ZyXEL Communications ZyXEL Vantage VSG-1000 User Manual
ZyXEL Communications ZyXEL Vantage VSG-1000 User Manual

ZyXEL Communications ZyXEL Vantage VSG-1000 User Manual

Zyxel communications vantage service gateway user's guide
Hide thumbs Also See for ZyXEL Vantage VSG-1000:
Table of Contents

Advertisement

Quick Links

VSG-1000
Vantage Service Gateway
User's Guide
Version 1.06
August 2004

Advertisement

Table of Contents
loading

Summary of Contents for ZyXEL Communications ZyXEL Vantage VSG-1000

  • Page 1 VSG-1000 Vantage Service Gateway User’s Guide Version 1.06 August 2004...
  • Page 3 ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation. All rights reserved. Disclaimer ZyXEL does not assume any liability arising out of the application or use of any products, or software described herein.
  • Page 4: Interference Statements And Warnings

    VSG-1000 Vantage Service Gateway Interference Statements and Warnings FCC Interference Statement This device complies with Part 15 of the FCC rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference. (2) This device must accept any interference received, including interference that may cause undesired operations. FCC Warning This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC Rules.
  • Page 5: Zyxel Limited Warranty

    VSG-1000 Vantage Service Gateway ZyXEL Limited Warranty ZyXEL warrants to the original end user (purchaser) that this product is free from any defects in materials or workmanship for a period of up to two years from the date of purchase. During the warranty period, and upon proof of purchase, should the product have indications of failure due to faulty workmanship and/or materials, ZyXEL will, at its discretion, repair or replace the defective products or components without charge for either parts or labor, and to whatever extent it shall deem necessary to restore the product or components to proper...
  • Page 6: Customer Support

    VSG-1000 Vantage Service Gateway If you have questions about your ZyXEL product or desire assistance, contact ZyXEL Communications Corporation offices worldwide, in one of the following ways. When you contact your customer support representative, have the following information ready: ♦ Warranty information.
  • Page 7: Table Of Contents

    Copyright... iii Interference Statements and Warnings ... iv ZyXEL Limited Warranty... v Customer Support... vi Table of Contents ... vii List of Figures... xi List of Tables ... xiii List of Diagrams ... xv Preface... xvii Getting Started ... I Chapter 1 Getting to Know Your VSG...
  • Page 8 VSG-1000 Vantage Service Gateway DNS Server Address ... 4-2 Syslog ... 4-2 NAT... 4-2 4.7.1 NAT Definitions... 4-2 4.7.2 What NAT Does... 4-3 4.7.3 How NAT Works ... 4-3 4.7.4 VPN and NAT ... 4-3 4.7.5 NAT Examples... 4-4 The System Configuration Screen... 4-5 Chapter 5 Subscriber Control ...
  • Page 9 Walled Garden... 8-2 Chapter 9 LAN Device Management ... 9-1 LAN Device Management Overview ... 9-1 9.1.1 Port Mapping ... 9-1 Configuring LAN Device Management... 9-1 9.2.1 LAN Device Management Example ... 9-2 9.2.2 Specifying an Inside Server Example... 9-2 Chapter 10 IP and MAC Address Pass Through ...
  • Page 10 VSG-1000 Vantage Service Gateway 15.1.3 The WAN LEDs ... 15-1 15.2 Console Port ... 15-2 15.3 Web Configurator... 15-2 15.4 Internet Access ... 15-2 15.5 TFTP File Transfer... 15-3 15.6 Administrator Password and Username... 15-3 Appendix A IP Address Assignment Conflicts...A Appendix B Subscriber Login ...C Appendix C Cable Types and Cable Pin Assignments...D Appendix D Setting Your Computer IP Address ...
  • Page 11: List Of Figures

    VSG-1000 Vantage Service Gateway List of Figures Figure 1-1 Application: Internet Access for LAN Networks ... 1-2 Figure 1-2 Application: Internet Access in Public Areas... 1-3 Figure 2-1 Rack Mount: Attaching Brackets... 2-1 Figure 2-2 Front Panel ... 2-2 Figure 2-3 Rear Panel ... 2-3 Figure 3-1 Entering VSG IP Address in Internet Explorer...
  • Page 12 VSG-1000 Vantage Service Gateway Figure 7-2 Standard Subscriber Login Screen ... 7-1 Figure 7-3 Customize Login Screen: Advanced ... 7-2 Figure 7-4 Advanced Subscriber Login Screen Example... 7-3 Figure 7-5 Customize Login Screen: Frame ... 7-4 Figure 7-6 Frame Subscriber Login Screen Example ... 7-5 Figure 8-1 Advertisement Link Configuration ...
  • Page 13 VSG-1000 Vantage Service Gateway List of Tables Table 2-1 Front Panel LEDs ... 2-2 Table 3-1 Web Configurator: Changing System Password... 3-3 Table 4-1 NAT Definition... 4-3 Table 4-2 WAN NAT Mapping Type For VPN ... 4-4 Table 4-3 NAT Example: One-to-One... 4-4 Table 4-4 NAT Example: Many-to-One...
  • Page 14 VSG-1000 Vantage Service Gateway Table 15-8 Troubleshooting TFTP File Transfer ... 15-3 List of Tables...
  • Page 15: List Of Diagrams

