Page 1 VMG8324-B10A and VMG8324- B30A Series Wireless N VDSL2 VoIP Combo WAN Gigabit IAD Version 1.00 Edition 1, 11/2013 Quick Start Guide User’s Guide Default Login Details LAN IP Address http://192.168.1.1 Login admin Password 1234 www.zyxel.com Copyright © 2013 ZyXEL Communications Corporation...
Page 2 IMPORTANT! READ CAREFULLY BEFORE USE. KEEP THIS GUIDE FOR FUTURE REFERENCE. Screenshots and graphics in this book may differ slightly from your product due to differences in your product firmware or your computer operating system. Every effort has been made to ensure that the information in this manual is accurate.
Page 3: Table Of Contents
Contents Overview Contents Overview User’s Guide ............................15 Introducing the Device ..........................17 The Web Configurator ..........................25 Quick Start ...............................33 Technical Reference ..........................35 Network Map and Status Screens ......................37 Broadband ...............................43 Wireless ..............................71 Home Networking ..........................107 Routing ..............................131 Quality of Service (QoS) ........................139 Network Address Translation (NAT) ......................157 Dynamic DNS Setup ..........................175 Interface Group .............................179...
Page 4 Contents Overview E-mail Notification ..........................305 Logs Setting ............................307 Firmware Upgrade ..........................311 Configuration ............................313 Diagnostic .............................317 Troubleshooting ............................323 VMG8324-B10A / VMG8324-B30A Series User’s Guide...
Page 5: Table Of Contents
Table of Contents Table of Contents Contents Overview ..........................3 Table of Contents ..........................5 Part I: User’s Guide ..................15 Chapter 1 Introducing the Device ........................17 1.1 Overview ............................17 1.2 Ways to Manage the Device ......................17 1.3 Good Habits for Managing the Device ....................17 1.4 Applications for the Device .......................18 1.4.1 Internet Access ........................18 1.4.2 Device’s USB Support ......................19...
Page 6 Table of Contents Chapter 4 Network Map and Status Screens .....................37 4.1 Overview ............................37 4.2 The Network Map Screen .........................37 4.3 The Status Screen ..........................38 Chapter 5 Broadband............................43 5.1 Overview ............................43 5.1.1 What You Can Do in this Chapter ....................43 5.1.2 What You Need to Know ......................44 5.1.3 Before You Begin ........................47 5.2 The Broadband Screen ........................47...
Page 7 Table of Contents 6.10.2 Additional Wireless Terms .....................94 6.10.3 Wireless Security Overview ....................94 6.10.4 Signal Problems ........................96 6.10.5 BSS ............................97 6.10.6 MBSSID ..........................97 6.10.7 Preamble Type ........................98 6.10.8 Wireless Distribution System (WDS) ..................98 6.10.9 WiFi Protected Setup (WPS) ....................98 Chapter 7 Home Networking ..........................107 7.1 Overview ............................107 7.1.1 What You Can Do in this Chapter ..................107...
Page 8 Table of Contents Chapter 9 Quality of Service (QoS)........................139 9.1 Overview ............................139 9.1.1 What You Can Do in this Chapter ..................139 9.2 What You Need to Know .........................139 9.3 The Quality of Service General Screen ..................141 9.4 The Queue Setup Screen .......................142 9.4.1 Adding a QoS Queue ......................143 9.5 The Class Setup Screen .........................144 9.5.1 Add/Edit QoS Class ......................146...
Page 9 Table of Contents 11.2 The DNS Entry Screen ........................176 11.2.1 Add/Edit DNS Entry ......................177 11.3 The Dynamic DNS Screen ......................177 Chapter 12 Interface Group ..........................179 12.1 Overview ............................179 12.1.1 What You Can Do in this Chapter ..................179 12.2 The Interface Group Screen ......................179 12.2.1 Interface Group Configuration .....................180 12.2.2 Interface Grouping Criteria ....................182 Chapter 13...
Page 10 Table of Contents 15.3.1 Add/Edit a Service ......................200 15.4 The Access Control Screen ......................201 15.4.1 Add/Edit an ACL Rule ......................202 15.5 The DoS Screen ..........................204 Chapter 16 MAC Filter............................205 16.1 Overview ............................205 16.2 The MAC Filter Screen ........................205 Chapter 17 Parental Control ..........................207 17.1 Overview ............................207 17.2 The Parental Control Screen ......................207...
Page 11 Table of Contents 20.5.3 IKE Phases .........................230 20.5.4 Negotiation Mode ........................231 20.5.5 IPSec and NAT ........................232 20.5.6 VPN, NAT, and NAT Traversal .....................232 20.5.7 ID Type and Content ......................233 20.5.8 Pre-Shared Key ........................234 20.5.9 Diffie-Hellman (DH) Key Groups ..................234 Chapter 21 Voice ..............................235 21.1 Overview ............................235 21.1.1 What You Can Do in this Chapter ..................235...
