Page 1 User’s Guide VMG8825-B Series Dual Band Wireless AC/N VDSL2 IAD with USB Default Login Details Version 5.13 Edition 1, 08/2018 LAN IP Address http://192.168.1.1 admin Login Password See the device label Copyright © 2018 Zyxel Communications Corporation...
Page 2 Every effort has been made to ensure that the information in this manual is accurate. Related Documentation • Quick Start Guide The Quick Start Guide shows how to connect the managed device • More Information Go to support.zyxel.com to find other information on the VMG VMG8825-B Series User’s Guide...
Page 3: Table Of Contents
VoIP Status ............................264 ARP Table ............................267 Routing Table ............................269 Multicast Status ..........................271 xDSL Statistics ............................273 WLAN Station Status ........................... 276 ................................277 Cellular Statistics ..........................278 System ..............................280 User Account ............................281 VMG8825-B Series User’s Guide...
Page 4 Contents Overview Remote Management ........................283 SNMP ..............................286 Time Settings ............................288 E-mail Notification ..........................290 Log Setting ............................292 Firmware Upgrade ..........................295 Backup Restore ........................... 298 Diagnostic ............................301 Troubleshooting ..........................307 Appendices .............................313 VMG8825-B Series User’s Guide...
Page 5: Table Of Contents
2.1.1 Accessing the Web Configurator ..................27 2.2 Web Configurator Layout ......................29 2.2.1 Title Bar ........................... 29 2.2.2 Navigation Panel ........................30 Chapter 3 Quick Start ............................34 3.1 Overview ............................34 3.2 Quick Start Setup ..........................34 VMG8825-B Series User’s Guide...
Page 6 6.1.1 What You Can Do in this Chapter ..................71 6.1.2 What You Need to Know ..................... 72 6.1.3 Before You Begin ........................75 6.2 The Broadband Screen ........................75 6.2.1 Add/Edit Internet Connection ..................... 76 VMG8825-B Series User’s Guide...
Page 7 8.2 The LAN Setup Screen ........................128 8.3 The Static DHCP Screen ....................... 132 8.4 The UPnP Screen ........................... 133 8.4.1 Turning On UPnP in Windows 7 Example ................134 8.5 The Additional Subnet Screen ..................... 136 VMG8825-B Series User’s Guide...
Page 8 Chapter 11 Network Address Translation (NAT) ....................167 11.1 Overview ............................. 167 11.1.1 What You Can Do in this Chapter ................... 167 11.1.2 What You Need To Know ....................167 11.2 The Port Forwarding Screen ..................... 168 VMG8825-B Series User’s Guide...
Page 9 14.2 The Vlan Group Screen ......................190 14.2.1 Add/Edit a VLAN Group ....................191 Chapter 15 Interface Grouping ..........................192 15.1 Overview ............................. 192 15.1.1 What You Can Do in this Chapter ................... 192 15.2 The Interface Grouping Screen ....................192 VMG8825-B Series User’s Guide...
Page 10 19.2 The MAC Filter Screen ........................ 212 Chapter 20 Parental Control ..........................214 20.1 Overview ............................. 214 20.2 The Parental Control Screen ..................... 214 20.2.1 Add/Edit a Parental Control Profile ................215 Chapter 21 Scheduler Rule ..........................219 VMG8825-B Series User’s Guide...
Page 11 24.1 Overview ............................. 257 24.1.1 What You Can Do in this Chapter ................... 257 24.1.2 What You Need To Know ....................257 24.2 The System Log Screen ......................258 24.3 The Security Log Screen ......................258 VMG8825-B Series User’s Guide...
Page 12 Statistics ...........................273 30.1 The xDSL Statistics Screen ......................273 Chapter 31 WLAN Station Status .........................276 31.1 Overview ............................. 276 ................................277 Chapter 32 Cellular Statistics ..........................278 32.1 Overview ............................. 278 32.2 The Cellular Statistics Screen ..................... 278 VMG8825-B Series User’s Guide...
Page 13 38.2.1 Email Notification Edit ..................... 290 Chapter 39 Log Setting ............................292 39.1 Overview ............................ 292 39.2 The Log Settings Screen ......................292 39.2.1 Example E-mail Log ......................293 Chapter 40 Firmware Upgrade ...........................295 40.1 Overview ............................. 295 VMG8825-B Series User’s Guide...
Page 14 43.6 UPnP ............................. 312 Part III: Appendices ..................313 Appendix A Customer Support ..................... 314 Appendix B Wireless LANs....................... 320 Appendix C IPv6..........................333 Appendix D Services ........................341 Appendix E Legal Information ....................... 345 Index ..............................353 VMG8825-B Series User’s Guide...
Page 15: User's Guide
User’s Guide...
Page 16: Introducing The Vmg
Note: The ADSL and VDSL lines share the same WAN (layer-2) interfaces that you configure in the VMG. Refer to Section 6.2 on page 75 for the Network Setting > Broadband screen. Computers can connect to the VMG’s LAN ports (or wirelessly). VMG8825-B Series User’s Guide...
Page 17: Ethernet Wan
Ethernet WAN port and then connect it to the broadband modem or router. This way, you can access the Internet via an Ethernet connection and still use the QoS, Firewall and parental control functions on the VMG. Figure 2 VMG’s Internet Access Application: Ethernet WAN VMG8825-B Series User’s Guide...
Page 18: Sfp
Figure 3 Wireless Access Example 1.1.6 VMG’s USB Support The USB port of the VMG is used for cellular WAN backup, file-sharing and media server. VMG8825-B Series User’s Guide...
Page 19 You can also use the VMG as a media server. This lets anyone on your network play video, music, and photos from a USB device (B) connected to the VMG’s USB port (without having to copy them to another computer). VMG8825-B Series User’s Guide...
Page 20: Voip Features
• FTP. Use FTP for firmware upgrades and configuration backup/restore. • SNMP (Simple Network Management Protocol). Use SNMP for exchanging management information between network devices. See Chapter 36 on page 286 for more information about SNMP. VMG8825-B Series User’s Guide...
Page 21: Good Habits For Managing The Vmg
VMG. You could simply restore your last configuration. 1.4 Hardware 1.4.1 Front and Side Panels The following graphics displays the front and side panels of the VMG. Figure 7 VMG8825-B Series Front Panel VMG8825-B Series User’s Guide...
Page 22 Chapter 1 Introducing the VMG Figure 8 VMG8825-B Series Side Panels Figure 9 VMG8825-B Series Side Panels VMG8825-B Series User’s Guide...
Page 23: Using The Wlan And Wps Buttons
To turn off the wireless network, press the WLAN button for more than one second. The WLAN/WPS LED turns off when the wireless network is off. 1.4.3 LEDs (Lights) The following graphic displays the labels of the LEDs. Figure 10 LEDs on the VMG VMG8825-B Series User’s Guide...
Page 24 The VMG is communicating with 2.4 GHz or 5 GHz wireless clients. Amber Blinking The VMG is setting up a WPS connection with a 2.4 GHz or 5 GHz wireless client. The 2.4 GHz or 5 GHz wireless network is not activated. VMG8825-B Series User’s Guide...
Page 25: Rear Panel
The following table describes the items on the rear panel.. Table 3 Rear Panel Ports LABEL DESCRIPTION Connect an SFP transceiver to the SFP port for fiber-speed Internet access. Connect a RJ-11 cable to the DSL port for Internet access. VMG8825-B Series User’s Guide...
Page 26: The Reset Button
To set the device back to the factory default settings, press the RESET button for five seconds or until the POWER LED begins to blink and then release it. When the POWER LED begins to blink, the defaults have been restored and the device restarts. VMG8825-B Series User’s Guide...
Page 27: The Web Configurator
H A P T E R The Web Configurator 2.1 Overview The screens are based on VMG8825-B Series. The Web Configurator is an HTML-based management interface that allows easy setup and management via Internet browser. Use Internet Explorer 8.0 and later versions or Mozilla Firefox 3 and later versions or Safari 2.0 and later versions.
Page 28 Figure 13 Change Password Screen Configure basic Internet access and wireless settings. The Network Map page appears. Figure 14 Network Map Click Status to display the Status screen, where you can view the VMG’s interface and system information. VMG8825-B Series User’s Guide...
Page 29: Web Configurator Layout
Language: Select the language you prefer. Quick Start: Click this icon to open screens where you can configure the VMG’s time zone Internet access, and wireless settings. Logout: Click this icon to log out of the Web Configurator. VMG8825-B Series User’s Guide...
Page 30: Navigation Panel
Use this screen to forward DNS queries for certain domain names through a specific WAN interface to its DNS server(s). Policy Route Use this screen to configure policy routing on the VMG. Use this screen to configure Routing Information Protocol to exchange routing information with other routers. VMG8825-B Series User’s Guide...
Page 31 (such as parental control) is enforced. Certificates Local Certificates Use this screen to view a summary list of certificates and manage certificates and certification requests. Trusted CA Use this screen to view and manage the list of the trusted CAs. VoIP VMG8825-B Series User’s Guide...
Page 32 Use this screen to view the status of all MLD settings on the VMG. xDSL Statistics xDSL Statistics Use this screen to view the VMG’s xDSL traffic statistics. Cellular Cellular Statistics Use this screen to look at cellular Internet connection status. Statistics Maintenance VMG8825-B Series User’s Guide...
Page 33 (maintenance domain) and MA (maintenance association), perform connectivity tests and view test reports. 802.3ah Use this screen to configure link OAM port parameters, OAM Ping Use this screen to view information to help you identify problems with the DSL connection. VMG8825-B Series User’s Guide...
Page 34: Quick Start
Web Configurator to open the quick start screens. Select the time zone of your location. Click Next. Figure 16 Quick Start - Welcome Enter your Internet connection information on this screen. The screen and fields to enter may vary depending on your current connection type. Click Next. VMG8825-B Series User’s Guide...
Page 35 Turn the wireless LAN on or off. If you keep it on, record the security settings so you can configure your wireless clients to connect to the VMG. Click Save. Figure 18 Quick Start - Wireless Your VMG saves your settings and attempts to connect to the Internet. VMG8825-B Series User’s Guide...
Page 36: Tutorials
Service Provider (ISP) to configure the VMG. Be sure to contact your service provider for any information you need to configure the Broadband screens. Click Network Setting > Broadband to open the following screen. Click Add New WAN Interface. In this example, the DSL connection has the following information. General Name MyDSLConnection VMG8825-B Series User’s Guide...
Page 37 Then select DNS as Static and enter the DNS server addresses provided to you, such as 192.168.5.2 (DNS server1)/192.168.5.1 (DNS server2). Leave the rest of the fields to the default settings. Click Apply to save your settings. VMG8825-B Series User’s Guide...
Page 38 Chapter 4 Tutorials You should see a summary of your new DSL connection setup in the Broadband screen as follows. VMG8825-B Series User’s Guide...
Page 39: Setting Up A Secure Wireless Network
802.11b/g/n Mixed Click Network Setting > Wireless to open the General screen. Select More Secure as the security level and WPA2-PSK as the security mode. Configure the screen using the provided parameters (see page 39). Click Apply. VMG8825-B Series User’s Guide...
Page 40: Using Wps
This section gives you an example of how to set up a wireless network using WPS. This example uses the VMG as the AP and a WPS-enabled Android 4.4.2 smartphone as the wireless client. There are two WPS methods for creating a secure connection. This tutorial shows you how to do both. VMG8825-B Series User’s Guide...
Page 41 The wireless client is then able to communicate with the VMG securely. The following figure shows you how to set up wireless network and security by pressing a button on both VMG and wireless client (the Android 4.4.2 phone in this example). VMG8825-B Series User’s Guide...