    VSG-1000 Vantage Service Gateway List of Diagrams Diagram 1 IP Address Conflicts: Case A ... A Diagram 2 IP Address Conflicts: Case B... A Diagram 3 IP Address Conflicts: Case C... A Diagram 4 IP Address Conflicts: Case D... B Diagram 5 Subscriber Login Screen ...C Diagram 6 WAN Port Cable Pin Assignments...D Diagram 7 LAN Port Cable Pin Assignments ...
  • Page 17: Preface

    Help us help you. E-mail all User’s Guide-related comments, questions or suggestions for improvement to techwriters@zyxel.com.tw or send regular mail to The Technical Writing Team, ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 300, Taiwan. Thank you!
  • Page 19: Getting Started

    VSG-1000 Vantage Service Gateway Part I: Getting Started This part introduces the VSG (Vantage Service Gateway), hardware installation, connections and basic system configuration using the web configurator.
  • Page 21: Chapter 1 Getting To Know Your Vsg

    Introducing the VSG The VSG (Vantage Service Gateway) allows Internet service providers and property managers to provide broadband Internet access to end users (or subscribers). The VSG is ideal in office or hotspot environments. Hotspots are public areas, such as airports, hotels, coffee shops, where end users can access the Internet at any time. Features Your VSG provides the following features to accommodate subscribers with a variety of network configurations with little or no technical support.
  • Page 22: Applications

    VSG-1000 Vantage Service Gateway E-mail Forwarding The VSG is able to forward and retrieve e-mail messages when the subscriber’s default email server is down or behind a firewall. DNS Proxy With DNS proxy, the VSG provides DNS redirection when a subscriber’s configured DNS server is behind a firewall or located in a private Intranet.
  • Page 23: Internet Access In Public Areas

    VSG-1000 Vantage Service Gateway 1.3.2 Internet Access in Public Areas In a hotspot, such as a hotel, the VSG provides high speed Internet access to subscribers. Account billing and authentication can be done either using a remote RADIUS server or the built-in billing function and local subscriber database.
  • Page 25: Hardware Installation And Connection

    Hardware Installation and Connection This chapter shows you how to install the VSG and make hardware connections. Installation Options The following sections describe the different installation options. Do not block the venting holes and leave adequate space on the rear and side of the VSG during 2.1.1 Desktop Installation Make sure the VSG is clean and dry.
  • Page 26: Hardware Connections

    VSG-1000 Vantage Service Gateway Hardware Connections The following sections describe the hardware connections of the VSG. 2.2.1 Front Panel The console, LAN and WAN ports and the LEDs are located on the front panel. The LAN Port Connect the LAN port on the VSG to an Ethernet switch or hub using a crossover Ethernet cable or directly to a computer using a straight-through Ethernet cable.
  • Page 27: Turning On The Vsg

    VSG-1000 Vantage Service Gateway Figure 2-3 Rear Panel 2.2.4 Turning on the VSG Connect one end of the supplied power cord to the power socket on the back of the VSG and the other end to an appropriate power source. When the power source is turned on, the PWR LED on the front panel turns on.
  • Page 29: The Web Configurator

    This chapter introduces how to access the web configurator and perform general system configuration. 3.1 Introducing the Web Configurator The web configurator is best viewed with Internet Explorer (version 5.0 or above) or Netscape (version 6.0 or above) with JavaScript support enabled. 3.2 Accessing the Web Configurator All web configurator screens are shown in Internet Explorer.
  • Page 30: System Login Accounts

    VSG-1000 Vantage Service Gateway Figure 3-3 Web Configurator: Main Menu Please note that if there is no activity for longer than 5 minutes after you log in, the VSG will automatically log you out. If this happens, simply log back in again. 3.3 System Login Accounts You can use two different system accounts (administrator and account manager) to log into the web configuration.
  • Page 31: Restarting The Vsg

    Table 3-1 Web Configurator: Changing System Password LABEL Change Administrator Password Old Password Enter the existing administrator password. New Password Enter a new administrator password. New Password (confirm) Enter the new administrator password again for confirmation. Change Account Manager Password Old Password Enter the existing account manager password.
  • Page 33: Web Configurator System Configuration

    VSG-1000 Vantage Service Gateway Part II: Web Configurator System Configuration This part covers system configuration and subscriber management using the web configurator.
  • Page 35: Chapter 4 System Configuration

    4.1 Factory Ethernet Defaults The Ethernet parameters of the VSG are preset to the following values: 1. WAN IP address of 192.168.1.1 with subnet mask of 255.255.255.0 and default gateway of 192.168.1.254. 2. LAN IP address of 10.59.1.1 with subnet mask of 255.255.255.0 (24 bits). 3.
  • Page 36: Private Ip Addresses