Page 12 Table of Contents Chapter 24 VoIP Status ............................275 24.1 The VoIP Status Screen ........................275 Chapter 25 ARP Table ............................277 25.1 Overview ............................277 25.1.1 How ARP Works ........................277 25.2 ARP Table Screen .........................277 Chapter 26 Routing Table ............................279 26.1 Overview ............................279 26.2 The Routing Table Screen ......................279 Chapter 27 IGMP/MLD Status ..........................281...
Page 13 Table of Contents 32.1 Overview ............................295 32.2 The TR-069 Client Screen ......................295 Chapter 33 TR-064..............................297 33.1 Overview ............................297 33.2 The TR-064 Screen ........................297 Chapter 34 SNMP ..............................299 34.1 Overview ............................299 34.2 The SNMP Screen ........................299 Chapter 35 Time Settings ............................301 35.1 Overview ............................301 35.2 The Time Screen ..........................301 Chapter 36...
Page 14 Table of Contents 40.1 Overview ............................317 40.1.1 What You Can Do in this Chapter ..................317 40.2 What You Need to Know .......................317 40.3 Ping & TraceRoute & NsLookup ....................318 40.4 802.1ag ............................319 40.5 OAM Ping ............................320 Chapter 41 Troubleshooting..........................323 41.1 Power, Hardware Connections, and LEDs ..................323 41.2 Device Access and Login ......................324 41.3 Internet Access ..........................326 41.4 Wireless Internet Access .......................327...
Page 15: User's Guide
User’s Guide...
Page 17: Introducing The Device
H A PT ER Introducing the Device 1.1 Overview The Device is a wireless VDSL router and Gigabit Ethernet gateway. It has a DSL port and a Gigabit Ethernet port for super-fast Internet access. The Device supports both Packet Transfer Mode (PTM) and Asynchronous Transfer Mode (ATM).
Page 18: Applications For The Device
Chapter 1 Introducing the Device 1.4 Applications for the Device Here are some example uses for which the Device is well suited. 1.4.1 Internet Access Your Device provides shared Internet access by connecting the DSL port to the DSL or MODEM jack on a splitter or your telephone jack.
Page 19: Device's Usb Support
Chapter 1 Introducing the Device 1.4.2 Device’s USB Support The USB port of the Device is used for file-sharing, media server and printer-sharing. File Sharing Use the built-in USB 2.0 port to share files on a USB memory stick or a USB hard drive (B). You can connect one USB hard drive to the Device at a time.
Page 20: Leds (Lights)
Chapter 1 Introducing the Device Printer Server The Device allows you to share a USB printer on your LAN. You can do this by connecting a USB printer to one of the USB ports on the Device and then configuring a TCP/IP port on the computers connected to your network.
Page 21 Chapter 1 Introducing the Device Table 1 LED Descriptions (continued) COLOR STATUS DESCRIPTION Green The Device has an IP connection but no traffic. INTERNET Your device has a WAN IP address (either static or assigned by a DHCP server), PPP negotiation was successfully completed (if used) and the DSL connection is up.
Page 22: The Reset Button
Chapter 1 Introducing the Device 1.6 The RESET Button If you forget your password or cannot access the Web Configurator, you will need to use the RESET button at the back of the device to reload the factory-default configuration file. This means that you will lose all configurations that you had previously and the password will be reset to “1234”.
Page 23: Wall-Mounting Instructions
Chapter 1 Introducing the Device Once the connection is successfully made, the WiFi 2.4G LED shines green. To turn off the wireless network, press the Wi-Fi button for one to five seconds. The WiFi 2.4G LED turns off when the wireless network is off. 1.8 Wall-mounting Instructions Do the following to hang your Device on a wall.
Page 24 Chapter 1 Introducing the Device Mount the Device on the screws which are already installed on the wall. Make sure that the Device is firmly attached to the screws so it does not fall off. VMG8324-B10A / VMG8324-B30A Series User’s Guide...
Page 25: The Web Configurator
H A PT ER The Web Configurator 2.1 Overview The web configurator is an HTML-based management interface that allows easy device setup and management via Internet browser. Use Internet Explorer 6.0 and later versions or Mozilla Firefox 3 and later versions or Safari 2.0 and later versions. The recommended screen resolution is 1024 by 768 pixels.
Page 26 Chapter 2 The Web Configurator The following screen displays if you have not yet changed your password. It is strongly recommended you change the default password. Enter a new password, retype it to confirm and click Apply; alternatively click Skip to proceed to the main menu if you do not want to change the password now.
Page 27: Web Configurator Layout
Chapter 2 The Web Configurator 2.2 Web Configurator Layout Figure 10 Screen Layout As illustrated above, the main screen is divided into these parts: • A - title bar • B - main window • C - navigation panel 2.2.1 Title Bar The title bar provides some icons in the upper right corner.
