Page 1 VMG1312-B Series Wireless N VDSL2 4-port Gateway with USB Default Login Details IMPORTANT! LAN IP http://192.168.1.1 Address User Name admin IMPORTANT! Password 1234 READ CAREFULLY BEFORE USE. Version 1.00 Edition 1, 7/2012 www.zyxel.com www.zyxel.com Copyright © 2012 ZyXEL Communications Corporation...
Page 2 Internet access. • Support Disc Refer to the included CD for support documents. • ZyXEL Web Site Please refer to www.zyxel.com for additional support documentation and product certifications. VMG1312-B Series User’s Guide...
Page 3: Table Of Contents
Routing Table ............................251 IGMP Status ............................253 xDSL Statistics ............................255 User Account ............................259 Remote Management ..........................261 TR-069 Client ............................263 TR-064 ..............................265 Time Settings ............................267 E-mail Notification ..........................271 Logs Setting ............................273 Firmware Upgrade ..........................277 Configuration ............................279 Diagnostic .............................282 VMG1312-B Series User’s Guide...
Page 4 Contents Overview Troubleshooting ............................287 VMG1312-B Series User’s Guide...
Page 5: Table Of Contents
2.2.3 Navigation Panel ........................26 Chapter 3 Quick Start............................31 3.1 Overview ............................31 3.2 Quick Start Setup ..........................31 Chapter 4 Tutorials ...............................33 4.1 Overview ............................33 4.2 Setting Up an ADSL PPPoE Connection ..................33 4.3 Setting Up a Secure Wireless Network .....................36 VMG1312-B Series User’s Guide...
Page 6 6.2 The Broadband Screen ........................84 6.2.1 Add/Edit Internet Connection ....................85 6.3 The 3G Backup Screen ........................92 6.4 The Advanced Screen ........................96 6.5 The 8021x Screen ..........................97 6.5.1 Edit 802.1x Settings .........................98 6.6 Technical Reference ..........................98 Chapter 7 Wireless .............................105 VMG1312-B Series User’s Guide...
Page 7 8.5 Installing UPnP in Windows Example .....................145 8.6 Using UPnP in Windows XP Example ....................147 8.7 The Additional Subnet Screen ......................153 8.8 The STB Vendor ID Screen ......................154 8.9 The LAN VLAN Screen ........................155 8.10 Technical Reference ........................155 VMG1312-B Series User’s Guide...
Page 8 11.3 The Applications Screen .......................187 11.3.1 Add New Application ......................188 11.4 The Port Triggering Screen ......................188 11.4.1 Add/Edit Port Triggering Rule .....................190 11.5 The DMZ Screen ...........................191 11.6 The ALG Screen ..........................192 11.7 The Address Mapping Screen .......................192 VMG1312-B Series User’s Guide...
Page 9 Firewall ..............................215 15.1 Overview ............................215 15.1.1 What You Can Do in this Chapter ..................215 15.1.2 What You Need to Know ......................216 15.2 The Firewall Screen ........................217 15.3 The Service Screen ........................217 15.3.1 Add/Edit a Service ......................218 VMG1312-B Series User’s Guide...
Page 10 20.1 Overview ............................241 20.1.1 What You Can Do in this Chapter ..................241 20.1.2 What You Need To Know .....................241 20.2 The System Log Screen ........................242 20.3 The Security Log Screen .......................243 Chapter 21 Traffic Status ............................245 VMG1312-B Series User’s Guide...
Page 11 26.2 The User Account Screen ......................259 Chapter 27 Remote Management........................261 27.1 Overview ............................261 27.2 The Remote MGMT Screen ......................261 Chapter 28 TR-069 Client.............................263 28.1 Overview ............................263 28.2 The TR-069 Client Screen ......................263 Chapter 29 TR-064..............................265 29.1 Overview ............................265 VMG1312-B Series User’s Guide...
Page 12 35.2 What You Need to Know .......................282 35.3 Ping & TraceRoute & NsLookup ....................283 35.4 802.1ag ............................284 35.5 OAM Ping Test ..........................285 Chapter 36 Troubleshooting..........................287 36.1 Power, Hardware Connections, and LEDs ..................287 36.2 Device Access and Login ......................288 VMG1312-B Series User’s Guide...
Page 13 Appendix A Setting up Your Computer’s IP Address ...............295 Appendix B IP Addresses and Subnetting..................317 Appendix C Pop-up Windows, JavaScripts and Java Permissions ..........325 Appendix D Wireless LANs......................335 Appendix E IPv6 ..........................349 Appendix F Services........................357 Appendix G Legal Information ......................361 Index ..............................365 VMG1312-B Series User’s Guide...
Page 14 Table of Contents VMG1312-B Series User’s Guide...
Page 15: User's Guide
User’s Guide...
Page 17: Introducing The Device
Introducing the Device 1.1 Overview The VMG1312-B Series is a wireless VDSL router. It has a DSL port for super-fast Internet access over analog (POTS) telephone lines. The Device supports both Packet Transfer Mode (PTM) and Asynchronous Transfer Mode (ATM). It is backward compatible with ADSL, ADSL2 and ADSL2+ in case VDSL is not available.
Page 18: Applications For The Device
Internet to your network is blocked by default unless it is initiated from your network. This means that probes from the outside to your network are not allowed, but you can safely browse the Internet and download files. VMG1312-B Series User’s Guide...
Page 19: Device's Usb Support
You can also use the Device as a media server. This lets anyone on your network play video, music, and photos from a USB device (B) connected to the Device’s USB port (without having to copy them to another computer). Figure 3 USB Media Server Application VMG1312-B Series User’s Guide...
Page 20: Leds (Lights)
The wireless network is not activated. Green The ADSL line is up. Blinking The Device is initializing the ADSL line. Orange The VDSL line is up. Blinking The Device is initializing the VDSL line. The DSL line is down. VMG1312-B Series User’s Guide...
Page 21: The Reset Button
1.7 Wireless Access The Device is a wireless Access Point (AP) for wireless clients, such as notebook computers or PDAs and iPads. It allows them to connect to the Internet without having to rely on inconvenient Ethernet cables. VMG1312-B Series User’s Guide...
Page 22: Using The Wlan/Wps Button
Once the connection is successfully made, the WLAN/WPS LED shines green. To turn off the wireless network, press the WLAN/WPS button on the front of the Device for one to five seconds. The WLAN/WPS LED turns off when the wireless network is off. VMG1312-B Series User’s Guide...
Page 23: The Web Configurator
If you have changed the password, enter your password and click Login. Figure 6 Password Screen VMG1312-B Series User’s Guide...
Page 24 After you finished or closed the Quick Start Wizard screen, the Network Map page appears. Figure 8 Network Map Click Status to display the Status screen, where you can view the Device’s interface and system information. VMG1312-B Series User’s Guide...
Page 25: Web Configurator Layout
Table 2 Web Configurator Icons in the Title Bar ICON DESCRIPTION Quick Start: Click this icon to open screens where you can configure the Device’s time zone Internet access, and wireless settings. Logout: Click this icon to log out of the web configurator. VMG1312-B Series User’s Guide...
Page 26: Main Window
Use this screen to configure 3G WAN connection. Advanced Use this screen to enable or disable PTM over ADSL, Annex M/Annex J, and DSL PhyR functions. 8021x Use this screen to view and configure the IEEE 802.1x settings on the Device. VMG1312-B Series User’s Guide...
Page 27 Use this screen to view and configure DNS routes. Dynamic DNS Use this screen to allow a static hostname alias for a dynamic IP address. Interface Use this screen to map a port to a PVC or bridge group. Group VMG1312-B Series User’s Guide...
Page 28 Use this screen to configure up to two mail servers and sender Notification addresses on the Device. Log Setting Use this screen to change your Device’s log settings. Firmware Use this screen to upload firmware to your device. Upgrade VMG1312-B Series User’s Guide...
Page 29 Use this screen to configure CFM (Connectivity Fault Management) MD (maintenance domain) and MA (maintenance association), perform connectivity tests and view test reports. OAM Ping Use this screen to view information to help you identify problems with the DSL connection. VMG1312-B Series User’s Guide...
Page 30 Chapter 2 The Web Configurator VMG1312-B Series User’s Guide...
Page 31: Quick Start
The Quick Start Wizard appears automatically after login. Or you can click the Click Start icon in the top right corner of the web configurator to open the quick start screens. Select the time zone of the Device’s location and click Next. Figure 11 Time Zone VMG1312-B Series User’s Guide...
Page 32 Turn the wireless LAN on or off. If you keep it on, record the security settings so you can configure your wireless clients to connect to the Device. Click Save. Figure 13 Internet Connection Your Device saves your settings and attempts to connect to the Internet. VMG1312-B Series User’s Guide...
Page 33: Tutorials
Broadband screens. Click Network Setting > Broadband to open the following screen. Click Add New WAN Interface. In this example, the DSL connection has the following information. General Name MyDSLConnection Type ADSL VMG1312-B Series User’s Guide...
Page 34 Configure this rule as your default Internet connection by selecting the Apply as Default Gateway check box. Then select DNS as Static and enter the DNS server addresses provided to you, such as 192.168.5.2 (DNS server1)/192.168.5.1 (DNS server2). Leave the rest of the fields to the default settings. VMG1312-B Series User’s Guide...
Page 35 Chapter 4 Tutorials Click Apply to save your settings. VMG1312-B Series User’s Guide...
Page 36: Setting Up A Secure Wireless Network
38) or manual configuration (Section 4.3.3 on page 41). 4.3.1 Configuring the Wireless Network Settings This example uses the following parameters to set up a wireless network. SSID Example Security Mode WPA-PSK Pre-Shared Key DoNotStealMyWirelessNetwork 802.11 Mode 802.11b/g/n Mixed VMG1312-B Series User’s Guide...
Page 37 Thomas can now use the WPS feature to establish a wireless connection between his notebook and the Device (see Section 4.3.2 on page 38). He can also use the notebook’s wireless client to search for the Device (see Section 4.3.3 on page 41). VMG1312-B Series User’s Guide...
Page 38: Using Wps
Push and hold the WPS button located on the Device’s front panel for more than 5 seconds. Alternatively, you may log into Device’s web configurator and go to the Network Setting > Wireless > WPS screen. Enable the WPS function and click Apply. Then click the Connect button. VMG1312-B Series User’s Guide...
Page 39 The following figure shows you an example of how to set up a wireless network and its security by pressing a button on both Device and wireless client. Example WPS Process: PBC Method Wireless Client Device WLAN/ WITHIN 2 MINUTES Press and hold for 5 seconds SECURITY INFO COMMUNICATION VMG1312-B Series User’s Guide...
Page 40 The Device authenticates the wireless client and sends the proper configuration settings to the wireless client. This may take up to two minutes. The wireless client is then able to communicate with the Device securely. VMG1312-B Series User’s Guide...
Page 41: Without Wps
“DoNotStealMyWirelessNetwork” pre-shared key to establish an wireless Internet connection. Note: The Device supports IEEE 802.11b and IEEE 802.11g wireless clients. Make sure that your notebook or computer’s wireless adapter supports one of these standards. VMG1312-B Series User’s Guide...
Page 42: Setting Up Multiple Wireless Groups
Company A will use the following parameters to set up the wireless network groups. COMPANY GUEST SSID Company Guest Security Level More Secure More Secure Basic Security Mode WPA2-PSK WPA2-PSK Static WEP Pre-Shared Key ForCompanyOnly ForVIPOnly Guest12345678 VMG1312-B Series User’s Guide...
Page 43 Configure the screen using the provided parameters and click Apply. Click Network Setting > Wireless > More AP to open the following screen. Click the Edit icon to configure the second wireless network group. VMG1312-B Series User’s Guide...
Page 44 Chapter 4 Tutorials Configure the screen using the provided parameters and click Apply. In the More AP screen, click the Edit icon to configure the third wireless network group. VMG1312-B Series User’s Guide...
Page 45: Configuring Static Route For Routing To Another Network
In the following figure, router R is connected to the Device’s LAN. R connects to two networks, N1 (192.168.1.x/24) and N2 (192.168.10.x/24). If you want to send traffic from computer A (in N1 VMG1312-B Series User’s Guide...
Page 46 This tutorial uses the following example IP settings: Table 4 IP Settings in this Tutorial DEVICE / COMPUTER IP ADDRESS The Device’s WAN 172.16.1.1 The Device’s LAN 192.168.1.1 IP Type IPv4 Use Interface ADSL/atm0 192.168.1.34 R’s N1 192.168.1.253 VMG1312-B Series User’s Guide...
Page 47 Gateway IP Address field. Select ADSL/atm0 as the Use Interface. Click OK. Now B should be able to receive traffic from A. You may need to additionally configure B’s firewall settings to allow specific traffic to pass through. VMG1312-B Series User’s Guide...
Page 48: Configuring Qos Queue And Class Setup
Traffic that does not match this class is assigned a priority queue based on the internal QoS mapping table on the Device. QoS Example 10,000 kbps Your computer IP=192.168.1.23 and/or MAC=AA:FF:AA:FF:AA:FF A colleague’s computer Email traffic: Highest priority Other traffic: Automatic classifier VMG1312-B Series User’s Guide...
Page 49 Click Queue Setup > Add new Queue to create a new queue. In the screen that opens, check Active and enter or select the following values: • Name: E-mail • Interface: WAN • Priority: 1 (High) • Weight: 8 • Rate Limit: 5,000 (kbps) Tutorial: Advanced > QoS > Queue Setup VMG1312-B Series User’s Guide...