    VSG-1000 Vantage Service Gateway 4.4.2 Private IP Addresses Every machine on the Internet must have a unique address. If your networks are isolated from the Internet, for example, only between your two branch offices, you can assign any IP addresses to the hosts without problems. However, the Internet Assigned Numbers Authority (IANA) has reserved the following three blocks of IP addresses specifically for private networks: 10.0.0.0...
  • Page 37: What Nat Does

    the local network, while an inside global address (IGA) is the IP address of the same inside host when the packet is on the WAN side. The following table summarizes this information. ITEM Inside This refers to the host on the LAN. Outside This refers to the host on the WAN.
  • Page 38: Nat Examples

    VSG-1000 Vantage Service Gateway pool for use with VPN connections on the WAN port. The VSG automatically maps one/more private IP addresses to one/more public IP addresses for VPN packets. The following table describes the NAT mapping types on the WAN for VPN packets.
  • Page 39: The System Configuration Screen

    SUBSCRIBER 10.59.1.2 10.59.1.3 Example 3: One-to-One and Many-to-One The figure below shows an example where subscriber S1 tires to connect to VPN server V1 while subscriber S2 and S3 try to connect to the same VPN server V2 at the same time. In this case, subscribers S1 and S2 map to the same WAN IP address since the destination is different while subscriber S3 maps to a different WAN IP address.
  • Page 40: Figure 4-4 System Configuration

    VSG-1000 Vantage Service Gateway Figure 4-4 System Configuration The following table describes the fields in this screen. System Configuration...
  • Page 41: Table 4-6 System Configuration

    LABEL System Name Enter a descriptive name for identification purposes. Console Port Speed Select the console port speed from the drop-down list box. Choices are 9600, 19200 and 38400. The default setting is 9600. If you change the console port speed, make sure you also make the same Administration Idle- Specify how many minutes (between 1 and 1440) the web configuration can be left idle before the Timeout...
  • Page 42 VSG-1000 Vantage Service Gateway LABEL DHCP Pool End IP Enter the first of the contiguous addresses in the IP address pool. Address DHCP Subnet Mask Enter the subnet mask based on the IP address you specified in the DHCP Server IP Address, DHCP Pool Start IP Address and DHCP Pool End IP Address fields.
  • Page 43: Table 4-7 Syslog Description

    LABEL Public Address List Specify the beginning and ending IP addresses of the address pool in the fields provided. Make sure the total number of addresses in the address pool does not The following shows three NAT pool examples if the VSG is using a WAN public IP address of 211.21.21.1: Group 1: 211.21.21.2 ~ 211.21.21.6 (five IP addresses) Group 2: 211.21.21.20 ~ 211.21.21.29 (ten IP addresses)
  • Page 45: Chapter 5 Subscriber Control

    This chapter shows you how to use the Subscriber Control screen to set up subscriber account 5.1 Overview By default, subscriber authentication is disabled. This allows all subscribers to access the Internet without entering account username and password. 5.1.1 Activating Subscriber Control Set the subscriber authentication settings in the Subscriber Management screen.
  • Page 46: Management Type

    VSG-1000 Vantage Service Gateway 5.2 Management Type You can set the VSG to authenticate subscriber in a number of ways: User agreement CAS (Central Authentication Service) Built-in authentication Remote RADIUS server 5.2.1 Super User Account For built-in and remote RADIUS authentication methods, you can set up a super user account. This account is useful for testing the Internet connection from the LAN through the VSG.
  • Page 47: Cas (Central Authentication Service)

    Table 5-2 Subscriber Control: User Agreement LABEL Click Previous to go back to the previous screen. The changes you made will not be saved if you have Previous not clicked Apply. 5.2.3 CAS (Central Authentication Service) The Hilton Group Corporation developed the High Speed Internet Access (HSIA) service to provide Internet access service across its entire Hilton Group hotels.
  • Page 48: Built-In Authentication

    VSG-1000 Vantage Service Gateway LABEL Redirect URL Specify the web site address of the login screen to which the hotel guests are directed for authentication using CAS. Enter the web site address as provided by the Hilton HSIA support team. Apply Click Apply to save the changes back to VSG and go back to the Utility Menu.
  • Page 49: Radius

    Table 5-4 Subscriber Control: Built-in Authentication FIELD Select Enable from the drop-down list box to activate the super user account. Super User Account Refer to the Super User Account section for more information. Username Enter the username for the super user account. Password Enter the password for the super user account.
  • Page 50: Figure 5-6 Subscriber Control: Radius

    VSG-1000 Vantage Service Gateway The following table describes the RADIUS-related fields in the Subscriber Control screen. FIELD Management Type Select RADIUS to use the subscriber database on a remote RADIUS server. Primary Server Server IP Enter the IP address of the primary authentication server in dotted decimal notation. Authentication Port Specify the authentication port of the primary RADIUS server.
  • Page 51 FIELD Accounting Port Specify the accounting port of the primary RADIUS server. The common port numbers are 1646 and 1813. Secret Key Specify a password (up to 31 alphanumeric characters) as the key to be shared between the primary RADIUS server and the VSG. The key is not sent over the network.
  • Page 52: Subscriber Pop-Up Logout Window

    VSG-1000 Vantage Service Gateway 5.2.6 Subscriber Pop-up Logout Window When this feature is activated for RADIUS management type, the pop-up logout window displays how long the subscriber has accessed or has yet to access the Internet depending on the accounting method you select and the remote RADIUS server settings.
  • Page 53: Subscriber Manual Logout