Page 28: Main Window
Chapter 2 The Web Configurator 2.2.2 Main Window The main window displays information and configuration fields. It is discussed in the rest of this document. After you click Status on the Connection Status page, the Status screen is displayed. See Chapter 4 on page 38 for more information about the Status screen.
Page 29: Navigation Panel
Chapter 2 The Web Configurator 2.2.3 Navigation Panel Use the menu items on the navigation panel to open screens to configure Device features. The following tables describe each menu item. Table 3 Navigation Panel Summary LINK FUNCTION Connection Status This screen shows the network status of the Device and computers/ devices connected to it.
Page 30 Chapter 2 The Web Configurator Table 3 Navigation Panel Summary (continued) LINK FUNCTION Routing Static Route Use this screen to view and set up static routes on the Device. DNS Route Use this screen to forward DNS queries for certain domain names through a specific WAN interface to its DNS server(s).
Page 31 Chapter 2 The Web Configurator Table 3 Navigation Panel Summary (continued) LINK FUNCTION Parental Use this screen to block web sites with the specific URL. Control Scheduler Use this screen to configure the days and times when a configured Rules restriction (such as parental control) is enforced.
Page 32 Chapter 2 The Web Configurator Table 3 Navigation Panel Summary (continued) LINK FUNCTION User Account Use this screen to change user password on the Device. Remote MGMT Use this screen to enable specific traffic directions for network services. TR-069 Client Use this screen to configure the Device to be managed by an Auto Configuration Server (ACS).
Page 33: Quick Start
H A PT ER Quick Start 3.1 Overview Use the Quick Start screens to configure the Device’s time zone, basic Internet access, and wireless settings. Note: See the technical reference chapters (starting on page 35) for background information on the features in this chapter. 3.2 Quick Start Setup The Quick Start Wizard appears automatically after login.
Page 34 Chapter 3 Quick Start Enter your Internet connection information in this screen. The screen and fields to enter may vary depending on your current connection type. Click Next. Click Next. Figure 13 Internet Connection Turn the wireless LAN on or off. If you keep it on, record the security settings so you can configure your wireless clients to connect to the Device.
Page 35: Technical Reference
Technical Reference...
Page 37: Network Map And Status Screens
H A PT ER Network Map and Status Screens 4.1 Overview After you log into the Web Configurator, the Network Map screen appears. This shows the network connection status of the Device and clients connected to it. You can use the Status screen to look at the current status of the Device, system resources, and interfaces (LAN, WAN, and WLAN).
Page 38: The Status Screen
Chapter 4 Network Map and Status Screens If you want to view information about a client, click the client’s name and Info. Click the IP address if you want to change it. If you want to change the name or icon of the client, click Change name/ icon.
Page 39 Chapter 4 Network Map and Status Screens Each field is described in the following table. Table 4 Status Screen LABEL DESCRIPTION Refresh Interval Select how often you want the Device to update this screen. Device Information Host Name This field displays the Device system name. It is used for identification. Model Number This shows the model number of your Device.
Page 40 Chapter 4 Network Map and Status Screens Table 4 Status Screen (continued) LABEL DESCRIPTION CPU Usage This field displays what percentage of the Device’s processing ability is currently used. When this percentage is close to 100%, the Device is running at full load, and the throughput is not going to improve anymore.
Page 41 Chapter 4 Network Map and Status Screens Table 4 Status Screen (continued) LABEL DESCRIPTION Account Status This field displays the current registration status of the SIP account. You have to register SIP accounts with a SIP server to use VoIP. Inactive - The SIP account is not active.
Page 42 Chapter 4 Network Map and Status Screens VMG8324-B10A / VMG8324-B30A Series User’s Guide...
Page 43: Broadband
H A PT ER Broadband 5.1 Overview This chapter discusses the Device’s Broadband screens. Use these screens to configure your Device for Internet access. A WAN (Wide Area Network) connection is an outside connection to another network or the Internet. It connects your private networks, such as a LAN (Local Area Network) and other networks, so that a computer in one location can communicate with computers in other locations.
Page 44: What You Need To Know
Chapter 5 Broadband • Use the Advanced screen to enable or disable PTM over ADSL, Annex M/Annex J, and DSL PhyR functions (Section 5.4 on page 61). • Use the 802.1x screen to view and configure the IEEE 802.1X settings on the Device (Section 5.5 on page 62).
Page 45 Chapter 5 Broadband WAN IP Address The WAN IP address is an IP address for the Device, which makes it accessible from an outside network. It is used by the Device to communicate with other devices in other networks. It can be static (fixed) or dynamically assigned by the ISP each time the Device tries to access the Internet.