Page 42 Go to your phone settings and turn on Wi-Fi. Open the Wi-Fi networks list and tap WPS PIN Entry to get a PIN number. Log into VMG’s web configurator and go to the Network Setting > Wireless > WPS screen. Enable the WPS function and click Apply. VMG8825-B Series User’s Guide...
Page 43 This may take up to two minutes. The wireless client is then able to communicate with the VMG securely. The following figure shows you how to set up wireless network and security on VMG and wireless client (Android 4.4.2 smartphone in this example) by using PIN method. VMG8825-B Series User’s Guide...
Page 44: Without Wps
Use the wireless adapter’s utility installed on the notebook to search for the “Example” SSID. Then enter the “DoNotStealMyWirelessNetwork” pre-shared key to establish an wireless Internet connection. Note: The VMG supports IEEE 802.11b and IEEE 802.11g wireless clients. Make sure that your notebook or computer’s wireless adapter supports one of these standards. VMG8825-B Series User’s Guide...
Page 45: Setting Up Multiple Wireless Groups
Pre-Shared Key ForCompanyOnly 123456789 guest123 Click Network Setting > Wireless to open the General screen. Use this screen to set up the company’s general wireless network group. Configure the screen using the provided parameters and click Apply. VMG8825-B Series User’s Guide...
Page 46 Chapter 4 Tutorials Click Network Setting > Wireless > Guest/More AP to open the following screen. Click the Edit icon to configure the second wireless network group. Configure the screen using the provided parameters and click Apply. VMG8825-B Series User’s Guide...
Page 47 Chapter 4 Tutorials In the Guest/More AP screen, click the Edit icon to configure the third wireless network group. Configure the screen using the provided parameters and click Apply. VMG8825-B Series User’s Guide...
Page 48: Using The File Sharing Feature
• Access the shared files of your USB device from a computer. 4.5.1 Set Up File Sharing To set up file sharing you need to connect your USB device, enable file sharing and set up your share(s). VMG8825-B Series User’s Guide...
Page 49 If the share names include spaces and the following special characters listed in the brackets ["`<>^$|&;\/:*?'], the following screen will appear. To avoid this, please correct your share names in the USB, and repeat the steps above. VMG8825-B Series User’s Guide...
Page 50 Account button in the Network Setting > Maintenance > User Account screen. Please see Chapter 29 on page 225, for detailed information about User Account screen. After you create a new user account, the screen should look like the following. VMG8825-B Series User’s Guide...
Page 51: Access Your Shared Files From A Computer
Before you begin, connect the USB storage device containing the media files you want to play to the USB port of your VMG. 4.6.1 Configuring the VMG To use your VMG as a media server, click Network Setting > USB Service > Media Server. VMG8825-B Series User’s Guide...
Page 52: Using Windows Media Player
If you cannot see the VMG in the left panel as shown above, go to Organize > Manage Libraries > Music/Videos/Pictures/Recorded TV > Add > \\192.168.1.1\BobShare. (Select the folder containing the media you wish to upload to Windows Media Player.) VMG8825-B Series User’s Guide...
Page 53: Using A Digital Media Adapter
USB storage device in your TV screen. Note: For this tutorial, your DMA-2500 should already be set up with the TV according to the instructions in the DMA-2500 Quick Start Guide. Connect the DMA-2500 to an available LAN port in your VMG. VMG8825-B Series User’s Guide...
Page 54 MyMedia to open the following screen. Select the GPON Device as your media server. The screen shows you the list of available media files in the USB storage device. Select the file you want to open and push the Play button in the remote control. VMG8825-B Series User’s Guide...
Page 55: Configuring Static Route For Routing To Another Network
You need to specify a static routing rule on the VMG to specify R as the router in charge of forwarding traffic to N2. In this case, the VMG routes traffic from A to R and then R routes the traffic to B. VMG8825-B Series User’s Guide...
Page 56 To configure a static route to route traffic from N1 to N2: Log into the VMG’s Web Configurator in advanced mode. Click Network Setting > Routing. Click Add new Static Route in the Static Route screen. Configure the Static Route Setup screen using the following settings: VMG8825-B Series User’s Guide...
Page 57: Configuring Qos Queue And Class Setup
• Note the IP address (192.168.1.23 for example) and/or MAC address (AA:FF:AA:FF:AA:FF for example) of your computer and map it to queue 7. VMG8825-B Series User’s Guide...
Page 58 Click Queue Setup > Add new Queue to create a new queue. On the screen that opens, check Active and enter or select the following values: • Name: E-mail • Interface: WAN • Priority: 1 (High) • Weight: 8 • Rate Limit: 5,000 (kbps) VMG8825-B Series User’s Guide...
Page 59 Chapter 4 Tutorials Tutorial: Advanced > QoS > Queue Setup Click Classification Setup > Add new Classification to create a new class. Select Enable in the Active field and follow the settings as shown on the screen below. VMG8825-B Series User’s Guide...
Page 60 This maps e-mail traffic coming from port 25 to the highest priority, which you have created in the previous screen (see the IP Protocol field). This also maps your computer’s IP address and MAC address to the E-mail queue (see the Source fields). VMG8825-B Series User’s Guide...
Page 61: Access The Vmg Using Ddns
Then you will need to configure the same account and host name on the VMG later. 4.9.2 Configuring DDNS on Your VMG Configure the following settings in the Network Setting > DNS > Dynamic DNS screen. • Select Enable Dynamic DNS. VMG8825-B Series User’s Guide...
Page 62: Testing The Ddns Setting
Josephine’s computer connects wirelessly to the Internet through the VMG. Thomas decides to use the Security > MAC Filter screen to grant wireless network access to his computer but not to Josephine’s computer. VMG8825-B Series User’s Guide...
Page 63 Thomas can also grant access to the computers of other members of his family and friends. However, Josephine and others not listed on this screen will no longer be able to access the Internet through the VMG. VMG8825-B Series User’s Guide...
Page 64: Access Your Shared Files From A Computer
In FileZilla enter the IP address of the VMG (the default is 192.168.1.1), your account’s user name and password and port 21 and click Quickconnect. A screen asking for password authentication appears. File Sharing via Windows Explorer Once you log in the USB device displays in the folder. VMG8825-B Series User’s Guide...
Page 65: Technical Reference
Technical Reference...
Page 66: Network Map And Status Screens
5.2 The Network Map Screen Use this screen to view the network connection status of the device and its clients. A warning message appears if there is a connection problem. Figure 21 Network Map: Icon View Mode VMG8825-B Series User’s Guide...
Page 67: The Status Screen
VMG to update this screen in Refresh interval. Figure 22 Network Map: List View Mode 5.3 The Status Screen Use this screen to view the status of the VMG. Click Status to open this screen. VMG8825-B Series User’s Guide...
Page 68 This field displays the current subnet mask in the WAN. MAC Address This shows the WAN Ethernet adapter MAC (Media Access Control) Address of your VMG. Primary DNS This field displays the first DNS server address assigned by the ISP. server VMG8825-B Series User’s Guide...
Page 69 If memory usage does get close to 100%, the VMG is probably becoming unstable, and you should restart the device. See Section 41.2 on page 298, or turn off the device (unplug the power) for a few seconds. VMG8825-B Series User’s Guide...
Page 70 This column displays the service provider name and SIP number for each SIP account. This field displays the account number and service domain of the SIP account. You can change these in the VoIP > SIP screens. VMG8825-B Series User’s Guide...
Page 71: Broadband
ENCAPSULATION CONNECTION SETTINGS ADSL/VDSL over Routing PPPoE PPP information, IPv4/IPv6 IP address, routing feature, DNS server, VLAN, QoS, and MTU IPoE IPv4/IPv6 IP address, routing feature, DNS server, VLAN, QoS, and MTU Bridge VLAN and QoS VMG8825-B Series User’s Guide...
Page 72: What You Need To Know
IPv6 address size to 128 bits (from the 32-bit IPv4 address) allows up to 3.4 x 10 IP addresses. The VMG can use IPv4/IPv6 dual stack to connect to IPv4 and IPv6 networks, and supports IPv6 rapid deployment (6RD). VMG8825-B Series User’s Guide...
Page 73 Border Relay router (BR in the figure) to connect to the native IPv6 Internet. The local network can also use IPv4 services. The VMG uses it’s configured IPv4 WAN IP to route IPv4 traffic to the IPv4 Internet. VMG8825-B Series User’s Guide...
Page 74 Router (AFTR in the graphic) to connect to the IPv4 Internet. The local network can also use IPv6 services. The VMG uses it’s configured IPv6 WAN IP to route IPv6 traffic to the IPv6 Internet. Figure 26 Dual Stack Lite VMG8825-B Series User’s Guide...
Page 75: Before You Begin
This shows whether Multicast Listener Discovery (MLD) is activated or not for this connection. MLD is not available when the connection uses the bridging service. Modify Click the Edit icon to configure the WAN connection. Click the Delete icon to remove the WAN connection. VMG8825-B Series User’s Guide...
Page 76: Add/Edit Internet Connection
Use Routing mode if your ISP give you one IP address only and you want multiple computers to share an Internet account. The following example screen displays when you select the ADSL over ATM connection type, Routing mode, and PPPoE encapsulation. The screen varies when you select other interface type, encapsulation, and IPv6/IPv4 mode. VMG8825-B Series User’s Guide...
Page 77 LABEL DESCRIPTION General Active Select Enable or Disable to activate or deactivate the interface. Name Specify a descriptive name for this connection. Type Select whether it is an ADSL/VDSL over PTM or ADSL over ATM connection. VMG8825-B Series User’s Guide...
Page 78 The valid range for the VPI is 0 to 255. Enter the VPI assigned to you. The valid range for the VCI is 32 to 65535 (0 to 31 is reserved for local management of ATM traffic). Enter the VCI assigned to you. VMG8825-B Series User’s Guide...
Page 79 Select Obtain DNS Info Automically if you want the VMG to use the DNS server addresses assigned by your ISP. Select Use Following Static DNS Address if you want the VMG to use the DNS server addresses you configure manually. VMG8825-B Series User’s Guide...
Page 80 IPv6 Address (This is available only when you select IPv4 IPv6 DualStack or IPv6 Only in the IPv4/IPv6 Mode field.) Obtain an IPv6 Select Obtain an IPv6 Address Automatically if you want to have the VMG use the IPv6 prefix Address from the connected router’s Router Advertisement (RA) to generate an IPv6 address. Automatically VMG8825-B Series User’s Guide...
Page 81 Click the Add new WAN Interface in the Network Setting > Broadband screen or the Edit icon next to the connection you want to configure. Select Bridge as the encapsulation mode. The screen varies depending on the interface type you select. If you select ADSL/VDSL over PTM as the interface type, the following screen appears. VMG8825-B Series User’s Guide...
Page 82 Type the VLAN ID number (from 0 to 4094) for traffic through this connection. Click OK to save your changes. Cancel Click Cancel to exit this screen without saving. If you select ADSL over ATM as the interface type, the following screen appears. VMG8825-B Series User’s Guide...
Page 83 SCR, which must be less than the PCR. Note that system default is 0 cells/sec. Maximum Maximum Burst Size (MBS) refers to the maximum number of cells that can be sent at the peak Burst Size rate. Type the MBS, which is less than 65535. [cells] VMG8825-B Series User’s Guide...
Page 84: The Cellular Backup Screen
Disconnect the DSL and Ethernet WAN ports to use the cellular dongle as your primary WAN connection. The VMG automatically uses a wired WAN connection when available. Figure 31 Internet Access Application: Cellular WAN Use this screen to configure your cellular settings. Click Network Setting > Broadband > Cellular Backup. VMG8825-B Series User’s Guide...
Page 85 Chapter 6 Broadband Note: The actual data rate you obtain varies depending the cellular card you use, the signal strength to the service provider’s base station, and so on. Figure 32 Network Setting > Broadband > Cellular Backup VMG8825-B Series User’s Guide...
Page 86 Enter your WAN IP address in this field if you selected Use the following static IP address. Subnet Mask Enter the subnet mask of the IP address. Obtain DNS info Select this to have the VMG get the DNS server addresses from the ISP automatically. dynamically VMG8825-B Series User’s Guide...