    Table 5-6 Subscriber Pop-up Logout Windows Variations ACCOUNTING TYPE RADIUS SERVER FIELD SESSION TIMEOUT MESSAGE Accumulation 5.2.7 Subscriber Manual Logout When using the Built-in Authentication management type, there are two ways a subscriber manually logs out and terminates the Internet access for the Accumulation accounting method (refer to Section 5.2.5 for more information).
  • Page 54: Figure 5-11 Web Configurator: Subscriber Management: Version 2

    VSG-1000 Vantage Service Gateway Table 5-7 Subscriber Management Main Menu Variations SUBSCRIBER CONTROL SETTING Subscriber Control = Enable Management Type = RADIUS Subscriber Control = Enable Management Type = Built-in Authentication Billing Mechanism = Enable Subscriber Control = Enable Management Type = Built-in Authentication Billing Mechanism = Disable 5-10...
  • Page 55: Local Subscriber Management

    VSG-1000 Vantage Service Gateway Chapter 6 Local Subscriber Management This chapter shows you how to set up subscriber accounts on the VSG when using the Built-in Authentication management type. 6.1 Introduction When you select the Built-in Authentication management type in the Subscriber Control screen, the subscriber account and/or accounting (or billing) information is stored in the VSG.
  • Page 56: Display Subscriber Account List

    VSG-1000 Vantage Service Gateway The following table describes the labels in this screen. LABEL This read-only field displays the index number of the subscriber account. Username Enter the user name (up to 32 characters) for this account. Password Enter the password (up to 20 characters) in this field. Apply Click Apply to save the changes back to VSG and go back to the Utility Menu.
  • Page 57: Importing Subscriber List

    The following table describes the labels in this screen. LABEL This read-only field displays the index number. Username This field displays the user name for an account. Password This field displays the password for the account. Delete Select the check box(es) and click Delete to remove the account(s) from the VSG. Home Click Home to go back to the Main Menu screen.
  • Page 58: Subscriber Management With Billing

    VSG-1000 Vantage Service Gateway Figure 6-6 Subscriber List (No Billing): Import Example 6.3 Subscriber Management with Billing The following sections describe subscriber account management with simple billing feature. The VSG provides prepay and post-pay billing features. With prepay billing, you set up how many time units a subscriber has purchased. The VSG automatically disconnects the subscriber after the time units are used up.
  • Page 59: Editing Subscriber Account Information

    Table 6-3 Add New Subscribers (With Billing) LABEL Username Enter the user name (up to 32 characters) for this account. Password Enter the password (up to 20 characters) in this field. Units Enter the number of time units (either per day or per hour). Refer to the Billing Mechanism section for more information.
  • Page 60: Detailed Subscriber Accounting Information

    VSG-1000 Vantage Service Gateway Table 6-4 Add New Subscriber: Account Modify LABEL Expire Time This field displays the time until which the subscriber can access the Internet. For prepay billing, this field is calculated by adding the number of time unit to the login time. For post-pay billing, this field is the time a subscriber logs out.
  • Page 61: Terminating Or Deleting A Subscriber Account

    LABEL Purchase Units This field displays the number of time units allocated to this account. Unit Price This field displays the cost of a time unit in the currency specified. Total This field displays the total price for the time units in the currency specified. Back Click Back to go back to the Account Modify screen.
  • Page 63: Web Configurator Advanced Configuration

    VSG-1000 Vantage Service Gateway Part III: Web Configurator Advanced Configuration This part covers setting the login screen, port mapping, IP and MAC address pass through, wall garden and advertising links using the web configurator.
  • Page 65: Subscriber Login Screen

    VSG-1000 Vantage Service Gateway Chapter 7 Subscriber Login Screen This chapter shows you how to customize the subscriber login screen when subscriber control is activated. 7.1 Overview The subscriber login screen is the first screen that all subscribers see when trying to access the Internet. You can configure up to three web addresses for web sites which all subscribers are allowed to access without logging in.
  • Page 66: Figure 7-3 Customize Login Screen: Advanced

    VSG-1000 Vantage Service Gateway Figure 7-3 Customize Login Screen: Advanced The following table describes the labels in this screen. Table 7-1 Customize Login Screen: Advanced LABEL Selection Select Advanced to configure and set the VSG to display the advanced subscriber login screen. Welcome Image Select Default (Welcome!) to display the default welcome image.
  • Page 67: Frame Login Screen

    Table 7-1 Customize Login Screen: Advanced LABEL Specify the color of the registration text. For example, enter ‘000000’ for black. Click View Color Grid to Registration Text Color display a list of web-friendly colors and corresponding hexadecimal values. The default is black (“000000”). Apply Click Apply to save the changes back to VSG and go back to the Utility Menu.
  • Page 68: Figure 7-5 Customize Login Screen: Frame

