Page 1 User’s Guide VMG8924-B10D/B30D Dual Band Wireless AC/N VDSL2 VoIP Combo WAN Gigabit IAD Default Login Details Version 5.13 Edition 1, 2/2017 LAN IP Address http://192.168.1.1 admin, user Login Password 1234, user Copyright © 2017 Zyxel Communications Corporation...
Page 2: Related Documentation
Every effort has been made to ensure that the information in this manual is accurate. Related Documentation • Quick Start Guide The Quick Start Guide shows how to connect the managed device • More Information Go to support.zyxel.com to find other information on the VMG VMG8924-B10D/B30D User’s Guide...
Page 3: Table Of Contents
ARP Table ............................254 Routing Table ............................256 Multicast Status ..........................258 xDSL Statistics ............................260 Cellular Statistics ..........................263 System ..............................265 User Account ............................266 Remote Management ........................268 SNMP ..............................271 Time Settings ............................273 VMG8924-B10D/B30D User’s Guide...
Page 4 Contents Overview E-mail Notification ..........................275 Log Setting ............................277 Firmware Upgrade ..........................280 Backup Restore ........................... 283 Diagnostic ............................286 Troubleshooting ..........................291 Appendices .............................297 VMG8924-B10D/B30D User’s Guide...
Page 5: Table Of Contents
2.2 Web Configurator Layout ......................26 2.2.1 Title Bar ........................... 26 2.2.2 Navigation Panel ........................27 Chapter 3 Quick Start ............................31 3.1 Overview ............................31 3.2 Quick Start Setup ..........................31 Chapter 4 Tutorials ...............................33 4.1 Overview ............................33 VMG8924-B10D/B30D User’s Guide...
Page 6 6.1.2 What You Need to Know ..................... 69 6.1.3 Before You Begin ........................72 6.2 The Broadband Screen ........................72 6.2.1 Add/Edit Internet Connection ..................... 73 6.3 The Cellular Backup Screen ......................81 6.4 The Advanced Screen ........................85 6.5 Technical Reference ........................88 VMG8924-B10D/B30D User’s Guide...
Page 7 8.6 The STB Vendor ID Screen ......................131 8.7 The Wake on LAN Screen ......................131 8.8 The TFTP Server Name Screen ..................... 132 8.9 Technical Reference ........................132 8.9.1 LANs, WANs and the VMG ....................132 8.9.2 DHCP Setup ......................... 133 VMG8924-B10D/B30D User’s Guide...
Page 8 11.2.1 Add/Edit Port Forwarding ....................163 11.3 The Applications Screen ......................164 11.3.1 Add New Application ....................... 165 11.4 The Port Triggering Screen ......................165 11.4.1 Add/Edit Port Triggering Rule ..................167 11.5 The DMZ Screen .......................... 168 VMG8924-B10D/B30D User’s Guide...
Page 9 15.1.1 What You Can Do in this Chapter ................... 185 15.2 The Interface Grouping Screen ....................185 15.2.1 Interface Group Configuration ..................186 15.2.2 Interface Grouping Criteria .................... 188 Chapter 16 USB Service ............................190 16.1 Overview ............................. 190 VMG8924-B10D/B30D User’s Guide...
Page 10 20.2.1 Add/Edit a Schedule ......................208 Chapter 21 Certificates ............................210 21.1 Overview ............................. 210 21.1.1 What You Can Do in this Chapter ................... 210 21.2 What You Need to Know ......................210 21.3 The Local Certificates Screen ....................210 VMG8924-B10D/B30D User’s Guide...
Page 11 24.1 Overview ............................. 248 24.1.1 What You Can Do in this Chapter ................... 248 24.2 The WAN Status Screen ......................248 24.3 The LAN Status Screen ....................... 249 24.4 The NAT Status Screen ........................ 250 Chapter 25 VoIP Status ............................251 VMG8924-B10D/B30D User’s Guide...
Page 12 User Account............................266 32.1 Overview ............................ 266 32.2 The User Account Screen ......................266 32.2.1 The User Account Add/Edit Screen ................267 Chapter 33 Remote Management ........................268 33.1 Overview ............................. 268 33.2 The MGMT Services Screen ....................... 268 VMG8924-B10D/B30D User’s Guide...
Page 13 Chapter 40 Diagnostic............................286 40.1 Overview ............................. 286 40.1.1 What You Can Do in this Chapter ................... 286 40.2 What You Need to Know ......................286 40.3 Ping & TraceRoute & NsLookup ....................287 40.4 802.1ag ............................287 VMG8924-B10D/B30D User’s Guide...
Page 14 41.6 UPnP ............................. 296 Part III: Appendices ..................297 Appendix A Customer Support ..................... 298 Appendix B Wireless LANs....................... 304 Appendix C IPv6..........................317 Appendix D Services ........................325 Appendix E Legal Information ....................... 329 Index ..............................337 VMG8924-B10D/B30D User’s Guide...
Page 15: User's Guide
User’s Guide...
Page 16: Introducing The Vmg
The VMG works over the analog or digital telephone system, POTS (Plain Old Telephone Service) for VMG8924-B10D, and ISDN/T-ISDN for VMG8924-B30D. The VMG has a USB port for sharing files via a USB storage device or connecting a cellular dongle for a WAN backup connection.
Page 17: Applications For The Vmg
You can also configure IP filtering on the VMG for secure Internet access. When the IP filter is on, all incoming traffic from the Internet to your network is blocked by default unless it is initiated from your VMG8924-B10D/B30D User’s Guide...
Page 18: Vmg's Usb Support
You can also use the VMG as a media server. This lets anyone on your network play video, music, and photos from a USB device (B) connected to the VMG’s USB port (without having to copy them to another computer). VMG8924-B10D/B30D User’s Guide...
Page 19: Wireless Access
WLAN and WPS buttons. Figure 4 Wireless Access Example 1.5 Hardware 1.5.1 Front and Side Panel The following graphic displays the front and side panels of the VMG. VMG8924-B10D/B30D User’s Guide...
Page 20: Leds (Lights)
Chapter 1 Introducing the VMG Figure 5 VMG8924-B10D Front and Side Panels The following table describes the items on the side panels.. Table 1 Side Panel Buttons LABEL DESCRIPTION WLAN Press the WLAN button for more than two seconds to enable the wireless function.
Page 21 The VMG is communicating with 2.4 GHz or 5 GHz wireless clients. Orange Blinking The VMG is setting up a WPS connection with a 2.4 GHz or 5 GHz wireless client. The 2.4 GHz or 5 GHz wireless network is not activated. VMG8924-B10D/B30D User’s Guide...
Page 22: Using The Wi-Fi And Wps Buttons
To turn off the wireless network, press the Wi-Fi On/Off button for more than five seconds. The WLAN/WPS LED turns off when the wireless network is off. 1.6.2 Rear Panel The following graphic displays the rear panel of the VMG. VMG8924-B10D/B30D User’s Guide...
Page 23: The Reset Button
Chapter 1 Introducing the VMG Figure 7 VMG8924-B10D Rear Panel The following table describes the items on the rear panel.. Table 3 Rear Panel Ports LABEL DESCRIPTION Connect a RJ-11 cable to the DSL port for Internet access. LAN1 ~ LAN4 Connect computers or other Ethernet devices to Ethernet ports for Internet access.
Page 24: The Web Configurator
H A P T E R The Web Configurator 2.1 Overview The screens are based on VMG8924-B10D. The web configurator is an HTML-based management interface that allows easy setup and management via Internet browser. Use Internet Explorer 8.0 and later versions or Mozilla Firefox 3 and later versions or Safari 2.0 and later versions.
Page 25 Figure 9 Change Password Screen Configure basic Internet access, and wireless settings. The Network Map page appears. Figure 10 Network Map Click Status to display the Status screen, where you can view the VMG’s interface and system information. VMG8924-B10D/B30D User’s Guide...
Page 26: Web Configurator Layout
Language: Select the language you prefer. Quick Start: Click this icon to open screens where you can configure the VMG’s time zone Internet access, and wireless settings. Logout: Click this icon to log out of the web configurator. VMG8924-B10D/B30D User’s Guide...
Page 27: Navigation Panel
Use this screen to forward DNS queries for certain domain names through a specific WAN interface to its DNS server(s). Policy Route Use this screen to configure policy routing on the VMG. Use this screen to configure Routing Information Protocol to exchange routing information with other routers. VMG8924-B10D/B30D User’s Guide...
Page 28 (such as parental control) is enforced. Certificates Local Certificates Use this screen to view a summary list of certificates and manage certificates and certification requests. Trusted CA Use this screen to view and manage the list of the trusted CAs. VoIP VMG8924-B10D/B30D User’s Guide...
Page 29 Use this screen to view the status of all MLD settings on the VMG. xDSL Statistics xDSL Statistics Use this screen to view the VMG’s xDSL traffic statistics. Cellular Cellular Statistics Use this screen to look at cellular Internet connection status. Statistics Maintenance VMG8924-B10D/B30D User’s Guide...
Page 30 Use this screen to configure CFM (Connectivity Fault Management) MD (maintenance domain) and MA (maintenance association), perform connectivity tests and view test reports. OAM Ping Use this screen to view information to help you identify problems with the DSL connection. VMG8924-B10D/B30D User’s Guide...
Page 31: Quick Start
Select the time zone of your location. Click Next. Figure 12 Quick Start - Welcome Enter your Internet connection information in this screen. The screen and fields to enter may vary depending on your current connection type. Click Next. VMG8924-B10D/B30D User’s Guide...
Page 32 Turn the wireless LAN on or off. If you keep it on, record the security settings so you can configure your wireless clients to connect to the VMG. Click Save. Figure 14 Quick Start - Wireless Your VMG saves your settings and attempts to connect to the Internet. VMG8924-B10D/B30D User’s Guide...
Page 33: Tutorials
Service Provider (ISP) to configure the VMG. Be sure to contact your service provider for any information you need to configure the Broadband screens. Click Network Setting > Broadband to open the following screen. Click Add New WAN Interface. In this example, the DSL connection has the following information. General Name MyDSLConnection VMG8924-B10D/B30D User’s Guide...
Page 34 Then select DNS as Static and enter the DNS server addresses provided to you, such as 192.168.5.2 (DNS server1)/192.168.5.1 (DNS server2). Leave the rest of the fields to the default settings. Click Apply to save your settings. VMG8924-B10D/B30D User’s Guide...
Page 35 Chapter 4 Tutorials You should see a summary of your new DSL connection setup in the Broadband screen as follows. VMG8924-B10D/B30D User’s Guide...
Page 36: Setting Up A Secure Wireless Network
802.11b/g/n Mixed Click Network Setting > Wireless to open the General screen. Select More Secure as the security level and WPA2-PSK as the security mode. Configure the screen using the provided parameters (see page 36). Click Apply. VMG8924-B10D/B30D User’s Guide...
Page 37 Thomas can now use the WPS feature to establish a wireless connection between his notebook and the VMG (see Section 4.3.2 on page 38). He can also use the notebook’s wireless client to search for the VMG (see Section 4.3.3 on page 41). VMG8924-B10D/B30D User’s Guide...
Page 38: Using Wps
Push and hold the WPS button located on the VMG’s front panel for more than five seconds. Alternatively, you may log into VMG’s web configurator and go to the Network Setting > Wireless > WPS screen. Enable the WPS function for method 1 and click Apply. Then click the Connect button. VMG8924-B10D/B30D User’s Guide...
Page 39 Launch your wireless client’s configuration utility. Go to the WPS settings and select the PIN method to get a PIN number. Log into VMG’s web configurator and go to the Network Setting > Wireless > WPS screen. Enable the WPS function and click Apply. VMG8924-B10D/B30D User’s Guide...