Page 87 VMG8825-B Series User’s Guide...
Page 88: The Advanced Screen
Table 14 VDSL Profiles MAX. NUMBER OF CARRIER BANDWIDTH DOWNSTREAM PROFILE DOWNSTREAM BANDWIDTH POWER (DBM) (MHZ) THROUGHPUT CARRIERS (KHZ) (MBIT/S) 8.832 2048 4.3125 17.5 8.832 2048 4.3125 20.5 1972 4.3125 11.5 VMG8825-B Series User’s Guide...
Page 89 However, enabling PhyR US can decrease the US line rate. Enabling or disabling PhyR will require the CPE to retrain. For PhyR to function, the DSLAM must also support PhyR and have it enabled. VMG8825-B Series User’s Guide...
Page 90 The VMG must comply with at least one profile specified in G.993.2. but compliance with more than one profile is allowed. Apply Click Apply to save your changes back to the VMG. Cancel Click Cancel to return to the previous configuration. VMG8825-B Series User’s Guide...
Page 91: Technical Reference
The first method allows multiplexing of multiple protocols over a single ATM virtual circuit (LLC-based multiplexing) and the second method assumes that each protocol is carried over a separate ATM virtual circuit (VC-based multiplexing). Please refer to RFC 1483 for more detailed information. VMG8825-B Series User’s Guide...
Page 92 If the PCR, SCR or MBS is set to the default of "0", the system will assign a maximum value that correlates to your upstream line rate. The following figure illustrates the relationship between PCR, SCR and MBS. VMG8825-B Series User’s Guide...
Page 93 A static IP is a fixed IP that your ISP gives you. A dynamic IP is not fixed; the ISP assigns you a different one each time. The Single User Account feature can be enabled or disabled if you have either a dynamic or VMG8825-B Series User’s Guide...
Page 94 IGMP version 2 and version 1, please see sections 4 and 5 of RFC 2236. The class D IP address is used to identify host groups and can be in the range 224.0.0.0 to VMG8825-B Series User’s Guide...
Page 95 (start from the left) in the address compose the network address. The prefix length is written as “/x” where x is a number. For example, 2001:db8:1a2b:15::1a2f:0/32 means that the first 32 bits (2001:db8) is the subnet prefix. VMG8825-B Series User’s Guide...
Page 96: Wireless
However, wireless networking is different from that of most traditional radio communications in that there a number of wireless networking standards available with different methods of data encryption. VMG8825-B Series User’s Guide...
Page 97: The General Screen
Apply to confirm. You must then change the wireless settings of your computer to match the VMG’s new settings. Click Network Setting > Wireless to open the General screen. Figure 35 Network Setting > Wireless > General VMG8825-B Series User’s Guide...
Page 98 Or you can select No Security to allow any client to associate this network without any data encryption or authentication. See the following sections for more details about this field. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG8825-B Series User’s Guide...
Page 99: No Security
It offers slightly better security, although the use of PSK makes it less robust than it could be. Click Network Setting > Wireless to display the General screen. Select More Secure as the security level. Then select WPA2-PSK from the Security Mode list. Figure 37 Wireless > General: More Secure: WPA(2)-PSK VMG8825-B Series User’s Guide...
Page 100: The Guest/More Ap Screen
Table 19 Supported Wireless Networks WIRELESS WHERE TO CONFIGURE NETWORKS Main/1 Network Setting > Wireless > General screen Guest/3 Network Setting > Wireless > Guest/More AP screen Figure 38 Network Setting > Wireless > Guest/More AP VMG8825-B Series User’s Guide...
Page 101: Edit Guest/More Ap
Click the Edit icon to configure the SSID profile. 7.3.1 Edit Guest/More AP Use this screen to edit an SSID profile. Click the Edit icon next to an SSID in the Guest/More AP screen. The following screen displays. VMG8825-B Series User’s Guide...
Page 102 If you select External Guest, clients are blocked from connecting to each other directly. Max. Upstream Specify the maximum rate for upstream wireless traffic to the WAN from this WLAN in kilobits per Bandwidth second (Kbps). VMG8825-B Series User’s Guide...
Page 103: Mac Authentication
MAC (Media Access Control) address. The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02. You need to know the MAC addresses of the devices to configure this screen. VMG8825-B Series User’s Guide...
Page 104 Click the Edit icon and type the MAC address of the peer device in a valid MAC address format (six hexadecimal character pairs, for example 12:34:56:78:9a:bc). Click the Delete icon to delete the entry. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG8825-B Series User’s Guide...
Page 105: The Wps Screen
Method 2 Use this section to set up a WPS wireless network by entering the PIN of the client into the VMG. Select Enable and click Apply to activate WPS method 2 on the VMG. VMG8825-B Series User’s Guide...
Page 106: The Wmm Screen
Use this screen to enable Wi-Fi MultiMedia (WMM) and WMM Power Save in wireless networks for multimedia applications. Click Network Setting > Wireless > WMM. The following screen displays. Figure 42 Network Setting > Wireless > WMM VMG8825-B Series User’s Guide...
Page 107: The Others Screen
Set the output power of the VMG. If there is a high density of APs in an area, decrease the output power to reduce interference with other APs. Select one of the following: 20%, 40%, 60%, 80% or 100%. VMG8825-B Series User’s Guide...
Page 108 Select Capable to enable the VMG to support client devices using PMF. Select Required to make PMF mandatory for all client devices. Select Disabled to disable the feature. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG8825-B Series User’s Guide...
Page 109: The Channel Status Screen
Band steering allows dual band wireless clients to steer from one band to another. A MESH network consists of a controller, the VMG, and a maximum of three Multy-Pro-supported extenders. When Multy Pro is enabled: VMG8825-B Series User’s Guide...
Page 110 Click Add Extender in the Multy Pro App. Install from Google Play or the Apple App store. The following figure shows the Multy Pro application. Device Z is the VMG. Device A is a Multy-Pro- supported extender in AP mode. Devices B and C are Multy-Pro-supported extenders in repeater Mode. VMG8825-B Series User’s Guide...
Page 111: The Wlan Scheduler Screen
Use this screen to define time periods and days during which the VMG’s wireless interfaces detain traffic to connected devices. Click Network Setting > Wireless > WLAN Scheduler to access the following screen. Figure 47 Network Setting > Wireless > WLAN Scheduler VMG8825-B Series User’s Guide...
Page 112: Add Scheduler Rule
7.10.1 Add Scheduler Rule Use this screen to add a new scheduler rule. Click Add New Rule or click the Edit icon next to an existing scheduler rule, the following screen displays. Figure 48 WLAN Scheduler: Add/Edit VMG8825-B Series User’s Guide...
Page 113: Technical Reference
• A bridge is a radio that relays communications between access points and wireless clients, extending a network’s range. Traditionally, a wireless network operates in one of two ways. VMG8825-B Series User’s Guide...
Page 114 Radio Channels In the radio spectrum, there are certain frequency bands allocated for unlicensed, civilian use. For the purposes of wireless networking, these bands are divided into numerous channels. This allows a variety of VMG8825-B Series User’s Guide...
Page 115: Additional Wireless Terms
- for example, a twenty-letter long string of apparently random numbers and letters - but it is not very secure if you use a short key which is very easy to guess - for example, a three-letter word from the dictionary. VMG8825-B Series User’s Guide...
Page 116 Some wireless devices, such as scanners, can detect wireless networks but cannot use wireless networks. These kinds of wireless devices might not have MAC addresses. Hexadecimal characters are 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, A, B, C, D, E, and F. VMG8825-B Series User’s Guide...
Page 117: Signal Problems
Problems with absorption occur when physical objects (such as thick walls) are between the two radios, muffling the signal. VMG8825-B Series User’s Guide...
Page 118: Bss
• You must use different keys for different BSSs. If two wireless devices have different BSSIDs (they are in different BSSs), but have the same keys, they may hear each other’s communications (but not communicate with each other). • MBSSID should not replace but rather be used in conjunction with 802.1x security. VMG8825-B Series User’s Guide...
Page 119: Preamble Type
(see the device’s User’s Guide for how to do this - for the VMG, see Section 7.6 on page 106). Press the button on one of the devices (it doesn’t matter which). For the VMG you must press the WPS button for more than five seconds. VMG8825-B Series User’s Guide...
Page 120 If you cannot connect, check the list of associated wireless clients in the AP’s configuration utility. If you see the wireless client in the list, WPS was successful. The following figure shows a WPS-enabled wireless client (installed in a notebook computer) connecting to the WPS-enabled AP via the PIN method. VMG8825-B Series User’s Guide...
Page 121 If the registrar is already part of a network, it sends the existing information. If not, it generates the SSID and WPA(2)-PSK randomly. The following figure shows a WPS-enabled client (installed in a notebook computer) connecting to a WPS-enabled access point. VMG8825-B Series User’s Guide...
Page 122 It will be the registrar in all subsequent WPS connections in which it is involved. If you want a configured AP to act as an enrollee, you must reset it to its factory defaults. 7.11.8.4 Example WPS Network Setup This section shows how security settings are distributed in an example WPS setup. VMG8825-B Series User’s Guide...
Page 123 In step 3, you add another access point (AP2) to your network. AP2 is out of range of AP1, so you cannot use AP1 for the WPS handshake with the new access point. However, you know that Client 2 supports the registrar function, so you use it to perform the WPS handshake instead. VMG8825-B Series User’s Guide...
Page 124 (if the device supports this feature). Then, you can enter the key into the non-WPS device and join the network as normal (the non-WPS device must also support WPA-PSK or WPA2-PSK). VMG8825-B Series User’s Guide...
Page 125 Check the MAC addresses of your wireless clients (usually printed on a label on the bottom of the device). If there is an unknown MAC address you can remove it or reset the AP. VMG8825-B Series User’s Guide...
Page 126: Home Networking
• Use the Wake on LAN screen to remotely turn on a device on the network. (Section 8.7 on page 137). • Use the TFTP Server Name screen to identify a TFTP server for configuration file download using DHCP option 66. (Section 8.8 on page 138). VMG8825-B Series User’s Guide...
Page 127: What You Need To Know
UPnP devices and enable exchange of simple product and service descriptions. NAT traversal allows the following: • Dynamic port mapping • Learning public IP addresses VMG8825-B Series User’s Guide...
Page 128: Before You Begin
Enter the IP subnet mask into the IP Subnet Mask field. Unless instructed otherwise it is best to leave this alone, the configurator will automatically compute a subnet mask based upon the IP address you entered. VMG8825-B Series User’s Guide...
Page 129 IGMP Snooping Active Select Enable to activate IGMP Snooping. This allows the VMG to passively learn memberships in multicast groups. Otherwise, select Disable to deactivate it. VMG8825-B Series User’s Guide...
Page 130 Select this to have the VMG generate an interface ID using the EUI-64 format for its global address . Manual Select this to manually enter an interface ID for the LAN interface’s global IPv6 address. LAN IPv6 Prefix Setup VMG8825-B Series User’s Guide...
Page 131 IPv4 DNS Server First: The VMG forwards the requests to the IPv4 DNS server first and then the IPv6 DNS server. Then it sends clients the first DNS information it receives. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG8825-B Series User’s Guide...
Page 132: The Static Dhcp Screen
Click the Delete icon to delete a static DHCP entry. A window displays asking you to confirm that you want to delete the selected entry. If you click Static DHCP Configuration in the Static DHCP screen or the Edit icon next to a static DHCP entry, the following screen displays. VMG8825-B Series User’s Guide...
Page 133: The Upnp Screen
IP address, convey its capabilities and learn about other devices on the network. In turn, a device can leave a network smoothly and automatically when it is no longer in use. page 127 for more information on UPnP. VMG8825-B Series User’s Guide...
Page 134: Turning On Upnp In Windows 7 Example