Page 50 Type the MAC address of your computer - AA:FF:AA:FF:AA:FF. Type the MAC Mask if you know it. To Queue Link this to an item in the Network Setting > QoS > Queue Setup screen, which is the E- Index mail queue created in this example. VMG1312-B Series User’s Guide...
Page 51: Access The Device Using Ddns
• IP Address: Enter the WAN IP address that your Device is currently using. You can find the IP address on the Device’s Web Configurator Status page. Then you will need to configure the same account and host name on the Device later. VMG1312-B Series User’s Guide...
Page 52: Configuring Ddns On Your Device
Open a web browser on the computer (using the IP address a.b.c.d) that is connected to the Internet. Type http://zyxelrouter.dyndns.org and press [Enter]. The Device’s login page should appear. You can then log into the Device and manage it. VMG1312-B Series User’s Guide...
Page 53: Configuring The Mac Address Filter
Click Security > MAC Filter to open the MAC Filter screen. Select the Enable check box to activate MAC filter function. Select Allow. Then enter the host name and MAC address of Thomas’ computer in this screen. Click Apply. VMG1312-B Series User’s Guide...
Page 54: Access Your Shared Files From A Computer
In FileZilla enter the IP address of the Device (the default is 192.168.1.1), your account’s user name and password and port 21 and click Quickconnect. A screen asking for password authentication appears. File Sharing via Windows Explorer Once you log in the USB device displays in the folder. VMG1312-B Series User’s Guide...
Page 55: Using The Media Server Feature
This section shows you how to play the media files on the USB storage device connected to your Device using Windows Media Player. Tutorial: Media Server Setup (Using Windows Media Player) USB Storage Device Computer with Windows Media Player ZyXEL Device VMG1312-B Series User’s Guide...
Page 56 Open Windows Media Player and click Library > Media Sharing as follows. Tutorial: Media Sharing using Windows Vista Check Find media that others are sharing in the following screen and click OK. Tutorial: Media Sharing using Windows Vista (2) VMG1312-B Series User’s Guide...
Page 57 Open Windows Media Player. It should automatically detect the Device. Tutorial: Media Sharing using Windows 7 (1) If you cannot see the Device in the left panel as shown above, right-click Other Libraries > Refresh Other Libraries. VMG1312-B Series User’s Guide...
Page 58: Using A Digital Media Adapter
This section shows you how you can use the Device with a ZyXEL DMA-2500 to play media files stored in the USB storage device in your TV screen. Note: For this tutorial, your DMA-2500 should already be set up with the TV according to the instructions in the DMA-2500 Quick Start Guide. VMG1312-B Series User’s Guide...
Page 59 The screen shows you the list of available media files in the USB storage device. Select the file you want to open and push the Play button in the remote control. Tutorial: Media Sharing using DMA-2500 (2) VMG1312-B Series User’s Guide...
Page 60: Using The Print Server Feature
Click Start > Settings, then right click on Printers and select Open. Tutorial: Open Printers Window The Printers folder opens up. First you need to open up the properties windows for the printer you want to configure a TCP/IP port. Locate your printer. VMG1312-B Series User’s Guide...
Page 61 Right click on your printer and select Properties. Tutorial: Open Printer Properties Select the Ports tab and click Add Port... Tutorial: Printer Properties Window A Printer Ports window appears. Select Standard TCP/IP Port and click New Port... Tutorial: Add a Port Window VMG1312-B Series User’s Guide...
Page 62 Name field updates automatically to reflect the IP address of the port. Click Next. Note: The computer from which you are configuring the TCP/IP printer port must be on the same LAN in order to use the printer sharing function. Tutorial: Enter IP Address of the Device VMG1312-B Series User’s Guide...
Page 63 Tutorial: Custom Port Settings Confirm the IP address of the Device in the IP Address field. 10 Select Raw under Protocol. 11 The Port Number is automatically configured as 9100. Click OK. Tutorial: Custom Port Settings VMG1312-B Series User’s Guide...
Page 64 13 Repeat steps 1 to 12 to add this printer to other computers on your network. Add a New Printer Using Windows This example shows how to connect a printer to your Device using the Windows XP Professional operating system. Some menu items may look different on your operating system. VMG1312-B Series User’s Guide...
Page 65 Click Start > Control Panel > Printers and Faxes to open the Printers and Faxes screen. Click Add a Printer. Tutorial: Printers Folder The Add Printer Wizard screen displays. Click Next. Tutorial: Add Printer Wizard: Welcome VMG1312-B Series User’s Guide...
Page 66 Select Local printer attached to this computer and click Next. Tutorial: Add Printer Wizard: Local or Network Printer Select Create a new port and Standard TCP/IP Port. Click Next. Tutorial: Add Printer Wizard: Select the Printer Port VMG1312-B Series User’s Guide...
Page 67 Name field updates automatically to reflect the IP address of the port. Click Next. Note: The computer from which you are configuring the TCP/IP printer port must be on the same LAN in order to use the printer sharing function. Tutorial: Enter IP Address of the Device VMG1312-B Series User’s Guide...
Page 68 Confirm the IP address of the Device in the Printer Name or IP Address field. Select Raw under Protocol. 10 The Port Number is automatically configured as 9100. Click OK to go back to the previous screen and click Next. Tutorial: Custom Port Settings VMG1312-B Series User’s Guide...
Page 69 14 If your printer is not displayed in the list of Printers, you can insert the printer driver installation CD/disk or download the driver file to your computer, click Have Disk… and install the new printer driver. 15 Click Next to continue. Tutorial: Add Printer Wizard: Printer Driver VMG1312-B Series User’s Guide...
Page 70 Otherwise, select Replace existing driver to replace it with the new driver you selected in the previous screen and click Next. Tutorial: Add Printer Wizard: Use Existing Driver 17 Type a name to identify the printer and then click Next to continue. Tutorial: Add Printer Wizard: Name Your Printer VMG1312-B Series User’s Guide...
Page 71 19 Select Yes and then click the Next button if you want to print a test page. A pop-up screen displays to ask if the test page printed correctly. Otherwise select No and then click Next to continue. Tutorial: Add Printer Wizard: Print Test Page VMG1312-B Series User’s Guide...
Page 72 If the Print Center icon is not in the Macintosh Dock, proceed to the next step. On your desktop, double-click the Macintosh HD icon to open the Macintosh HD window. Tutorial: Macintosh HD Double-click the Applications folder. Tutorial: Macintosh HD folder VMG1312-B Series User’s Guide...
Page 73 Set up your printer in the Printer List configuration screen. Select IP Printing from the drop- down list box. In the Printer’s Address field, type the IP address of your Device. Deselect the Use default queue on server check box. 10 Type LP1 in the Queue Name field. VMG1312-B Series User’s Guide...
Page 74 13 The Name LP1 on 192.168.1.1 displays in the Printer List field. The default printer Name displays in bold type. Tutorial: Print Server Your Macintosh print server driver setup is complete. You can now use the Device’s print server to print from a Macintosh computer. VMG1312-B Series User’s Guide...
Page 75: Technical Reference
Technical Reference...
Page 77: Network Map And Status Screens
If you prefer to view the status in a list, click List View in the Viewing Mode selection box. You can configure how often you want the Device to update this screen in Refresh Interval. Figure 14 Network Map: Icon Mode Figure 15 Network Map: List Mode VMG1312-B Series User’s Guide...
Page 78: The Status Screen
Each field is described in the following table. Table 5 Status Screen LABEL DESCRIPTION Refresh Interval Select how often you want the Device to update this screen. Device Information Host Name This field displays the Device system name. It is used for identification. VMG1312-B Series User’s Guide...
Page 79 (Maintenance > Reboot), or when you reset it. Current This field displays the current date and time in the Device. You can change this in Date/Time Maintenance> Time Setting. System Resource VMG1312-B Series User’s Guide...
Page 80 If memory usage does get close to 100%, the Device is probably becoming unstable, and you should restart the device. See Section 34.2 on page 279, or turn off the device (unplug the power) for a few seconds. VMG1312-B Series User’s Guide...
Page 81: Broadband
• Use the Broadband screen to view, remove or add a WAN interface. You can also configure the WAN settings on the Device for Internet access (Section 6.2 on page 84). • Use the 3G Backup screen to configure 3G WAN connection (Section 6.3 on page 92). VMG1312-B Series User’s Guide...
Page 82: What You Need To Know
If your ISP assigns you a static WAN IP address, they should also assign you the subnet mask and DNS server IP address(es). Asynchronous Transfer Mode (ATM) is a WAN networking technology that provides high-speed data transfer. ATM uses fixed-size packets of information called cells. With ATM, a high QoS (Quality of VMG1312-B Series User’s Guide...
Page 83 IPv6 prefix length specifies how many most significant bits (start from the left) in the address compose the network address. The prefix length is written as “/x” where x is a number. For example, 2001:db8:1a2b:15::1a2f:0/32 means that the first 32 bits (2001:db8) is the subnet prefix. VMG1312-B Series User’s Guide...
Page 84: Before You Begin
This shows whether the Device use the WAN interface of this connection as the system Gateway default gateway. IPv6 This shows whether IPv6 is activated or not for this connection. IPv6 is not available when the connection uses the bridging service. VMG1312-B Series User’s Guide...
Page 85: Add/Edit Internet Connection
The following example screen displays when you select the ADSL over ATM connection type, Routing mode, and PPPoE encapsulation. The screen varies when you select other interface type, encapsulation, and IPv6/IPv4 mode. Figure 20 Routing Mode VMG1312-B Series User’s Guide...
Page 86 PDU to identify the PDUs. The LCC header can be followed by an IEEE 802.1a SubNetwork Attachment Point (SNAP) header. This is available only when you select IPoA in the Encapsulation field. VMG1312-B Series User’s Guide...
Page 87 IP address. Static IP Select this option If the ISP assigned a fixed IP address. Address IP Address Enter the static IP address provided by your ISP. Subnet Enter the subnet mask provided by your ISP. Mask VMG1312-B Series User’s Guide...
Page 88 It can reduce multicast traffic significantly. Apply as Select this option to have the Device use the WAN interface of this connection as the system Default default gateway. Gateway IPv6 DNS Configure the IPv6 DNS server in the following section. Server VMG1312-B Series User’s Guide...
Page 89: Bridge Mode
Click the Add new WAN Interface in the Network Setting > Broadband screen or the Edit icon next to the connection you want to configure. Select Bridge as the encapsulation mode. The screen varies depending on the interface type you select. VMG1312-B Series User’s Guide...
Page 90 Rate Limit Enter the rate limit for the connection. This is the maximum transmission rate allowed for traffic on this connection. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG1312-B Series User’s Guide...
Page 91 EoA supports ENET ENCAP (IPoE), PPPoE and RFC1483/2684 bridging encapsulation methods. PPPoA (PPP over ATM) allows just one PPPoA connection over a PVC. IPoA (IP over ATM) allows just one RFC 1483 routing connection over a PVC. VMG1312-B Series User’s Guide...
Page 92: The 3G Backup Screen
Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. 6.3 The 3G Backup Screen Use this screen to configure your 3G settings. Click Network Setting > Broadband > 3G Backup. VMG1312-B Series User’s Guide...
Page 93 Select this to have the Device ping the particular host name or IP address you typed in this field. 3G Connection Settings Card This field displays the manufacturer and model name of your 3G card if you inserted one in description the Device. Otherwise, it displays N/A. VMG1312-B Series User’s Guide...
Page 94 Select this and specify the amount of time (in hours) that the 3G connection can be used within one month. If you change the value after you configure and enable budget control, the Device resets the statistics. VMG1312-B Series User’s Guide...
Page 95 Enter the interval of how many minutes you want the Device to e-mail you. Enable Log Select this to activate the logging function at the interval you set in this field. Basic Click this to hide the advanced settings of 3G backup. VMG1312-B Series User’s Guide...
Page 96: The Advanced Screen
However, enabling PhyR US can decrease the US line rate. Enabling or disabling PhyR will require the CPE to retrain. For PhyR to function, the DSLAM must also support PhyR and have it enabled. VMG1312-B Series User’s Guide...
Page 97: The 8021X Screen
This shows the Trusted CA used for this authentication. This displays N/A when there is no Trusted CA assigned. Apply Click Apply to save your changes back to the Device. Cancel Click Cancel to return to the previous configuration. VMG1312-B Series User’s Guide...
Page 98: Edit 802.1X Settings
Security > Certificates > Trusted CA screen. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. 6.6 Technical Reference The following section contains additional technical information about the Device features described in this chapter. VMG1312-B Series User’s Guide...
Page 99 (AAL5). The first method allows multiplexing of multiple protocols over a single ATM virtual circuit (LLC-based multiplexing) and the second method assumes that each protocol is carried over a separate ATM virtual circuit (VC-based multiplexing). Please refer to RFC 1483 for more detailed information. VMG1312-B Series User’s Guide...
Page 100 (up to the MBS) can be sent at the PCR again. If the PCR, SCR or MBS is set to the default of "0", the system will assign a maximum value that correlates to your upstream line rate. VMG1312-B Series User’s Guide...
Page 101 The Unspecified Bit Rate (UBR) ATM traffic class is for bursty data transfers. However, UBR doesn't guarantee any bandwidth and only delivers traffic when the network has spare bandwidth. An example application is background file transfer. VMG1312-B Series User’s Guide...