Page 40 This may take up to two minutes. The wireless client is then able to communicate with the VMG securely. The following figure shows you how to set up a wireless network and its security on a VMG and a wireless client by using PIN method. VMG8924-B10D/B30D User’s Guide...
Page 41: Without Wps
Use the wireless adapter’s utility installed on the notebook to search for the “Example” SSID. Then enter the “DoNotStealMyWirelessNetwork” pre-shared key to establish an wireless Internet connection. Note: The VMG supports IEEE 802.11b and IEEE 802.11g wireless clients. Make sure that your notebook or computer’s wireless adapter supports one of these standards. VMG8924-B10D/B30D User’s Guide...
Page 42: Setting Up Multiple Wireless Groups
Pre-Shared Key ForCompanyOnly 123456789 guest123 Click Network Setting > Wireless to open the General screen. Use this screen to set up the company’s general wireless network group. Configure the screen using the provided parameters and click Apply. VMG8924-B10D/B30D User’s Guide...
Page 43 Chapter 4 Tutorials Click Network Setting > Wireless > Guest/More AP to open the following screen. Click the Edit icon to configure the second wireless network group. Configure the screen using the provided parameters and click Apply. VMG8924-B10D/B30D User’s Guide...
Page 44 Chapter 4 Tutorials In the Guest/More AP screen, click the Edit icon to configure the third wireless network group.Configure the screen using the provided parameters and click Apply. VMG8924-B10D/B30D User’s Guide...
Page 45: Using The File Sharing Feature
• Access the shared files of your USB device from a computer. 4.5.1 Set Up File Sharing To set up file sharing you need to connect your USB device, enable file sharing and set up your share(s). VMG8924-B10D/B30D User’s Guide...
Page 46 If the share names include the following special characters: ", ', `, <, >, ^, $, |, &, ;, \, /, :, *, and ?, the following screen will appear. To avoid this, please correct your share names in the USB, and repeat the steps above. VMG8924-B10D/B30D User’s Guide...
Page 47 Account button in the Network Setting > Maintenance > User Account screen. Please see Chapter 29 on page 225, for detailed information about User Account screen. After you create a new user account, the screen should look like the following. VMG8924-B10D/B30D User’s Guide...
Page 48: Access Your Shared Files From A Computer
Before you begin, connect the USB storage device containing the media files you want to play to the USB port of your VMG. 4.6.1 Configuring the VMG To use your VMG as a media server, click Network Setting > USB Service > Media Server. VMG8924-B10D/B30D User’s Guide...
Page 49: Using Windows Media Player
If you cannot see the VMG in the left panel as shown above, go to Organize > Manage Libraries > Music/Videos/Pictures/Recorded TV > Add > \\192.168.1.1\BobShare. (Select the folder containing the media you wish to upload to Windows Media Player.) VMG8924-B10D/B30D User’s Guide...
Page 50: Using A Digital Media Adapter
USB storage device in your TV screen. Note: For this tutorial, your DMA-2500 should already be set up with the TV according to the instructions in the DMA-2500 Quick Start Guide. Connect the DMA-2500 to an available LAN port in your VMG. VMG8924-B10D/B30D User’s Guide...
Page 51 MyMedia to open the following screen. Select the GPON Device as your media server. The screen shows you the list of available media files in the USB storage device. Select the file you want to open and push the Play button in the remote control. VMG8924-B10D/B30D User’s Guide...
Page 52: Configuring Static Route For Routing To Another Network
You need to specify a static routing rule on the VMG to specify R as the router in charge of forwarding traffic to N2. In this case, the VMG routes traffic from A to R and then R routes the traffic to B. VMG8924-B10D/B30D User’s Guide...
Page 53 Click Add new Static Route in the Static Route screen. Configure the Static Route Setup screen using the following settings: Select Enable in the Active field. Enter the Route Name as R. Set IP Type to IPv4. VMG8924-B10D/B30D User’s Guide...
Page 54: Configuring Qos Queue And Class Setup
7. Note: QoS is applied to traffic flowing out of the VMG. Traffic that does not match this class is assigned a priority queue based on the internal QoS mapping table on the VMG. VMG8924-B10D/B30D User’s Guide...
Page 55 Click Queue Setup > Add new Queue to create a new queue. In the screen that opens, check Active and enter or select the following values: • Name: E-mail • Interface: WAN • Priority: 1 (High) • Weight: 8 • Rate Limit: 5,000 (kbps) Tutorial: Advanced > QoS > Queue Setup VMG8924-B10D/B30D User’s Guide...
Page 56 This maps e-mail traffic coming from port 25 to the highest priority, which you have created in the previous screen (see the IP Protocol field). This also maps your computer’s IP address and MAC address to the E-mail queue (see the Source fields). VMG8924-B10D/B30D User’s Guide...
Page 57: Access The Vmg Using Ddns
Then you will need to configure the same account and host name on the VMG later. 4.9.2 Configuring DDNS on Your VMG Configure the following settings in the Network Setting > DNS > Dynamic DNS screen. • Select Enable Dynamic DNS. VMG8924-B10D/B30D User’s Guide...
Page 58: Testing The Ddns Setting
Josephine’s computer connects wirelessly to the Internet through the VMG. Thomas decides to use the Security > MAC Filter screen to grant wireless network access to his computer but not to Josephine’s computer. VMG8924-B10D/B30D User’s Guide...
Page 59: Access Your Shared Files From A Computer
Josephine and others not listed in this screen will no longer be able to access the Internet through the VMG. 4.11 Access Your Shared Files From a Computer Here is how to use an FTP program to access a file storage device connected to the VMG’s USB port. VMG8924-B10D/B30D User’s Guide...
Page 60 In FileZilla enter the IP address of the VMG (the default is 192.168.1.1), your account’s user name and password and port 21 and click Quickconnect. A screen asking for password authentication appears. File Sharing via Windows Explorer Once you log in the USB device displays in the folder. VMG8924-B10D/B30D User’s Guide...
Page 61: Technical Reference
Technical Reference...
Page 62: Network Map And Status Screens
You can use the Status screen to look at the current status of the VMG, system resources, and interfaces (LAN, WAN, and WLAN). 5.2 The Network Map Screen Use this screen to view the network connection status of the device and its clients. A warning message appears if there is a connection problem. VMG8924-B10D/B30D User’s Guide...
Page 63: The Status Screen
VMG to update this screen in Refresh interval. Figure 16 Network Map: List View Mode 5.3 The Status Screen Use this screen to view the status of the VMG. Click Status to open this screen. VMG8924-B10D/B30D User’s Guide...
Page 64 This field displays the serial number of the VMG. Firmware This is the current version of the firmware inside the VMG. Version WAN Information (These fields display when you have a WAN connection.) Encapsulation This field displays the current encapsulation method. VMG8924-B10D/B30D User’s Guide...
Page 65 100%, the VMG is running at full load, and the throughput is not going to improve anymore. If you want some applications to have more throughput, you should turn off other applications (for example, using QoS; see Chapter 10 on page 142). VMG8924-B10D/B30D User’s Guide...
Page 66 SIP account when you turn on the VMG or when you activate it. Registered - The SIP account is already registered with the SIP server. You can use it to make a VoIP call. VMG8924-B10D/B30D User’s Guide...
Page 67 This column displays the service provider name and SIP number for each SIP account. This field displays the account number and service domain of the SIP account. You can change these in the VoIP > SIP screens. VMG8924-B10D/B30D User’s Guide...
Page 68: Broadband
MODE ENCAPSULATION CONNECTION SETTINGS ADSL/VDSL over Routing PPPoE PPP information, IPv4/IPv6 IP address, routing feature, DNS server, VLAN, QoS, and MTU IPoE IPv4/IPv6 IP address, routing feature, DNS server, VLAN, QoS, and MTU Bridge VLAN and QoS VMG8924-B10D/B30D User’s Guide...
Page 69: What You Need To Know
IPv6 address size to 128 bits (from the 32-bit IPv4 address) allows up to 3.4 x 10 IP addresses. The VMG can use IPv4/IPv6 dual stack to connect to IPv4 and IPv6 networks, and supports IPv6 rapid deployment (6RD). VMG8924-B10D/B30D User’s Guide...
Page 70 Border Relay router (BR in the figure) to connect to the native IPv6 Internet. The local network can also use IPv4 services. The VMG uses it’s configured IPv4 WAN IP to route IPv4 traffic to the IPv4 Internet. VMG8924-B10D/B30D User’s Guide...
Page 71: Dual Stack Lite
Router (AFTR in the graphic) to connect to the IPv4 Internet. The local network can also use IPv6 services. The VMG uses it’s configured IPv6 WAN IP to route IPv6 traffic to the IPv6 Internet. Figure 20 Dual Stack Lite VMG8924-B10D/B30D User’s Guide...
Page 72: Before You Begin
This shows whether Multicast Listener Discovery (MLD) is activated or not for this connection. MLD is not available when the connection uses the bridging service. Modify Click the Edit icon to configure the WAN connection. Click the Delete icon to remove the WAN connection. VMG8924-B10D/B30D User’s Guide...
Page 73: Add/Edit Internet Connection
Use Routing mode if your ISP give you one IP address only and you want multiple computers to share an Internet account. The following example screen displays when you select the ADSL over ATM connection type, Routing mode, and PPPoE encapsulation. The screen varies when you select other interface type, encapsulation, and IPv6/IPv4 mode. VMG8924-B10D/B30D User’s Guide...
Page 74 Table 10 Network Setting > Broadband > Add New WAN Interface/Edit (Routing Mode) LABEL DESCRIPTION General Active Select Enable or Disable to activate or deactivate the interface. Name Specify a descriptive name for this connection. Type Select whether it is an ADSL/VDSL over PTM or ADSL over ATM connection. VMG8924-B10D/B30D User’s Guide...
Page 75 The valid range for the VPI is 0 to 255. Enter the VPI assigned to you. The valid range for the VCI is 32 to 65535 (0 to 31 is reserved for local management of ATM traffic). Enter the VCI assigned to you. VMG8924-B10D/B30D User’s Guide...
Page 76 Select Obtain DNS Info Automically if you want the VMG to use the DNS server addresses assigned by your ISP. Select Use Following Static DNS Address if you want the VMG to use the DNS server addresses you configure manually. VMG8924-B10D/B30D User’s Guide...
Page 77 IPv6 Address (This is available only when you select IPv4 IPv6 DualStack or IPv6 Only in the IPv4/IPv6 Mode field.) Obtain an IPv6 Select Obtain an IPv6 Address Automatically if you want to have the VMG use the IPv6 prefix Address from the connected router’s Router Advertisement (RA) to generate an IPv6 address. Automatically VMG8924-B10D/B30D User’s Guide...
Page 78: Bridge Mode
Click the Add new WAN Interface in the Network Setting > Broadband screen or the Edit icon next to the connection you want to configure. Select Bridge as the encapsulation mode. The screen varies depending on the interface type you select. If you select ADSL/VDSL over PTM as the interface type, the following screen appears. VMG8924-B10D/B30D User’s Guide...
Page 79 Type the VLAN ID number (from 0 to 4094) for traffic through this connection. Click OK to save your changes. Cancel Click Cancel to exit this screen without saving. If you select ADSL over ATM as the interface type, the following screen appears. VMG8924-B10D/B30D User’s Guide...
Page 80 SCR, which must be less than the PCR. Note that system default is 0 cells/sec. Maximum Maximum Burst Size (MBS) refers to the maximum number of cells that can be sent at the peak Burst Size rate. Type the MBS, which is less than 65535. [cells] VMG8924-B10D/B30D User’s Guide...
Page 81: The Cellular Backup Screen
Disconnect the DSL and Ethernet WAN ports to use the cellular dongle as your primary WAN connection. The VMG automatically uses a wired WAN connection when available. Figure 25 Internet Access Application: Cellular WAN Use this screen to configure your cellular settings. Click Network Setting > Broadband > Cellular Backup. VMG8924-B10D/B30D User’s Guide...
Page 82 Chapter 6 Broadband Note: The actual data rate you obtain varies depending the cellular card you use, the signal strength to the service provider’s base station, and so on. Figure 26 Network Setting > Broadband > Cellular Backup VMG8924-B10D/B30D User’s Guide...