Activate UPnP on the VMG. Make sure the computer is connected to a LAN port of the VMG. Turn on your computer and the VMG. Click the start icon, Control Panel and then the Network and Sharing Center. VMG8825-B Series User’s Guide...
Page 135 Select Turn on network discovery and click Save Changes. Network discovery allows your computer to find other computers and devices on the network and other computers on the network to find your computer. This makes it easier to share files and printers. VMG8825-B Series User’s Guide...
Page 136: The Additional Subnet Screen
Enter the public IPv4 subnet mask provided by your ISP. Offer Public IP Select Enable to enable the VMG to provide public IP addresses by DHCP server. by DHCP Enable ARP Select Enable to enable the ARP (Address Resolution Protocol) proxy. Proxy VMG8825-B Series User’s Guide...
Page 137: The Stb Vendor Id Screen
Use this screen to turn on a device on the LAN network. To use this feature, the remote device must also support Wake On LAN. You need to know the MAC address of the LAN device. It may be on a label on the device or in its documentation. VMG8825-B Series User’s Guide...
Page 138: The Tftp Server Name Screen
Table 38 Network Setting > Home Networking > TFTP Server Name LABEL DESCRIPTION IP address or the hostname of a single TFTP server. TFTP Server Enter the Name Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG8825-B Series User’s Guide...
Page 139: Technical Reference
The DNS server addresses you enter when you set up DHCP are passed to the client machines along with the assigned IP address and subnet mask. There are two ways that an ISP disseminates the DNS server addresses. VMG8825-B Series User’s Guide...
Page 140: Lan Tcp/Ip
Internet, for example, only between your two branch offices, you can assign any IP addresses to the hosts without problems. However, the Internet Assigned Numbers Authority (IANA) has reserved the following three blocks of IP addresses specifically for private networks: • 10.0.0.0 — 10.255.255.255 • 172.16.0.0 — 172.31.255.255 VMG8825-B Series User’s Guide...
Page 141 Note: Regardless of your particular situation, do not create an arbitrary IP address; always follow the guidelines above. For more information on address assignment, please refer to RFC 1597, “Address Allocation for Private Internets” and RFC 1466, “Guidelines for Management of IP Address Space”. VMG8825-B Series User’s Guide...
Page 142: Routing
Figure 66 Example of Routing Topology 9.2 The Routing Screen Use this screen to view and configure the static route rules on the VMG. Click Network Setting > Routing > Static Route to open the following screen. VMG8825-B Series User’s Guide...
Page 143: Add/Edit Static Route
Use this screen to add or edit a static route. Click Add new static route in the Routing screen or the Edit icon next to the static route you want to edit. The screen shown next appears. VMG8825-B Series User’s Guide...
Page 144: The Dns Route Screen
Click Cancel to exit this screen without saving. 9.3 The DNS Route Screen Use this screen to view and configure DNS routes on the VMG. Click Network Setting > Routing > DNS Route to open the following screen. VMG8825-B Series User’s Guide...
Page 145: The Dns Route Add Screen
The following table describes the labels on this screen. Table 42 DNS Route Add LABEL DESCRIPTION Active Select Enable or Disable to activate or deactivate the DNS route. Domain Name Enter the domain name of the DNS route entry. VMG8825-B Series User’s Guide...
Page 146: The Policy Route Screen
This is the source IP address. Source Subnet his is the source subnet mask address. Mask Protocol This is the transport layer protocol. Source Port This is the source port number. Source MAC This is the source MAC address. VMG8825-B Series User’s Guide...
Page 147: Add/Edit Policy Route
Type the name of the interface from which the matched traffic is sent. (ex: br0 or LAN1~LAN4) WAN Interface Select a WAN interface through which the traffic is sent. You must have the WAN interface(s) already configured in the Broadband screens. VMG8825-B Series User’s Guide...
Page 148: Rip
Select the check box to set the VMG to not send the route information to the default Gateway gateway. Apply Click Apply to save your changes back to the VMG. Cancel Click Cancel to exit this screen without saving. VMG8825-B Series User’s Guide...
Page 149: Quality Of Service (Qos)
• The Shaper Setup screen limits outgoing traffic transmission rate on the selected interface (Section 10.6 on page 159). • The Policer Setup screen to control incoming traffic transmission rate and bursts (Section 10.7 on page 160). VMG8825-B Series User’s Guide...
Page 150: What You Need To Know
(or queues). Your VMG uses the Token Bucket algorithm to allow a certain amount of large bursts while keeping a limit at the average rate. Traffic Rate Traffic Rate Time Time (Before Traffic Shaping) (After Traffic Shaping) VMG8825-B Series User’s Guide...
Page 151: The Quality Of Service General Screen
Click Network Setting > QoS > General to open the screen as shown next. Use this screen to enable or disable QoS and set the upstream bandwidth. See Section 10.1 on page 149 for more information. Figure 74 Network Settings > QoS > General VMG8825-B Series User’s Guide...
Page 152: The Queue Setup Screen
Click Cancel to restore your previously saved settings. 10.4 The Queue Setup Screen Click Network Setting > QoS > Queue Setup to open the screen as shown next. Use this screen to configure QoS queue assignment. VMG8825-B Series User’s Guide...
Page 153 This shows the maximum transmission rate allowed for traffic on this queue. Modify Click the Edit icon to edit the queue. Click the Delete icon to delete an existing queue. Note that subsequent rules move up by one when you take this action. VMG8825-B Series User’s Guide...
Page 154: Adding A Qos Queue
10.5 The Classification Setup Screen Use this screen to add, edit or delete QoS classifiers. A classifier groups traffic into data flows according to specific criteria such as the source address, destination address, source port number, destination port VMG8825-B Series User’s Guide...
Page 155: Add/Edit Qos Class
Click the Delete icon to delete an existing classifier. Note that subsequent rules move up by one when you take this action. 10.5.1 Add/Edit QoS Class Click Add New Classification in the Classification Setup screen or the Edit icon next to a classifier to open the following screen. VMG8825-B Series User’s Guide...
Page 156 Select an existing number for where you want to put this classifier to move the classifier to the Order number you selected after clicking Apply. Select Last to put this rule in the back of the classifier list. VMG8825-B Series User’s Guide...
Page 157 This field is available only when you select IP in the Ether Type field. Select this option and select the protocol (service type) from TCP, UDP, ICMP or IGMP. If you select User defined, enter the protocol (service type) number. VMG8825-B Series User’s Guide...
Page 158 Unchange, the VMG forward traffic of this class according to the default routing table. Step5: Outgoing Queue Selection To Queue Index Select a queue that applies to this class. You should have configured a queue in the Queue Setup screen already. VMG8825-B Series User’s Guide...
Page 159: The Qos Shaper Setup Screen
Rate Limit (kbps) This shows the average rate limit of traffic bursts for this shaper. Modify Click the Edit icon to edit the shaper. Click the Delete icon to delete an existing shaper. Note that subsequent rules move up by one when you take this action. VMG8825-B Series User’s Guide...
Page 160: Add/Edit A Qos Shaper
This is the index number of the entry. Status This field displays whether the policer is active or not. A yellow bulb signifies that this policer is active. A gray bulb signifies that this policer is not active. VMG8825-B Series User’s Guide...
Page 161: Add/Edit A Qos Policer
Figure 82 Policer Setup: Add/Edit The following table describes the labels in this screen. Table 54 Policer Setup: Add/Edit LABEL DESCRIPTION Active Select Enable or Disable to activate or deactivate the policer. Name Enter the descriptive name of this policer. VMG8825-B Series User’s Guide...
Page 162: Technical Reference
A VLAN tag includes the 12-bit VLAN ID and 3-bit user priority. The VLAN ID associates a frame with a specific VLAN and provides the information that devices need to process the frame across the network. VMG8825-B Series User’s Guide...
Page 163 DiffServ network. Based on the marking rule, different kinds of traffic can be marked for different kinds of forwarding. Resources can then be allocated according to the DSCP values and the configured policies. VMG8825-B Series User’s Guide...
Page 164 PRIORITY TOS (IP IP PACKET LENGTH DSCP (ETHERNET PRECEDENCE) (BYTE) PRIORITY) 000000 000000 >1100 001110 250~1100 001100 001010 001000 010110 010100 010010 010000 011110 <250 011100 011010 011000 100110 100100 100010 100000 101110 101000 110000 111000 VMG8825-B Series User’s Guide...
Page 165 CBS bucket is equal to or greater than the size of the packet (in bytes). • After a packet is transmitted, a number of tokens corresponding to the packet size is removed from the CBS bucket. VMG8825-B Series User’s Guide...
Page 166 • If the PBS bucket has enough tokens, the VMG checks the CBS bucket. The packet is marked green and can be transmitted if the number of tokens in the CBS bucket is equal to or greater than the size of the packet (in bytes). Otherwise, the packet is marked yellow. VMG8825-B Series User’s Guide...
Page 167: Network Address Translation (Nat)
IP address of a host when the packet is in the local network, while the global address refers to the IP address of the host when the same packet is traveling in the WAN side. VMG8825-B Series User’s Guide...
Page 168: The Port Forwarding Screen
(B in the example) and assign a default server IP address of 192.168.1.35 to a third (C in the example). You assign the LAN IP addresses and the ISP assigns the WAN IP address. The NAT network appears as a single host on the Internet. VMG8825-B Series User’s Guide...
Page 169 This is the last external port number that identifies a service. Translation Start This is the first internal port number that identifies a service. Port Translation End This is the last internal port number that identifies a service. Port VMG8825-B Series User’s Guide...
Page 170: Add/Edit Port Forwarding
To forward only one port, enter the port number in the Start Port field above and then enter it again in this field. To forward a series of ports, enter the last port number in a series that begins with the port number in the Start Port field above. VMG8825-B Series User’s Guide...
Page 171: The Applications Screen
Address Modify Click the Delete icon to delete the rule. 11.3.1 Add New Application This screen lets you create new NAT application rules. Click Add New Application in the Applications screen to open the following screen. VMG8825-B Series User’s Guide...
Page 172: The Port Triggering Screen
LAN can use the service in the same manner. This way you do not need to configure a new IP address each time you want a different LAN computer to use the application. VMG8825-B Series User’s Guide...
Page 173 UDP (User Datagram Protocol) or two hours with TCP/IP (Transfer Control Protocol/Internet Protocol). Click Network Setting > NAT > Port Triggering to open the following screen. Use this screen to view your VMG’s trigger port settings. Figure 89 Network Setting > NAT > Port Triggering VMG8825-B Series User’s Guide...
Page 174: Add/Edit Port Triggering Rule
11.4.1 Add/Edit Port Triggering Rule This screen lets you create new port triggering rules. Click Add new rule in the Port Triggering screen or click a rule’s Edit icon to open the following screen. Figure 90 Port Triggering: Add/Edit VMG8825-B Series User’s Guide...
Page 175: The Dmz Screen
Address specified in the NAT Port Forwarding screen. Note: If you do not assign a Default Server Address, the VMG discards all packets received for ports that are not specified in the NAT Port Forwarding screen. VMG8825-B Series User’s Guide...
Page 176: The Alg Screen
Enable this to turn on the IPsec ALG on the VMG to detect IPsec traffic and help build IPsec sessions through the VMG’s NAT. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG8825-B Series User’s Guide...
Page 177: The Address Mapping Screen
11.7.1 Add/Edit Address Mapping Rule To add or edit an address mapping rule, click Add new rule or the rule’s edit icon in the Address Mapping screen to display the screen shown next. VMG8825-B Series User’s Guide...
Page 178: The Sessions Screen
Click Cancel to exit this screen without saving. 11.8 The Sessions Screen Use this screen to limit the number of concurrent NAT sessions a client can use. Click Network Setting > NAT > Sessions to display the following screen. VMG8825-B Series User’s Guide...
Page 179: Technical Reference