Page 102 4096 possible VIDs, a VID of 0 is used to identify priority frames and value 4095 (FFF) is reserved, so the maximum possible VLAN configurations are 4,094. TPID User Priority VLAN ID 2 Bytes 3 Bits 1 Bit 12 Bits VMG1312-B Series User’s Guide...
Page 103 IPv6 Prefix and Prefix Length Similar to an IPv4 subnet mask, IPv6 uses an address prefix to represent the network address. An IPv6 prefix length specifies how many most significant bits (start from the left) in the address VMG1312-B Series User’s Guide...
Page 104 Chapter 6 Broadband compose the network address. The prefix length is written as “/x” where x is a number. For example, 2001:db8:1a2b:15::1a2f:0/32 means that the first 32 bits (2001:db8) is the subnet prefix. VMG1312-B Series User’s Guide...
Page 105: Wireless
• Use the Others screen to configure wireless advanced features, such as the RTS/CTS Threshold (Section 7.8 on page 121). • Use the Channel Status screen to scan wireless LAN channel noises and view the results (Section 7.9 on page 123). VMG1312-B Series User’s Guide...
Page 106: What You Need To Know
Device’s SSID, channel or security settings, you will lose your wireless connection when you press Apply to confirm. You must then change the wireless settings of your computer to match the Device’s new settings. VMG1312-B Series User’s Guide...
Page 107 MHz setting in a location where the environment hinders the wireless signal. Select 20MHz if you want to lessen radio interference with other wireless devices in your neighborhood or the wireless clients do not support channel bonding. VMG1312-B Series User’s Guide...
Page 108: No Security
Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. 7.2.1 No Security Select No Security to allow wireless stations to communicate with the access points without any data encryption or authentication. VMG1312-B Series User’s Guide...
Page 109: Basic (Wep Encryption)
RADIUS server. If your wireless devices support nothing stronger than WEP, use the highest encryption level available. Your Device allows you to configure up to four 64-bit or 128-bit WEP keys but only one key can be enabled at any one time. VMG1312-B Series User’s Guide...
Page 110 Click more... to show more fields in this section. Click less to hide them. WEP Encryption Select 64-bits or 128-bits. This dictates the length of the security key that the network is going to use. VMG1312-B Series User’s Guide...
Page 111: More Secure (Wpa(2)-Psk)
WPA-PSK This field appears when you choose WPA-PSK2 as the Security Mode. Compatible Check this field to allow wireless devices using WPA-PSK security mode to connect to your Device. The Device supports WPA-PSK and WPA2-PSK simultaneously. VMG1312-B Series User’s Guide...
Page 112: Wpa(2) Authentication
The following table describes the labels in this screen. Table 19 Wireless > General: More Secure: WPA(2) LABEL DESCRIPTION Security Level Select More Secure to enable WPA(2)-PSK data encryption. Security Mode Choose WPA or WPA2 from the drop-down list box. Authentication Server VMG1312-B Series User’s Guide...
Page 113: The More Ap Screen
This screen allows you to enable and configure multiple Basic Service Sets (BSSs) on the Device. Click Network Setting > Wireless > More AP. The following screen displays. Figure 34 Network Setting > Wireless > More AP VMG1312-B Series User’s Guide...
Page 114: Edit More Ap
Figure 35 More AP: Edit The following table describes the fields in this screen. Table 21 More AP: Edit LABEL DESCRIPTION Wireless Network Setup Wireless You can Enable or Disable the wireless LAN in this field. VMG1312-B Series User’s Guide...
Page 115: Mac Authentication
MAC (Media Access Control) address. The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02. You need to know the MAC addresses of the devices to configure this screen. VMG1312-B Series User’s Guide...
Page 116: The Wps Screen
WPS allows you to quickly set up a wireless network with strong security, without having to configure security settings manually. Set up each WPS connection between two devices. Both devices must support WPS. See Section 7.10.9.3 on page 132 for more information about WPS. VMG1312-B Series User’s Guide...
Page 117 Note: You must also activate WPS on that device within two minutes to have it present its PIN to the Device. Method 3 Use this section to set up a WPS wireless network by entering the PIN of the Device into the client. VMG1312-B Series User’s Guide...
Page 118: The Wmm Screen
Device "wakes up". The Device wakes up periodically to check for incoming data. Note: Note: This works only if the wireless device to which the Device is connected also supports this feature. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG1312-B Series User’s Guide...
Page 119: The Wds Screen
This field is available only when you set operating mode to Access Point. Select Enabled to turn on WDS and enter the peer device’s MAC address manually in the table below. Select Disable to turn off WDS. VMG1312-B Series User’s Guide...
Page 120: Wds Scan
This shows the SSID of the available wireless device within range. BSSID This shows the MAC address of the available wireless device within range. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG1312-B Series User’s Guide...
Page 121: The Others Screen
Delivery Traffic Indication Message (DTIM) is the time period after which broadcast and multicast packets are transmitted to mobile clients in the Power Saving mode. A high DTIM value can cause clients to lose connectivity with the network. This value can be set from 1 to 100. VMG1312-B Series User’s Guide...
Page 122 Section 7.10.7 on page 129 for more information. This field is configurable only when you set 802.11 Mode to 802.11b. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG1312-B Series User’s Guide...
Page 123: The Channel Status Screen
• A bridge is a radio that relays communications between access points and wireless clients, extending a network’s range. Traditionally, a wireless network operates in one of two ways. VMG1312-B Series User’s Guide...
Page 124 Radio Channels In the radio spectrum, there are certain frequency bands allocated for unlicensed, civilian use. For the purposes of wireless networking, these bands are divided into numerous channels. This allows a VMG1312-B Series User’s Guide...
Page 125: Additional Wireless Terms
- but it is not very secure if you use a short key which is very easy to guess - for example, a three-letter word from the dictionary. VMG1312-B Series User’s Guide...
Page 126 Some wireless devices, such as scanners, can detect wireless networks but cannot use wireless networks. These kinds of wireless devices might not have MAC addresses. Hexadecimal characters are 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, A, B, C, D, E, and F. VMG1312-B Series User’s Guide...
Page 127: Signal Problems
Problems with distance occur when the two radios are too far apart. Problems with interference occur when other radio waves interrupt the data signal. Interference may come from other radio transmissions, such as military or air traffic control communications, or from machines that are VMG1312-B Series User’s Guide...
Page 128: Bss
BSSs simultaneously. You can then assign varying QoS priorities and/or security modes to different SSIDs. Wireless devices can use different BSSIDs to associate with the same AP. 7.10.6.1 Notes on Multiple BSSs • A maximum of eight BSSs are allowed on one AP simultaneously. VMG1312-B Series User’s Guide...
Page 129: Preamble Type
AP 2 7.10.9 WiFi Protected Setup (WPS) Your Device supports WiFi Protected Setup (WPS), which is an easy way to set up a secure wireless network. WPS is an industry standard specification, defined by the WiFi Alliance. VMG1312-B Series User’s Guide...
Page 130 Take the following steps to set up a WPS connection between an access point or wireless router (referred to here as the AP) and a client device using the PIN method. VMG1312-B Series User’s Guide...
Page 131 On a computer connected to the wireless client, try to connect to the Internet. If you can connect, WPS was successful. If you cannot connect, check the list of associated wireless clients in the AP’s configuration utility. If you see the wireless client in the list, WPS was successful. VMG1312-B Series User’s Guide...
Page 132 WPA-PSK or WPA2-PSK pre-shared key to the enrollee. Whether WPA-PSK or WPA2-PSK is used depends on the standards supported by the devices. If the registrar is already part of a network, it sends the existing information. If not, it generates the SSID and WPA(2)-PSK randomly. VMG1312-B Series User’s Guide...
Page 133 This section shows how security settings are distributed in an example WPS setup. The following figure shows an example network. In step 1, both AP1 and Client 1 are unconfigured. When WPS is activated on both, they perform the handshake. In this example, AP1 VMG1312-B Series User’s Guide...
Page 134 (it already has security information for the network). AP1 supplies the existing security information to Client 2. Figure 49 WPS: Example Network Step 2 REGISTRAR EXISTING CONNECTION CLIENT 1 ENROLLEE CLIENT 2 VMG1312-B Series User’s Guide...
Page 135 (if the device supports this feature). Then, you can enter the key into the non-WPS device and join the network as normal (the non-WPS device must also support WPA-PSK or WPA2-PSK). VMG1312-B Series User’s Guide...
Page 136 Check the MAC addresses of your wireless clients (usually printed on a label on the bottom of the device). If there is an unknown MAC address you can remove it or reset the AP. VMG1312-B Series User’s Guide...
Page 137: Home Networking
Set Top Box (STB) devices when they request IP addresses (Section 8.8 on page 154) • Use the LAN VLAN screen to control the VLAN ID and IEEE 802.1p priority tags of traffic sent out through individual LAN ports (Section 8.9 on page 155). VMG1312-B Series User’s Guide...
Page 138: What You Need To Know
UPnP devices and enable exchange of simple product and service descriptions. NAT traversal allows the following: • Dynamic port mapping • Learning public IP addresses VMG1312-B Series User’s Guide...
Page 139: Before You Begin
Enter the IP subnet mask into the IP Subnet Mask field. Unless instructed otherwise it is best to leave this alone, the configurator will automatically compute a subnet mask based upon the IP address you entered. VMG1312-B Series User’s Guide...
Page 140 Select Enable to have the Device act as a DHCP server or DHCP relay agent. Select Disable to stop the DHCP server on the Device. Select DHCP Relay to have the Device forward DHCP request to the DHCP server. VMG1312-B Series User’s Guide...
Page 141 Select Enable MLD Snooping to activate MLD Snooping on the Device. This allows the Device to check MLD packets passing through it and learn the multicast group membership. It helps reduce multicast traffic. VMG1312-B Series User’s Guide...
Page 142: The Static Dhcp Screen
This table allows you to assign IP addresses on the LAN to specific individual computers based on their MAC Addresses. Every Ethernet device has a unique MAC (Media Access Control) address. The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02. VMG1312-B Series User’s Guide...
Page 143 Select this to activate the connection between the client and the Device. Group Name Select the interface group name for which you want to configure static DHCP settings. Chapter 13 on page 203 for how to create a new interface group. VMG1312-B Series User’s Guide...
Page 144: The Upnp Screen
Device by using NAT traversal. UPnP applications automatically reserve a NAT forwarding port in order to communicate with another UPnP enabled device; this eliminates the need to manually configure port forwarding for the UPnP enabled application. VMG1312-B Series User’s Guide...
Page 145: Installing Upnp In Windows Example
Follow the steps below to install the UPnP in Windows Me. Click Start and Control Panel. Double-click Add/Remove Programs. Click on the Windows Setup tab and select Communication in the Components selection box. Click Details. Add/Remove Programs: Windows Setup: Communication VMG1312-B Series User’s Guide...
Page 146 Follow the steps below to install the UPnP in Windows XP. Click Start and Control Panel. Double-click Network Connections. In the Network Connections window, click Advanced in the main menu and select Optional Networking Components …. Network Connections VMG1312-B Series User’s Guide...
Page 147: Using Upnp In Windows Xp Example
Next. 8.6 Using UPnP in Windows XP Example This section shows you how to use the UPnP feature in Windows XP. You must already have UPnP installed in Windows XP and UPnP activated on the Device. VMG1312-B Series User’s Guide...
Page 148 Click Start and Control Panel. Double-click Network Connections. An icon displays under Internet Gateway. Right-click the icon and select Properties. Network Connections In the Internet Connection Properties window, click Settings to see the port mappings there were automatically created. Internet Connection Properties VMG1312-B Series User’s Guide...
Page 149 When the UPnP-enabled device is disconnected from your computer, all port mappings will be deleted automatically. Select Show icon in notification area when connected option and click OK. An icon displays in the system tray. System Tray Icon VMG1312-B Series User’s Guide...
Page 150 Device first. This comes helpful if you do not know the IP address of the Device. Follow the steps below to access the web configurator. Click Start and then Control Panel. Double-click Network Connections. VMG1312-B Series User’s Guide...
Page 151 Network Connections An icon with the description for each UPnP-enabled device displays under Local Network. Right-click on the icon for your Device and select Invoke. The web configurator login screen displays. Network Connections: My Network Places VMG1312-B Series User’s Guide...
Page 152 Chapter 8 Home Networking Right-click on the icon for your Device and select Properties. A properties window displays with basic information about the Device. Network Connections: My Network Places: Properties: Example VMG1312-B Series User’s Guide...
Page 153: The Additional Subnet Screen
Select the checkbox to enable the Public LAN feature. Your ISP must support Public LAN and Static IP. IP Address Enter the public IP address provided by your ISP. IP Subnet Mask Enter the public IP subnet mask provided by your ISP. VMG1312-B Series User’s Guide...
Page 154: The Stb Vendor Id Screen
Table 35 Network Setting > Home Networking > STB Vendor ID LABEL DESCRIPTION Vendor ID 1 ~ Enter the STB’s vendor ID. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG1312-B Series User’s Guide...
Page 155: The Lan Vlan Screen