Page 83 Enter your WAN IP address in this field if you selected Use the following static IP address. Subnet Mask Enter the subnet mask of the IP address. Obtain DNS info Select this to have the VMG get the DNS server addresses from the ISP automatically. dynamically VMG8924-B10D/B30D User’s Guide...
Page 84 VMG8924-B10D/B30D User’s Guide...
Page 85: The Advanced Screen
Table 14 VDSL Profiles MAX. NUMBER OF CARRIER BANDWIDTH DOWNSTREAM PROFILE DOWNSTREAM BANDWIDTH POWER (DBM) (MHZ) THROUGHPUT CARRIERS (KHZ) (MBIT/S) 8.832 2048 4.3125 17.5 8.832 2048 4.3125 20.5 1972 4.3125 11.5 VMG8924-B10D/B30D User’s Guide...
Page 86 However, enabling PhyR US can decrease the US line rate. Enabling or disabling PhyR will require the CPE to retrain. For PhyR to function, the DSLAM must also support PhyR and have it enabled. VMG8924-B10D/B30D User’s Guide...
Page 87 The VMG must comply with at least one profile specified in G.993.2. but compliance with more than one profile is allowed. Apply Click Apply to save your changes back to the VMG. Cancel Click Cancel to return to the previous configuration. VMG8924-B10D/B30D User’s Guide...
Page 88: Technical Reference
The first method allows multiplexing of multiple protocols over a single ATM virtual circuit (LLC-based multiplexing) and the second method assumes that each protocol is carried over a separate ATM virtual circuit (VC-based multiplexing). Please refer to RFC 1483 for more detailed information. VMG8924-B10D/B30D User’s Guide...
Page 89 If the PCR, SCR or MBS is set to the default of "0", the system will assign a maximum value that correlates to your upstream line rate. The following figure illustrates the relationship between PCR, SCR and MBS. VMG8924-B10D/B30D User’s Guide...
Page 90: Atm Traffic Classes
A static IP is a fixed IP that your ISP gives you. A dynamic IP is not fixed; the ISP assigns you a different one each time. The Single User Account feature can be enabled or disabled if you have either a dynamic or VMG8924-B10D/B30D User’s Guide...
Page 91: Introduction To Vlans
IGMP version 2 and version 1, please see sections 4 and 5 of RFC 2236. The class D IP address is used to identify host groups and can be in the range 224.0.0.0 to VMG8924-B10D/B30D User’s Guide...
Page 92: Dns Server Address Assignment
(start from the left) in the address compose the network address. The prefix length is written as “/x” where x is a number. For example, 2001:db8:1a2b:15::1a2f:0/32 means that the first 32 bits (2001:db8) is the subnet prefix. VMG8924-B10D/B30D User’s Guide...
Page 93: Wireless
Finding Out More Section 7.9 on page 107 for advanced technical information on wireless networks. VMG8924-B10D/B30D User’s Guide...
Page 94: The General Screen
Apply to confirm. You must then change the wireless settings of your computer to match the VMG’s new settings. Click Network Setting > Wireless to open the General screen. Figure 29 Network Setting > Wireless > General VMG8924-B10D/B30D User’s Guide...
Page 95 Or you can select No Security to allow any client to associate this network without any data encryption or authentication. See the following sections for more details about this field. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG8924-B10D/B30D User’s Guide...
Page 96: No Security
Your VMG allows you to configure up to four 64-bit or 128-bit WEP keys but only one key can be enabled at any one time. In order to configure and enable WEP encryption, click Network Setting > Wireless to display the General screen, then select Basic as the security level. VMG8924-B10D/B30D User’s Guide...
Page 97: More Secure (Wpa(2)-Psk)
It offers slightly better security, although the use of PSK makes it less robust than it could be. Click Network Setting > Wireless to display the General screen. Select More Secure as the security level. Then select WPA-PSK or WPA2-PSK from the Security Mode list. VMG8924-B10D/B30D User’s Guide...
Page 98: The Guest/More Ap Screen
Update Timer all clients. 7.3 The Guest/More AP Screen This screen allows you to enable and configure multiple Basic Service Sets (BSSs) on the VMG. Click Network Setting > Wireless > Guest/More AP. The following screen displays. VMG8924-B10D/B30D User’s Guide...
Page 99: Edit Guest/More Ap
Click the Edit icon to configure the SSID profile. 7.3.1 Edit Guest/More AP Use this screen to edit an SSID profile. Click the Edit icon next to an SSID in the Guest/More AP screen. The following screen displays. VMG8924-B10D/B30D User’s Guide...
Page 100 Access Scenario If you select Home Guest, clients can connect to each other directly. If you select External Guest, clients are blocked from connecting to each other directly. Max. Upstream Specify the maximum rate for upstream wireless traffic to the WAN from this WLAN in kilobits per Bandwidth second (Kbps). VMG8924-B10D/B30D User’s Guide...
Page 101: Mac Authentication
MAC (Media Access Control) address. The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02. You need to know the MAC addresses of the devices to configure this screen. VMG8924-B10D/B30D User’s Guide...
Page 102 Click the Edit icon and type the MAC address of the peer device in a valid MAC address format (six hexadecimal character pairs, for example 12:34:56:78:9a:bc). Click the Delete icon to delete the entry. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG8924-B10D/B30D User’s Guide...
Page 103: The Wps Screen
Method 2 Use this section to set up a WPS wireless network by entering the PIN of the client into the VMG. Select Enable and click Apply to activate WPS method 2 on the VMG. VMG8924-B10D/B30D User’s Guide...
Page 104: The Wmm Screen
Use this screen to enable Wi-Fi MultiMedia (WMM) and WMM Power Save in wireless networks for multimedia applications. Click Network Setting > Wireless > WMM. The following screen displays. Figure 37 Network Setting > Wireless > WMM VMG8924-B10D/B30D User’s Guide...
Page 105: The Others Screen
Set the output power of the VMG. If there is a high density of APs in an area, decrease the output power to reduce interference with other APs. Select one of the following: 20%, 40%, 60%, 80% or 100%. VMG8924-B10D/B30D User’s Guide...
Page 106: The Channel Status Screen
Note: The Scan button only works when the VMG uses 20MHz for the wireless channel width. You can go to the General screen, click the more link, and Network Setting > Wireless > then change the channel width setting in the Bandwidth field. VMG8924-B10D/B30D User’s Guide...
Page 107: Technical Reference
The wireless clients connect to the access points. • An “ad-hoc” type of network is one in which there is no access point. Wireless clients connect to one another in order to exchange information. The following figure provides an example of a wireless network. VMG8924-B10D/B30D User’s Guide...
Page 108 When you create a network, you must select a channel to use. Since the available unlicensed spectrum varies from one country to another, the number of available channels also varies. VMG8924-B10D/B30D User’s Guide...
Page 109: Additional Wireless Terms
For example, if your mother owns a 1970 Dodge Challenger and her favorite movie is VMG8924-B10D/B30D User’s Guide...
Page 110: Mac Address Filter
Some wireless devices, such as scanners, can detect wireless networks but cannot use wireless networks. These kinds of wireless devices might not have MAC addresses. Hexadecimal characters are 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, A, B, C, D, E, and F. VMG8924-B10D/B30D User’s Guide...
Page 111: Signal Problems
Problems with absorption occur when physical objects (such as thick walls) are between the two radios, muffling the signal. VMG8924-B10D/B30D User’s Guide...
Page 112: Bss
• You must use different keys for different BSSs. If two wireless devices have different BSSIDs (they are in different BSSs), but have the same keys, they may hear each other’s communications (but not communicate with each other). • MBSSID should not replace but rather be used in conjunction with 802.1x security. VMG8924-B10D/B30D User’s Guide...
Page 113: Preamble Type
(see the device’s User’s Guide for how to do this - for the VMG, see Section 7.6 on page 104). Press the button on one of the devices (it doesn’t matter which). For the VMG you must press the WPS button for more than five seconds. VMG8924-B10D/B30D User’s Guide...
Page 114 If you cannot connect, check the list of associated wireless clients in the AP’s configuration utility. If you see the wireless client in the list, WPS was successful. The following figure shows a WPS-enabled wireless client (installed in a notebook computer) connecting to the WPS-enabled AP via the PIN method. VMG8924-B10D/B30D User’s Guide...
Page 115 If the registrar is already part of a network, it sends the existing information. If not, it generates the SSID and WPA(2)-PSK randomly. The following figure shows a WPS-enabled client (installed in a notebook computer) connecting to a WPS-enabled access point. VMG8924-B10D/B30D User’s Guide...
Page 116 It will be the registrar in all subsequent WPS connections in which it is involved. If you want a configured AP to act as an enrollee, you must reset it to its factory defaults. 7.9.8.4 Example WPS Network Setup This section shows how security settings are distributed in an example WPS setup. VMG8924-B10D/B30D User’s Guide...
Page 117 In step 3, you add another access point (AP2) to your network. AP2 is out of range of AP1, so you cannot use AP1 for the WPS handshake with the new access point. However, you know that Client 2 supports the registrar function, so you use it to perform the WPS handshake instead. VMG8924-B10D/B30D User’s Guide...
Page 118 (if the device supports this feature). Then, you can enter the key into the non-WPS device and join the network as normal (the non-WPS device must also support WPA-PSK or WPA2-PSK). VMG8924-B10D/B30D User’s Guide...
Page 119 Check the MAC addresses of your wireless clients (usually printed on a label on the bottom of the device). If there is an unknown MAC address you can remove it or reset the AP. VMG8924-B10D/B30D User’s Guide...
Page 120: Home Networking
• Use the Wake on LAN screen to remotely turn on a device on the network. (Section 8.7 on page 131). • Use the TFTP Server Name screen to identify a TFTP server for configuration file download using DHCP option 66. (Section 8.8 on page 132). VMG8924-B10D/B30D User’s Guide...
Page 121: What You Need To Know
UPnP devices and enable exchange of simple product and service descriptions. NAT traversal allows the following: • Dynamic port mapping • Learning public IP addresses VMG8924-B10D/B30D User’s Guide...
Page 122: Before You Begin
IP address of your VMG. Enter the IP subnet mask into the IP Subnet Mask field. Unless instructed otherwise it is best to leave this alone, the configurator will automatically compute a subnet mask based upon the IP address you entered. VMG8924-B10D/B30D User’s Guide...
Page 123 Table 29 Network Setting > Home Networking > LAN Setup LABEL DESCRIPTION Interface Group Group Name Select the interface group name for which you want to configure LAN settings. See Chapter 15 on page 185 for how to create a new interface group. VMG8924-B10D/B30D User’s Guide...
Page 124 Select this to manually enter an interface ID for the LAN interface’s link-local address. LAN Global Identifier Type EUI64 Select this to have the VMG generate an interface ID using the EUI-64 format for its global address . VMG8924-B10D/B30D User’s Guide...
Page 125: The Static Dhcp Screen
Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. 8.3 The Static DHCP Screen This table allows you to assign IP addresses on the LAN to specific individual computers based on their MAC Addresses. VMG8924-B10D/B30D User’s Guide...
Page 126 If you click Static DHCP Configuration in the Static DHCP screen or the Edit icon next to a static DHCP entry, the following screen displays. Figure 49 Static DHCP: Static DHCP Configuration/Edit VMG8924-B10D/B30D User’s Guide...
Page 127: The Upnp Screen
UPnP. Use the following screen to configure the UPnP settings on your VMG. Click Network Setting > Home Networking > UPnP to display the screen shown next. Figure 50 Network Setting > Home Networking > UPnP VMG8924-B10D/B30D User’s Guide...
Page 128: Turning On Upnp In Windows 7 Example
Make sure the computer is connected to a LAN port of the VMG. Turn on your computer and the VMG. Click the start icon, Control Panel and then the Network and Sharing Center. Click Change Advanced Sharing Settings. VMG8924-B10D/B30D User’s Guide...
Page 129: The Additional Subnet Screen
Use the Additional Subnet screen to configure IP alias and public static IP. IP alias allows you to partition a physical network into different logical networks over the same Ethernet interface. The VMG supports multiple logical LAN interfaces via its physical Ethernet interface with the VMG8924-B10D/B30D User’s Guide...