    VSG-1000 Vantage Service Gateway The following table describes the fields in this screen. FIELD Selection Select Frame to configure and set the VSG to display the subscriber login screen in two frames. Frame Setting Up Frame Enter the IP address in decimal notation of a web server in the web Server IP field, for example, 192.168.1.1. Enter a web site address in the URL Link field, for example, http://www.zyxel.com.
  • Page 69: Figure 7-6 Frame Subscriber Login Screen Example

    VSG-1000 Vantage Service Gateway Figure 7-6 Frame Subscriber Login Screen Example Refer to the next chapter to configure walled garden and advertisement links. Subscriber Login Screen...
  • Page 71: Portal Web Site, Advertisement Link And Walled Garden

    VSG-1000 Vantage Service Gateway Chapter 8 Portal Web Site, Advertisement Link and Walled Garden This chapter shows you how to specify a portal web site, advertisement links and create walled garden web sites. 8.1 Introduction When you enable subscriber control in the Subscriber Management screen, you can set the VSG to direct a subscriber to a portal web site, display advertising web site pop-up window or activate the walled garden feature for generating on-line advertising revenues.
  • Page 72: Walled Garden

    VSG-1000 Vantage Service Gateway LABEL Portal Page Specify the URL of a portal web site. This is the first web site to which a subscriber is directly after logging in successfully. If you do not specify a portal web site, the subscriber will be directed to the intended web site specified in the web browser.
  • Page 73: Figure 8-2Walled Garden

    The following table describes the fields to configure the walled garden feature. FIELD Walled Garden Select Enable to activate this feature and set the field(s) below. Select Disable to de-activate this feature. Link 1 … 3 In the Prompt field, enter a descriptive name (up to 80 characters) for the wall garden link to be displayed in the web browser.
  • Page 75: Lan Device Management

    VSG-1000 Vantage Service Gateway Chapter 9 LAN Device Management This chapter describes how you can remotely manage devices on the LAN through the VSG. 9.1 LAN Device Management Overview NAT (Network Address Translation - NAT, RFC 1631) is the translation of the IP address of a host in a packet. For example, the source address of an outgoing packet, used within one network is changed to a different IP address known within another network.
  • Page 76: Lan Device Management Example

    VSG-1000 Vantage Service Gateway LABEL IP Address Enter the IP address of a LAN device in doted decimal notation. For example, 10.59.1.111. Server Port Enter the port number for a service (for example, 80 for HTTP) on the LAN device. Virtual Port Enter a unique port number between 9601 and 9650 to map to the port number in the Server Port field.
  • Page 77: Figure 9-4 Specifying An Inside Server Example

    VSG-1000 Vantage Service Gateway Figure 9-4 Specifying an Inside Server Example In the LAN Device Management screen, you map virtual port 9601 to the web server and virtual port 9602 to the FTP server. Figure 9-5 LAN Device Management: Inside Server Example To access an inside server on the LAN, enter the WAN IP address of your VSG and the virtual port number of the inside server separated by a colon.
  • Page 79: Figure 10-1 Ip & Mac Address Pass Through

    IP and MAC Address Pass Through This chapter shows you how to configure IP and MAC address pass through. 10.1 Configuring IP and MAC Address Pass Through You can set the VSG to allow the forwarding of packets from a specified LAN device, such as a file server or computer, without prompting for a user name and password.
  • Page 80: Chapter 10 Ip And Mac Address Pass Through

    VSG-1000 Vantage Service Gateway Table 10-1 IP & MAC Address Pass Through LABEL Click Previous to go back to the previous screen. The changes you made will not be saved if you have not Previous clicked Apply. 10-2 DESCRIPTION IP and MAC Address Pass Through...
  • Page 81: Chapter 11 Status

    This chapter covers the system status, DHCP client and current logged-in subscriber information. 11.1 System Status In the Main Menu, click Status and System to display the system information as shown next. The following table describes the labels in this screen. LABEL System Name This field displays the description name of the VSG for identification purposes.
  • Page 82: Dhcp Client Table

    VSG-1000 Vantage Service Gateway LABEL Default Gateway This field displays the IP address of the default gateway of the WAN port on the VSG. Web Server Port This field displays the port number of the embedded web server in your VSG. DHCP The following fields display the status of the DHCP status on the LAN port of the VSG.
  • Page 83: Current Users

    LABEL Click Previous to go back to the previous screen. The changes you made will not be saved if you have not Previous clicked Apply. 11.3 Current Users The Current Users screen displays a list of subscribers currently logged on to the VSG for Internet access. This screen is available if you select RADIUS subscriber management type or disable accounting (or billing) function in the Subscriber Control screen.
  • Page 85: The Smt, System Maintenance And Additional Information

    VSG-1000 Vantage Service Gateway Part IV: The SMT, System Maintenance and Additional Information This part contains information on the SMT (System Management Terminal), configuration and firmware maintenance, troubleshooting, appendices and an index.
  • Page 87: Chapter 12 The Smt

    12.1 Introduction to the SMT The System Management Terminal (SMT) is a menu – driven interface that you use to configure the VSG. Access the SMT using the console port. Use the SMT to set general system settings and upgrade firmware. For advanced configuration, use the embedded web configurator (refer to the chapters on web configuration).
  • Page 88: The Smt Main Menu Summary