Page 46 Chapter 5 Broadband • Any number of consecutive blocks of zeros can be replaced by a double colon. A double colon can only appear once in an IPv6 address. So 2001:0db8:0000:0000:1a2f:0000:0000:0015 can be written as 2001:0db8::1a2f:0000:0000:0015, 2001:0db8:0000:0000:1a2f::0015, 2001:db8::1a2f:0:0:15 or 2001:db8:0:0:1a2f::15. IPv6 Prefix and Prefix Length Similar to an IPv4 subnet mask, IPv6 uses an address prefix to represent the network address.
Page 47: Before You Begin
Chapter 5 Broadband Dual Stack Lite Use Dual Stack Lite when local network computers use IPv4 and the ISP has an IPv6 network. When the Device has an IPv6 WAN address and you set IPv6/IPv4 Mode to IPv6 Only, you can enable Dual Stack Lite to use IPv4 computers and services.
Page 48 Chapter 5 Broadband The following table describes the labels in this screen. Table 6 Network Setting > Broadband LABEL DESCRIPTION Add New WAN Click this button to create a new connection. Interface This is the index number of the entry. Name This is the service name of the connection.
Page 49: Routing Mode
Chapter 5 Broadband 5.2.1 Add/Edit Internet Connection Click Add New WAN Interface in the Broadband screen or the Edit icon next to an existing WAN interface to configure a WAN connection. The screen varies depending on the interface type, mode, encapsulation, and IPv6/IPv4 mode you select.
Page 50 Chapter 5 Broadband Table 7 Network Setting > Broadband > Add New WAN Interface/Edit (Routing Mode) (continued) LABEL DESCRIPTION Mode Select Routing if your ISP give you one IP address only and you want multiple computers to share an Internet account. Encapsulation Select the method of encapsulation used by your ISP from the drop-down list box.
Page 51 Chapter 5 Broadband Table 7 Network Setting > Broadband > Add New WAN Interface/Edit (Routing Mode) (continued) LABEL DESCRIPTION Sustainable The Sustainable Cell Rate (SCR) sets the average cell rate (long-term) that can be Cell Rate transmitted. Type the SCR, which must be less than the PCR. Note that system default is 0 cells/sec.
Page 52 Chapter 5 Broadband Table 7 Network Setting > Broadband > Add New WAN Interface/Edit (Routing Mode) (continued) LABEL DESCRIPTION Routing Feature (This is available only when you select IPv4 Only or IPv6/IPv4 DualStack in the IPv6/ IPv4 Mode field.) NAT Enable Select this option to activate NAT on this connection.
Page 53 Chapter 5 Broadband Table 7 Network Setting > Broadband > Add New WAN Interface/Edit (Routing Mode) (continued) LABEL DESCRIPTION IPv6 Address Select Automatic if you want to have the Device use the IPv6 prefix from the connected router’s Router Advertisement (RA) to generate an IPv6 address. •...
Page 54: Bridge Mode
Chapter 5 Broadband Table 7 Network Setting > Broadband > Add New WAN Interface/Edit (Routing Mode) (continued) LABEL DESCRIPTION MTU Size Enter the MTU (Maximum Transfer Unit) size for this traffic. Apply Click Apply to save your changes back to the Device. Cancel Click Cancel to exit this screen without saving.
Page 55 Chapter 5 Broadband Table 8 Network Setting > Broadband > Add New WAN Interface/Edit (Bridge Mode) (continued) LABEL DESCRIPTION 802.1p IEEE 802.1p defines up to 8 separate traffic types by inserting a tag into a MAC-layer frame that contains bits to define class of service. Select the IEEE 802.1p priority level (from 0 to 7) to add to traffic through this connection.
Page 56 Chapter 5 Broadband Table 9 Network Setting > Broadband > Add New WAN Interface/Edit (ADSL over ATM - Bridge Mode) (continued) LABEL DESCRIPTION Mode Select Bridge when your ISP provides you more than one IP address and you want the connected computers to get individual IP address from ISP’s DHCP server directly.
Page 57: The 3G Backup Screen
Chapter 5 Broadband Table 9 Network Setting > Broadband > Add New WAN Interface/Edit (ADSL over ATM - Bridge Mode) (continued) LABEL DESCRIPTION Rate Limit Enter the rate limit for the connection. This is the maximum transmission rate allowed for traffic on this connection.
Page 58 Chapter 5 Broadband Note: The actual data rate you obtain varies depending the 3G card you use, the signal strength to the service provider’s base station, and so on. Figure 27 Network Setting > Broadband > 3G Backup The following table describes the labels in this screen. Table 10 Network Setting >...
Page 59 Chapter 5 Broadband Table 10 Network Setting > Broadband > 3G Backup (continued) LABEL DESCRIPTION Username Type the user name (of up to 64 ASCII printable characters) given to you by your service provider. Password Type the password (of up to 64 ASCII printable characters) associated with the user name above.
Page 60 Chapter 5 Broadband Table 10 Network Setting > Broadband > 3G Backup (continued) LABEL DESCRIPTION Send Notifications are sent to the e-mail address specified in this field. If this field is left blank, Notification to notifications cannot be sent via e-mail. Email Advanced Click this to show the advanced 3G backup settings.