Page 130 Select Enable to enable the VMG to provide public IP addresses by DHCP server. by DHCP Enable ARP Select Enable to enable the ARP (Address Resolution Protocol) proxy. Proxy Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG8924-B10D/B30D User’s Guide...
Page 131: The Stb Vendor Id Screen
You need to know the MAC address of the LAN device. It may be on a label on the device or in its documentation. Click Network Setting > Home Networking > Wake on Lan to open this screen. Figure 53 Network Setting > Home Networking > Wake on Lan VMG8924-B10D/B30D User’s Guide...
Page 132: The Tftp Server Name Screen
LANs, WANs and the VMG The actual physical connection determines whether the VMG ports are LAN or WAN ports. There are two separate IP networks, one inside the LAN network and the other outside the WAN network as shown next. VMG8924-B10D/B30D User’s Guide...
Page 133: Dhcp Setup
Please note that DNS proxy works only when the ISP uses the IPCP DNS server extensions. It does not mean you can leave the DNS servers out of the DHCP setup under all circumstances. If your ISP gives you explicit DNS servers, make sure that you enter their IP addresses in the DHCP Setup screen. VMG8924-B10D/B30D User’s Guide...
Page 134: Lan Tcp/Ip
Note: Regardless of your particular situation, do not create an arbitrary IP address; always follow the guidelines above. For more information on address assignment, please refer to RFC 1597, “Address Allocation for Private Internets” and RFC 1466, “Guidelines for Management of IP Address Space”. VMG8924-B10D/B30D User’s Guide...
Page 135: Routing
Figure 56 Example of Routing Topology 9.2 The Routing Screen Use this screen to view and configure the static route rules on the VMG. Click Network Setting > Routing > Static Route to open the following screen. VMG8924-B10D/B30D User’s Guide...
Page 136: Add/Edit Static Route
Use this screen to add or edit a static route. Click Add new static route in the Routing screen or the Edit icon next to the static route you want to edit. The screen shown next appears. Figure 58 Routing: Add/Edit VMG8924-B10D/B30D User’s Guide...
Page 137: The Dns Route Screen
A gray bulb signifies that this DNS route is not active. Domain Name This is the host name or domain name of the DNS route entry. WAN Interface This is the WAN connection through which the VMG forwards DNS requests for this domain name. VMG8924-B10D/B30D User’s Guide...
Page 138: The Dns Route Add Screen
Policy-based routing is applied to outgoing packets, prior to the normal routing. You can use source-based policy forwarding to direct traffic from different users through different connections or distribute traffic among multiple paths for load sharing. VMG8924-B10D/B30D User’s Guide...
Page 139 This is the WAN interface through which the traffic is routed. Modify Click the Edit icon to edit this policy. Click the Delete icon to remove a policy from the VMG. A window displays asking you to confirm that you want to delete the policy. VMG8924-B10D/B30D User’s Guide...
Page 140: Add/Edit Policy Route
Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. 9.5 RIP Routing Information Protocol (RIP, RFC 1058 and RFC 1389) allows a device to exchange routing information with other routers. VMG8924-B10D/B30D User’s Guide...
Page 141: The Rip Screen
Select the check box to activate the settings. Disable Default Select the check box to set the VMG to not send the route information to the default Gateway gateway. Apply Click Apply to save your changes back to the VMG. VMG8924-B10D/B30D User’s Guide...
Page 142: Quality Of Service (Qos)
• The Shaper Setup screen limits outgoing traffic transmission rate on the selected interface (Section 10.6 on page 152). • The Policer Setup screen to control incoming traffic transmission rate and bursts (Section 10.7 on page 153). VMG8924-B10D/B30D User’s Guide...
Page 143: What You Need To Know
(or queues). Your VMG uses the Token Bucket algorithm to allow a certain amount of large bursts while keeping a limit at the average rate. Traffic Rate Traffic Rate Time Time (Before Traffic Shaping) (After Traffic Shaping) VMG8924-B10D/B30D User’s Guide...
Page 144: Traffic Policing
Click Network Setting > QoS > General to open the screen as shown next. Use this screen to enable or disable QoS and set the upstream bandwidth. See Section 10.1 on page 142 for more information. Figure 64 Network Settings > QoS > General VMG8924-B10D/B30D User’s Guide...
Page 145: The Queue Setup Screen
Cancel Click Cancel to restore your previously saved settings. 10.4 The Queue Setup Screen Click Network Setting > QoS > Queue Setup to open the screen as shown next. Use this screen to configure QoS queue assignment. VMG8924-B10D/B30D User’s Guide...
Page 146 This shows the maximum transmission rate allowed for traffic on this queue. Modify Click the Edit icon to edit the queue. Click the Delete icon to delete an existing queue. Note that subsequent rules move up by one when you take this action. VMG8924-B10D/B30D User’s Guide...
Page 147: Adding A Qos Queue
10.5 The Classification Setup Screen Use this screen to add, edit or delete QoS classifiers. A classifier groups traffic into data flows according to specific criteria such as the source address, destination address, source port number, destination port VMG8924-B10D/B30D User’s Guide...
Page 148: Add/Edit Qos Class
Click the Delete icon to delete an existing classifier. Note that subsequent rules move up by one when you take this action. 10.5.1 Add/Edit QoS Class Click Add New Classification in the Classification Setup screen or the Edit icon next to a classifier to open the following screen. VMG8924-B10D/B30D User’s Guide...
Page 149 Select an existing number for where you want to put this classifier to move the classifier to the Order number you selected after clicking Apply. Select Last to put this rule in the back of the classifier list. VMG8924-B10D/B30D User’s Guide...
Page 150 This field is available only when you select IP in the Ether Type field. Select this option and select the protocol (service type) from TCP, UDP, ICMP or IGMP. If you select User defined, enter the protocol (service type) number. VMG8924-B10D/B30D User’s Guide...
Page 151 Unchange, the VMG forward traffic of this class according to the default routing table. Step5: Outgoing Queue Selection To Queue Index Select a queue that applies to this class. You should have configured a queue in the Queue Setup screen already. VMG8924-B10D/B30D User’s Guide...
Page 152: The Qos Shaper Setup Screen
Rate Limit (kbps) This shows the average rate limit of traffic bursts for this shaper. Modify Click the Edit icon to edit the shaper. Click the Delete icon to delete an existing shaper. Note that subsequent rules move up by one when you take this action. VMG8924-B10D/B30D User’s Guide...
Page 153: Add/Edit A Qos Shaper
The following table describes the labels in this screen. Table 51 Network Setting > QoS > Policer Setup LABEL DESCRIPTION Add new Policer Click this to create a new entry. This is the index number of the entry. VMG8924-B10D/B30D User’s Guide...
Page 154: Add/Edit A Qos Policer
Figure 72 Policer Setup: Add/Edit The following table describes the labels in this screen. Table 52 Policer Setup: Add/Edit LABEL DESCRIPTION Active Select Enable or Disable to activate or deactivate the policer. Name Enter the descriptive name of this policer. VMG8924-B10D/B30D User’s Guide...
Page 155: Technical Reference
A VLAN tag includes the 12-bit VLAN ID and 3-bit user priority. The VLAN ID associates a frame with a specific VLAN and provides the information that devices need to process the frame across the network. VMG8924-B10D/B30D User’s Guide...
Page 156 The DSCP value determines the forwarding behavior, the PHB (Per-Hop Behavior), that each packet gets across the DiffServ network. Based on the marking rule, different kinds of traffic can be marked for different kinds of forwarding. Resources can then be allocated according to the DSCP values and the configured policies. VMG8924-B10D/B30D User’s Guide...
Page 157: Automatic Priority Queue Assignment
QUEUE PRIORITY TOS (IP IP PACKET LENGTH DSCP (ETHERNET PRECEDENCE) (BYTE) PRIORITY) 000000 000000 >1100 001110 250~1100 001100 001010 001000 010110 010100 010010 010000 011110 <250 011100 011010 011000 100110 100100 100010 100000 101110 101000 110000 111000 VMG8924-B10D/B30D User’s Guide...
Page 158: Token Bucket
• A packet arrives. The packet is marked green and can be transmitted if the number of tokens in the CBS bucket is equal to or greater than the size of the packet (in bytes). • After a packet is transmitted, a number of tokens corresponding to the packet size is removed from the CBS bucket. VMG8924-B10D/B30D User’s Guide...
Page 159 • If the PBS bucket has enough tokens, the VMG checks the CBS bucket. The packet is marked green and can be transmitted if the number of tokens in the CBS bucket is equal to or greater than the size of the packet (in bytes). Otherwise, the packet is marked yellow. VMG8924-B10D/B30D User’s Guide...
Page 160: Network Address Translation (Nat)
IP address of a host when the packet is in the local network, while the global address refers to the IP address of the host when the same packet is traveling in the WAN side. VMG8924-B10D/B30D User’s Guide...
Page 161: The Port Forwarding Screen
(B in the example) and assign a default server IP address of 192.168.1.35 to a third (C in the example). You assign the LAN IP addresses and the ISP assigns the WAN IP address. The NAT network appears as a single host on the Internet. VMG8924-B10D/B30D User’s Guide...
Page 162 This is the last external port number that identifies a service. Translation Start This is the first internal port number that identifies a service. Port Translation End This is the last internal port number that identifies a service. Port VMG8924-B10D/B30D User’s Guide...
Page 163: Add/Edit Port Forwarding
To forward only one port, enter the port number again in the End Port field. To forward a series of ports, enter the start port number here and the end port number in the End Port field. VMG8924-B10D/B30D User’s Guide...
Page 164: The Applications Screen
The following table describes the labels in this screen. Table 57 Network Setting > NAT > Applications LABEL DESCRIPTION Add New Click this to add a new NAT application rule. Application This is the index number of the entry. VMG8924-B10D/B30D User’s Guide...
Page 165: Add New Application
WAN) to the IP address of a computer on the client side (LAN). The problem is that port forwarding only forwards a service to a single LAN IP address. In order to use the same service on a VMG8924-B10D/B30D User’s Guide...
Page 166 UDP (User Datagram Protocol) or two hours with TCP/IP (Transfer Control Protocol/Internet Protocol). Click Network Setting > NAT > Port Triggering to open the following screen. Use this screen to view your VMG’s trigger port settings. VMG8924-B10D/B30D User’s Guide...
Page 167: Add/Edit Port Triggering Rule
Click the Delete icon to delete an existing rule. 11.4.1 Add/Edit Port Triggering Rule This screen lets you create new port triggering rules. Click Add new rule in the Port Triggering screen or click a rule’s Edit icon to open the following screen. VMG8924-B10D/B30D User’s Guide...
Page 168: The Dmz Screen
11.5 The DMZ Screen In addition to the servers for specified services, NAT supports a default server IP address. A default server receives packets from ports that are not specified in the NAT Port Forwarding Setup screen. VMG8924-B10D/B30D User’s Guide...
Page 169: The Alg Screen
Enable this to make sure applications such as FTP and file transfer in IM applications work correctly with port-forwarding and address-mapping rules. SIP ALG Enable this to make sure SIP (VoIP) works correctly with port-forwarding and address-mapping rules. VMG8924-B10D/B30D User’s Guide...
Page 170: The Address Mapping Screen
Many-to-One: This mode maps multiple local IP addresses to one global IP address. This is equivalent to SUA (i.e., PAT, port address translation), the VMG's Single User Account feature that previous routers supported only. Many-to-Many: This mode maps multiple local IP addresses to shared global IP addresses. VMG8924-B10D/B30D User’s Guide...
Page 171: Add/Edit Address Mapping Rule
One-to-One mapping types. Global Start IP Enter the starting Inside Global IP Address (IGA). Enter 0.0.0.0 here if you have a dynamic IP address from your ISP. You can only do this for the Many-to-One mapping type. VMG8924-B10D/B30D User’s Guide...
Page 172: The Sessions Screen
