http://www.zyxel.com/bg/bg/ Czech • ZyXEL Communications Czech s.r.o • http://www.zyxel.cz Denmark • ZyXEL Communications A/S • http://www.zyxel.dk Estonia • ZyXEL Estonia • http://www.zyxel.com/ee/et/ Finland • ZyXEL Communications •...
Page 244 • ZyXEL Communications Poland • http://www.zyxel.pl Romania • ZyXEL Romania • http://www.zyxel.com/ro/ro Russia • ZyXEL Russia • http://www.zyxel.ru Slovakia • ZyXEL Communications Czech s.r.o. organizacna zlozka • http://www.zyxel.sk Spain • ZyXEL Spain • http://www.zyxel.es Sweden • ZyXEL Communications • http://www.zyxel.se Switzerland •...
Page 245 • http://www.zyxel.com/ec/es/ Ecuador • ZyXEL Communication Corporation • http://www.zyxel.com/ec/es/ Middle East Egypt • ZyXEL Communication Corporation • http://www.zyxel.com/homepage.shtml Middle East • ZyXEL Communication Corporation • http://www.zyxel.com/homepage.shtml North America • ZyXEL Communications, Inc. - North America Headquarters • http://www.us.zyxel.com/ EMG3425-Q10A User’s Guide...
Page 246 Appendix E Customer Support Oceania Australia • ZyXEL Communications Corporation • http://www.zyxel.com/au/en/ Africa South Africa • Nology (Pty) Ltd. • http://www.zyxel.co.za EMG3425-Q10A User’s Guide...
Page 247: Index
(in URL) duplex setting 27, 35 Cookies Dynamic DNS copyright Dynamic Host Configuration Protocol DynDNS 109, 124 CoS technologies DynDNS see also DDNS 109, 124 CPU usage 27, 35 customer support encryption and local (user) database EMG3425-Q10A User’s Guide...
Page 248 Guide using the web configurator. See web configurator. Quick Start using the WPS. See WPS. MBSSID Media access control media client media file 164, 167 IGMP type see also Internet Group Multicast Protocol media server version EMG3425-Q10A User’s Guide...
Page 249 Per-Hop Behavior, see PHB Point-to-Point Protocol over Ethernet Pool Size Port forwarding Samba 102, 106 default server 102, 106 Scheduling example Server Message Block, see SMB local server Service and port numbers port numbers Service Set 73, 80 services EMG3425-Q10A User’s Guide...
Page 250 Two Rate Three Color Marker, see trTCM Wireless tutorial WLAN button work group name Universal Plug and Play Windows Application WPA compatible Security issues UPnP USB media sharing user authentication local (user) database RADIUS server User Name EMG3425-Q10A User’s Guide...

ZyXEL Communications EMG3425-Q10A User Manual

Contents Overview

Table of Contents

User's Guide

PART I User's Guide

Chapter 1 Introduction

Chapter 2 Introducing the Web Configurator

Chapter 3 EMG3425-Q10A Modes

Chapter 4 Router Mode

Chapter 5 Access Point Mode

Chapter 6 Tutorials

Technical Reference

Part II: Technical Reference

Chapter 7 Monitor

Chapter 8 WAN

Chapter 9 Wireless LAN

Chapter 10 LAN

Chapter 11 DHCP Server

Chapter 12 NAT

Chapter 13 DDNS

Chapter 14 Static Route

Chapter 15 Interface Group

Chapter 16 Firewall

Chapter 17 Content Filtering

Chapter 18 Ipv6 Firewall

Chapter 19 Parental Control

Chapter 20 Bandwidth Management

Chapter 21 Remote Management

Chapter 22 Universal Plug-And-Play (Upnp)

Chapter 23 USB Media Sharing

Chapter 24 Port Configuration

Chapter 25 Maintenance

Chapter 26 Troubleshooting

Appendix A Pop-Up Windows, Javascript and Java Permissions

Appendix B Setting up Your Computer's IP Address

Appendix C Common Services

Appendix D Legal Information

Appendix E Customer Support

Index

Quick Links

Related Manuals for ZyXEL Communications EMG3425-Q10A

Summary of Contents for ZyXEL Communications EMG3425-Q10A