(from 0 to 4094) to use here. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. 8.10 Technical Reference This section provides some technical background information about the topics covered in this chapter. VMG1312-B Series User’s Guide...
Page 156: Lans, Wans And The Device
• The ISP tells you the DNS server addresses, usually in the form of an information sheet, when you sign up. If your ISP gives you DNS server addresses, enter them in the DNS Server fields in the DHCP Setup screen. VMG1312-B Series User’s Guide...
Page 157: Lan Tcp/Ip
However, the Internet Assigned Numbers Authority (IANA) has reserved the following three blocks of IP addresses specifically for private networks: • 10.0.0.0 — 10.255.255.255 • 172.16.0.0 — 172.31.255.255 • 192.168.0.0 — 192.168.255.255 VMG1312-B Series User’s Guide...
Page 158 Note: Regardless of your particular situation, do not create an arbitrary IP address; always follow the guidelines above. For more information on address assignment, please refer to RFC 1597, “Address Allocation for Private Internets” and RFC 1466, “Guidelines for Management of IP Address Space”. VMG1312-B Series User’s Guide...
Page 159: Routing
• Use the Static Route screen to view and set up static routes on the Device (Section 9.2 on page 160). • Use the Policy Forwarding screen to configure policy routing on the Device. (Section 9.3 on page 161). VMG1312-B Series User’s Guide...
Page 160: The Routing Screen
Click the Edit icon to edit the static route on the Device. Click the Delete icon to remove a static route from the Device. A window displays asking you to confirm that you want to delete the route. VMG1312-B Series User’s Guide...
Page 161: Add/Edit Static Route
Policy forwarding allows the Device to override the default routing behavior and alter the packet forwarding based on the policy defined by the network administrator. Policy-based routing is applied to outgoing packets, prior to the normal routing. VMG1312-B Series User’s Guide...
Page 162 This is the WAN interface through which the traffic is routed. Modify Click the Edit icon to edit this policy. Click the Delete icon to remove a policy from the Device. A window displays asking you to confirm that you want to delete the policy. VMG1312-B Series User’s Guide...
Page 163: Add/Edit Policy Forwarding
Select a WAN interface through which the traffic is sent. You must have the WAN interface(s) already configured in the Broadband screens. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG1312-B Series User’s Guide...
Page 164 Chapter 9 Routing VMG1312-B Series User’s Guide...
Page 165: Quality Of Service (Qos)
170). • The Policer Setup screen lets you add, edit or delete QoS policers (Section 10.5 on page 170). • The Monitor screen lets you view the Device's QoS-related packet statistics (Section 10.7 on page 177). VMG1312-B Series User’s Guide...
Page 166: What You Need To Know
(or queues). Your Device uses the Token Bucket algorithm to allow a certain amount of large bursts while keeping a limit at the average rate. Traffic Rate Traffic Rate Time Time (Before Traffic Shaping) (After Traffic Shaping) VMG1312-B Series User’s Guide...
Page 167: The Quality Of Service General Screen
Click Network Setting > QoS > General to open the screen as shown next. Use this screen to enable or disable QoS and set the upstream bandwidth. See Section 10.1 on page 165 for more information. Figure 64 Network Settings > QoS > General VMG1312-B Series User’s Guide...
Page 168: The Queue Setup Screen
Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. 10.4 The Queue Setup Screen Click Network Setting > QoS > Queue Setup to open the screen as shown next. VMG1312-B Series User’s Guide...
Page 169 This shows the maximum transmission rate allowed for traffic on this queue. Modify Click the Edit icon to edit the queue. Click the Delete icon to delete an existing queue. Note that subsequent rules move up by one when you take this action. VMG1312-B Series User’s Guide...
Page 170: Adding A Qos Queue
For example, you can configure a classifier to select traffic from the same protocol port (such as Telnet) to form a flow. VMG1312-B Series User’s Guide...
Page 171 This is the name of the queue in which traffic of this classifier is put. Modify Click the Edit icon to edit the classifier. Click the Delete icon to delete an existing classifier. Note that subsequent rules move up by one when you take this action. VMG1312-B Series User’s Guide...
Page 172: Add/Edit Qos Class
Chapter 10 Quality of Service (QoS) 10.5.1 Add/Edit QoS Class Click Add new Classifier in the Class Setup screen or the Edit icon next to a classifier to open the following screen. Figure 68 Class Setup: Add/Edit VMG1312-B Series User’s Guide...
Page 173 For example, if you set the MAC address to 00:13:49:00:00:00 and the mask to ff:ff:ff:00:00:00, a packet with a MAC address of 00:13:49:12:34:56 matches this criteria. Exclude Select this option to exclude the packets that match the specified criteria from this classifier. Others VMG1312-B Series User’s Guide...
Page 174 If you select Unchange, the Device keep the VLAN ID in the packets. Forward to Select a WAN interface through which traffic of this class will be forwarded out. If you select Interface Unchange, the Device forward traffic of this class according to the default routing table. VMG1312-B Series User’s Guide...
Page 175: The Qos Policer Setup Screen
QoS classes. Modify Click the Edit icon to edit the policer. Click the Delete icon to delete an existing policer. Note that subsequent rules move up by one when you take this action. VMG1312-B Series User’s Guide...
Page 176: Add/Edit A Qos Policer
Action • Drop: Discard the packets. • DSCP Mark: Change the DSCP mark value of the packets. Enter the DSCP mark value to use. The packets may be dropped if there is congestion on the network. VMG1312-B Series User’s Guide...
Page 177: The Qos Monitor Screen
This is the index number of the entry. Name This shows the name of the queue. Pass Rate This shows how many packets assigned to this queue are transmitted successfully. Drop Rate This shows how many packets assigned to this queue are dropped. VMG1312-B Series User’s Guide...
Page 178: Technical Reference
DiffServ defines a new Differentiated Services (DS) field to replace the Type of Service (TOS) field in the IP header. The DS field contains a 2-bit unused field and a 6-bit DSCP field which can define up to 64 service levels. The following figure illustrates the DS field. VMG1312-B Series User’s Guide...
Page 179 LAYER 2 LAYER 3 PRIORITY IEEE 802.1P USER QUEUE PRIORITY TOS (IP IP PACKET DSCP (ETHERNET PRECEDENCE) LENGTH (BYTE) PRIORITY) 000000 000000 >1100 001110 250~1100 001100 001010 001000 010110 010100 010010 010000 011110 <250 011100 011010 011000 VMG1312-B Series User’s Guide...
Page 180 The Single Rate Three Color Marker (srTCM, defined in RFC 2697) is a type of traffic policing that identifies packets by comparing them to one user-defined rate, the Committed Information Rate (CIR), and two burst sizes: the Committed Burst Size (CBS) and Excess Burst Size (EBS). VMG1312-B Series User’s Guide...
Page 181 • If the PBS bucket has enough tokens, the Device checks the CBS bucket. The packet is marked green and can be transmitted if the number of tokens in the CBS bucket is equal to or greater than the size of the packet (in bytes). Otherwise, the packet is marked yellow. VMG1312-B Series User’s Guide...
Page 182 Chapter 10 Quality of Service (QoS) VMG1312-B Series User’s Guide...
Page 183: Network Address Translation (Nat)
WAN side. In the simplest form, NAT changes the source IP address in a packet received from a subscriber (the inside local address) to another (the inside global address) before forwarding the packet to the VMG1312-B Series User’s Guide...
Page 184: The Port Forwarding Screen
Let's say you want to assign ports 21-25 to one FTP, Telnet and SMTP server (A in the example), port 80 to another (B in the example) and assign a default server IP address of 192.168.1.35 to a VMG1312-B Series User’s Guide...
Page 185 This is the last external port number that identifies a service. Translation This is the first internal port number that identifies a service. Start Port Translation End This is the last internal port number that identifies a service. Port VMG1312-B Series User’s Guide...
Page 186: Add/Edit Port Forwarding
To forward only one port, enter the port number again in the End Port field. To forward a series of ports, enter the start port number here and the end port number in the End Port field. VMG1312-B Series User’s Guide...
Page 187: The Applications Screen
WAN Interface This field shows the WAN interface through which the service is forwarded. Server IP This field displays the destination IP address for the service. Address Modify Click the Delete icon to delete the rule. VMG1312-B Series User’s Guide...
Page 188: Add New Application
LAN can use the service in the same manner. This way you do not need to configure a new IP address each time you want a different LAN computer to use the application. VMG1312-B Series User’s Guide...
Page 189 IP address of the LAN computer that sent the traffic to a server on the WAN. This is the first port number that identifies a service. Trigger End This is the last port number that identifies a service. Port Trigger Proto. This is the trigger transport layer protocol. VMG1312-B Series User’s Guide...
Page 190: Add/Edit Port Triggering Rule
Type a port number or the starting port number in a range of port numbers. Trigger End Type a port number or the ending port number in a range of port numbers. Port Trigger Protocol Select the transport layer protocol from TCP, UDP, or TCP/UDP. VMG1312-B Series User’s Guide...
Page 191: The Dmz Screen
Note: If you do not assign a Default Server Address, the Device discards all packets received for ports that are not specified in the NAT Port Forwarding screen. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG1312-B Series User’s Guide...
Page 192: The Alg Screen
When a rule matches the current packet, the Device takes the corresponding action and the remaining rules are ignored. Click Network Setting > NAT > Address Mapping to display the following screen. Figure 82 Network Setting > NAT > Address Mapping VMG1312-B Series User’s Guide...
Page 193: Add/Edit Address Mapping Rule
11.7.1 Add/Edit Address Mapping Rule To add or edit an address mapping rule, click Add new rule or the rule’s edit icon in the Address Mapping screen to display the screen shown next. Figure 83 Address Mapping: Add/Edit VMG1312-B Series User’s Guide...
Page 194: Technical Reference
IP address of a host when the packet is in the local network, while the global address refers to the IP address of the host when the same packet is traveling in the WAN side. VMG1312-B Series User’s Guide...
Page 195: What Nat Does
With no servers defined, your Device filters out all incoming inquiries, thus preventing intruders from probing your network. For more information on IP address translation, refer to RFC 1631, The IP Network Address Translator (NAT). VMG1312-B Series User’s Guide...
Page 196: How Nat Works
NAT Table Inside Local Inside Global IP Address IP Address 192.168.1.10 IGA 1 192.168.1.13 192.168.1.11 IGA 2 192.168.1.12 IGA 3 192.168.1.13 IGA 4 192.168.1.12 192.168.1.10 IGA1 Inside Local Inside Global Address (ILA) Address (IGA) 192.168.1.11 192.168.1.10 VMG1312-B Series User’s Guide...
Page 197: Nat Application
SMTP (Simple Mail Transfer Protocol) DNS (Domain Name System) Finger HTTP (Hyper Text Transfer protocol or WWW, Web) POP3 (Post Office Protocol) NNTP (Network News Transport Protocol) SNMP (Simple Network Management Protocol) SNMP trap PPTP (Point-to-Point Tunneling Protocol) 1723 VMG1312-B Series User’s Guide...
Page 198 (C in the example). You assign the LAN IP addresses and the ISP assigns the WAN IP address. The NAT network appears as a single host on the Internet. Figure 86 Multiple Servers Behind NAT Example A=192.168.1.33 192.168.1.1 B=192.168.1.34 IP address assigned by ISP C=192.168.1.35 D=192.168.1.36 VMG1312-B Series User’s Guide...
Page 199: Dynamic Dns Setup
• Use the DNS Entry screen to view, configure, or remove DNS routes (Section 12.2 on page 200). • Use the Dynamic DNS screen to enable DDNS and configure the DDNS settings on the Device (Section 12.3 on page 201). VMG1312-B Series User’s Guide...
Page 200: What You Need To Know
This indicates the host name or domain name. IP Address This indicates the IP address assigned to this computer. Modify Click the Edit icon to edit the rule. Click the Delete icon to delete an existing rule. VMG1312-B Series User’s Guide...
Page 201: Add/Edit Dns Entry
Click Cancel to exit this screen without saving. 12.3 The Dynamic DNS Screen Use this screen to change your Device’s DDNS. Click Network Setting > DNS > Dynamic DNS. The screen appears as shown. Figure 89 Network Setting > DNS > Dynamic DNS VMG1312-B Series User’s Guide...
Page 202 If you select TZO in the Service Provider field, enter the password you used to register for this service. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG1312-B Series User’s Guide...
Page 203: Interface Group
If you set the Device to assign IP addresses based on the client’s DHCP Vendor ID option information, you must enable DHCP server and configure LAN TCP/IP settings for both the default and user-defined groups. See Chapter 8 on page for more information. VMG1312-B Series User’s Guide...
Page 204: Interface Group Configuration
Click this button to create a new group. 13.2.1 Interface Group Configuration Click the Add New Interface Group button in the Interface Group screen to open the following screen. Use this screen to create a new interface group. VMG1312-B Series User’s Guide...
Page 205 This shows the index number of the rule. Filter Criteria This shows the filtering criteria. The LAN interface on which the matched traffic is received will belong to this group automatically. WildCard This shows if wildcard on DHCP option 60 is enabled. Support VMG1312-B Series User’s Guide...
Page 206: Interface Grouping Criteria
DHCP option 60. DHCP option 60 option DHCP Option Select this and enter the device identity of the matched traffic. IAID Enter the Identity Association Identifier (IAID) of the device, for example, the WAN connection index number. VMG1312-B Series User’s Guide...
Page 207 Enter the model name of the device. Name Serial Enter the serial number of the device. Number Apply Click Apply to save your changes back to the Device. Cancel Click Cancel to exit this screen without saving. VMG1312-B Series User’s Guide...
Page 208 Chapter 13 Interface Group VMG1312-B Series User’s Guide...
Page 209: Usb Service