IP address of a host when the packet is in the local network, while the global address refers to the IP address of the host when the same packet is traveling in the WAN side. VMG8924-B10D/B30D User’s Guide...
Page 173: What Nat Does
One and Many-to-Many Overload mapping), NAT offers the additional benefit of firewall protection. With no servers defined, your VMG filters out all incoming inquiries, thus preventing intruders from probing your network. For more information on IP address translation, refer to RFC 1631, The IP Network Address Translator (NAT). VMG8924-B10D/B30D User’s Guide...
Page 174: How Nat Works
Figure 86 How NAT Works 11.9.4 NAT Application The following figure illustrates a possible NAT application, where three inside LANs (logical LANs using IP alias) behind the VMG can communicate with three distinct WAN networks. VMG8924-B10D/B30D User’s Guide...
Page 175 SMTP (Simple Mail Transfer Protocol) DNS (Domain Name System) Finger HTTP (Hyper Text Transfer protocol or WWW, Web) POP3 (Post Office Protocol) NNTP (Network News Transport Protocol) SNMP (Simple Network Management Protocol) SNMP trap PPTP (Point-to-Point Tunneling Protocol) 1723 VMG8924-B10D/B30D User’s Guide...
Page 176 You assign the LAN IP addresses and the ISP assigns the WAN IP address. The NAT network appears as a single host on the Internet. Figure 88 Multiple Servers Behind NAT Example IP Address assigned by ISP VMG8924-B10D/B30D User’s Guide...
Page 177: Dynamic Dns Setup
Enabling the wildcard feature for your host causes *.yourhost.dyndns.org to be aliased to the same IP address as yourhost.dyndns.org. This feature is useful if you want to be able to use, for example, www.yourhost.dyndns.org and still reach your hostname. VMG8924-B10D/B30D User’s Guide...
Page 178: The Dns Entry Screen
Figure 90 DNS Entry: Add/Edit The following table describes the labels in this screen. Table 69 DNS Entry: Add/Edit LABEL DESCRIPTION Host Name Enter the host name of the DNS entry. IP Address Enter the IP address of the DNS entry. VMG8924-B10D/B30D User’s Guide...
Page 179: The Dynamic Dns Screen
Last Updated Time This shows the last time the IP address the Dynamic DNS provider has associated with the hostname was updated. Current Dynamic This shows the IP address your Dynamic DNS provider has currently associated with the hostname. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG8924-B10D/B30D User’s Guide...
Page 180: Igmp/Mld
13.2 The IGMP/MLD Screen Use this screen to configure multicast groups the VMG has joined and which ports have joined it. To open this screen, click Network Setting > IGMP/MLD. VMG8924-B10D/B30D User’s Guide...
Page 181 IGMP or MLD join report frames are dropped by the interface. Maximum Enter a number to limit the number of multicast data sources (1-24) a multicast group is allowed Multicast Data to have. Sources Note: The setting only works for IGMPv3 and MLDv2. VMG8924-B10D/B30D User’s Guide...
Page 182 Select this to have the VMG add a host to a multicast group immediately once the VMG Join Immediate receives an IGMP or MLD join message. (IPTV) Apply Click Apply to save your changes back to the VMG. Cancel Click Cancel to exit this screen without saving. VMG8924-B10D/B30D User’s Guide...
Page 183: Vlan Group
Use these screens to group separate VLAN groups together to be treated as one VLAN group. 14.2 The Vlan Group Screen Click Network Setting > Vlan Group to open the following screen. Figure 94 Network Setting > Vlan Group VMG8924-B10D/B30D User’s Guide...
Page 184: Add/Edit A Vlan Group
Note: LAN5 displays if the WAN port was configured as a LAN port in the Home Networking > 5th Ethernet port screen. Apply Click Apply to save your changes back to the VMG. Cancel Click Cancel to exit this screen without saving. VMG8924-B10D/B30D User’s Guide...
Page 185: Interface Grouping
In the following example, the client that sends packets with the DHCP Vendor ID option set to MSFT 5.0 (meaning it is a Windows 2000 DHCP client) is assigned the IP address 192.168.2.2 and uses the WAN VDSL_PoE/ppp0.1 interface. VMG8924-B10D/B30D User’s Guide...
Page 186: Interface Group Configuration
Click the Add New Interface Group button in the Interface Grouping screen to open the following screen. Use this screen to create a new interface group. Note: An interface can belong to only one group at a time. VMG8924-B10D/B30D User’s Guide...
Page 187 Click Add to identify LAN hosts to add to the interface group by criteria such as the type of the Add Clients With hardware or firmware. See Section 15.2.2 on page 188 for more information. the following DHCP Vendor VMG8924-B10D/B30D User’s Guide...
Page 188: Interface Grouping Criteria
Select this and enter the device identity of the matched traffic. Enter the Identity Association Identifier (IAID) of the device, for example, the WAN connection index number. DHCP Option Select this and enter vendor specific information of the matched traffic. VMG8924-B10D/B30D User’s Guide...
Page 189 VLAN Group Select this and the VLAN group of the matched traffic from the drop-down list box. Apply Click Apply to save your changes back to the VMG. Cancel Click Cancel to exit this screen without saving. VMG8924-B10D/B30D User’s Guide...
Page 190: Usb Service
• Use the Media Server screen to enable or disable the sharing of media files (Section 16.3 on page 194). 16.1.2 What You Need To Know The following terms and concepts may help as you read this chapter. VMG8924-B10D/B30D User’s Guide...
Page 191: Before You Begin
Use this screen to set up file sharing through the VMG. The VMG’s LAN users can access the shared folder (or share) from the USB device inserted in the VMG. To access this screen, click Network Setting > USB Service > File Sharing. VMG8924-B10D/B30D User’s Guide...
Page 192 (folders) on your USB storage device. Share This field displays information about the share. Description Modify Click the Edit icon to change the settings of an existing share. Click the Delete icon to delete this share in the list. Account Management VMG8924-B10D/B30D User’s Guide...
Page 193: The Add New Share Screen
Access Level Select Public if you want the share to be accessed by users connecting to the VMG. Otherwise, select Security. Apply Click Apply to save your changes. Cancel Click Back to return to the previous screen. VMG8924-B10D/B30D User’s Guide...
Page 194: The Add New User Screen
Media Library Enter the path clients use to access the media files on a USB storage device connected to the Path VMG. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG8924-B10D/B30D User’s Guide...
Page 195: Firewall
• Use the Access Control screen to view and configure incoming/outgoing filtering rules (Section 17.4 on page 198). • Use the DoS screen to activate protection against Denial of Service (DoS) attacks (.Section 17.5 on page 201). VMG8924-B10D/B30D User’s Guide...
Page 196: What You Need To Know
Use this screen to set the security level of the firewall on the VMG. Firewall rules are grouped based on the direction of travel of packets to which they apply. Click Security > Firewall to display the General screen. VMG8924-B10D/B30D User’s Guide...
Page 197: The Protocol Screen
The following table describes the labels in this screen. Table 81 Security > Firewall > Protocol LABEL DESCRIPTION Add new Click this to add a new service. Protocol entry Name This is the name of your customized service. VMG8924-B10D/B30D User’s Guide...
Page 198: Add/Edit A Service
Click Cancel to exit this screen without saving. 17.4 The Access Control Screen Click Security > Firewall > Access Control to display the following screen. This screen displays a list of the configured incoming or outgoing filtering rules. VMG8924-B10D/B30D User’s Guide...
Page 199: Add/Edit An Acl Rule
Click the Move To icon to change the order of the rule. Enter the number in the # field. 17.4.1 Add/Edit an ACL Rule Click Add new ACL rule or the Edit icon next to an existing ACL rule in the Access Control screen. The following screen displays. VMG8924-B10D/B30D User’s Guide...
Page 200 Choose the IP port (TCP/UDP, TCP, UDP, ICMP, or ICMPv6) that defines your customized port from the drop-down list box. Custom Source This field is displayed only when you select Specific Protocol in Select Protocol. Port Enter a single port number or the range of port numbers of the source. VMG8924-B10D/B30D User’s Guide...
Page 201: The Dos Screen
The following table describes the labels in this screen. Table 85 Security > Firewall > DoS LABEL DESCRIPTION DoS Protection Select Enable to enable protection against DoS attacks. Blocking Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG8924-B10D/B30D User’s Guide...
Page 202: Mac Filter
18.2 The MAC Filter Screen Use this screen to allow wireless and LAN clients access to the VMG. Click Security > MAC Filter. The screen appears as shown. Figure 111 Security > MAC Filter VMG8924-B10D/B30D User’s Guide...
Page 203 Enter the MAC addresses in a valid MAC address format, that is, six hexadecimal character pairs, for example, 12:34:56:78:9a:bc. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG8924-B10D/B30D User’s Guide...
Page 204: Parental Control
This shows whether the website block is configured. If not, None will be shown. Modify Click the Edit icon to go to the screen where you can edit the rule. Click the Delete icon to delete an existing rule. VMG8924-B10D/B30D User’s Guide...
Page 205: Add/Edit A Parental Control Profile
Select the LAN user that you want to apply this rule to from the drop-down list box. If you select User Custom, enter the LAN user’s MAC address. If you select All, the rule applies to all LAN users. VMG8924-B10D/B30D User’s Guide...
Page 206 Select this to redirect users who access any blocked websites listed above to the Zyxel Family blocked site to Safety page as shown next. Zyxel Family Figure 114 Zyxel Family Safety Page Example Safety page Click OK to save your changes. Cancel Click Cancel to exit this screen without saving. VMG8924-B10D/B30D User’s Guide...
Page 207 Site/URL Enter a keyword and click OK to have the VMG block access to the website URLs that contain Keyword the keyword. Click OK to save your changes. Cancel Click Cancel to exit this screen without saving. VMG8924-B10D/B30D User’s Guide...
Page 208: Scheduler Rule
20.2.1 Add/Edit a Schedule Click the Add New Rule button in the Scheduler Rule screen or click the Edit icon next to a schedule rule to open the following screen. Use this screen to configure a restricted access schedule. VMG8924-B10D/B30D User’s Guide...
Page 209 Enter the time period of each day, in 24-hour format, during which the rule will be enforced. Range Description Enter a description for this scheduler rule. Click OK to save your changes. Cancel Click Cancel to exit this screen without saving. VMG8924-B10D/B30D User’s Guide...
Page 210: Certificates
21.3 The Local Certificates Screen Click Security > Certificates to open the Local Certificates screen. This is the VMG’s summary list of certificates and certification requests. Figure 119 Security > Certificates > Local Certificates VMG8924-B10D/B30D User’s Guide...
Page 211: Create Certificate Request
21.3.1 Create Certificate Request Click Security > Certificates > Local Certificates and then Create Certificate Request to open the following screen. Use this screen to have the VMG generate a certification request. Figure 120 Create Certificate Request VMG8924-B10D/B30D User’s Guide...
Page 212: Load Signed Certificate
21.3.2 Load Signed Certificate After you create a certificate request and have it signed by a Certificate Authority, in the Local Certificates screen click the certificate request’s Load Signed icon to import the signed certificate into the VMG. VMG8924-B10D/B30D User’s Guide...
Page 213: The Trusted Ca Screen
Figure 123 Security > Certificates > Trusted CA VMG8924-B10D/B30D User’s Guide...
Page 214: View Trusted Ca Certificate
This field displays general information about the certificate. ca means that a Certification Authority signed the certificate. Subject This field displays information that identifies the owner of the certificate, such as Common Name (CN), Organizational Unit (OU), Organization (O) and Country (C). VMG8924-B10D/B30D User’s Guide...
Page 215: Import Trusted Ca Certificate
Type in the location of the certificate you want to upload in this field or click Choose File to find Path Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG8924-B10D/B30D User’s Guide...
Page 216: Voice
VoIP stands for Voice over IP. IP is the Internet Protocol, which is the message-carrying standard the Internet runs on. So, Voice over IP is the sending of voice signals (speech) over the Internet (or another network that uses the Internet Protocol). VMG8924-B10D/B30D User’s Guide...