    VSG-1000 Vantage Service Gateway (c) 2000-2003 ZyXEL Communications Corporation. All Rights Reserved. The VSG automatically logs you out after ten (default) minutes of inactivity. Simply log back into 12.3 The SMT Main Menu Summary The SMT main menu is shown next.
  • Page 89: The Navigation Keys

    TFTP Server IP Address :10.10.10.10 Download Filename E)xecute Download Enter Selection: Enter the command key and press enter. 12.4.2 The Navigation Keys The following table describes the keystrokes that you use in the SMT screens. [ENTER] To move to the next configuration field in the menu. [ESC] Press [ESC] to discard any changes and return to the previous screen.
  • Page 91: Chapter 13 System Configuration Using The Smt

    System Configuration Using the SMT This chapter shows you how to set general system settings, view current configuration and perform 13.1 About SMT System Configuration Refer to the System Configuration chapter for background information. 13.2 Setting System Configuration From the main menu, type 1 and press [ENTER] to display the System Configuration menu. SystemName Console Port Speed Auto Logout Timer...
  • Page 92 VSG-1000 Vantage Service Gateway FIELD WAN Configuration Set the following fields for the WAN port on the VSG. WAN Mode? (D/S) Enter D (Dynamic) to set the VSG to dynamically obtain an IP address and other network information (IP address, DNS information etc.) from a DHCP server on the WAN network. Enter S (Static) to set the VSG to use a static (or fixed) IP address and assign network information (IP address, DNS information etc.) to Ethernet device(s) connected to the WAN port.
  • Page 93: View Current Configuration

    FIELD Enter the IP address of the DNS server(s) in the Primary DNS IP Address and/or Secondary DNS IP Primary/Secondary DNS IP Address Address fields. The default primary DNS server IP address is 168.95.1.1. At the “S)ave and return R)eturn without saving M)odify:” prompt, type S and press [ENTER] to save the changes and return to the previous screen, type R and press [ENTER] to discard all changes and return to the previous screen or type M and press [ENTER] to continue configuring the fields.
  • Page 94: Changing The System Password

    VSG-1000 Vantage Service Gateway FIELD This field displays the WAN IP address assignment method (Static IP Setting or DHCP Client). WAN Mode? (D/S) IP Address This field displays the WAN IP address of the VSG. Subnet Mask This field displays the subnet mask on the WAN port. Default Gateway This field displays the IP address of the default gateway.
  • Page 95: Restarting The Vsg

    Enter the old password. Figure 13-3 SMT: Change Administrator Password Type your current system password in the Enter the old password field, and press [ENTER]. Step 3. Type your new system password in the Enter the new password field, and press [ENTER]. Step 4.
  • Page 96: Figure 13-5 Smt: Reset To Factory Defaults

    VSG-1000 Vantage Service Gateway Are you sure you want to reset the device back to the factory defaults? [Y/N]: Enter the command key and press enter. Figure 13-5 SMT: Reset to Factory Defaults 13-10 System Configuration Using the SMT...
  • Page 97: Configuration And Firmware Maintenance

    Configuration and Firmware Maintenance This chapter shows you how to upgrade the firmware and configuration file and create configuration 14.1 Configuration and Firmware Maintenance Overview You need to run a TFTP server on a computer where the firmware and/or configuration files are stored to perform file upload or download.
  • Page 98: Firmware Upgrade Using The Web Configurator

    VSG-1000 Vantage Service Gateway Type 1 and press [ENTER] to display the Firmware Upgrade screen. Step 4. Enter the IP address of the computer running the TFTP server in the TFTP Server IP Address field. Step 5. Specify the name of the firmware file in the Download Filename field. Step 6.
  • Page 99: Configuration File Maintenance

    Figure 14-5 Web Configurator: Firmware Upgrade Enter the IP address of the computer running the TFTP server in the TFTP Server IP Address field. Step 4. Specify the name of the firmware file in the Filename field and click Apply to start the file transfer Step 5.
  • Page 100: Restore Configuration

    VSG-1000 Vantage Service Gateway Figure 14-7 Web Configurator: Utilities: Exporting Configuration File Select Export and enter the IP address of the computer running the TFTP server in the TFTP Server IP Step 3. Address field. In the Filename field, specify the name of the configuration file to be stored and click Apply to start the Step 4.
  • Page 101: Chapter 15 Troubleshooting

    This chapter covers potential problems and possible remedies. After each problem description, some 15.1 Using LEDs to Diagnose Problems The LEDs are useful aides for finding possible problem causes. 15.1.1 The Power LED The PWR LED on the front panel does not light up. STEPS Check the connections from the VSG to the power source.
  • Page 102: Console Port

    VSG-1000 Vantage Service Gateway 15.2 Console Port I cannot access the VSG through the console port. STEPS Check to see if the VSG is connected to your computer using a console cable. Check to see if the communications program is configured correctly.
  • Page 103: Tftp File Transfer

    Table 15-7 Troubleshooting Internet Access STEPS Check the Internet settings on your modem and/or router. Make sure the subscriber enter the correct user name and password to log in to the VSG. The username and password are case-sensitive. Make sure the subscriber account is still valid. Make sure there is no conflict in IP address assignment.
  • Page 104: Figure 15-2 Smt: Debug Mode: Erasing Firmware