Device supports File Allocation Table (FAT) and FAT32. Common Internet File System The Device uses Common Internet File System (CIFS) protocol for its file sharing functions. CIFS compatible computers can access the USB file storage devices connected to the Device. CIFS VMG1312-B Series User’s Guide...
Page 210: The File Sharing Screen
• Microsoft Windows 95, Windows 98 SE (Second Edition), Windows Me, Windows NT 4.0, Windows 2000, Windows XP or Macintosh OS X. 14.2 The File Sharing Screen You can share files on a USB memory stick or hard drive connected to your Device with users on your network. VMG1312-B Series User’s Guide...
Page 211: Before You Begin
Note: If your USB device cannot be detected by the Device, see the troubleshooting for suggestions. Use this screen to set up file sharing using the Device. To access this screen, click Network Setting > USB Service > File Sharing. Figure 95 Network Setting > USB Service > File Sharing VMG1312-B Series User’s Guide...
Page 212: The Media Server Screen
To change your Device’s media server settings, click Network Setting > USB Service > Media Server. The screen appears as shown. Figure 96 Network Setting > USB Service > Media Server VMG1312-B Series User’s Guide...
Page 213: The Printer Server Screen
Note: Your printer’s installation instructions may ask that you connect the printer to your computer. Connect your printer to the Device instead. Use this screen to enable or disable sharing of a USB printer via your Device. VMG1312-B Series User’s Guide...
Page 214 Printer Name Enter the name of the printer. Make and Enter the manufacturer and model number of the printer. model Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG1312-B Series User’s Guide...
Page 215: Firewall
• Use the Access Control screen to view and configure incoming/outgoing filtering rules (Section 15.4 on page 219). • Use the DoS screen to activate protection against Denial of Service (DoS) attacks (.Section 15.5 on page 222). VMG1312-B Series User’s Guide...
Page 216: What You Need To Know
Stateful Packet Inspection (SPI) tracks each connection crossing the firewall and makes sure it is valid. Filtering decisions are based not only on rules but also context. For example, traffic from the WAN may only be allowed to cross the firewall in response to a request from the LAN. VMG1312-B Series User’s Guide...
Page 217: The Firewall Screen
You can configure customized services and port numbers in the Service screen. For a comprehensive list of port numbers and services, visit the IANA (Internet Assigned Number Authority) website. See Appendix F on page 357 for some examples. VMG1312-B Series User’s Guide...
Page 218: Add/Edit A Service
Use this screen to add a customized service rule that you can use in the firewall’s ACL rule configuration. Click Add new service entry or the edit icon next to an existing service rule in the Service screen to display the following screen. Figure 102 Service: Add/Edit VMG1312-B Series User’s Guide...
Page 219: The Access Control Screen
15.4 The Access Control Screen Click Security > Firewall > Access Control to display the following screen. This screen displays a list of the configured incoming or outgoing filtering rules. Figure 103 Security > Firewall > Access Control VMG1312-B Series User’s Guide...
Page 220 Click the Delete icon to delete an existing rule. Note that subsequent rules move up by one when you take this action. Click the Move To icon to change the order of the rule. Enter the number in the # field. VMG1312-B Series User’s Guide...
Page 221: Add/Edit An Acl Rule
Select Select the destination device to which the ACL rule applies. If you select Specific IP Destination Address, enter the destiniation IP address in the field below. Device Destination IP Enter the destination IP address. Address VMG1312-B Series User’s Guide...
Page 222: The Dos Screen
Internet access becomes unavailable. Use the DoS screen to activate protection against DoS attacks. Click Security > Firewall > DoS to display the following screen. Figure 105 Security > Firewall > DoS VMG1312-B Series User’s Guide...
Page 223 DoS Protection Select Enable to enable protection against DoS attacks. Blocking Deny Ping Select Enable to block ping request packets. Response Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG1312-B Series User’s Guide...
Page 224 Chapter 15 Firewall VMG1312-B Series User’s Guide...
Page 225: Mac Filter
16.2 The MAC Filter Screen Use this screen to allow wireless and LAN clients access to the Device. Click Security > MAC Filter. The screen appears as shown. Figure 106 Security > MAC Filter VMG1312-B Series User’s Guide...
Page 226 Device in these address fields. Enter the MAC addresses in a valid MAC address format, that is, six hexadecimal character pairs, for example, 12:34:56:78:9a:bc. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG1312-B Series User’s Guide...
Page 227: Parental Control
A yellow bulb signifies that this rule is active. A gray bulb signifies that this rule is not active. PCP Name This shows the name of the rule. Home Network This shows the MAC address of the LAN user’s computer to which this rule applies. User (MAC) VMG1312-B Series User’s Guide...
Page 228: Add/Edit A Parental Control Rule
Use this screen to configure a restricted access schedule and/or URL filtering settings to block the users on your network from accessing certain web sites. Figure 108 Parental Control Rule: Add/Edit VMG1312-B Series User’s Guide...
Page 229 Click Add to show a screen to enter the URL of web site or URL keyword to which the Device URL Keyword blocks access. Click Delete to remove it. Apply Click this button to save your settings back to the Device. Cancel Click Cancel to restore your previously saved settings. VMG1312-B Series User’s Guide...
Page 230 Chapter 17 Parental Control VMG1312-B Series User’s Guide...
Page 231: Scheduler Rules
This shows the description of this rule. Modify Click the Edit icon to edit the schedule. Click the Delete icon to delete a scheduler rule. Note: You cannot delete a scheduler rule once it is applied to a certain feature. VMG1312-B Series User’s Guide...
Page 232: Add/Edit A Schedule
Enter the time period of each day, in 24-hour format, during which parental control will be Range enforced. Description Enter a description for this scheduler rule. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG1312-B Series User’s Guide...
Page 233: Certificates
You can use the Device to generate certification requests that contain identifying information and public keys and then send the certification requests to a certification authority. VMG1312-B Series User’s Guide...
Page 234: The Local Certificates Screen
For a certification request, click Load Signed to import the signed certificate. Click the Remove icon to delete the certificate (or certification request). You cannot delete a certificate that one or more features is configured to use. VMG1312-B Series User’s Guide...
Page 235: Create Certificate Request
After you click Apply, the following screen displays to notify you that you need to get the certificate request signed by a Certificate Authority. If you already have, click Load_Signed to import the signed certificate into the Device. Otherwise click Back to return to the Local Certificates screen. VMG1312-B Series User’s Guide...
Page 236: Load Signed Certificate
Certificates screen click the certificate request’s Load Signed icon to import the signed certificate into the Device. Note: You must remove any spaces from the certificate’s filename before you can import Figure 114 Load Signed Certificate VMG1312-B Series User’s Guide...
Page 237: The Trusted Ca Screen
Click the View icon to open a screen with an in-depth list of information about the certificate (or certification request). Click the Remove button to delete the certificate (or certification request). You cannot delete a certificate that one or more features is configured to use. VMG1312-B Series User’s Guide...
Page 238: View Trusted Ca Certificate
You can copy and paste the certificate into an e-mail to send to friends or colleagues or you can copy and paste the certificate into a text editor and save the file on a management computer for later distribution (via floppy disk for example). Back Click Back to return to the previous screen. VMG1312-B Series User’s Guide...
Page 239: Import Trusted Ca Certificate
CA will be displayed in the Network Setting > Broadband > 802.1x: Authentication Edit screen. Certificate Copy and paste the certificate into the text box to store it on the Device. Click OK to save your changes. Cancel Click Cancel to exit this screen without saving. VMG1312-B Series User’s Guide...
Page 240 Chapter 19 Certificates VMG1312-B Series User’s Guide...
Page 241: Log
SEVERITY Emergency: The system is unusable. Alert: Action must be taken immediately. Critical: The system condition is critical. Error: There is an error condition on the system. Warning: There is a warning condition on the system. VMG1312-B Series User’s Guide...
Page 242: The System Log Screen
Level This field displays the severity level of the logs that the device is to send to this syslog server. Messages This field states the reason for the log. VMG1312-B Series User’s Guide...
Page 243: The Security Log Screen
Level This field displays the severity level of the logs that the device is to send to this syslog server. Messages This field states the reason for the log. VMG1312-B Series User’s Guide...
Page 244 Chapter 20 Log VMG1312-B Series User’s Guide...
Page 245: Traffic Status
Click System Monitor > Traffic Status to open the WAN screen. The figure in this screen shows the number of bytes received and sent on the Device. Figure 120 System Monitor > Traffic Status > WAN VMG1312-B Series User’s Guide...
Page 246 Data This indicates the number of received packets on this interface. Error This indicates the number of frames with errors received on this interface. Drop This indicates the number of received packets dropped on this interface. VMG1312-B Series User’s Guide...
Page 247: The Lan Status Screen
Data This indicates the number of received packets on this interface. Error This indicates the number of frames with errors received on this interface. Drop This indicates the number of received packets dropped on this interface. VMG1312-B Series User’s Guide...
Page 248 Chapter 21 Traffic Status VMG1312-B Series User’s Guide...
Page 249: Arp Table
The following table describes the labels in this screen. Table 94 System Monitor > ARP Table LABEL DESCRIPTION This is the ARP table entry number. IP Address This is the learned IP address of a device connected to a port. VMG1312-B Series User’s Guide...
Page 250 This is the MAC address of the device with the listed IP address. Device This is the type of interface used by the device. You can click on the device type to go to its configuration screen. VMG1312-B Series User’s Guide...
Page 251: Routing Table
M-Modified (redirect): The route is modified from a routing daemon or redirect. Metric The metric represents the "cost of transmission". A router determines the best route for transmission by choosing a path with the lowest "cost". The smaller the number, the lower the "cost". VMG1312-B Series User’s Guide...
Page 252 This indicates the name of the interface through which the route is forwarded. br0 indicates the LAN interface. ptm0 indicates the WAN interface using IPoE or in bridge mode. ppp0 indicates the WAN interface using PPPoE. VMG1312-B Series User’s Guide...
Page 253: Igmp Status
EXCLUDE means that the IP addresses in the Source List are not allowed to receive the multicast group’s traffic but other IP addresses can. Source List This is the list of IP addresses that are allowed or not allowed to receive the multicast group’s traffic depending on the filter mode. VMG1312-B Series User’s Guide...
Page 254 Chapter 24 IGMP Status VMG1312-B Series User’s Guide...
Page 255: Xdsl Statistics
HAPTER xDSL Statistics 25.1 The xDSL Statistics Screen Use this screen to view detailed DSL statistics. Click System Monitor > xDSL Statistics to open the following screen. Figure 125 System Monitor > xDSL Statistics VMG1312-B Series User’s Guide...
Page 256 Attainable Net These are the highest theoretically possible transfer rates at which the port could send and Data Rate receive payload data without transport layer protocol headers and traffic. xDSL Counters VMG1312-B Series User’s Guide...
Page 257 30% or more errored blocks or at least one defect. This is a subset of ES. This is the number of UnAvailable Seconds. This is the number of Loss Of Signal seconds. This is the number of Loss Of Frame seconds. This is the number of Loss of Margin seconds. VMG1312-B Series User’s Guide...
Page 258 Chapter 25 xDSL Statistics VMG1312-B Series User’s Guide...
Page 259: User Account
(*) for each character you type. After you change the password, use the new password to access the Device. Retype to Type the new password again for confirmation. confirm Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG1312-B Series User’s Guide...
Page 260 Chapter 26 User Account VMG1312-B Series User’s Guide...
Page 261: Remote Management
27.2 The Remote MGMT Screen Use this screen to configure through which interface(s) users can use which service(s) to manage the Device. Click Maintenance > Remote MGMT to open the following screen. Figure 127 Maintenance > Remote MGMT VMG1312-B Series User’s Guide...
Page 262 Select a certificate the HTTPS server (the Device) uses to authenticate itself to the HTTPS Certificate client. You must have certificates already configured in the Certificates screen. Apply Click Apply to save your changes back to the Device. Cancel Click Cancel to restore your previously saved settings. VMG1312-B Series User’s Guide...
Page 263: Client
ACS and specify the ACS IP address or domain name and username and password. Click Maintenance > TR-069 Client to open the following screen. Use this screen to configure your Device to be managed by an ACS. Figure 128 Maintenance > TR-069 Client VMG1312-B Series User’s Guide...
Page 264 You can choose a local certificate used by TR-069 client. The local certificate should be used by TR-069 imported in the Security > Certificates > Local Certificates screen. client Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG1312-B Series User’s Guide...
Page 265: Chapter 29 Tr-064
The following table describes the fields in this screen. Table 101 Maintenance > TR-064 LABEL DESCRIPTION State Select Enable to activate management via TR-064 on the LAN. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG1312-B Series User’s Guide...
Page 266 Chapter 29 TR-064 VMG1312-B Series User’s Guide...
Page 267: Time Settings