Page 217: Before You Begin
SIP account to a phone port. Use this screen to view SIP account information. You can also enable and disable each SIP account. To access this screen, click VoIP > SIP > SIP Account. VMG8924-B10D/B30D User’s Guide...
Page 218: The Sip Account Add/Edit Screen
Note: Click more to see all the fields in the screen. You don’t necessarily need to use all these fields to set up your account. Click less to see and configure only the fields needed for this feature. VMG8924-B10D/B30D User’s Guide...
Page 219 Chapter 22 Voice Figure 127 VoIP > SIP > SIP Account > Add new account/Edit VMG8924-B10D/B30D User’s Guide...
Page 220 Speaking Volume Select the loudness that the VMG uses for speech that it sends to the peer device. Control Listening Volume Select the loudness that the VMG uses for speech that it receives from the peer Control device. VMG8924-B10D/B30D User’s Guide...
Page 221 Select this to have the VMG dial the specified hot line number immediately when you pick up the telephone. Hot Line / Warm Enter the number of the hot line or warm line that you want the VMG to dial. Line number VMG8924-B10D/B30D User’s Guide...
Page 222: The Sip Service Provider Screen
This is the index number of the entry. SIP Service This shows the name of the SIP service provider. Provider Name SIP Proxy Server This shows the IP address or domain name of the SIP server. Address VMG8924-B10D/B30D User’s Guide...
Page 223: The Sip Service Provider Add/Edit Screen
Note: Click more to see all the fields in the screen. You don’t necessarily need to use all these fields to set up your account. Click less to see and configure only the fields needed for this feature. VMG8924-B10D/B30D User’s Guide...
Page 224 Chapter 22 Voice Figure 129 VoIP > SIP > SIP Service Provider > Add new provider/Edit VMG8924-B10D/B30D User’s Guide...
Page 225 VMG to keep it from re-translating the IP address (since this is already handled by the outbound proxy server). Outbound Proxy Enter the SIP outbound proxy server’s listening port, if your VoIP service provider gave you one. Port Otherwise, keep the default value. VMG8924-B10D/B30D User’s Guide...
Page 226 T38 Fax Relay Select this if the VMG should send fax messages as UDP or TCP/IP packets through IP networks. This provides better quality, but it may have inter-operability problems. The peer devices must also use T.38. QoS Tag VMG8924-B10D/B30D User’s Guide...
Page 227: The Phone Device Screen
Click Cancel to restore your previously saved settings. 22.5 The Phone Device Screen Use this screen to view detailed information of the phone devices. To access this screen, click VoIP > Phone > Phone Device. Figure 130 VoIP > Phone > Phone Device VMG8924-B10D/B30D User’s Guide...
Page 228: The Phone Device Edit Screen
If you select more than one SIP account for incoming calls, there is no way to distinguish between them when you receive phone calls. If you do not select a source for incoming calls, you cannot receive any calls on this phone port. VMG8924-B10D/B30D User’s Guide...
Page 229: The Region Screen
SIP numbers that contain letters. Once you have configured a speed dial rule, you can use a shortcut (the speed dial number, #01 for example) on your phone's keypad to call the phone number. VMG8924-B10D/B30D User’s Guide...
Page 230: The Call History Screen
Select the type of the calls. The call types are: Incoming, Outgoing and Missed. Clear List Click this button to remove all entries from the call history list. Refresh Click this button to renew the call history list. VMG8924-B10D/B30D User’s Guide...
Page 231: The Call Summary Screen
Missing Calls This displays how many incoming calls were not answered that day. Total Duration This displays how long all calls lasted that day. (hh:mm:ss) 22.10 Technical Reference This section contains background material relevant to the VoIP screens. VMG8924-B10D/B30D User’s Guide...
Page 232: Sip Identities
Registration is initiated by the User Agent Client (UAC) running in the VoIP gateway (the VMG). The gateway must be configured with information letting it know where to send the REGISTER message, as well as the relevant user and authorization data. VMG8924-B10D/B30D User’s Guide...
Page 233: Sip Servers
In the following example, you want to use client device A to call someone who is using client device C. The client device (A in the figure) sends a call invitation to the SIP proxy server (B). The SIP proxy server forwards the call invitation to C. VMG8924-B10D/B30D User’s Guide...
Page 234: Sip Redirect Server
Client device A sends a call invitation for C to the SIP redirect server (B). The SIP redirect server sends the invitation back to A with C’s IP address (or domain name). Client device A then sends the call invitation to client device C. VMG8924-B10D/B30D User’s Guide...
Page 235: Sip Register Server
The following figure displays the basic steps in the setup and tear down of a SIP call. A calls B. Table 109 SIP Call Progression 1. INVITE 2. Ringing 3. OK 4. ACK 5.Dialogue (voice traffic) 6. BYE 7. OK VMG8924-B10D/B30D User’s Guide...
Page 236 The following figure shows the SIP and session traffic flow between the user agents (UA 1 and UA 2) and the proxy servers (this example shows two proxy servers, PROXY 1 and PROXY 2). Figure 139 SIP Call Through Proxy Servers VMG8924-B10D/B30D User’s Guide...
Page 237: Voice Coding
• G.711 is a Pulse Code Modulation (PCM) waveform codec. PCM measures analog signal amplitudes at regular time intervals and converts them into digital samples. G.711 provides very good sound quality but requires 64 kbps of bandwidth. VMG8924-B10D/B30D User’s Guide...
Page 238: Comfort Noise Generation
You can record up to 5 different custom tones but the total time must be 900 seconds or less. Recording Custom Tones Use the following steps if you would like to create new tones or change your tones: VMG8924-B10D/B30D User’s Guide...
Page 239: Quality Of Service (Qos)
DiffServ is a class of service (CoS) model that marks packets so that they receive specific per-hop treatment at DiffServ-compliant network devices along the route based on the application types and traffic flow. Packets are marked with DiffServ Code Points (DSCP) indicating the level of service desired. VMG8924-B10D/B30D User’s Guide...
Page 240: Phone Services Overview
• Call Forwarding • Three-Way Conference • Internal Calls • Call Park and Pickup • Do not Disturb • IVR • Call Completion • CCBS • Outgoing SIP The VMG does not support DiffServ at the time of writing. VMG8924-B10D/B30D User’s Guide...
Page 241: The Flash Key
Press the flash key and then “1” to disconnect the current call and resume the call on hold. If you hang up the phone but a caller is still on hold, there will be a remind ring. VMG8924-B10D/B30D User’s Guide...
Page 242: European Call Waiting
“2”. 22.10.2.3 USA Type Supplementary Services This section describes how to use supplementary phone services with the USA Type Call Service Mode. Commands for supplementary services are listed in the table below. VMG8924-B10D/B30D User’s Guide...
Page 243: Usa Call Hold
Dial a phone number directly to make another call (to party B). When party B answers the second call, press the flash key to create a three-way conversation. Hang up the phone to drop the connection. VMG8924-B10D/B30D User’s Guide...
Page 244 (the sound someone hears when you put their call on hold). #### Internal Call Call the phone(s) connected to the VMG. One Shot Caller Display Call Activate or deactivate caller ID for the next call only. One Shot Caller Hidden Call VMG8924-B10D/B30D User’s Guide...
Page 245: Log
CODE SEVERITY Emergency: The system is unusable. Alert: Action must be taken immediately. Critical: The system condition is critical. Error: There is an error condition on the system. Warning: There is a warning condition on the system. VMG8924-B10D/B30D User’s Guide...
Page 246: The System Log Screen
This field states the reason for the log. 23.3 The Security Log Screen Use the Security Log screen to see the security-related logs for the categories that you select. Click System Monitor > Log > Security Log to open the following screen. VMG8924-B10D/B30D User’s Guide...
Page 247 This field displays the severity level of the log that the device is to send to this syslog server. Category This field displays the type of the log. Messages This field states the reason for the log. VMG8924-B10D/B30D User’s Guide...
Page 248: Traffic Status
Figure 143 System Monitor > Traffic Status > WAN The following table describes the fields in this screen. Table 118 System Monitor > Traffic Status > WAN LABEL DESCRIPTION Connected This shows the name of the WAN interface that is currently connected. Interface Packets Sent VMG8924-B10D/B30D User’s Guide...
Page 249: The Lan Status Screen
Select how often you want the VMG to update this screen. Interface This shows the LAN or WLAN interface. Bytes Sent This indicates the number of bytes transmitted on this interface. Bytes Received This indicates the number of bytes received on this interface. VMG8924-B10D/B30D User’s Guide...
Page 250: The Nat Status Screen
This displays what percentage of NAT sessions the VMG can support is currently being used by all connected hosts. You can also see the number of active NAT sessions and the maximum number of NAT sessions the VMG can support. VMG8924-B10D/B30D User’s Guide...
Page 251: Voip Status
This field indicates whether or not there are any messages waiting for the SIP account. Waiting Last Incoming This field displays the last number that called the SIP account. The field is blank if no number has Number ever dialed the SIP account. VMG8924-B10D/B30D User’s Guide...
Page 252 This is because one or more local phone ports can be configured or designed to receive these two types of calls, see the Call Type above, and the local phone port will answer the call that hasn’t been determined yet at that time. VMG8924-B10D/B30D User’s Guide...
Page 253 This field displays the name of a phone port on the VMG. Outgoing This field displays the SIP number that you use to make calls on this phone port. Number Incoming This field displays the SIP number that you use to receive calls on this phone port. Number VMG8924-B10D/B30D User’s Guide...
Page 254: Arp Table
MAC address, swaps the sender and target pairs, and unicasts the answer directly back to the requesting machine. ARP updates the ARP Table for future reference and then sends the packet to the MAC address that replied. VMG8924-B10D/B30D User’s Guide...
Page 255: Arp Table Screen
This is the MAC address of the device with the listed IP address. Device This is the type of interface used by the device. You can click on the device type to go to its configuration screen. VMG8924-B10D/B30D User’s Guide...
Page 256: Routing Table
This indicates the destination IPv4 address or IPv6 address and prefix of this route. Gateway This indicates the IPv4 address or IPv6 address of the gateway that helps forward this route’s traffic. Subnet Mask This indicates the destination subnet mask of the IPv4 route. VMG8924-B10D/B30D User’s Guide...
Page 257 LAN interface where x can be 0~3 to represent LAN1 to LAN4 respectively. ptm0 indicates a WAN interface using IPoE or in bridge mode. ethx indicates an Ethernet WAN interface using IPoE or in bridge mode. ppp0 indicates a WAN interface using PPPoE. VMG8924-B10D/B30D User’s Guide...
Page 258: Multicast Status
28.3 The MLD Status Screen Use this screen to look at the current list of multicast groups the VMG has joined and which ports have joined it. To open this screen, click System Monitor > Multicast Status > MLD Status. VMG8924-B10D/B30D User’s Guide...
Page 259 Source List This is the list of IP addresses that are allowed or not allowed to receive the multicast group’s traffic depending on the filter mode. Member This is the list of members in the multicast group. VMG8924-B10D/B30D User’s Guide...
Page 260: Xdsl Statistics
LABEL DESCRIPTION Monitor Refresh Interval Select the time interval for refreshing statistics. Line Select which DSL line’s statistics you want to display. Status xDSL Training This displays the current state of setting up the DSL connection. Status VMG8924-B10D/B30D User’s Guide...
Page 261 This is the number of Severely Errored Seconds meaning the number of seconds containing 30% or more errored blocks or at least one defect. This is a subset of ES. This is the number of UnAvailable Seconds. This is the number of Loss Of Signal seconds. VMG8924-B10D/B30D User’s Guide...