This refers to the host on the WAN. Local This refers to the packet address (source or destination) as the packet travels on the LAN. Global This refers to the packet address (source or destination) as the packet travels on the WAN. VMG8825-B Series User’s Guide...
Page 180: What Nat Does
Internet. The VMG keeps track of the original addresses and port numbers so incoming reply packets can have their original values restored. The following figure illustrates this. Figure 96 How NAT Works VMG8825-B Series User’s Guide...
Page 181: Nat Application
Table 69 Services and Port Numbers SERVICES PORT NUMBER ECHO FTP (File Transfer Protocol) SMTP (Simple Mail Transfer Protocol) DNS (Domain Name System) Finger HTTP (Hyper Text Transfer protocol or WWW, Web) POP3 (Post Office Protocol) NNTP (Network News Transport Protocol) VMG8825-B Series User’s Guide...
Page 182 You assign the LAN IP addresses and the ISP assigns the WAN IP address. The NAT network appears as a single host on the Internet. Figure 98 Multiple Servers Behind NAT Example IP Address assigned by ISP VMG8825-B Series User’s Guide...
Page 183: Dynamic Dns Setup
Enabling the wildcard feature for your host causes *.yourhost.dyndns.org to be aliased to the same IP address as yourhost.dyndns.org. This feature is useful if you want to be able to use, for example, www.yourhost.dyndns.org and still reach your hostname. VMG8825-B Series User’s Guide...
Page 184: The Dns Entry Screen
You can manually add or edit the VMG’s DNS name and IP address entry. Click Add New DNS Entry in the DNS Entry screen or the Edit icon next to the entry you want to edit. The screen shown next appears. Figure 100 DNS Entry: Add/Edit VMG8825-B Series User’s Guide...
Page 185: The Dynamic Dns Screen
Last Updated Time This shows the last time the IP address the Dynamic DNS provider has associated with the hostname was updated. Current Dynamic This shows the IP address your Dynamic DNS provider has currently associated with the hostname. VMG8825-B Series User’s Guide...
Page 186 Chapter 12 Dynamic DNS Setup Table 72 Network Setting > DNS > > Dynamic DNS (continued) LABEL DESCRIPTION Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG8825-B Series User’s Guide...
Page 187: Igmp/Mld
13.2 The IGMP/MLD Screen Use this screen to configure multicast groups the VMG has joined and which ports have joined it. To open this screen, click Network Setting > IGMP/MLD. VMG8825-B Series User’s Guide...
Page 188 Enter a number to limit the number of multicast groups an interface on the VMG is allowed to Multicast join. Once a multicast member is registered in the specified number of multicast groups, any Groups new IGMP or MLD join report frames are dropped by the interface. VMG8825-B Series User’s Guide...
Page 189 Select this to have the VMG add a host to a multicast group immediately once the VMG Join Immediate receives an IGMP or MLD join message. (IPTV) Apply Click Apply to save your changes back to the VMG. Cancel Click Cancel to exit this screen without saving. VMG8825-B Series User’s Guide...
Page 190: Vlan Group
Use these screens to group separate VLAN groups together to be treated as one VLAN group. 14.2 The Vlan Group Screen Click Network Setting > Vlan Group to open the following screen. Figure 104 Network Setting > Vlan Group VMG8825-B Series User’s Guide...
Page 191: Add/Edit A Vlan Group
Select Txtagging to tag outgoing traffic from the associated LAN port with the VLAN ID number entered above. Click OK to save your changes back to the VMG. Cancel Click Cancel to exit this screen without saving. VMG8825-B Series User’s Guide...
Page 192: Interface Grouping
In the following example, the client that sends packets with the DHCP Vendor ID option set to MSFT 5.0 (meaning it is a Windows 2000 DHCP client) is assigned the IP address 192.168.2.2 and uses the WAN VDSL_PoE/ppp0.1 interface. VMG8825-B Series User’s Guide...
Page 193: Interface Group Configuration
Click the Add New Interface Group button in the Interface Grouping screen to open the following screen. Use this screen to create a new interface group. Note: An interface can belong to only one group at a time. VMG8825-B Series User’s Guide...
Page 194 Click Add to identify LAN hosts to add to the interface group by criteria such as the type of the Add Clients With hardware or firmware. See Section 15.2.2 on page 195 for more information. the following DHCP Vendor This shows the index number of the rule. VMG8825-B Series User’s Guide...
Page 195: Interface Grouping Criteria
Enter the Identity Association Identifier (IAID) of the device, for example, the WAN connection index number. DHCP Option Select this and enter vendor specific information of the matched traffic. Enterprise Enter the vendor’s 32-bit enterprise number registered with the IANA (Internet Assigned Numbers Number Authority). VMG8825-B Series User’s Guide...
Page 196 VLAN Group Select this and the VLAN group of the matched traffic from the drop-down list box. Click OK to save your changes back to the VMG. Cancel Click Cancel to exit this screen without saving. VMG8825-B Series User’s Guide...
Page 197: Usb Service
• Use the Media Server screen to enable or disable the sharing of media files (Section 16.3 on page 201). 16.1.2 What You Need To Know The following terms and concepts may help as you read this chapter. VMG8825-B Series User’s Guide...
Page 198: Before You Begin
Use this screen to set up file sharing through the VMG. The VMG’s LAN users can access the shared folder (or share) from the USB device inserted in the VMG. To access this screen, click Network Setting > USB Service > File Sharing. VMG8825-B Series User’s Guide...
Page 199 (folders) on your USB storage device. Share This field displays information about the share. Description Modify Click the Edit icon to change the settings of an existing share. Click the Delete icon to delete this share in the list. Account Management VMG8825-B Series User’s Guide...
Page 200: The Add New Share Screen
Access Level Select Public if you want the share to be accessed by users connecting to the VMG. Otherwise, select Security. Apply Click Apply to save your changes. Cancel Click Back to return to the previous screen. VMG8825-B Series User’s Guide...
Page 201: The Add New User Screen
Interface Select an interface on which you want to enable the media server function. Media Library Enter the path clients use to access the media files on a USB storage device connected to the Path VMG. VMG8825-B Series User’s Guide...
Page 202 Chapter 16 USB Service Table 81 Network Setting > USB Service > Media Server (continued) LABEL DESCRIPTION Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG8825-B Series User’s Guide...
Page 203: Home Connectivity
Connect will be enabled and grayed out automatically. To disable One Connect, please deactivate Multy pro in the Network Setting > Wireless > MESH screen. Click Network Setting > Home Connectivity to open the following screen. VMG8825-B Series User’s Guide...
Page 204 Chapter 17 Home Connectivity Figure 115 Network Setting > Home Connectivity VMG8825-B Series User’s Guide...
Page 205: Firewall
• Use the Access Control screen to view and configure incoming/outgoing filtering rules (Section 18.4 on page 209). • Use the DoS screen to activate protection against Denial of Service (DoS) attacks (.Section 18.5 on page 211). VMG8825-B Series User’s Guide...
Page 206: What You Need To Know
Use this screen to set the security level of the firewall on the VMG. Firewall rules are grouped based on the direction of travel of packets to which they apply. Click Security > Firewall to display the General screen. VMG8825-B Series User’s Guide...
Page 207: The Protocol Screen
IANA (Internet Assigned Number Authority) website. See Appendix D on page 341 for some examples. Click Security > Firewall > Protocol to display the following screen. Figure 118 Security > Firewall > Protocol VMG8825-B Series User’s Guide...
Page 208: Add/Edit A Service
Protocol This field is displayed if you select Other as the protocol. Number Enter the protocol number of your customized port. Click OK to save your changes. Cancel Click Cancel to exit this screen without saving. VMG8825-B Series User’s Guide...
Page 209: The Access Control Screen
Click the Move To icon to change the order of the rule. Enter the number in the # field. 18.4.1 Add/Edit an ACL Rule Click Add new ACL rule or the Edit icon next to an existing ACL rule in the Access Control screen. The following screen displays. VMG8825-B Series User’s Guide...
Page 210 Choose the IP port (TCP/UDP, TCP, UDP, ICMP, or ICMPv6) that defines your customized port from the drop-down list box. Custom Source This field is displayed only when you select Specific Protocol in Select Protocol. Port Enter a single port number or the range of port numbers of the source. VMG8825-B Series User’s Guide...
Page 211: The Dos Screen
Table 87 Security > Firewall > DoS LABEL DESCRIPTION DoS Protection Select Enable to enable protection against DoS attacks. Blocking Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG8825-B Series User’s Guide...
Page 212: Mac Filter
19.2 The MAC Filter Screen Use this screen to allow wireless and LAN clients access to the VMG. Click Security > MAC Filter. The screen appears as shown. Figure 123 Security > MAC Filter VMG8825-B Series User’s Guide...
Page 213 Enter the MAC addresses in a valid MAC address format, that is, six hexadecimal character pairs, for example, 12:34:56:78:9a:bc. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG8825-B Series User’s Guide...
Page 214: Parental Control
Control screen with One Connect enabled, the following message will appear. Figure 124 Cannot Use Parental Control Disable One Connect in the Network > Home Connectivity screen. Click Security > Parental Control to open the following screen. Figure 125 Security > Parental Control VMG8825-B Series User’s Guide...
Page 215: Add/Edit A Parental Control Profile
Click Add new PCP in the Parental Control screen to add a new rule or click the Edit icon next to an existing rule to edit it. Use this screen to configure a restricted access schedule and/or URL filtering settings to block the users on your network from accessing certain web sites. VMG8825-B Series User’s Guide...
Page 216 Network Service If you select Block, the VMG prohibits the users from viewing the Web sites with the URLs listed Setting below. If you select Allow, the VMG blocks access to all URLs except ones listed below. VMG8825-B Series User’s Guide...
Page 217 Click Cancel to exit this screen without saving. Click Security > Parental Control > Add New PCP > Add New Service to open the following screen. Figure 128 Parental Control Rule: Add/Edit Rule > Add Service VMG8825-B Series User’s Guide...
Page 218 Enter a keyword and click OK to have the VMG block access to the website URLs that contain Keyword the keyword. Click OK to save your changes. Cancel Click Cancel to exit this screen without saving. VMG8825-B Series User’s Guide...
Page 219: Scheduler Rule
21.2.1 Add/Edit a Schedule Click the Add New Rule button in the Scheduler Rule screen or click the Edit icon next to a schedule rule to open the following screen. Use this screen to configure a restricted access schedule. VMG8825-B Series User’s Guide...
Page 220 Enter the time period of each day, in 24-hour format, during which the rule will be enforced. Range Description Enter a description for this scheduler rule. Click OK to save your changes. Cancel Click Cancel to exit this screen without saving. VMG8825-B Series User’s Guide...
Page 221: Certificates
22.3 The Local Certificates Screen Click Security > Certificates to open the Local Certificates screen. This is the VMG’s summary list of certificates and certification requests. VMG8825-B Series User’s Guide...
Page 222: Create Certificate Request
22.3.1 Create Certificate Request Click Security > Certificates > Local Certificates and then Create Certificate Request to open the following screen. Use this screen to have the VMG generate a certification request. VMG8825-B Series User’s Guide...
Page 223: View Certificate Request
Click Cancel to exit this screen without saving. 22.3.2 View Certificate Request Click the View icon in the Local Certificates screen to open the following screen. Use this screen to view in-depth information about the certificate request. VMG8825-B Series User’s Guide...
Page 224 This is the name of the signed certificate. Name Certificate Copy and paste the signed certificate into the text box to store it on the VMG. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG8825-B Series User’s Guide...
Page 225: The Trusted Ca Screen
22.4.1 View Trusted CA Certificate Click the View icon in the Trusted CA screen to open the following screen. Use this screen to view in- depth information about the certification authority’s certificate. VMG8825-B Series User’s Guide...
Page 226: Import Trusted Ca Certificate