Page 61: The Advanced Screen
Chapter 5 Broadband Table 10 Network Setting > Broadband > 3G Backup (continued) LABEL DESCRIPTION Mail Server Select a mail server for the e-mail address specified below. If you do not select a mail server, e-mail notifications cannot be sent via e-mail. You must have configured a mail server already in the Maintenance >...
Page 62: The 802.1X Screen
Chapter 5 Broadband Table 11 Network Setting > Network Setting > Broadband (continued) LABEL DESCRIPTION PhyR DS Enable or disable PhyR DS (downstream) for downstream transmission from the WAN. PhyR DS should be enabled if data being transmitted downstream is sensitive to noise. However, enabling PhyR DS can decrease the DS line rate.
Page 63: Edit 802.1X Settings
Chapter 5 Broadband 5.5.1 Edit 802.1X Settings Use this screen to edit 802.1X authentication settings. Click the Edit icon next to the rule you want to edit. The screen shown next appears. Figure 30 Network Setting > Broadband > 802.1x: Edit The following table describes the labels in this screen.
Page 64: Technical Reference
Chapter 5 Broadband Figure 31 Network Setting > Broadband > Wan Status The following table describes the labels in this screen. Table 14 Network Setting > Broadband > Wan Status LABEL DESCRIPTION Interface Select a WAN interface to see its historical traffic transmission rate in the chart. Direction Select RX or TX to display received traffic only or transmitted traffic only in the chart.
Page 65 Chapter 5 Broadband and the WAN interface and then formatted so that they can be understood in a bridged environment. For instance, it encapsulates routed Ethernet frames into bridged Ethernet cells. PPP over ATM (PPPoA) PPPoA stands for Point to Point Protocol over ATM Adaptation Layer 5 (AAL5). A PPPoA connection functions like a dial-up Internet connection.
Page 66 Chapter 5 Broadband In this case one VC carries multiple protocols with protocol identifying information being contained in each packet header. Despite the extra bandwidth and processing overhead, this method may be advantageous if it is not practical to have a separate VC for each carried protocol, for example, if charging heavily depends on the number of simultaneous VCs.
Page 67 Chapter 5 Broadband that continuously require a specific amount of bandwidth. A PCR is specified and if traffic exceeds this rate, cells may be dropped. Examples of connections that need CBR would be high-resolution video and voice. Variable Bit Rate (VBR) The Variable Bit Rate (VBR) ATM traffic class is used with bursty connections.
Page 68 Chapter 5 Broadband Introduction to IEEE 802.1Q Tagged VLAN A tagged VLAN uses an explicit tag (VLAN ID) in the MAC header to identify the VLAN membership of a frame across bridges - they are not confined to the switch on which they were created. The VLANs can be created statically by hand or dynamically through GVRP.
Page 69 Chapter 5 Broadband The ISP tells you the DNS server addresses, usually in the form of an information sheet, when you sign up. If your ISP gives you DNS server addresses, manually enter them in the DNS server fields. If your ISP dynamically assigns the DNS server IP addresses (along with the Device’s WAN IP address), set the DNS server fields to get the DNS server address from the ISP.
Page 70 Chapter 5 Broadband VMG8324-B10A / VMG8324-B30A Series User’s Guide...
Page 71: Wireless
H A PT ER Wireless 6.1 Overview This chapter describes the Device’s Network Setting > Wireless screens. Use these screens to set up your Device’s wireless connection. 6.1.1 What You Can Do in this Chapter This section describes the Device’s Wireless screens. Use these screens to set up your Device’s wireless connection.
Page 72: What You Need To Know
Chapter 6 Wireless 6.1.2 What You Need to Know Wireless Basics “Wireless” is essentially radio communication. In the same way that walkie-talkie radios send and receive information over the airwaves, wireless networking devices exchange information with one another. A wireless networking device is just like a radio that lets your computer exchange information with radios attached to other computers.
Page 73 Chapter 6 Wireless Click Network Setting > Wireless to open the General screen. Figure 33 Network Setting > Wireless > General VMG8324-B10A / VMG8324-B30A Series User’s Guide...
Page 74 Chapter 6 Wireless The following table describes the general wireless LAN labels in this screen. Table 15 Network Setting > Wireless > General LABEL DESCRIPTION Wireless Network Setup Wireless You can Enable or Disable the wireless LAN in this field. Band This shows the wireless band which this radio profile is using.
Page 75: No Security
Chapter 6 Wireless Table 15 Network Setting > Wireless > General (continued) LABEL DESCRIPTION Security Mode Select Basic (WEP, 802.1X) or More Secure (WPA(2)-PSK, WPA(2)) to add security on this wireless network. The wireless clients which want to associate to this network must have same wireless security settings as the Device.