Page 262 This is the number of Loss of Margin seconds. Retr. This is the number of DSL retraining count in BRCM DSL driver. HostInitRetr This is the number of the retraining counts the host initiated. FailedRetr This is the number of failed retraining counts. VMG8924-B10D/B30D User’s Guide...
Page 263: Cellular Statistics
WCDMA - Wideband Code Division Multiple Access, 3G HSDPA - High-Speed Downlink Packet Access, 3.5G HSUPA - High-Speed Uplink Packet Access, 3.75G HSPA - HSDPA+HSUPA, 3.75G Service Provider This field displays the name of the service provider. VMG8924-B10D/B30D User’s Guide...
Page 264 The International Mobile Subscriber Identity or IMSI is a unique identification number associated with all cellular networks. This number is provisioned in the SIM card. VID/PID This field displays the USB Vendor ID and Product ID of the cellular card. VMG8924-B10D/B30D User’s Guide...
Page 265: System
Type a hostname for your VMG. Enter a descriptive name of up to 16 alphanumeric characters, not including spaces, underscores, and dashes. Domain Name Type a Domain name for your host VMG. Apply Click Apply to save your changes. Cancel Click Cancel to abandon this screen without saving. VMG8924-B10D/B30D User’s Guide...
Page 266: User Account
Retry Times. Group This field displays whether this user has Administrator or User privleges. Modify Click the Edit icon to configure the entry. Click the Delete icon to remove the entry. VMG8924-B10D/B30D User’s Guide...
Page 267: The User Account Add/Edit Screen
Retry Times. Group Specify whether this user will have Administrator or User privleges. Click OK to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG8924-B10D/B30D User’s Guide...
Page 268: Remote Management
Select the Enable check box for the corresponding services that you want to allow access to the VMG from the LAN/WLAN. Select the Enable check box for the corresponding services that you want to allow access to the VMG from all WAN connections. VMG8924-B10D/B30D User’s Guide...
Page 269: The Trust Domain Screen
Use this screen to configure a public IP address which is allowed to access the VMG. Click the Add Trust Domain button in the Maintenance > Remote Management > Turst Domain screen to open the following screen. VMG8924-B10D/B30D User’s Guide...
Page 270 Enter a public IPv4 IP address which is allowed to access the service on the VMG from the WAN. Apply Click Apply to save your changes back to the VMG. Cancel Click Cancel to restore your previously saved settings. VMG8924-B10D/B30D User’s Guide...
Page 271: Snmp
Examples of variables include such as number of packets received, node port status etc. A Management Information Base (MIB) is a collection of managed objects. SNMP allows a manager and agents to communicate for the purpose of accessing these objects. VMG8924-B10D/B30D User’s Guide...
Page 272 Enter the SNMP system contact. Trap Destination Type the IP address of the station to send your SNMP traps to. Apply Click this to save your changes back to the VMG. Cancel Click this to restore your previously saved settings. VMG8924-B10D/B30D User’s Guide...
Page 273: Time Settings
The following table describes the fields in this screen. Table 135 Maintenance > Time LABEL DESCRIPTION Current Date/Time Current Time This field displays the time of your VMG. Each time you reload this page, the VMG synchronizes the time with the time server. VMG8924-B10D/B30D User’s Guide...
Page 274 Germany for instance, you would select 2 in the Hour field because Germany's time zone is one hour ahead of GMT or UTC (GMT+1). Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG8924-B10D/B30D User’s Guide...
Page 275: E-Mail Notification
Remove Click this button to delete the selected entry(ies). 36.2.1 Email Notification Edit Click the Add button in the Email Notification screen. Use this screen to configure the required information for sending e-mail via a mail server. VMG8924-B10D/B30D User’s Guide...
Page 276 Select STARTTLS to upgrade a plain text connection to a secure connection using SSL/TLS. Click this button to save your changes and return to the previous screen. Cancel Click this button to begin configuring this screen afresh. VMG8924-B10D/B30D User’s Guide...
Page 277: Log Setting
The following table describes the fields in this screen. Table 138 Maintenance > Logs Setting LABEL DESCRIPTION Syslog Setting Syslog Logging The VMG sends a log to an external syslog server. Select Enable to enable syslog logging. VMG8924-B10D/B30D User’s Guide...
Page 278: Example E-Mail Log
• You may edit the subject title. • The date format here is Day-Month-Year. • The date format here is Month-Day-Year. The time format is Hour-Minute-Second. • "End of Log" message shows that a complete log has been sent. VMG8924-B10D/B30D User’s Guide...
Page 279 |<1,02> 127|Apr 7 00 |From:192.168.1.131 To:192.168.1.255 |match |forward | 10:05:17 |UDP src port:00520 dest port:00520 |<1,02> 128|Apr 7 00 |From:192.168.1.1 To:192.168.1.255 |match |forward | 10:05:30 |UDP src port:00520 dest port:00520 |<1,02> End of Firewall Log VMG8924-B10D/B30D User’s Guide...
Page 280: Firmware Upgrade
Do NOT turn off the VMG while firmware upload is in progress! Figure 166 Maintenance > Firmware Upgrade The following table describes the labels in this screen. After you see the firmware updating screen, wait two minutes before logging into the VMG again. VMG8924-B10D/B30D User’s Guide...
Page 281 After two minutes, log in again and check your new firmware version in the Status screen. If the upload was not successful, the following screen will appear. Click OK to go back to the Firmware Upgrade screen. VMG8924-B10D/B30D User’s Guide...
Page 282 Chapter 38 Firmware Upgrade Figure 169 Error Message VMG8924-B10D/B30D User’s Guide...
Page 283: Backup Restore
The backup configuration file will be useful in case you need to return to your previous settings. Click Backup to save the VMG’s current configuration to your computer. VMG8924-B10D/B30D User’s Guide...
Page 284: Restore Configuration
If the upload was not successful, the following screen will appear. Click OK to go back to the Configuration screen. Figure 172 Configuration Upload Error Reset to Factory Defaults Click the Reset button to clear all user-entered configuration information and return the VMG to its factory defaults. The following warning screen appears. VMG8924-B10D/B30D User’s Guide...
Page 285: The Reboot Screen
System restart allows you to reboot the VMG remotely without turning the power off. You may need to do this if the VMG hangs, for example. Click Maintenance > Reboot. Click Reboot to have the VMG reboot. This does not affect the VMG's configuration. Figure 175 Maintenance > Reboot VMG8924-B10D/B30D User’s Guide...
Page 286: Diagnostic
If an MEP port does not respond to the source MEP, this may indicate a fault. Administrators can take further action to check and resume services from the fault according to the line connectivity status report. VMG8924-B10D/B30D User’s Guide...
Page 287: Ping & Traceroute & Nslookup
Click this button to perform a DNS lookup on the IP address of a computer you enter. 40.4 802.1ag Click Maintenance > Diagnostic > 802.1ag to open the following screen. Use this screen to perform CFM actions. VMG8924-B10D/B30D User’s Guide...
Page 288: Oam Ping
OAM (Operation, Administration and Maintenance) F4 or F5 loopback test on a PVC. The VMG sends an OAM F4 or F5 packet to the DSLAM or ATM switch and then returns it to the VMG. The test result then displays in the text box. VMG8924-B10D/B30D User’s Guide...
Page 289 Note: The DSLAM to which the VMG is connected must also support ATM F4 and/or F5 to use this test. Note: This screen is available only when you configure an ATM layer-2 interface. Figure 179 Maintenance > Diagnostic > OAM Ping VMG8924-B10D/B30D User’s Guide...
Page 290 Press this to perform an OAM F4 segment loopback test. F4 end-end Press this to perform an OAM F4 end-to-end loopback test. F5 segment Press this to perform an OAM F5 segment loopback test. F5 end-end Press this to perform an OAM F5 end-to-end loopback test. VMG8924-B10D/B30D User’s Guide...
Page 291: Troubleshooting
Make sure you understand the normal behavior of the LED. See Section 1.6 on page Check the hardware connections. Inspect your cables for damage. Contact the vendor to replace any damaged cables. Turn the VMG off and on. VMG8924-B10D/B30D User’s Guide...
Page 292: Vmg Access And Login
If it is possible to log in from another interface, check the service control settings for HTTP and HTTPS (Maintenance > Remote MGMT). Reset the device to its factory defaults, and try to access the VMG with the default IP address. See Section 1.6.3 on page VMG8924-B10D/B30D User’s Guide...
Page 293: Internet Access
Ignore the suggestions about your browser. 41.3 Internet Access I cannot access the Internet. Check the hardware connections, and make sure the LEDs are behaving as expected. See the Quick Start Guide and Section 1.6 on page VMG8924-B10D/B30D User’s Guide...
Page 294 (Network Setting > Interface Group). If you set up a WAN connection using bridging service, make sure you turn off the DHCP feature in the LAN screen to have the clients get WAN IP addresses directly from your ISP’s DHCP server. VMG8924-B10D/B30D User’s Guide...
Page 295: Wireless Internet Access
• Reduce wireless interference that may be caused by other wireless networks or surrounding wireless electronics such as cordless phones. • Place the AP where there are minimum obstacles (such as walls and ceilings) between the AP and the wireless client. VMG8924-B10D/B30D User’s Guide...
Page 296: Usb Device Connection
When using UPnP and the VMG reboots, my computer cannot detect UPnP and refresh My Network Places > Local Network. Disconnect the Ethernet cable from the VMG’s LAN port or from your computer. Re-connect the Ethernet cable. The Local Area Connection icon for UPnP disappears in the screen. Restart your computer. VMG8924-B10D/B30D User’s Guide...
Page 297: Appendices
Appendices Appendices contain general information. Some information may not apply to your device.
Page 298: Appendix A Customer Support
• Brief description of the problem and the steps you took to solve it. Corporate Headquarters (Worldwide) Taiwan • Zyxel Communications Corporation • http://www.zyxel.com Asia China • Zyxel Communications (Shanghai) Corp. Zyxel Communications (Beijing) Corp. Zyxel Communications (Tianjin) Corp. • http://www.zyxel.cn India • Zyxel Technology India Pvt Ltd • http://www.zyxel.in Kazakhstan •...
Page 299 • Zyxel Singapore Pte Ltd. • http://www.zyxel.com.sg Taiwan • Zyxel Communications Corporation • http://www.zyxel.com/tw/zh/ Thailand • Zyxel Thailand Co., Ltd • http://www.zyxel.co.th Vietnam • Zyxel Communications Corporation-Vietnam Office • http://www.zyxel.com/vn/vi Europe Austria • Zyxel Deutschland GmbH • http://www.zyxel.de Belarus • Zyxel BY • http://www.zyxel.by...
Page 300 Appendix A Customer Support Belgium • Zyxel Communications B.V. • http://www.zyxel.com/be/nl/ • http://www.zyxel.com/be/fr/ Bulgaria • Zyxel България • http://www.zyxel.com/bg/bg/ Czech Republic • Zyxel Communications Czech s.r.o • http://www.zyxel.cz Denmark • Zyxel Communications A/S • http://www.zyxel.dk Estonia • Zyxel Estonia • http://www.zyxel.com/ee/et/ Finland •...
Page 301 • Zyxel Communications Poland • http://www.zyxel.pl Romania • Zyxel Romania • http://www.zyxel.com/ro/ro Russia • Zyxel Russia • http://www.zyxel.ru Slovakia • Zyxel Communications Czech s.r.o. organizacna zlozka • http://www.zyxel.sk Spain • Zyxel Communications ES Ltd • http://www.zyxel.es Sweden • Zyxel Communications • http://www.zyxel.se Switzerland •...
Page 302 Appendix A Customer Support • http://www.zyxel.ch/ Turkey • Zyxel Turkey A.S. • http://www.zyxel.com.tr • Zyxel Communications UK Ltd. • http://www.zyxel.co.uk Ukraine • Zyxel Ukraine • http://www.ua.zyxel.com Latin America Argentina • Zyxel Communication Corporation • http://www.zyxel.com/ec/es/ Brazil • Zyxel Communications Brasil Ltda.
Page 303: North America
Appendix A Customer Support North America • Zyxel Communications, Inc. - North America Headquarters • http://www.zyxel.com/us/en/ Oceania Australia • Zyxel Communications Corporation • http://www.zyxel.com/au/en/ Africa South Africa • Nology (Pty) Ltd. • http://www.zyxel.co.za VMG8924-B10D/B30D User’s Guide...
Page 304: Appendix B Wireless Lans
Intra-BSS traffic is traffic between wireless clients in the BSS. When Intra-BSS is enabled, wireless client A and B can access the wired network and communicate with each other. When Intra-BSS is disabled, wireless client A and B can still access the wired network but cannot communicate with each other. VMG8924-B10D/B30D User’s Guide...