Click Back to return to the previous screen. 22.4.2 Import Trusted CA Certificate Click the Import Certificate button in the Trusted CA screen to open the following screen. The VMG trusts any valid certificate signed by any of the imported trusted CA certificates. VMG8825-B Series User’s Guide...
Page 227 Type in the location of the certificate you want to upload in this field or click Choose File to find Path Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG8825-B Series User’s Guide...
Page 228: Voice
VoIP stands for Voice over IP. IP is the Internet Protocol, which is the message-carrying standard the Internet runs on. So, Voice over IP is the sending of voice signals (speech) over the Internet (or another network that uses the Internet Protocol). VMG8825-B Series User’s Guide...
Page 229: Before You Begin
SIP account to a phone port. Use this screen to view SIP account information. You can also enable and disable each SIP account. To access this screen, click VoIP > SIP > SIP Account. VMG8825-B Series User’s Guide...
Page 230: The Sip Account Add/Edit Screen
Note: Click more to see all the fields on the screen. You don’t necessarily need to use all these fields to set up your account. Click less to see and configure only the fields needed for this feature. VMG8825-B Series User’s Guide...
Page 231 Chapter 23 Voice Figure 139 VoIP > SIP > SIP Account > Add new account/Edit VMG8825-B Series User’s Guide...
Page 232 Select the loudness that the VMG uses for speech that it sends to the peer device. Control Listening Volume Select the loudness that the VMG uses for speech that it receives from the peer Control device. VMG8825-B Series User’s Guide...
Page 233 Select this to have the VMG dial the specified hot line number immediately when you pick up the telephone. Hot Line / Warm Enter the number of the hot line or warm line that you want the VMG to dial. Line number VMG8825-B Series User’s Guide...
Page 234: The Sip Service Provider Screen
LABEL DESCRIPTION Add new provider Click this button to add a new SIP service provider. This is the index number of the entry. SIP Service This shows the name of the SIP service provider. Provider Name VMG8825-B Series User’s Guide...
Page 235: The Sip Service Provider Add/Edit Screen
Note: Click more to see all the fields in the screen. You don’t necessarily need to use all these fields to set up your account. Click less to see and configure only the fields needed for this feature. VMG8825-B Series User’s Guide...
Page 236 Chapter 23 Voice Figure 141 VoIP > SIP > SIP Service Provider > Add new provider/Edit VMG8825-B Series User’s Guide...
Page 237 VMG to keep it from re-translating the IP address (since this is already handled by the outbound proxy server). Outbound Proxy Enter the SIP outbound proxy server’s listening port, if your VoIP service provider gave you one. Port Otherwise, keep the default value. VMG8825-B Series User’s Guide...
Page 238 Select this if the VMG should send fax messages as UDP or TCP/IP packets through IP networks. This provides better quality, but it may have inter-operability problems. The peer devices must also use T.38. QoS Tag VMG8825-B Series User’s Guide...
Page 239: The Phone Device Screen
Cancel Click Cancel to restore your previously saved settings. 23.5 The Phone Device Screen Use this screen to view detailed information of the phone devices. To access this screen, click VoIP > Phone > Phone Device. VMG8825-B Series User’s Guide...
Page 240: The Phone Device Edit Screen
Use this screen to control which SIP account and PSTN line each phone uses. Click an Edit icon in the VoIP > Phone > Phone Device to open the following screen. Figure 143 VoIP > Phone > Phone Device > Edit VMG8825-B Series User’s Guide...
Page 241: The Region Screen
VoIP service provider supports. Europe Type - use supplementary phone services in European mode USA Type - use supplementary phone services American mode You might have to subscribe to these services to use them. Contact your VoIP service provider. VMG8825-B Series User’s Guide...
Page 242: The Call Rule Screen
Enter a name to identify the party you call when you dial the speed-dial number. You can use up to 127 printable ASCII characters. Apply Click this to save your changes and to apply them to the VMG. Cancel Click this to set every field in this screen to its last-saved value. VMG8825-B Series User’s Guide...
Page 243: The Call History Screen
The VMG logs calls from or to your SIP numbers. This screen allows you to view the summary of received, dialed and missed calls. Click VoIP > Call History > Call Summary. The following screen displays. VMG8825-B Series User’s Guide...
Page 244: Technical Reference
SIP signaling is separate from the media for which it handles sessions. The media that is exchanged during the session can use a different path from that of the signaling. SIP handles telephone calls and can interface with traditional circuit-switched telephone networks. VMG8825-B Series User’s Guide...
Page 245 When you use SIP to make a VoIP call, it originates at a client and terminates at a server. A SIP client could be a computer or a SIP phone. One device can act as both a SIP client and a SIP server. VMG8825-B Series User’s Guide...
Page 246 IP address back to the device that sent the request. Then the client device that originally sent the request can send requests to the IP address that it received back from the redirect server. Redirect servers do not initiate SIP requests. VMG8825-B Series User’s Guide...
Page 247 Pulse Code Modulation (PCM) measures analog signal amplitudes at regular time intervals and converts them into bits. SIP Call Progression The following figure displays the basic steps in the setup and tear down of a SIP call. A calls B. Table 112 SIP Call Progression 1. INVITE 2. Ringing VMG8825-B Series User’s Guide...
Page 248 The following figure shows the SIP and session traffic flow between the user agents (UA 1 and UA 2) and the proxy servers (this example shows two proxy servers, PROXY 1 and PROXY 2). VMG8825-B Series User’s Guide...
Page 249 Proxy 1 sends a SIP INVITE request to Proxy 2. Proxy 2 sends a response indicating that it is trying to complete the request. Proxy 2 sends a SIP INVITE request to User Agent 2. VMG8825-B Series User’s Guide...
Page 250 Enable Message Waiting Indication (MWI) enables your phone to give you a message–waiting (beeping) dial tone when you have a voice message(s). Your VoIP service provider must have a messaging system that sends message waiting status SIP packets as defined in RFC 3842. VMG8825-B Series User’s Guide...
Page 251 Press a number from 1301~1308 followed by the “#” key to delete the tone of your choice. Press 14 followed by the “#” key if you wish to clear all your custom tones. VMG8825-B Series User’s Guide...
Page 252: Quality Of Service (Qos)
Supplementary services such as call hold, call waiting, and call transfer. are generally available from your VoIP service provider. The VMG supports the following services: The VMG does not support DiffServ at the time of writing. VMG8825-B Series User’s Guide...
Page 253 Switch back to the call (if there is no second call). Flash Drop the call presently on hold or reject an incoming call which is waiting for answer. Flash Disconnect the current phone connection and answer the incoming call or resume with caller presently on hold. VMG8825-B Series User’s Guide...
Page 254 When you hear the dial tone, dial “*98#” followed by the number to which you want to transfer the call. After you hear the ring signal or the second party answers it, hang up the phone. VMG8825-B Series User’s Guide...
Page 255 If there is a second call to your telephone number, you will hear a call waiting tone. Press the flash key to put the first call on hold and answer the second call. USA Call Transfer Do the following to transfer an incoming call (that you have answered) to another phone. VMG8825-B Series User’s Guide...
Page 256 #### Internal Call Call the phone(s) connected to the VMG. One Shot Caller Display Call Activate or deactivate caller ID for the next call only. One Shot Caller Hidden Call VMG8825-B Series User’s Guide...
Page 257: Log
SEVERITY Emergency: The system is unusable. Alert: Action must be taken immediately. Critical: The system condition is critical. Error: There is an error condition on the system. Warning: There is a warning condition on the system. VMG8825-B Series User’s Guide...
Page 258: The System Log Screen
This field states the reason for the log. 24.3 The Security Log Screen Use the Security Log screen to see the security-related logs for the categories that you select. Click System Monitor > Log > Security Log to open the following screen. VMG8825-B Series User’s Guide...
Page 259 This field displays the severity level of the log that the device is to send to this syslog server. Category This field displays the type of the log. Messages This field states the reason for the log. VMG8825-B Series User’s Guide...
Page 260: Traffic Status
Click System Monitor > Traffic Status to open the WAN screen. The figure in this screen shows the number of bytes received and sent on the VMG. Figure 155 System Monitor > Traffic Status > WAN VMG8825-B Series User’s Guide...
Page 261: The Lan Status Screen
Click System Monitor > Traffic Status > LAN to open the following screen. The figure in this screen shows the interface that is currently connected on the VMG. Figure 156 System Monitor > Traffic Status > LAN VMG8825-B Series User’s Guide...
Page 262: The Nat Status Screen
Select how often you want the VMG to update this screen. Device Name This displays the name of the connected host. IPv4 Address This displays the IP address of the connected host. MAC Address This displays the MAC address of the connected host. VMG8825-B Series User’s Guide...
Page 263 This displays what percentage of NAT sessions the VMG can support is currently being used by all connected hosts. You can also see the number of active NAT sessions and the maximum number of NAT sessions the VMG can support. VMG8825-B Series User’s Guide...
Page 264: Voip Status
The VMG automatically tries to register the SIP account when you turn on the VMG or when you activate it. Inactive - The SIP account is not active. You can activate it in VoIP > SIP > SIP Account. VMG8825-B Series User’s Guide...
Page 265 SIP - For the current call which is categorized as Incoming Call in the Call Type filed, this field will show the type SIP. FXS - As for the other cases: Outgoing Call and Internal Call, this field will show the corresponding local phone port type: FXS, the legacy analog phone port on the device. VMG8825-B Series User’s Guide...
Page 266 Outgoing This field displays the SIP number that you use to make calls on this phone port. Number Incoming This field displays the SIP number that you use to receive calls on this phone port. Number VMG8825-B Series User’s Guide...
Page 267: Arp Table
MAC address, swaps the sender and target pairs, and unicasts the answer directly back to the requesting machine. ARP updates the ARP Table for future reference and then sends the packet to the MAC address that replied. VMG8825-B Series User’s Guide...
Page 268: Arp Table Screen
This is the MAC address of the device with the listed IP address. Device This is the type of interface used by the device. You can click on the device type to go to its configuration screen. VMG8825-B Series User’s Guide...
Page 269: Routing Table
This indicates the destination IPv4 address or IPv6 address and prefix of this route. Gateway This indicates the IPv4 address or IPv6 address of the gateway that helps forward this route’s traffic. Subnet Mask This indicates the destination subnet mask of the IPv4 route. VMG8825-B Series User’s Guide...
Page 270 LAN interface where x can be 0~3 to represent LAN1 to LAN4 respectively. ptm0 indicates a WAN interface using IPoE or in bridge mode. ethx indicates an Ethernet WAN interface using IPoE or in bridge mode. ppp0 indicates a WAN interface using PPPoE. VMG8825-B Series User’s Guide...
Page 271: Multicast Status
29.3 The MLD Status Screen Use this screen to look at the current list of multicast groups the VMG has joined and which ports have joined it. To open this screen, click System Monitor > Multicast Status > MLD Status. VMG8825-B Series User’s Guide...
Page 272 Source List This is the list of IP addresses that are allowed or not allowed to receive the multicast group’s traffic depending on the filter mode. Member This is the list of members in the multicast group. VMG8825-B Series User’s Guide...
Page 273: Xdsl Statistics
Select the time interval for refreshing statistics. Line Select which DSL line’s statistics you want to display. Status xDSL Training This displays the current state of setting up the DSL connection. Status Mode This displays the ITU standard used for this connection. VMG8825-B Series User’s Guide...