    VSG-1000 Vantage Service Gateway (1)Run Monitor (2)Restart system (3)Erase entire FLASH (4)SDRAM Testing Enter selection:3 Erasing flash 0 block 0...OK Erasing flash 0 block 1...OK Erasing flash 0 block 2...OK Erasing flash 0 block 3...OK Erasing flash 0 block 4...OK …...
  • Page 105: Figure 15-5 Smt: Debug Mode: Verifying Vsg And Tftp Settings

    ----------- TFTP download parameters ----------- IP address TFTP server IP address :10.59.1.33 Gateway IP address Subnet mask File name ------------------------------------------------ Do you want to change above entries(Y/N)?n Figure 15-5 SMT: Debug Mode: Verifying VSG and TFTP Settings 7. The VSG downloads the firmware. After the file transfer is complete, the VSG restarts automatically. Do you want to change above entries(Y/N)?n Attached TCP/IP interface to rtl1.
  • Page 107: Appendix A Ip Address Assignment Conflicts

    This appendix describes situations where IP address conflicts may occur. Subscribers with duplicate IP addresses will not be able to access the Internet. Case A: The VSG is using the same LAN and WAN IP addresses The following figure shows an example where the VSG is using a WAN IP address that is the same as the IP address of a computer on the LAN.
  • Page 108: Diagram 4 Ip Address Conflicts: Case D

    VSG-1000 Vantage Service Gateway Case D: Two or more subscribers have the same IP address. By converting all private IP addresses to the WAN IP address, the VSG allows subscribers with different network configurations to access the Internet. However, there are situations where two or more subscribers are using the same private IP address.
  • Page 109: Appendix B Subscriber Login

    To log in as a subscriber, enter a web site address such as www.zyxel.com in a web browser. The login screen displays prompting you to enter the user name and password. Enter a user name and password and click Enter. Depending on the settings in the VSG, either the specified web page or an advertisement web page displays.
  • Page 110: Appendix C Cable Types And Cable Pin Assignments

    VSG-1000 Vantage Service Gateway Cable Types and Cable Pin Assignments RJ-45 Ethernet Port The following table describes the types of network cable used for the different connection speeds. Make sure the Ethernet cable length between connections does not exceed 100 meters (328 feet). SPEED 10 Base-TX 100 Base-TX...
  • Page 111: Diagram 7 Lan Port Cable Pin Assignments

    1 2 3 4 5 6 7 8 Make sure that the Ethernet cable connection between the VSG and a computer or switch uplink port conforms to the pin assignments as shown in the figure. ETHERNET DEVICE (COMPUTER/ UPLINK PORT) Diagram 7 LAN Port Cable Pin Assignments Serial Console Port The following table describes the console cable pin assignment for the serial console port.
  • Page 112: Appendix D Setting Your Computer Ip Address

    VSG-1000 Vantage Service Gateway All computers must have a 10M or 100M Ethernet adapter and TCP/IP installed. Windows 95/98/Me/NT/2000/XP, Macintosh OS 7 and later operating systems and all versions of UNIX/LINUX include the software components you need to install and use TCP/IP on your computer. Windows 3.1 requires the purchase of a third-party TCP/IP application package.
  • Page 113 If you need Client for Microsoft Networks: Click Add. Select Client and then click Add. Select Microsoft from the list of manufacturers. Select Client for Microsoft Networks from the list of network clients and then click OK. Restart your computer so the changes you made take effect. Configuring In the Network window Configuration tab, select your network adapter's TCP/IP entry and click Properties.
  • Page 114: Verifying Settings

    VSG-1000 Vantage Service Gateway Click the DNS Configuration tab. -If you do not know your DNS information, select Disable DNS. -If you know your DNS information, select Enable DNS and type the information in the fields below (you may not need to fill them all in). Click the Gateway tab.
  • Page 115 gateway. Windows 2000/NT/XP For Windows XP, click start, Control Panel. In Windows 2000/NT, click Start, Settings, Control Panel. For Windows XP, click Network Connections. For Windows 2000/NT, click Network and Dial-up Connections. Setting Your Computer IP Address VSG-1000 Vantage Service Gateway Right-click Local Area Connection and then click Properties.
  • Page 116 VSG-1000 Vantage Service Gateway Select Internet Protocol (TCP/IP) (under the General tab in Win XP) and click Properties. The Internet Protocol TCP/IP Properties window opens (the General tab in Windows XP). -If you have a dynamic IP address click Obtain an IP address automatically.
  • Page 117 -If you do not know your gateway's IP address, remove any previously installed gateways in the IP Settings tab and click OK. Do one or more of the following if you want to configure additional IP addresses: -In the IP Settings tab, in IP addresses, click Add. -In TCP/IP Address, type an IP address in IP address and a subnet mask in Subnet mask, and then click Add.
  • Page 118 VSG-1000 Vantage Service Gateway Macintosh OS 8/9 Click the Apple menu, Control Panel and double-click TCP/IP to open the TCP/IP Control Panel. Select Ethernet built-in from the Connect via list. For dynamically assigned settings, select Using DHCP Server from the Configure: list. For statically assigned settings, do the following: -From the Configure box, select Manually.
  • Page 119: Macintosh Os X