Page 305 An ESSID (ESS IDentification) uniquely identifies each ESS. All access points and their associated wireless clients within the same ESS must have the same ESSID in order to communicate. VMG8924-B10D/B30D User’s Guide...
Page 306 (AP) or wireless gateway, but out-of-range of each other, so they cannot "hear" each other, that is they do not know if the channel is currently being used. Therefore, they are considered hidden from each other. VMG8924-B10D/B30D User’s Guide...
Page 307: Fragmentation Threshold
AP will fragment the packet into smaller data frames. A large Fragmentation Threshold is recommended for networks not prone to interference while you should set a smaller threshold for busy networks or networks that are prone to interference. VMG8924-B10D/B30D User’s Guide...
Page 308 In June 2001, the IEEE 802.1x standard was designed to extend the features of IEEE 802.11 to support extended authentication as well as providing additional accounting and control features. It is supported by Windows XP and a number of network devices. Some advantages of IEEE 802.1x are: VMG8924-B10D/B30D User’s Guide...
Page 309: Types Of Radius Messages
The following types of RADIUS messages are exchanged between the access point and the RADIUS server for user accounting: • Accounting-Request Sent by the access point requesting accounting. • Accounting-Response Sent by the RADIUS server to indicate that it has started or stopped accounting. VMG8924-B10D/B30D User’s Guide...
Page 310: Types Of Eap Authentication
Client authentication is then done by sending username and password through the secure connection, thus client identity is protected. For client authentication, EAP-TTLS supports EAP methods and legacy authentication methods such as PAP, CHAP, MS-CHAP and MS-CHAP v2. VMG8924-B10D/B30D User’s Guide...
Page 311: Dynamic Wep Key Exchange
If both an AP and the wireless clients support WPA2 and you have an external RADIUS server, use WPA2 for stronger data encryption. If you don't have an external RADIUS server, you should use WPA2-PSK (WPA2-Pre-Shared Key) that only requires a single (identical) password entered into each access point, VMG8924-B10D/B30D User’s Guide...
Page 312 (CCMP 4-way handshake) and shortens the time required to connect to a network. Other WPA2 authentication features that are different from WPA include key caching and pre-authentication. These two features are optional and may not be supported in all wireless devices. VMG8924-B10D/B30D User’s Guide...
Page 313: Wireless Client Wpa Supplicants
PMK to dynamically generate unique data encryption keys. The keys are used to encrypt every data packet that is wirelessly communicated between the AP and the wireless clients. Figure 184 WPA(2) with RADIUS Application Example VMG8924-B10D/B30D User’s Guide...
Page 314: Security Parameters Summary
KEY MANAGEMENT IEEE 802.1X METHOD PROTOCOL Open None Disable Enable without Dynamic WEP Key Open Enable with Dynamic WEP Key Enable without Dynamic WEP Key Disable Shared Enable with Dynamic WEP Key Enable without Dynamic WEP Key Disable VMG8924-B10D/B30D User’s Guide...
Page 315: Antenna Characteristics
• Omni-directional antennas send the RF signal out in all directions on a horizontal plane. The coverage area is torus-shaped (like a donut) which makes these antennas ideal for a room environment. With a wide coverage area, it is possible to make circular overlapping coverage areas with multiple access points. VMG8924-B10D/B30D User’s Guide...
Page 316: Positioning Antennas
For a single AP application, place omni-directional antennas as close to the center of the coverage area as possible. For directional antennas, point the antenna in the direction of the desired coverage area. VMG8924-B10D/B30D User’s Guide...
Page 317: Appendix C Ipv6
10 bits 54 bits 64 bits Global Address A global address uniquely identifies a device on the Internet. It is similar to a “public IP address” in IPv4. A global unicast address starts with a 2 or 3. VMG8924-B10D/B30D User’s Guide...
Page 318: Loopback Address
The following table describes the multicast addresses which are reserved and can not be assigned to a multicast group. Table 150 Reserved Multicast Address MULTICAST ADDRESS FF00:0:0:0:0:0:0:0 FF01:0:0:0:0:0:0:0 FF02:0:0:0:0:0:0:0 FF03:0:0:0:0:0:0:0 FF04:0:0:0:0:0:0:0 FF05:0:0:0:0:0:0:0 FF06:0:0:0:0:0:0:0 FF07:0:0:0:0:0:0:0 FF08:0:0:0:0:0:0:0 FF09:0:0:0:0:0:0:0 FF0A:0:0:0:0:0:0:0 FF0B:0:0:0:0:0:0:0 FF0C:0:0:0:0:0:0:0 FF0D:0:0:0:0:0:0:0 VMG8924-B10D/B30D User’s Guide...
Page 319: Subnet Masking
IA_NA before the lifetimes expire. After T1, the client sends the server (S1) (from which the addresses in the IA_NA were obtained) a Renew message. If the time T2 is reached and the server VMG8924-B10D/B30D User’s Guide...
Page 320: Dhcp Relay Agent
A neighbor being “reachable” means it responds to a neighbor solicitation message (from the host) with a neighbor advertisement message. • Neighbor advertisement: A response from a node to announce its link-layer address. VMG8924-B10D/B30D User’s Guide...
Page 321: Ipv6 Cache
Done message to the router or switch. The router or switch then sends a group-specific query to the port on which the Done message is received to determine if other devices connected to this port should remain in the group. VMG8924-B10D/B30D User’s Guide...
Page 322 Install Dibbler and select the DHCPv6 client option on your computer. After the installation is complete, select Start > All Programs > Dibbler-DHCPv6 > Client Install as service. Select Start > Control Panel > Administrative Tools > Services. Double click Dibbler - a DHCPv6 client. VMG8924-B10D/B30D User’s Guide...
Page 323 Windows 7 supports IPv6 by default. DHCPv6 is also enabled when you enable IPv6 on a Windows 7 computer. To enable IPv6 in Windows 7: Select Control Panel > Network and Sharing Center > Local Area Connection. Select the Internet Protocol Version 6 (TCP/IPv6) checkbox to enable it. Click OK to save the change. VMG8924-B10D/B30D User’s Guide...
Page 324 IPv4 Address... : 172.16.100.61 Subnet Mask ... : 255.255.255.0 Default Gateway ..: fe80::213:49ff:feaa:7125%11 172.16.100.254 VMG8924-B10D/B30D User’s Guide...
Page 325: Appendix D Services
• If the Protocol is TCP, UDP, or TCP/UDP, this is the IP port number. • If the Protocol is USER, this is the IP protocol number. • Description: This is a brief explanation of the applications that use this service or the situations in which this service is used. VMG8924-B10D/B30D User’s Guide...
Page 326 Microsoft Networks’ messenger service uses this protocol. NetBIOS TCP/UDP The Network Basic Input/Output System is used for communication between computers in a LAN. TCP/UDP TCP/UDP TCP/UDP NEW-ICQ 5190 An Internet chat program. NEWS A protocol for news groups. VMG8924-B10D/B30D User’s Guide...
Page 327 SSDP 1900 The Simple Service Discovery Protocol supports Universal Plug-and-Play (UPnP). TCP/UDP Secure Shell Remote Login Program. STRM WORKS 1558 Stream Works Protocol. SYSLOG Syslog allows you to send system logs to a UNIX server. VMG8924-B10D/B30D User’s Guide...
Page 328 Internet and in UNIX environments. It operates over TCP/IP networks. Its primary function is to allow users to log into remote host systems. VDOLIVE 7000 A videoconferencing solution. The UDP port number is specified in the application. user- defined VMG8924-B10D/B30D User’s Guide...
Page 329: Appendix E Legal Information
The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of Zyxel Communications Corporation. Published by Zyxel Communications Corporation. All rights reserved.
Page 330 Hiermit erklärt Zyxel, dass sich das Gerät Ausstattung in Übereinstimmung mit den grundlegenden Anforderungen und den (German) übrigen einschlägigen Bestimmungen der Richtlinie 1999/5/EU befindet. Eesti keel Käesolevaga kinnitab Zyxel seadme seadmed vastavust direktiivi 1999/5/EÜ põhinõuetele ja nimetatud direktiivist (Estonian) tulenevatele teistele asjakohastele sätetele. VMG8924-B10D/B30D User’s Guide...
Page 331: National Restrictions
Postaux et des Télécommunications (IBPT). Visitez http://www.ibpt.be pour de plus amples détails. Denmark • In Denmark, the band 5150 - 5350 MHz is also allowed for outdoor usage. • I Danmark må frekvensbåndet 5150 - 5350 også anvendes udendørs. Italy VMG8924-B10D/B30D User’s Guide...
Page 332: Safety Warnings
- For permanently connected devices, a readily accessible disconnect device shall be incorporated external to the device; - For pluggable devices, the socket-outlet shall be installed near the device and shall be easily accessible. VMG8924-B10D/B30D User’s Guide...
Page 333 Symbolen innebär att enligt lokal lagstiftning ska produkten och/eller dess batteri kastas separat från hushållsavfallet. När den här produkten når slutet av sin livslängd ska du ta den till en återvinningsstation. Vid tiden för kasseringen bidrar du till en bättre miljö och mänsklig hälsa genom att göra dig av med den på ett återvinningsställe. VMG8924-B10D/B30D User’s Guide...
Page 334 Appendix E Legal Information Environmental Product Declaration VMG8924-B10D/B30D User’s Guide...
Page 335 Various symbols are used in this product to ensure correct usage, to prevent danger to the user and others, and to prevent property damage. The meaning of these symbols are described below. It is important that you read these descriptions thoroughly and fully understand the contents. VMG8924-B10D/B30D User’s Guide...
Page 336: Zyxel Limited Warranty
This product contains in part some free software distributed under GPL license terms and/or GPL like licenses. Open source licenses are provided with the firmware package. You can download the latest firmware at www.zyxel.com. To obtain the source code covered under those Licenses, please contact support@zyxel.com.tw to get it. VMG8924-B10D/B30D User’s Guide...
Page 337: Index
Basic Service Set, See BSS Basic Service Set, see BSS blinking LEDs channel Broadband interference broadcast channel, wireless LAN 112, 304 Class of Service example Class of Service, see CoS BYE request client list client-server protocol VMG8924-B10D/B30D User’s Guide...
Page 338 121, 133 DDoS DNS server address assignment Domain Name LAND attack Domain Name System, see DNS Ping of Death Domain Name System. See DNS. SYN attack firmware DS field 156, 240 version DS, dee differentiated services flash key VMG8924-B10D/B30D User’s Guide...
Page 339 Inside Local Address, see ILA subnet mask 121, 122, 134 interface group LAN to LAN multicast Internet LAND attack wizard setup Internet access limitations wizard setup wireless LAN Internet Protocol version 6 Internet Protocol version 6, see IPv6 VMG8924-B10D/B30D User’s Guide...
Page 340 24, 25 MTU (Multi-Tenant Unit) Peak Cell Rate (PCR) multicast peer-to-peer calls Multicast Listener Discovery, see MLD Per-Hop Behavior, see PHB multimedia Multiple BSS, see MBSSID 156, 240 phone book multiplexing speed dial LLC-based VC-based phone functions VMG8924-B10D/B30D User’s Guide...
Page 341 Real time Transport Protocol, see RTP servers reset service domain 23, 284 restart user agent restoring configuration SIP ALG RFC 1058. See RIP. activation RFC 1389. See RIP. SMTP RFC 1483 SNMP 175, 271, 272 VMG8924-B10D/B30D User’s Guide...
Page 342 USB features syslog protocol severity levels system firmware version passwords 24, 25 Vendor ID reset status Virtual Circuit (VC) Virtual Local Area Network See VLAN wireless LAN VLAN time Introduction number of possible VIDs priority frame static VMG8924-B10D/B30D User’s Guide...
Page 343 105, 109 push button 22, 113 limitations MAC address filter 101, 110 MBSSID preamble 106, 109 RADIUS server RTS/CTS threshold ZyXEL Family Safety page 105, 109 security SSID activation status VMG8924-B10D/B30D User’s Guide...

This manual is also suitable for:

Vmg8924-b30d

ZyXEL Communications VMG8924-B10D User Manual

Contents Overview

Table of Contents

User's Guide

Part I: User's Guide

Chapter 1 Introducing the VMG

Chapter 2 The Web Configurator

Chapter 3 Quick Start

Chapter 4 Tutorials

Technical Reference

Part II: Technical Reference

Chapter 5 Network Map and Status Screens

Chapter 6 Broadband

Chapter 7 Wireless

Chapter 8 Home Networking

Chapter 9 Routing

Chapter 10 Quality of Service (Qos)

Chapter 11 Network Address Translation (NAT)

Chapter 12 Dynamic DNS Setup

Chapter 13 IGMP/MLD

Chapter 14 Vlan Group

Chapter 15 Interface Grouping

Chapter 16 USB Service

Chapter 17 Firewall

Chapter 18 MAC Filter

Chapter 19 Parental Control

Chapter 20 Scheduler Rule

Chapter 21 Certificates

Chapter 22 Voice

Quick Links

Related Manuals for ZyXEL Communications VMG8924-B10D

Summary of Contents for ZyXEL Communications VMG8924-B10D