Page 76: Basic (802.1X)
Chapter 6 Wireless In order to configure and enable WEP encryption, click Network Setting > Wireless to display the General screen, then select Basic as the security level. Figure 35 Wireless > General: Basic (WEP) The following table describes the labels in this screen. Table 17 Wireless >...
Page 77 Chapter 6 Wireless In order to configure and enable WEP encryption, click Network Setting > Wireless to display the General screen, then select Basic as the security level and 802.1X as the Security Mode. Figure 36 Wireless > General: Basic (802.1X) The following table describes the labels in this screen.
Page 78 Chapter 6 Wireless Table 18 Wireless > General: Basic (802.1X) (continued) LABEL DESCRIPTION Port Number The default port of a RADIUS server for authentication is 1812. You need not change this value unless your network administrator instructs you to do so. Shared Secret Specify a password (up to 32 alphanumeric characters) as the key to be shared between the external RADIUS server and the Device.
Page 79: More Secure (Wpa(2)-Psk)
Chapter 6 Wireless 6.2.4 More Secure (WPA(2)-PSK) The WPA-PSK security mode provides both improved data encryption and user authentication over WEP. Using a Pre-Shared Key (PSK), both the Device and the connecting client share a common password in order to validate the connection. This type of encryption, while robust, is not as strong as WPA, WPA2 or even WPA2-PSK.
Page 80: Wpa(2) Authentication
Chapter 6 Wireless Table 19 Wireless > General: More Secure: WPA(2)-PSK (continued) LABEL DESCRIPTION Encryption Select the encryption type (TKIP, AES or TKIP+AES) for data encryption. Select TKIP if your wireless clients can all use TKIP. Select AES if your wireless clients can all use AES. Select TKIP+AES to allow the wireless clients to use either TKIP or AES.
Page 81: The More Ap Screen
Chapter 6 Wireless Table 20 Wireless > General: More Secure: WPA(2) (continued) LABEL DESCRIPTION Authentication Server IP Address Enter the IP address of the external authentication server in dotted decimal notation. Port Enter the port number of the external authentication server. The default port number is Number 1812.
Page 82 Chapter 6 Wireless The following table describes the labels in this screen. Table 21 Network Setting > Wireless > More AP LABEL DESCRIPTION This is the index number of the entry. Status This field indicates whether this SSID is active. A yellow bulb signifies that this SSID is active. A gray bulb signifies that this SSID is not active.
Page 83: Edit More Ap
Chapter 6 Wireless 6.3.1 Edit More AP Use this screen to edit an SSID profile. Click the Edit icon next to an SSID in the More AP screen. The following screen displays. Figure 40 Network Setting > Wireless > More AP > Edit The following table describes the fields in this screen.
Page 84 Chapter 6 Wireless Table 22 Network Setting > Wireless > More AP > Edit (continued) LABEL DESCRIPTION Wireless The SSID (Service Set IDentity) identifies the service set with which a wireless device is Network Name associated. Wireless devices associating to the access point (AP) must have the same SSID. (SSID) Enter a descriptive name (up to 32 English keyboard characters) for the wireless LAN.
Page 85: Mac Authentication
Chapter 6 Wireless 6.4 MAC Authentication This screen allows you to configure the ZyXEL Device to give exclusive access to specific devices (Allow) or exclude specific devices from accessing the ZyXEL Device (Deny). Every Ethernet device has a unique MAC (Media Access Control) address. The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02.
Page 86: The Wps Screen
Chapter 6 Wireless 6.5 The WPS Screen Use this screen to configure WiFi Protected Setup (WPS) on your Device. WPS allows you to quickly set up a wireless network with strong security, without having to configure security settings manually. Set up each WPS connection between two devices. Both devices must support WPS.
Page 87: The Wmm Screen
Chapter 6 Wireless Table 24 Network Setting > Wireless > WPS (continued) LABEL DESCRIPTION Register Enter the PIN of the device that you are setting up a WPS connection with and click Register to authenticate and add the wireless device to your wireless network. You can find the PIN either on the outside of the device, or by checking the device’s settings.
Page 88: The Wds Screen
Chapter 6 Wireless Table 25 Network Setting > Wireless > WMM (continued) LABEL DESCRIPTION Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. 6.7 The WDS Screen An AP using the Wireless Distribution System (WDS) can function as a wireless network bridge allowing you to wirelessly connect two wired network segments.
Page 89: Wds Scan
Chapter 6 Wireless The following table describes the labels in this screen. Table 26 Network Setting > Wireless > WDS LABEL DESCRIPTION Wireless Bridge Setup AP Mode Select the operating mode for your Device. • Access Point - The Device functions as a bridge and access point simultaneously. •...
Page 90: The Others Screen
Chapter 6 Wireless The following table describes the labels in this screen. Table 27 WDS: Scan LABEL DESCRIPTION Wireless Bridge Scan Setup Refresh Click Refresh to update the table. This is the index number of the entry. SSID This shows the SSID of the available wireless device within range. BSSID This shows the MAC address of the available wireless device within range.