To change your Device’s time and date, click Maintenance > Time. The screen appears as shown. Use this screen to configure the Device’s time based on your local time zone. Figure 130 Maintenance > Time Setting VMG1312-B Series User’s Guide...
Page 268 October. The time you select in the o'clock field depends on your time zone. In Germany for instance, you would select 2 in the Hour field because Germany's time zone is one hour ahead of GMT or UTC (GMT+1). VMG1312-B Series User’s Guide...
Page 269 Chapter 30 Time Settings Table 102 Maintenance > Time Setting (continued) LABEL DESCRIPTION Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG1312-B Series User’s Guide...
Page 270 Chapter 30 Time Settings VMG1312-B Series User’s Guide...
Page 271: E-Mail Notification
This field displays the password of the sender’s mail account. Email Address This field displays the e-mail address that you want to be in the from/sender line of the e- mail that the Device sends. Remove Click this button to delete the selected entry(ies). VMG1312-B Series User’s Guide...
Page 272: Email Notification Edit
If you activate SSL/TLS authentication, the e-mail address must be able to be authenticated by the mail server as well. Apply Click this button to save your changes and return to the previous screen. Cancel Click this button to begin configuring this screen afresh. VMG1312-B Series User’s Guide...
Page 273: Logs Setting
You can configure where the Device sends logs and which logs and/or immediate alerts the Device records in the Logs Setting screen. 32.2 The Log Settings Screen To change your Device’s log settings, click Maintenance > Logs Setting. The screen appears as shown. Figure 133 Maintenance > Logs Setting VMG1312-B Series User’s Guide...
Page 274: Example E-Mail Log
• You may edit the subject title. • The date format here is Day-Month-Year. • The date format here is Month-Day-Year. The time format is Hour-Minute-Second. VMG1312-B Series User’s Guide...
Page 275 |<1,02> 127|Apr 7 00 |From:192.168.1.131 To:192.168.1.255 |match |forward | 10:05:17 |UDP src port:00520 dest port:00520 |<1,02> 128|Apr 7 00 |From:192.168.1.1 To:192.168.1.255 |match |forward | 10:05:30 |UDP src port:00520 dest port:00520 |<1,02> End of Firewall Log VMG1312-B Series User’s Guide...
Page 276 Chapter 32 Logs Setting VMG1312-B Series User’s Guide...
Page 277: Firmware Upgrade
Click this to find the .bin file you want to upload. Remember that you must decompress compressed (.zip) files before you can upload them. Upload Click this to begin the upload process. This process may take up to two minutes. VMG1312-B Series User’s Guide...
Page 278 After two minutes, log in again and check your new firmware version in the Status screen. If the upload was not successful, the following screen will appear. Click OK to go back to the Firmware Upgrade screen. Figure 138 Error Message VMG1312-B Series User’s Guide...
Page 279: Configuration
The backup configuration file will be useful in case you need to return to your previous settings. Click Backup to save the Device’s current configuration to your computer. VMG1312-B Series User’s Guide...
Page 280 IP address. If the upload was not successful, the following screen will appear. Click OK to go back to the Configuration screen. Figure 141 Configuration Upload Error VMG1312-B Series User’s Guide...
Page 281: The Reboot Screen
System restart allows you to reboot the Device remotely without turning the power off. You may need to do this if the Device hangs, for example. Click Maintenance > Reboot. Click Reboot to have the Device reboot. This does not affect the Device's configuration. Figure 144 Maintenance > Reboot VMG1312-B Series User’s Guide...
Page 282: Diagnostic
If an MEP port does not respond to the source MEP, this may indicate a fault. Administrators can take further action to check and resume services from the fault according to the line connectivity status report. VMG1312-B Series User’s Guide...
Page 283: Ping & Traceroute & Nslookup
Click this button to perform the traceroute function. This determines the path a packet takes to the specified computer. Nslookup Click this button to perform a DNS lookup on the IP address of a computer you enter. VMG1312-B Series User’s Guide...
Page 284 Click this button to have the selected MEP send the LBM (Loop Back Message) to a specified remote end point. Send Linktrace Click this button to have the selected MEP send the LTMs (Link Trace Messages) to a specified remote end point. VMG1312-B Series User’s Guide...
Page 285: Oam Ping Test
Segment loopback tests allow you to verify integrity of a PVC to the nearest neighboring ATM device. End-to-end loopback tests allow you to verify integrity of an end-to-end PVC. Note: The DSLAM to which the Device is connected must also support ATM F4 and/or F5 to use this test. VMG1312-B Series User’s Guide...
Page 286 F4 end-end Press this to perform an OAM F4 end-to-end loopback test. F5 segment Press this to perform an OAM F5 segment loopback test. F5 end-end Press this to perform an OAM F5 end-to-end loopback test. VMG1312-B Series User’s Guide...
Page 287: Chapter 36 Troubleshooting
Make sure you understand the normal behavior of the LED. See Section 1.5 on page Check the hardware connections. Inspect your cables for damage. Contact the vendor to replace any damaged cables. Turn the Device off and on. VMG1312-B Series User’s Guide...
Page 288: Device Access And Login
Make sure your Internet browser does not block pop-up windows and has JavaScripts and Java enabled. See Appendix C on page 325. If it is possible to log in from another interface, check the service control settings for HTTP and HTTPS (Maintenance > Remote MGMT). VMG1312-B Series User’s Guide...
Page 289 I cannot use FTP to upload / download the configuration file. / I cannot use FTP to upload new firmware. See the troubleshooting suggestions for I cannot see or access the Login screen in the web configurator. Ignore the suggestions about your browser. VMG1312-B Series User’s Guide...
Page 290: Internet Access
I cannot access the Internet anymore. I had access to the Internet (with the Device), but my Internet connection is not available anymore. Your session with the Device may have expired. Try logging into the Device again. VMG1312-B Series User’s Guide...
Page 291: Wireless Internet Access
An SSID is a name that uniquely identifies a wireless network. The AP and all the clients within a wireless network must use the same SSID. What wireless security modes does my Device support? Wireless security is vital to your network. It protects communications between wireless stations, access points and the wired network. VMG1312-B Series User’s Guide...
Page 292: Usb Device Connection
Network Places > Local Network. Disconnect the Ethernet cable from the Device’s LAN port or from your computer. Re-connect the Ethernet cable. The Local Area Connection icon for UPnP disappears in the screen. Restart your computer. VMG1312-B Series User’s Guide...
Page 293 Chapter 36 Troubleshooting I cannot open special applications such as white board, file transfer and video when I use the MSN messenger. Wait more than three minutes. Restart the applications. VMG1312-B Series User’s Guide...
Page 294 Chapter 36 Troubleshooting VMG1312-B Series User’s Guide...
Page 295: Appendix A Setting Up Your Computer's Ip Address
IP addresses that place them in the same subnet as the Device’s LAN port. Windows 95/98/Me Click Start, Settings, Control Panel and double-click the Network icon to open the Network window. Figure 149 WIndows 95/98/Me: Network: Configuration VMG1312-B Series User’s Guide...
Page 296 Restart your computer so the changes you made take effect. Configuring In the Network window Configuration tab, select your network adapter's TCP/IP entry and click Properties Click the IP Address tab. • If your IP address is dynamic, select Obtain an IP address automatically. VMG1312-B Series User’s Guide...
Page 297 • If you do not know your DNS information, select Disable DNS. • If you know your DNS information, select Enable DNS and type the information in the fields below (you may not need to fill them all in). Figure 151 Windows 95/98/Me: TCP/IP Properties: DNS Configuration VMG1312-B Series User’s Guide...
Page 298 Select your network adapter. You should see your computer's IP address, subnet mask and default gateway. Windows 2000/NT/XP The following example figures use the default Windows XP GUI theme. Click start (Start in Windows 2000/NT), Settings, Control Panel. Figure 152 Windows XP: Start Menu VMG1312-B Series User’s Guide...
Page 299 In the Control Panel, double-click Network Connections (Network and Dial-up Connections in Windows 2000/NT). Figure 153 Windows XP: Control Panel Right-click Local Area Connection and then click Properties. Figure 154 Windows XP: Control Panel: Network Connections: Properties VMG1312-B Series User’s Guide...
Page 300 • If you have a dynamic IP address click Obtain an IP address automatically. • If you have a static IP address click Use the following IP Address and fill in the IP address, Subnet mask, and Default gateway fields. VMG1312-B Series User’s Guide...
Page 301 (the number of transmission hops), clear the Automatic metric check box and type a metric in Metric. • Click Add. • Repeat the previous three steps for each default gateway you want to add. VMG1312-B Series User’s Guide...
Page 302 • Click Obtain DNS server address automatically if you do not know your DNS server IP address(es). • If you know your DNS server IP address(es), click Use the following DNS server addresses, and type them in the Preferred DNS server and Alternate DNS server fields. VMG1312-B Series User’s Guide...
Page 303 In the Command Prompt window, type "ipconfig" and then press [ENTER]. You can also open Network Connections, right-click a network connection, click Status and then click the Support tab. Windows Vista This section shows screens from Windows Vista Enterprise Version 6.0. VMG1312-B Series User’s Guide...
Page 304 Click the Start icon, Control Panel. Figure 159 Windows Vista: Start Menu In the Control Panel, double-click Network and Internet. Figure 160 Windows Vista: Control Panel Click Network and Sharing Center. Figure 161 Windows Vista: Network And Internet VMG1312-B Series User’s Guide...
Page 305 Figure 162 Windows Vista: Network and Sharing Center Right-click Local Area Connection and then click Properties. Note: During this procedure, click Continue whenever Windows displays a screen saying that it needs your permission to continue. Figure 163 Windows Vista: Network and Sharing Center VMG1312-B Series User’s Guide...
Page 306 • If you have a dynamic IP address click Obtain an IP address automatically. • If you have a static IP address click Use the following IP address and fill in the IP address, Subnet mask, and Default gateway fields. VMG1312-B Series User’s Guide...
Page 307 (the number of transmission hops), clear the Automatic metric check box and type a metric in Metric. • Click Add. • Repeat the previous three steps for each default gateway you want to add. VMG1312-B Series User’s Guide...
Page 308 • Click Obtain DNS server address automatically if you do not know your DNS server IP address(es). • If you know your DNS server IP address(es), click Use the following DNS server addresses, and type them in the Preferred DNS server and Alternate DNS server fields. VMG1312-B Series User’s Guide...
Page 309 Click Start, All Programs, Accessories and then Command Prompt. In the Command Prompt window, type "ipconfig" and then press [ENTER]. You can also open Network Connections, right-click a network connection, click Status and then click the Support tab. VMG1312-B Series User’s Guide...
Page 310 Appendix A Setting up Your Computer’s IP Address Macintosh OS 8/9 Click the Apple menu, Control Panel and double-click TCP/IP to open the TCP/IP Control Panel. Figure 168 Macintosh OS 8/9: Apple Menu VMG1312-B Series User’s Guide...
Page 311 Macintosh OS X Click the Apple menu, and click System Preferences to open the System Preferences window. Figure 170 Macintosh OS X: Apple Menu Click Network in the icon bar. • Select Automatic from the Location list. VMG1312-B Series User’s Guide...
Page 312 • Type the IP address of your Device in the Router address box. Click Apply Now and close the window. Turn on your Device and restart your computer (if prompted). Verifying Settings Check your TCP/IP properties in the Network window. VMG1312-B Series User’s Guide...
Page 313 Follow the steps below to configure your computer IP address using the KDE. Click the Red Hat button (located on the bottom left corner), select System Setting and click Network. Figure 172 Red Hat 9.0: KDE: Network Configuration: Devices VMG1312-B Series User’s Guide...
Page 314 If you know your DNS server IP address(es), click the DNS tab in the Network Configuration screen. Enter the DNS server information in the fields provided. Figure 174 Red Hat 9.0: KDE: Network Configuration: DNS Click the Devices tab. VMG1312-B Series User’s Guide...
Page 315: Using Configuration Files
The following example shows an example where the static IP address is 192.168.1.10 and the subnet mask is 255.255.255.0. Figure 177 Red Hat 9.0: Static IP Address Setting in ifconfig-eth0 DEVICE=eth0 ONBOOT=yes BOOTPROTO=static IPADDR=192.168.1.10 NETMASK=255.255.255.0 USERCTL=no PEERDNS=yes TYPE=Ethernet VMG1312-B Series User’s Guide...
Page 316: Verifying Settings
Bcast:172.23.19.255 Mask:255.255.255.0 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:717 errors:0 dropped:0 overruns:0 frame:0 TX packets:13 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:100 RX bytes:730412 (713.2 Kb) TX bytes:1570 (1.5 Kb) Interrupt:10 Base address:0x1000 [root@localhost]# VMG1312-B Series User’s Guide...
Page 317: Appendix B Ip Addresses And Subnetting
192.168.1.1). Each of these four parts is known as an octet. An octet is an eight-digit binary number (for example 11000000, which is 192 in decimal notation). Therefore, each octet has a possible range of 00000000 to 11111111 in binary, or 0 to 255 in decimal. VMG1312-B Series User’s Guide...
Page 318 Host ID 00000010 By convention, subnet masks always consist of a continuous sequence of ones beginning from the leftmost bit of the mask, followed by a continuous sequence of zeros, for a total number of 32 bits. VMG1312-B Series User’s Guide...
Page 319 This is usually specified by writing a “/” followed by the number of bits in the mask after the address. For example, 192.1.1.0 /25 is equivalent to saying 192.1.1.0 with subnet mask 255.255.255.128. VMG1312-B Series User’s Guide...
Page 320 You can “borrow” one of the host ID bits to divide the network 192.168.1.0 into two separate sub- networks. The subnet mask is now 25 bits (255.255.255.128 or /25). The “borrowed” host ID bit can have a value of either 0 or 1, allowing two subnets; 192.168.1.0 /25 and 192.168.1.128 /25. VMG1312-B Series User’s Guide...