    Verifying Settings Check your TCP/IP properties in the TCP/IP Control Panel window. Macintosh OS X Click the Apple menu, and click System Preferences to open the System Preferences window. Click Network in the icon bar. - Select Automatic from the Location list. - Select Built-in Ethernet from the Show list.
  • Page 120: Appendix Eip Subnetting

    VSG-1000 Vantage Service Gateway IP Addressing Routers “route” based on the network number. The router that delivers the data packet to the correct destination host uses the host ID. IP Classes An IP address is made up of four octets (eight bits), written in dotted decimal notation, for example, 192.168.1.1. IP addresses are categorized into different classes.
  • Page 121: Subnet Masks

    Subnet Masks A subnet mask is used to determine which bits are part of the network number, and which bits are part of the host ID (using a logical AND operation). A subnet mask has 32 bits; each bit of the mask corresponds to a bit of the IP address.
  • Page 122 VSG-1000 Vantage Service Gateway The first three octets of the address make up the network number (class “C”). You want to have two separate networks. Divide the network 192.168.1.0 into two separate subnets by converting one of the host ID bits of the IP address to a network number bit.
  • Page 123: Example Eight Subnets

    IP Address (Binary) Subnet Mask (Binary) Subnet Address: 192.168.1.0 Broadcast Address: 192.168.1.63 IP Address IP Address (Binary) Subnet Mask (Binary) Subnet Address: 192.168.1.64 Broadcast Address: 192.168.1.127 IP Address IP Address (Binary) Subnet Mask (Binary) Subnet Address: 192.168.1.128 Broadcast Address: 192.168.1.191 IP Address IP Address (Binary) Subnet Mask (Binary)
  • Page 124 VSG-1000 Vantage Service Gateway SUBNET SUBNET ADDRESS The following table is a summary for class “C” subnet planning. NO. “BORROWED” HOST BITS Subnetting With Class A and Class B Networks. For class “A” and class “B” addresses the subnet mask also determines which bits are part of the network number and which are part of the host ID.
  • Page 125 NO. “BORROWED” HOST BITS IP Subnetting Chart 17 Class B Subnet Planning SUBNET MASK NO. SUBNETS 255.255.255.240 (/28) 255.255.255.248 (/29) 255.255.255.252 (/30) 255.255.255.254 (/31) VSG-1000 Vantage Service Gateway NO. HOSTS PER SUBNET 4096 8192 16384 32768...
  • Page 126: Appendix F Product Specifications

    VSG-1000 Vantage Service Gateway Standard IEEE 802.3 10BASE-T Ethernet IEEE 802.3u 100BASE-TX Fast Ethernet Interface One 10/100 Ethernet WAN port One 10/100 Ethernet LAN port One RS232 console port Networking Plug-and-play subscriber Internet access NAT (RFC1631) NAT for VPN (IPSec/PPTP) DHCP server and DHCP relay HTTP proxy SMTP redirection...
  • Page 127 Dimension 440(W) x 116(L) x 44(H) mm Temperature 0 to 50C Humidity 10% to 95% (non-condensing) Power 100-220 V AC, 50/60 Hz Maximum power consumption: 20W Certification FCC part 15 Class A VCCI Class A UL Class A Product Specifications VSG-1000 Vantage Service Gateway PHYSICAL &...
  • Page 128: Index

    VSG-1000 Vantage Service Gateway account time out ...6-7 accounting methods ...5-5 Accumulation accounting method ...5-5 Administration Idle-Timeout...4-7 administrator idle timeout ...13-8 advanced subscriber login screen...7-1 advertisement links...8-1 applications...1-2 backup ...4-8 billing...6-4 post pay ...6-4 prepay...6-4 billing mechanism ...5-4 built-in authentication...5-4 built-in Ssubscriber management add new subscribers...6-4 import subscriber list...6-3...
  • Page 129 Note for web configurator ... 14-1 firmware upgrade ... 14-1 requirement ... 14-1 SMT ... 14-1 Web Configurator ... 14-2 Flow Control ... 12-1 forgot the administrator password and/username 15-3 frame subscriber login screen ... 7-3 front panel... 2-2 console port ... 2-2 LAN port ...
  • Page 130 VSG-1000 Vantage Service Gateway Remote Authentication Dial-In User Service ...See RADIUS Remote Authentication Dial-In user Service (RADIUS)...5-5 reserved private network IP addresses ...4-2 resetting the VSG ...13-9 restarting the VSG ...13-9 Restarting the VSG...3-3 RFC 1631 ...4-2 RS-232 cable ...2-2 secure connection ...4-3 server port...9-1, 9-2 service usage agreement ...5-2...
  • Page 131 type of system login accounts ... 3-2 winipcfg... I www.zyxel.com... v Index VSG-1000 Vantage Service Gateway ZyXEL Limited Warranty ...v ZyXEL Web Page... xvii ZyXEL website ...v...

Table of Contents