Page 91 Chapter 6 Wireless Table 28 Network Setting > Wireless > Others (continued) LABEL DESCRIPTION Output Power Set the output power of the Device. If there is a high density of APs in an area, decrease the output power to reduce interference with other APs. Select one of the following: 20%, 40%, 60%, 80% or 100%.
Page 92: The Channel Status Screen
Chapter 6 Wireless 6.9 The Channel Status Screen Use the Channel Status screen to scan wireless LAN channel noises and view the results. Click Network Setting > Wireless > Channel Status. The screen appears as shown. Click Scan to scan the wireless LAN channels. You can view the results in the Channel Scan Result section. Figure 47 Network Setting >...
Page 93 Chapter 6 Wireless • An “infrastructure” type of network has one or more access points and one or more wireless clients. The wireless clients connect to the access points. • An “ad-hoc” type of network is one in which there is no access point. Wireless clients connect to one another in order to exchange information.
Page 94: Additional Wireless Terms
Chapter 6 Wireless variety of networks to exist in the same place without interfering with one another. When you create a network, you must select a channel to use. Since the available unlicensed spectrum varies from one country to another, the number of available channels also varies.
Page 95 Chapter 6 Wireless Because of the damage that can be done by a malicious attacker, it’s not just people who have sensitive information on their network who should use security. Everybody who uses any wireless network should ensure that effective security is in place. A good way to come up with effective security keys, passwords and so on is to use obscure information that you personally will easily remember, and to enter it in a way that appears random and does not include real words.
Page 96: Signal Problems
Chapter 6 Wireless wireless users to get a valid user name and password. Then, they can use that user name and password to use the wireless network. 6.10.3.4 Encryption Wireless networks can use encryption to protect the information that is sent in the wireless network.
Page 97: Bss
Chapter 6 Wireless coincidental emitters such as electric motors or microwaves. Problems with absorption occur when physical objects (such as thick walls) are between the two radios, muffling the signal. 6.10.5 BSS A Basic Service Set (BSS) exists when all communications between wireless stations or between a wireless station and a wired network client go through one access point (AP).
Page 98: Preamble Type
Chapter 6 Wireless • You must use different keys for different BSSs. If two wireless devices have different BSSIDs (they are in different BSSs), but have the same keys, they may hear each other’s communications (but not communicate with each other). •...
Page 99 Chapter 6 Wireless WPS allows you to quickly set up a wireless network with strong security, without having to configure security settings manually. Each WPS connection works between two devices. Both devices must support WPS (check each device’s documentation to make sure). Depending on the devices you have, you can either press a button (on the device itself, or in its configuration utility) or enter a PIN (a unique Personal Identification Number that allows one device to authenticate the other) in each of the two devices.
Page 100 Chapter 6 Wireless Ensure WPS is enabled on both devices. Access the WPS section of the AP’s configuration interface. See the device’s User’s Guide for how to do this. Look for the client’s WPS PIN; it will be displayed either on the device, or in the WPS section of the client’s configuration interface (see the device’s User’s Guide for how to find the WPS PIN - for the Device, see Section 6.5 on page...
Page 101 Chapter 6 Wireless The following figure shows a WPS-enabled wireless client (installed in a notebook computer) connecting to the WPS-enabled AP via the PIN method. Figure 51 Example WPS Process: PIN Method ENROLLEE REGISTRAR This device’s WPS PIN: 123456 Enter WPS PIN from other device: START START...
Page 102 Chapter 6 Wireless The following figure shows a WPS-enabled client (installed in a notebook computer) connecting to a WPS-enabled access point. Figure 52 How WPS works ACTIVATE ACTIVATE WITHIN 2 MINUTES WPS HANDSHAKE ENROLLEE REGISTRAR SECURE TUNNEL SECURITY INFO COMMUNICATION The roles of registrar and enrollee last only as long as the WPS setup process is active (two minutes).
Page 103 Chapter 6 Wireless is the registrar, and Client 1 is the enrollee. The registrar randomly generates the security information to set up the network, since it is unconfigured and has no existing information. Figure 53 WPS: Example Network Step 1 ENROLLEE REGISTRAR SECURITY INFO...
Page 104 Chapter 6 Wireless In step 3, you add another access point (AP2) to your network. AP2 is out of range of AP1, so you cannot use AP1 for the WPS handshake with the new access point. However, you know that Client 2 supports the registrar function, so you use it to perform the WPS handshake instead.
Page 105 Chapter 6 Wireless • When you use the PBC method, there is a short period (from the moment you press the button on one device to the moment you press the button on the other device) when any WPS-enabled device could join the network. This is because the registrar has no way of identifying the “correct”...
Page 106 Chapter 6 Wireless VMG8324-B10A / VMG8324-B30A Series User’s Guide...