Page 274 This is a subset of ES. This is the number of UnAvailable Seconds. This is the number of Loss Of Signal seconds. This is the number of Loss Of Frame seconds. VMG8825-B Series User’s Guide...
Page 275 This is the number of Loss of Margin seconds. Retr. This is the number of DSL retraining count in BRCM DSL driver. HostInitRetr This is the number of the retraining counts the host initiated. FailedRetr This is the number of failed retraining counts. VMG8825-B Series User’s Guide...
Page 276: Wlan Station Status
This field displays the strength of the wireless LAN signal between an associated wireless station and an AP. The normal range is -30 dBm to -79 dBm. If the value drops below -80 dBm, try moving the associated wireless station closer to the VMG to get better signal strength. VMG8825-B Series User’s Guide...
Page 277 4 means the VMG is receiving a very good wireless LAN signal. 3 means the VMG is receiving a weak wireless LAN signal. 2 means the VMG is receiving a very weak wireless LAN signal. 1 means the VMG is not receiving a wireless LAN signal. VMG8825-B Series User’s Guide...
Page 278: Cellular Statistics
To open this screen, click System Monitor > Cellular Statistics. The cellular status is available on this screen only when you insert a compatible cellular dongle in a USB port on the VMG. Figure 165 System Monitor > Cellular Statistics VMG8825-B Series User’s Guide...
Page 279 The International Mobile Subscriber Identity or IMSI is a unique identification number associated with all cellular networks. This number is provisioned in the SIM card. VID/PID This field displays the USB Vendor ID and Product ID of the cellular card. VMG8825-B Series User’s Guide...
Page 280: System
Type a hostname for your VMG. Enter a descriptive name of up to 16 alphanumeric characters, not including spaces, underscores, and dashes. Domain Name Type a Domain name for your host VMG. Apply Click Apply to save your changes. Cancel Click Cancel to abandon this screen without saving. VMG8825-B Series User’s Guide...
Page 281: User Account
This field displays whether this user has Administrator or User privileges. Modify Click the Edit icon to configure the entry. Click the Delete icon to remove the entry. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG8825-B Series User’s Guide...
Page 282: The User Account Add/Edit Screen
Retry Times. Group Specify whether this user will have Administrator or User privleges. Click OK to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG8825-B Series User’s Guide...
Page 283: Remote Management
Select the Enable check box for the corresponding services that you want to allow access to the VMG from the LAN/WLAN. Select the Enable check box for the corresponding services that you want to allow access to the VMG from all WAN connections. VMG8825-B Series User’s Guide...
Page 284: The Trust Domain Screen
Use this screen to configure a public IP address which is allowed to access the VMG. Click the Add Trust Domain button in the Maintenance > Remote Management > Turst Domain screen to open the following screen. VMG8825-B Series User’s Guide...
Page 285 Enter a public IPv4 IP address which is allowed to access the service on the VMG from the WAN. Apply Click Apply to save your changes back to the VMG. Cancel Click Cancel to restore your previously saved settings. VMG8825-B Series User’s Guide...
Page 286: Snmp
Examples of variables include such as number of packets received, node port status etc. A Management Information Base (MIB) is a collection of managed objects. SNMP allows a manager and agents to communicate for the purpose of accessing these objects. VMG8825-B Series User’s Guide...
Page 287 Enter the SNMP system contact. Trap Destination Type the IP address of the station to send your SNMP traps to. Apply Click this to save your changes back to the VMG. Cancel Click this to restore your previously saved settings. VMG8825-B Series User’s Guide...
Page 288: Time Settings
The following table describes the fields on this screen. Table 139 Maintenance > Time LABEL DESCRIPTION Current Date/Time Current Time This field displays the time of your VMG. Each time you reload this page, the VMG synchronizes the time with the time server. VMG8825-B Series User’s Guide...
Page 289 Germany for instance, you would select 2 in the Hour field because Germany's time zone is one hour ahead of GMT or UTC (GMT+1). Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG8825-B Series User’s Guide...
Page 290: E-Mail Notification
Click this button to delete the selected entry(ies). 38.2.1 Email Notification Edit Click the Add button in the Email Notification screen. Use this screen to configure the required information for sending e-mail via a mail server. VMG8825-B Series User’s Guide...
Page 291 Select STARTTLS to upgrade a plain text connection to a secure connection using SSL/TLS. Click this button to save your changes and return to the previous screen. Cancel Click this button to begin configuring this screen afresh. VMG8825-B Series User’s Guide...
Page 292: Log Setting
The following table describes the fields on this screen. Table 142 Maintenance > Logs Setting LABEL DESCRIPTION Syslog Setting Syslog Logging The VMG sends a log to an external syslog server. Select Enable to enable syslog logging. VMG8825-B Series User’s Guide...
Page 293: Example E-Mail Log
• You may edit the subject title. • The date format here is Day-Month-Year. • The date format here is Month-Day-Year. The time format is Hour-Minute-Second. • "End of Log" message shows that a complete log has been sent. VMG8825-B Series User’s Guide...
Page 294 |<1,02> 127|Apr 7 00 |From:192.168.1.131 To:192.168.1.255 |match |forward | 10:05:17 |UDP src port:00520 dest port:00520 |<1,02> 128|Apr 7 00 |From:192.168.1.1 To:192.168.1.255 |match |forward | 10:05:30 |UDP src port:00520 dest port:00520 |<1,02> End of Firewall Log VMG8825-B Series User’s Guide...
Page 295: Firmware Upgrade
(Hypertext Transfer Protocol) and may take up to two minutes. After a successful upload, the system will reboot. Do NOT turn off the VMG while firmware upload is in progress! Figure 179 Maintenance > Firmware Upgrade VMG8825-B Series User’s Guide...
Page 296 After two minutes, log in again and check your new firmware version in the Status screen. If the upload was not successful, the following screen will appear. Click OK to go back to the Firmware Upgrade screen. VMG8825-B Series User’s Guide...
Page 297 Chapter 40 Firmware Upgrade Figure 182 Error Message VMG8825-B Series User’s Guide...
Page 298: Backup Restore
The backup configuration file will be useful in case you need to return to your previous settings. Click Backup to save the VMG’s current configuration to your computer. VMG8825-B Series User’s Guide...
Page 299 If the upload was not successful, the following screen will appear. Click OK to go back to the Configuration screen. Figure 185 Configuration Upload Error Reset to Factory Defaults Click the Reset button to clear all user-entered configuration information and return the VMG to its factory defaults. The following warning screen appears. VMG8825-B Series User’s Guide...
Page 300: The Reboot Screen
System restart allows you to reboot the VMG remotely without turning the power off. You may need to do this if the VMG hangs, for example. Click Maintenance > Reboot. Click Reboot to have the VMG reboot. This does not affect the VMG's configuration. Figure 188 Maintenance > Reboot VMG8825-B Series User’s Guide...
Page 301: Diagnostic
If an MEP port does not respond to the source MEP, this may indicate a fault. Administrators can take further action to check and resume services from the fault according to the line connectivity status report. VMG8825-B Series User’s Guide...
Page 302: Ping & Traceroute & Nslookup
Click this button to perform a DNS lookup on the IP address of a computer you enter. 42.4 802.1ag Click Maintenance > Diagnostic > 802.1ag to open the following screen. Use this screen to perform CFM actions. VMG8825-B Series User’s Guide...
Page 303 Enter the target device’s MAC address to which the VMG performs a CFM loopback and MAC Address linktrace test. Test Result Loopback This shows Pass if a Loop Back Messages (LBMs) responses are received. If LBMs do not get a Message (LBM) response it shows Fail. VMG8825-B Series User’s Guide...
Page 304 Auto Event Select Enable for the VMG to detect link status and send a notification when an error (such as errors in symbol, frames, or seconds) is detected. Otherwise, click Disable and you will not be notified. VMG8825-B Series User’s Guide...
Page 305: Oam Ping
VPI as the user data cells on VP connections, but use different predefined VCI values. F5 cells use the same VPI and VCI as the user data cells on the VC connections, and are distinguished VMG8825-B Series User’s Guide...
Page 306 F4 end-end Press this to perform an OAM F4 end-to-end loopback test. F5 segment Press this to perform an OAM F5 segment loopback test. F5 end-end Press this to perform an OAM F5 end-to-end loopback test. VMG8825-B Series User’s Guide...
Page 307: Troubleshooting
Make sure you understand the normal behavior of the LED. See Section 1.4.3 on page Check the hardware connections. Inspect your cables for damage. Contact the vendor to replace any damaged cables. Turn the VMG off and on. VMG8825-B Series User’s Guide...
Page 308: Vmg Access And Login
If it is possible to log in from another interface, check the service control settings for HTTP and HTTPS (Maintenance > Remote MGMT). Reset the device to its factory defaults, and try to access the VMG with the default IP address. See Section 1.4.5 on page VMG8825-B Series User’s Guide...
Page 309: Internet Access
Ignore the suggestions about your browser. 43.3 Internet Access I cannot access the Internet. Check the hardware connections, and make sure the LEDs are behaving as expected. See the Quick Start Guide and Section 1.4.3 on page VMG8825-B Series User’s Guide...
Page 310 If you set up a WAN connection using bridging service, make sure you turn off the DHCP feature in the LAN screen to have the clients get WAN IP addresses directly from your ISP’s DHCP server. VMG8825-B Series User’s Guide...
Page 311: Wireless Internet Access
• Reduce wireless interference that may be caused by other wireless networks or surrounding wireless electronics such as cordless phones. • Place the AP where there are minimum obstacles (such as walls and ceilings) between the AP and the wireless client. VMG8825-B Series User’s Guide...
Page 312: Usb Device Connection
Network Places > Local Network. Disconnect the Ethernet cable from the VMG’s LAN port or from your computer. Re-connect the Ethernet cable. The Local Area Connection icon for UPnP disappears on the screen. Restart your computer. VMG8825-B Series User’s Guide...
Page 313: Appendices
Appendices Appendices contain general information. Some information may not apply to your device.
Page 314: Appendix A Customer Support
• Brief description of the problem and the steps you took to solve it. Corporate Headquarters (Worldwide) Taiwan • Zyxel Communications Corporation • http://www.zyxel.com Asia China • Zyxel Communications (Shanghai) Corp. Zyxel Communications (Beijing) Corp. Zyxel Communications (Tianjin) Corp. • http://www.zyxel.cn India • Zyxel Technology India Pvt Ltd • http://www.zyxel.in Kazakhstan •...
Page 315 • Zyxel Singapore Pte Ltd. • http://www.zyxel.com.sg Taiwan • Zyxel Communications Corporation • http://www.zyxel.com/tw/zh/ Thailand • Zyxel Thailand Co., Ltd • http://www.zyxel.co.th Vietnam • Zyxel Communications Corporation-Vietnam Office • http://www.zyxel.com/vn/vi Europe Austria • Zyxel Deutschland GmbH • http://www.zyxel.de Belarus • Zyxel BY • http://www.zyxel.by...
Page 316 Appendix A Customer Support Belgium • Zyxel Communications B.V. • http://www.zyxel.com/be/nl/ • http://www.zyxel.com/be/fr/ Bulgaria • Zyxel България • http://www.zyxel.com/bg/bg/ Czech Republic • Zyxel Communications Czech s.r.o • http://www.zyxel.cz Denmark • Zyxel Communications A/S • http://www.zyxel.dk Estonia • Zyxel Estonia • http://www.zyxel.com/ee/et/ Finland •...
Page 317 • Zyxel Communications Poland • http://www.zyxel.pl Romania • Zyxel Romania • http://www.zyxel.com/ro/ro Russia • Zyxel Russia • http://www.zyxel.ru Slovakia • Zyxel Communications Czech s.r.o. organizacna zlozka • http://www.zyxel.sk Spain • Zyxel Communications ES Ltd • http://www.zyxel.es Sweden • Zyxel Communications • http://www.zyxel.se Switzerland •...
Page 318 Appendix A Customer Support • http://www.zyxel.ch/ Turkey • Zyxel Turkey A.S. • http://www.zyxel.com.tr • Zyxel Communications UK Ltd. • http://www.zyxel.co.uk Ukraine • Zyxel Ukraine • http://www.ua.zyxel.com Latin America Argentina • Zyxel Communication Corporation • http://www.zyxel.com/ec/es/ Brazil • Zyxel Communications Brasil Ltda.
Page 319 Appendix A Customer Support North America • Zyxel Communications, Inc. - North America Headquarters • http://www.zyxel.com/us/en/ Oceania Australia • Zyxel Communications Corporation • http://www.zyxel.com/au/en/ Africa South Africa • Nology (Pty) Ltd. • http://www.zyxel.co.za VMG8825-B Series User’s Guide...