Page 321 Table 115 Subnet 1 LAST OCTET BIT IP/SUBNET MASK NETWORK NUMBER VALUE IP Address (Decimal) 192.168.1. IP Address (Binary) 11000000.10101000.00000001. 00000000 Subnet Mask (Binary) 11111111.11111111.11111111. 11000000 VMG1312-B Series User’s Guide...
Page 322 Similarly, use a 27-bit mask to create eight subnets (000, 001, 010, 011, 100, 101, 110 and 111). The following table shows IP address last octet values for each subnet. Table 119 Eight Subnets SUBNET LAST BROADCAST SUBNET FIRST ADDRESS ADDRESS ADDRESS ADDRESS VMG1312-B Series User’s Guide...
Page 323 255.255.224.0 (/19) 8190 255.255.240.0 (/20) 4094 255.255.248.0 (/21) 2046 255.255.252.0 (/22) 1022 255.255.254.0 (/23) 255.255.255.0 (/24) 255.255.255.128 (/25) 255.255.255.192 (/26) 1024 255.255.255.224 (/27) 2048 255.255.255.240 (/28) 4096 255.255.255.248 (/29) 8192 255.255.255.252 (/30) 16384 255.255.255.254 (/31) 32768 VMG1312-B Series User’s Guide...
Page 324 Regardless of your particular situation, do not create an arbitrary IP address; always follow the guidelines above. For more information on address assignment, please refer to RFC 1597, Address Allocation for Private Internets and RFC 1466, Guidelines for Management of IP Address Space. VMG1312-B Series User’s Guide...
Page 325: Appendix C Pop-Up Windows, Javascripts And Java Permissions
In Internet Explorer, select Tools, Pop-up Blocker and then select Turn Off Pop-up Blocker. Figure 184 Pop-up Blocker You can also check if pop-up blocking is disabled in the Pop-up Blocker section in the Privacy tab. In Internet Explorer, select Tools, Internet Options, Privacy. VMG1312-B Series User’s Guide...
Page 326 Click Apply to save this setting. Enable Pop-up Blockers with Exceptions Alternatively, if you only want to allow pop-up windows from your device, see the following steps. In Internet Explorer, select Tools, Internet Options and then the Privacy tab. VMG1312-B Series User’s Guide...
Page 327 Select Settings…to open the Pop-up Blocker Settings screen. Figure 186 Internet Options: Privacy Type the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.167.1. VMG1312-B Series User’s Guide...
Page 328 Figure 187 Pop-up Blocker Settings Click Close to return to the Privacy screen. Click Apply to save this setting. JavaScripts If pages of the web configurator do not display properly in Internet Explorer, check that JavaScripts are allowed. VMG1312-B Series User’s Guide...
Page 329 Figure 188 Internet Options: Security Click the Custom Level... button. Scroll down to Scripting. Under Active scripting make sure that Enable is selected (the default). Under Scripting of Java applets make sure that Enable is selected (the default). VMG1312-B Series User’s Guide...
Page 330 Figure 189 Security Settings - Java Scripting Java Permissions From Internet Explorer, click Tools, Internet Options and then the Security tab. Click the Custom Level... button. Scroll down to Microsoft VM. Under Java permissions make sure that a safety level is selected. VMG1312-B Series User’s Guide...
Page 331 Click OK to close the window. Figure 190 Security Settings - Java JAVA (Sun) From Internet Explorer, click Tools, Internet Options and then the Advanced tab. Make sure that Use Java 2 for <applet> under Java (Sun) is selected. VMG1312-B Series User’s Guide...
Page 332 Mozilla Firefox 2.0 screens are used here. Screens for other versions may vary. You can enable Java, Javascripts and pop-ups in one screen. Click Tools, then click Options in the screen that appears. Figure 192 Mozilla Firefox: Tools > Options VMG1312-B Series User’s Guide...
Page 333 Appendix C Pop-up Windows, JavaScripts and Java Permissions Click Content.to show the screen below. Select the check boxes as shown in the following screen. Figure 193 Mozilla Firefox Content Security VMG1312-B Series User’s Guide...
Page 334 Appendix C Pop-up Windows, JavaScripts and Java Permissions VMG1312-B Series User’s Guide...
Page 335: Appendix D Wireless Lans
(AP). Intra-BSS traffic is traffic between wireless clients in the BSS. When Intra-BSS is enabled, wireless client A and B can access the wired network and communicate with each other. When Intra-BSS is VMG1312-B Series User’s Guide...
Page 336 APs is called a Distribution System (DS). This type of wireless LAN topology is called an Infrastructure WLAN. The Access Points not only provide communication with the wired network but also mediate wireless network traffic in the immediate neighborhood. VMG1312-B Series User’s Guide...
Page 337 A hidden node occurs when two stations are within range of the same access point, but are not within range of each other. The following figure illustrates a hidden node. Both stations (STA) are within range of the access point (AP) or wireless gateway, but out-of-range of each other, so they VMG1312-B Series User’s Guide...
Page 338 AP will fragment the packet into smaller data frames. A large Fragmentation Threshold is recommended for networks not prone to interference while you should set a smaller threshold for busy networks or networks that are prone to interference. VMG1312-B Series User’s Guide...
Page 339 IEEE802.1x EAP with RADIUS Server Authentication Wi-Fi Protected Access (WPA) WPA2 Most Secure Note: You must enable the same wireless security settings on the Device and on all wireless clients that you want to associate with it. VMG1312-B Series User’s Guide...
Page 340 Sent by a RADIUS server requesting more information in order to allow access. The access point sends a proper response from the user and then sends another Access-Request message. The following types of RADIUS messages are exchanged between the access point and the RADIUS server for user accounting: VMG1312-B Series User’s Guide...
Page 341 This makes user identity vulnerable to passive attacks. A digital certificate is an electronic ID card that authenticates the sender’s identity. However, to implement EAP-TLS, you need a Certificate Authority (CA) to handle certificates, which imposes a management overhead. VMG1312-B Series User’s Guide...
Page 342 Table 124 Comparison of EAP Authentication Types EAP-MD5 EAP-TLS EAP-TTLS PEAP LEAP Mutual Authentication Certificate – Client Optional Optional Certificate – Server Dynamic Key Exchange Credential Integrity None Strong Strong Strong Moderate Deployment Difficulty Easy Hard Moderate Moderate Moderate Client Identity Protection VMG1312-B Series User’s Guide...
Page 343 The encryption mechanisms used for WPA(2) and WPA(2)-PSK are the same. The only difference between the two is that WPA(2)-PSK uses a simple common password, instead of user-specific credentials. The common-password approach makes WPA(2)-PSK susceptible to brute-force VMG1312-B Series User’s Guide...
Page 344 The RADIUS server then checks the user's identification against its database and grants or denies network access accordingly. A 256-bit Pairwise Master Key (PMK) is derived from the authentication process by the RADIUS server and the client. VMG1312-B Series User’s Guide...
Page 345 The AP and wireless clients use the TKIP or AES encryption process, the PMK and information exchanged in a handshake to create temporal encryption keys. They use these keys to encrypt data exchanged between them. Figure 199 WPA(2)-PSK Authentication VMG1312-B Series User’s Guide...
Page 346 Antenna gain, measured in dB (decibel), is the increase in coverage within the RF beam width. Higher antenna gain improves the range of the signal for better communications. For an indoor site, each 1 dB increase in antenna gain results in a range increase of approximately VMG1312-B Series User’s Guide...
Page 347 For a single AP application, place omni-directional antennas as close to the center of the coverage area as possible. For directional antennas, point the antenna in the direction of the desired coverage area. VMG1312-B Series User’s Guide...
Page 348 Appendix D Wireless LANs VMG1312-B Series User’s Guide...
Page 349: Appendix E Ipv6
A link-local unicast address has a predefined prefix of fe80::/10. The link-local unicast address format is as follows. Table 126 Link-local Unicast Address Format 1111 1110 10 Interface ID 10 bits 54 bits 64 bits VMG1312-B Series User’s Guide...
Page 350 All DHCP severs on a local site. FF05:0:0:0:0:0:1:3 The following table describes the multicast addresses which are reserved and can not be assigned to a multicast group. Table 128 Reserved Multicast Address MULTICAST ADDRESS FF00:0:0:0:0:0:0:0 FF01:0:0:0:0:0:0:0 FF02:0:0:0:0:0:0:0 FF03:0:0:0:0:0:0:0 FF04:0:0:0:0:0:0:0 FF05:0:0:0:0:0:0:0 FF06:0:0:0:0:0:0:0 FF07:0:0:0:0:0:0:0 VMG1312-B Series User’s Guide...
Page 351 DHCPv6 server uses T1 and T2 to control the time at which the client contacts with the server to extend the lifetimes on any addresses in the IA_NA before the lifetimes expire. After T1, the client sends the server (S1) (from which the addresses in the IA_NA were obtained) a Renew message. If VMG1312-B Series User’s Guide...
Page 352 • Neighbor solicitation: A request from a host to determine a neighbor’s link-layer address (MAC address) and detect if the neighbor is still reachable. A neighbor being “reachable” means it responds to a neighbor solicitation message (from the host) with a neighbor advertisement message. VMG1312-B Series User’s Guide...
Page 353 Done message to the router or switch. The router or switch then sends a group-specific query to the port on which the Done message is received to determine if other devices connected to this port should remain in the group. VMG1312-B Series User’s Guide...
Page 354 Install Dibbler and select the DHCPv6 client option on your computer. After the installation is complete, select Start > All Programs > Dibbler-DHCPv6 > Client Install as service. Select Start > Control Panel > Administrative Tools > Services. VMG1312-B Series User’s Guide...
Page 355 To enable IPv6 in Windows 7: Select Control Panel > Network and Sharing Center > Local Area Connection. Select the Internet Protocol Version 6 (TCP/IPv6) checkbox to enable it. Click OK to save the change. VMG1312-B Series User’s Guide...
Page 356 IPv4 Address... : 172.16.100.61 Subnet Mask ... : 255.255.255.0 Default Gateway ..: fe80::213:49ff:feaa:7125%11 172.16.100.254 VMG1312-B Series User’s Guide...
Page 357: Appendix F Services
• If the Protocol is TCP, UDP, or TCP/UDP, this is the IP port number. • If the Protocol is USER, this is the IP protocol number. • Description: This is a brief explanation of the applications that use this service or the situations in which this service is used. VMG1312-B Series User’s Guide...
Page 358 This is another popular Internet chat program. MSN Messenger 1863 Microsoft Networks’ messenger service uses this protocol. NetBIOS TCP/UDP The Network Basic Input/Output System is used for communication between TCP/UDP computers in a LAN. TCP/UDP TCP/UDP VMG1312-B Series User’s Guide...
Page 359 Internet. SMTP enables you to move messages from one e-mail server to another. SMTPS This is a more secure version of SMTP that runs over SSL. SNMP TCP/UDP Simple Network Management Program. SNMP-TRAPS TCP/UDP Traps for use with the SNMP (RFC:1215). VMG1312-B Series User’s Guide...
Page 360 UNIX environments. It operates over TCP/ IP networks. Its primary function is to allow users to log into remote host systems. VDOLIVE 7000 A videoconferencing solution. The UDP port number is specified in the application. user- defined VMG1312-B Series User’s Guide...
Page 362 MitraStar Limited Warranty MitraStar warrants to the original end user (purchaser) that this product is free from any defects in materials or workmanship for a period of up to two years from the date of purchase. During the VMG1312-B Series User’s Guide...
Page 363: Safety Warnings
• Do not use the device outside, and make sure all the connections are indoors. There is a remote risk of electric shock from lightning. • Do NOT obstruct the device ventilation slots, as insufficient airflow may harm your device. • Use only No. 26 AWG (American Wire Gauge) or larger telecommunication line cord. VMG1312-B Series User’s Guide...
Page 364 Your product is marked with this symbol, which is known as the WEEE mark. WEEE stands for Waste Electronics and Electrical Equipment. It means that used electrical and electronic products should not be mixed with general waste. Used electrical and electronic equipment should be treated separately. VMG1312-B Series User’s Guide...
Page 365: Index
Auto Configuration Server, see ACS loopback test channel backup interference configuration channel, wireless LAN Basic Service Set, See BSS client list Basic Service Set, see BSS compatibility, WDS blinking LEDs configuration Broadband backup broadcast firewalls reset 128, 335 VMG1312-B Series User’s Guide...
Page 366 DS field firmware DS, dee differentiated services version DSCP forwarding ports dynamic DNS fragmentation threshold 121, 125, 338 wildcard 184, 197 Dynamic Host Configuration Protocol, see DHCP dynamic WEP key exchange DYNDNS wildcard General wireless LAN screen VMG1312-B Series User’s Guide...
Page 367 IP address 138, 157 loopback ping private IP Address Assignment IP alias NAT applications IPv6 83, 349 addressing 83, 103, 349 EUI-64 MAC address 116, 143 global address filter 115, 126 interface ID MAC authentication link-local address VMG1312-B Series User’s Guide...
Page 368 Push Button Configuration, see PBC port number push button, WPS services SIP ALG activation NAT example Network Address Translation see NAT 165, 178 marking Network Address Translation, see NAT setup Network Map tagging network map versus CoS NNTP VMG1312-B Series User’s Guide...
Page 369 Services setup Tag Control Information See TCI firewalls Tag Protocol Identifier See TPID static route 98, 161, 201 Single Rate Three Color Marker, see srTCM TCP/IP port SIP ALG activation thresholds SMTP data fragment 121, 125 VMG1312-B Series User’s Guide...
Page 370 VIDs example priority frame static VLAN ID WPA-PSK VLAN Identifier See VID 129, 132 VLAN tag example limitations push button 22, 130 wireless security Wireless tutorial wizard setup status Internet Wide Area Network, see WAN VMG1312-B Series User’s Guide...
Page 371 RADIUS application example WPA2 user authentication vs WPA2-PSK wireless client supplicant with RADIUS application example WPA2-Pre-Shared Key WPA2-PSK application example WPA-PSK 127, 343 application example 129, 132 example limitations example push button 22, 130 VMG1312-B Series User’s Guide...
Page 372 Index VMG1312-B Series User’s Guide...
Page 373 Index VMG1312-B Series User’s Guide...
Page 374 Index VMG1312-B Series User’s Guide...