Page 320: Appendix B Wireless Lans
Intra-BSS traffic is traffic between wireless clients in the BSS. When Intra-BSS is enabled, wireless client A and B can access the wired network and communicate with each other. When Intra-BSS is disabled, wireless client A and B can still access the wired network but cannot communicate with each other. VMG8825-B Series User’s Guide...
Page 321 An ESSID (ESS IDentification) uniquely identifies each ESS. All access points and their associated wireless clients within the same ESS must have the same ESSID in order to communicate. VMG8825-B Series User’s Guide...
Page 322 (AP) or wireless gateway, but out-of-range of each other, so they cannot "hear" each other, that is they do not know if the channel is currently being used. Therefore, they are considered hidden from each other. VMG8825-B Series User’s Guide...
Page 323 AP will fragment the packet into smaller data frames. A large Fragmentation Threshold is recommended for networks not prone to interference while you should set a smaller threshold for busy networks or networks that are prone to interference. VMG8825-B Series User’s Guide...
Page 324 In June 2001, the IEEE 802.1x standard was designed to extend the features of IEEE 802.11 to support extended authentication as well as providing additional accounting and control features. It is supported by Windows XP and a number of network devices. Some advantages of IEEE 802.1x are: VMG8825-B Series User’s Guide...
Page 325 The following types of RADIUS messages are exchanged between the access point and the RADIUS server for user accounting: • Accounting-Request Sent by the access point requesting accounting. • Accounting-Response Sent by the RADIUS server to indicate that it has started or stopped accounting. VMG8825-B Series User’s Guide...
Page 326 Client authentication is then done by sending username and password through the secure connection, thus client identity is protected. For client authentication, EAP-TTLS supports EAP methods and legacy authentication methods such as PAP, CHAP, MS-CHAP and MS-CHAP v2. VMG8825-B Series User’s Guide...
Page 327 If both an AP and the wireless clients support WPA2 and you have an external RADIUS server, use WPA2 for stronger data encryption. If you don't have an external RADIUS server, you should use WPA2-PSK (WPA2-Pre-Shared Key) that only requires a single (identical) password entered into each access point, VMG8825-B Series User’s Guide...
Page 328 (CCMP 4-way handshake) and shortens the time required to connect to a network. Other WPA2 authentication features that are different from WPA include key caching and pre-authentication. These two features are optional and may not be supported in all wireless devices. VMG8825-B Series User’s Guide...
Page 329 PMK to dynamically generate unique data encryption keys. The keys are used to encrypt every data packet that is wirelessly communicated between the AP and the wireless clients. Figure 198 WPA(2) with RADIUS Application Example VMG8825-B Series User’s Guide...
Page 330 IEEE 802.1X METHOD PROTOCOL Open None Disable Enable without Dynamic WEP Key Open Enable with Dynamic WEP Key Enable without Dynamic WEP Key Disable Shared Enable with Dynamic WEP Key Enable without Dynamic WEP Key Disable VMG8825-B Series User’s Guide...
Page 331 • Omni-directional antennas send the RF signal out in all directions on a horizontal plane. The coverage area is torus-shaped (like a donut) which makes these antennas ideal for a room environment. With a wide coverage area, it is possible to make circular overlapping coverage areas with multiple access points. VMG8825-B Series User’s Guide...
Page 332 For a single AP application, place omni-directional antennas as close to the center of the coverage area as possible. For directional antennas, point the antenna in the direction of the desired coverage area. VMG8825-B Series User’s Guide...
Page 333: Appendix C Ipv6
54 bits 64 bits Global Address A global address uniquely identifies a device on the Internet. It is similar to a “public IP address” in IPv4. A global unicast address starts with a 2 or 3. VMG8825-B Series User’s Guide...
Page 334 The following table describes the multicast addresses which are reserved and can not be assigned to a multicast group. Table 155 Reserved Multicast Address MULTICAST ADDRESS FF00:0:0:0:0:0:0:0 FF01:0:0:0:0:0:0:0 FF02:0:0:0:0:0:0:0 FF03:0:0:0:0:0:0:0 FF04:0:0:0:0:0:0:0 FF05:0:0:0:0:0:0:0 FF06:0:0:0:0:0:0:0 FF07:0:0:0:0:0:0:0 FF08:0:0:0:0:0:0:0 FF09:0:0:0:0:0:0:0 FF0A:0:0:0:0:0:0:0 FF0B:0:0:0:0:0:0:0 FF0C:0:0:0:0:0:0:0 FF0D:0:0:0:0:0:0:0 VMG8825-B Series User’s Guide...
Page 335 IA_NA before the lifetimes expire. After T1, the client sends the server (S1) (from which the addresses in the IA_NA were obtained) a Renew message. If the time T2 is reached and the server VMG8825-B Series User’s Guide...
Page 336 A neighbor being “reachable” means it responds to a neighbor solicitation message (from the host) with a neighbor advertisement message. • Neighbor advertisement: A response from a node to announce its link-layer address. VMG8825-B Series User’s Guide...
Page 337 Done message to the router or switch. The router or switch then sends a group-specific query to the port on which the Done message is received to determine if other devices connected to this port should remain in the group. VMG8825-B Series User’s Guide...
Page 338 Install Dibbler and select the DHCPv6 client option on your computer. After the installation is complete, select Start > All Programs > Dibbler-DHCPv6 > Client Install as service. Select Start > Control Panel > Administrative Tools > Services. Double click Dibbler - a DHCPv6 client. VMG8825-B Series User’s Guide...
Page 339 To enable IPv6 in Windows 7: Select Control Panel > Network and Sharing Center > Local Area Connection. Select the Internet Protocol Version 6 (TCP/IPv6) checkbox to enable it. Click OK to save the change. VMG8825-B Series User’s Guide...
Page 340 IPv4 Address... : 172.16.100.61 Subnet Mask ... : 255.255.255.0 Default Gateway ..: fe80::213:49ff:feaa:7125%11 172.16.100.254 VMG8825-B Series User’s Guide...
Page 341: Appendix D Services
• If the Protocol is TCP, UDP, or TCP/UDP, this is the IP port number. • If the Protocol is USER, this is the IP protocol number. • Description: This is a brief explanation of the applications that use this service or the situations in which this service is used. VMG8825-B Series User’s Guide...
Page 342 Microsoft Networks’ messenger service uses this protocol. NetBIOS TCP/UDP The Network Basic Input/Output System is used for communication between computers in a LAN. TCP/UDP TCP/UDP TCP/UDP NEW-ICQ 5190 An Internet chat program. NEWS A protocol for news groups. VMG8825-B Series User’s Guide...
Page 343 SSDP 1900 The Simple Service Discovery Protocol supports Universal Plug-and-Play (UPnP). TCP/UDP Secure Shell Remote Login Program. STRM WORKS 1558 Stream Works Protocol. SYSLOG Syslog allows you to send system logs to a UNIX server. VMG8825-B Series User’s Guide...
Page 344 Internet and in UNIX environments. It operates over TCP/IP networks. Its primary function is to allow users to log into remote host systems. VDOLIVE 7000 A videoconferencing solution. The UDP port number is specified in the application. user- defined VMG8825-B Series User’s Guide...
Page 345: Appendix E Legal Information
The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of Zyxel Communications Corporation. Published by Zyxel Communications Corporation. All rights reserved.
Page 346 Industry Canada radiation exposure statement This device complies with IC radiation exposure limits set forth for an uncontrolled environment. This device should be installed and operated with a minimum distance of 20 cm between the radiator and your body. VMG8825-B Series User’s Guide...
Page 347 Zyxel ovime izjavljuje da je radijska oprema tipa u skladu s Direktivom 2014/53/UE. (Croatian) Íslenska Hér með lýsir, Zyxel því yfir að þessi búnaður er í samræmi við grunnkröfur og önnur viðeigandi ákvæði tilskipunar 2014/53/ (Icelandic) VMG8825-B Series User’s Guide...
Page 348 The regulatory limits for maximum output power are specified in EIRP. The EIRP level (in dBm) of a device can be calculated by adding the gain of the antenna used (specified in dBi) to the output power available at the connector (specified in dBm). VMG8825-B Series User’s Guide...
Page 349 • Network standby power consumption < 8W, and/or • Off mode power consumption < 0.5W, and/or • Standby mode power consumption < 0.5W. (Wireless setting, please refer to "Wireless" chapter for more detail.) VMG8825-B Series User’s Guide...
Page 350 • 無線資訊傳輸設備忍受合法通信之干擾且不得干擾合法通信；如造成干擾，應立即停用，俟無干擾之虞，始得繼續使用。 • 無線資訊傳設備的製造廠商應確保頻率穩定性，如依製造廠商使用手冊上所述正常操作，發射的信號應維持於操作頻帶中 • 使用無線產品時，應避免影響附近雷達系統之操作。 • 若使用高增益指向性天線，該產品僅應用於固定式點對點系統。以下訊息僅適用於產品屬於專業安裝並銷售至台灣地區 • 本器材須經專業工程人員安裝及設定，始得設置使用，且不得直接販售給一般消費者。安全警告 - 為了您的安全，請先閱讀以下警告及指示 : • 請勿將此產品接近水、火焰或放置在高溫的環境。 • 避免設備接觸 : - 任何液體 - 切勿讓設備接觸水、雨水、高濕度、污水腐蝕性的液體或其他水份。 - 灰塵及污物 - 切勿接觸灰塵、污物、沙土、食物或其他不合適的材料。 • 雷雨天氣時，不要安裝，使用或維修此設備。有遭受電擊的風險。 • 切勿重摔或撞擊設備，並勿使用不正確的電源變壓器。 • 若接上不正確的電源變壓器會有爆炸的風險。 • 請勿隨意更換產品內的電池。 VMG8825-B Series User’s Guide...
Page 351 To obtain the services of this warranty, contact your vendor. You may also refer to the warranty policy for the region in which you bought the device at http://www.zyxel.com/web/support_warranty_info.php. Registration Register your product online to receive e-mail notices of firmware upgrades and information at www.zyxel.com for global products, or at www.us.zyxel.com for North American products. VMG8825-B Series User’s Guide...
Page 352 This product contains in part some free software distributed under GPL license terms and/or GPL like licenses. Open source licenses are provided with the firmware package. You can download the latest firmware at www.zyxel.com. To obtain the source code covered under those Licenses, please contact support@zyxel.com.tw to get it. VMG8825-B Series User’s Guide...
Page 353: Index
Basic Service Set, See BSS Basic Service Set, see BSS blinking LEDs channel Broadband interference broadcast channel, wireless LAN 118, 320 Class of Service example Class of Service, see CoS BYE request client list client-server protocol VMG8825-B Series User’s Guide...
Page 354 DDoS DNS server address assignment Domain Name LAND attack Domain Name System, see DNS Ping of Death Domain Name System. See DNS. SYN attack firmware DS field 163, 252 version DS, dee differentiated services flash key VMG8825-B Series User’s Guide...
Page 355 IP address 127, 128, 140 Inside Local Address, see ILA MAC address installation status transceivers subnet mask 127, 128, 140 interface group LAN to LAN multicast Internet LAND attack wizard setup Internet access limitations wizard setup VMG8825-B Series User’s Guide...
Page 356 MLDv1 328, 330 passwords MLDv2 27, 28 MTU (Multi-Tenant Unit) Peak Cell Rate (PCR) multicast peer-to-peer calls Multicast Listener Discovery, see MLD Per-Hop Behavior, see PHB multimedia Multiple BSS, see MBSSID 163, 252 phone book multiplexing VMG8825-B Series User’s Guide...
Page 357 RADIUS server register server Real time Transport Protocol, see RTP servers reset service domain 26, 299 restart user agent restoring configuration SIP ALG RFC 1058. See RIP. activation VMG8825-B Series User’s Guide...
Page 358 Sustained Cell Rate (SCR) UPnP SYN attack cautions NAT traversal syslog protocol USA type call service mode severity levels USB features system firmware version passwords 27, 28 reset status Vendor ID wireless LAN Virtual Circuit (VC) VMG8825-B Series User’s Guide...
Page 359 96, 113 application example authentication 115, 116 119, 121 example example limitations channel encryption example example push button fragmentation threshold 23, 119 107, 115 limitations MAC address filter 103, 116 MBSSID preamble 108, 115 RADIUS server VMG8825-B Series User’s Guide...
Page 360 Index ZyXEL Family Safety page VMG8825-B Series User’s Guide...

ZyXEL Communications VMG8825-B Series User Manual

Chapter 1 Introducing the VMG

Chapter 3 Quick Start

Chapter 4 Tutorials

Chapter 6 Broadband

Chapter 7 Wireless

Chapter 8 Home Networking

Chapter 9 Routing

Chapter 10 Quality of Service (Qos)

Chapter 12 Dynamic DNS Setup

Chapter 13 IGMP/MLD

Chapter 14 Vlan Group

Chapter 15 Interface Grouping

Chapter 16 USB Service

Chapter 17 Home Connectivity

Chapter 18 Firewall

Chapter 19 MAC Filter

Chapter 20 Parental Control

Chapter 21 Scheduler Rule

Chapter 22 Certificates

Chapter 24 Log

Chapter 25 Traffic Status

Chapter 26 Voip Status

Chapter 27 ARP Table

Chapter 28 Routing Table

Chapter 29 Multicast Status

Chapter 30 Xdsl Statistics

Chapter 32 Cellular Statistics

Quick Links

Related Manuals for ZyXEL Communications VMG8825-B Series

Summary of Contents for ZyXEL Communications VMG8825-B Series