This manual is also suitable for:

Vmg1312-b30a Vmg1312-b10a

ZyXEL Communications VMG1312-B Series User Manual

Contents Overview

Table of Contents

User's Guide

PART I User's Guide

Chapter 1 Introducing the Device

Chapter 2 The Web Configurator

Chapter 3 Quick Start

Chapter 4 Tutorials

Technical Reference

Part II: Technical Reference

Chapter 5 Network Map and Status Screens

Chapter 6 Broadband

Chapter 7 Wireless

Chapter 8 Home Networking

Chapter 9 Routing

Chapter 10 Quality of Service (Qos)

Chapter 11 Network Address Translation (NAT)

Chapter 12 Dynamic DNS Setup

Chapter 13 Interface Group

Chapter 14 USB Service

Chapter 15 Firewall

Chapter 16 MAC Filter

Chapter 17 Parental Control

Chapter 18 Scheduler Rules

Chapter 19 Certificates

Chapter 20 Log

Chapter 21 Traffic Status

Chapter 22 ARP Table

Chapter 23 Routing Table

Chapter 24 IGMP Status

Chapter 25 Xdsl Statistics

Chapter 26 User Account

Chapter 27 Remote Management

Chapter 28 TR-069 Client

Chapter 29 TR-064

Chapter 30 Time Settings

Chapter 31 E-Mail Notification

Chapter 32 Logs Setting

Chapter 33 Firmware Upgrade

Chapter 34 Configuration

Chapter 35 Diagnostic

Chapter 36 Troubleshooting

Appendix A Setting up Your Computer's IP Address

Quick Links

Related Manuals for ZyXEL Communications VMG1312-B Series

Summary of Contents for ZyXEL Communications VMG1312-B Series