Page 107: Home Networking
H A PT ER Home Networking 7.1 Overview A Local Area Network (LAN) is a shared communication system to which many networking devices are connected. It is usually located in one immediate area such as a building or floor of a building. Use the LAN screens to help you configure a LAN DHCP server and manage IP addresses.
Page 108: What You Need To Know
Chapter 7 Home Networking 7.1.2 What You Need To Know 7.1.2.1 About LAN IP Address IP addresses identify individual devices on a network. Every networking device (including computers, servers, routers, printers, etc.) needs an IP address to communicate across the network.
Page 109: Before You Begin
Chapter 7 Home Networking • Assigning lease times to mappings Windows Messenger is an example of an application that supports NAT traversal and UPnP. See the Chapter 10 on page 157 for more information on NAT. Cautions with UPnP The automated nature of NAT traversal applications in establishing their own services and opening firewall ports may present network security issues.
Page 110 Chapter 7 Home Networking Click Apply to save your settings. Figure 56 Network Setting > Home Networking > LAN Setup The following table describes the fields in this screen. Table 31 Network Setting > Home Networking > LAN Setup LABEL DESCRIPTION Interface Group Group Name...
Page 111 Chapter 7 Home Networking Table 31 Network Setting > Home Networking > LAN Setup (continued) LABEL DESCRIPTION IPv4 Address Enter the IPv4 IP address of the actual remote DHCP server in this field. IP Addressing This field is only available when you select Enable in the DHCP field. Values Beginning IP This field specifies the first of the contiguous addresses in the IP address pool.
Page 112 Chapter 7 Home Networking Table 31 Network Setting > Home Networking > LAN Setup (continued) LABEL DESCRIPTION MLD Snooping Multicast Listener Discovery (MLD) allows an IPv6 switch or router to discover the presence of MLD hosts who wish to receive multicast packets and the IP addresses of multicast groups the hosts want to join on its network.
Page 113: The Static Dhcp Screen
Chapter 7 Home Networking 7.3 The Static DHCP Screen This table allows you to assign IP addresses on the LAN to specific individual computers based on their MAC Addresses. Every Ethernet device has a unique MAC (Media Access Control) address. The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02.
Page 114: The Upnp Screen
Chapter 7 Home Networking The following table describes the labels in this screen. Table 33 Static DHCP: Add/Edit LABEL DESCRIPTION Active Select this to activate the connection between the client and the Device. Group Name Select the interface group name for which you want to configure static DHCP settings. Chapter 12 on page 179 for how to create a new interface group.
Page 115: Installing Upnp In Windows Example
Chapter 7 Home Networking The following table describes the labels in this screen. Table 34 Network Setting > Home Networking > UPnP LABEL DESCRIPTION UPnP Select Enable to activate UPnP. Be aware that anyone could use a UPnP application to open the web configurator's login screen without entering the Device's IP address (although you must still enter the password to access the web configurator).
Page 116 Chapter 7 Home Networking Click on the Windows Setup tab and select Communication in the Components selection box. Click Details. Add/Remove Programs: Windows Setup: Communication In the Communications window, select the Universal Plug and Play check box in the Components selection box. Add/Remove Programs: Windows Setup: Communication: Components VMG8324-B10A / VMG8324-B30A Series User’s Guide...
Page 117 Chapter 7 Home Networking Click OK to go back to the Add/Remove Programs Properties window and click Next. Restart the computer when prompted. Installing UPnP in Windows XP Follow the steps below to install the UPnP in Windows XP. Click Start and Control Panel. Double-click Network Connections.
Page 118: Using Upnp In Windows Xp Example
Chapter 7 Home Networking In the Networking Services window, select the Universal Plug and Play check box. Networking Services Click OK to go back to the Windows Optional Networking Component Wizard window and click Next. 7.6 Using UPnP in Windows XP Example This section shows you how to use the UPnP feature in Windows XP.
Page 119 Chapter 7 Home Networking Right-click the icon and select Properties. Network Connections In the Internet Connection Properties window, click Settings to see the port mappings there were automatically created. Internet Connection Properties VMG8324-B10A / VMG8324-B30A Series User’s Guide...
Page 120 Chapter 7 Home Networking You may edit or delete the port mappings or click Add to manually add port mappings. Internet Connection Properties: Advanced Settings Internet Connection Properties: Advanced Settings: Add When the UPnP-enabled device is disconnected from your computer, all port mappings will be deleted automatically.
Page 121 Chapter 7 Home Networking Double-click on the icon to display your current Internet connection status. Internet Connection Status Web Configurator Easy Access With UPnP, you can access the web-based configurator on the Device without finding out the IP address of the Device first. This comes helpful if you do not know the IP address of the Device. Follow the steps below to access the web configurator.
Page 122 Chapter 7 Home Networking Select My Network Places under Other Places. Network Connections An icon with the description for each UPnP-enabled device displays under Local Network. Right-click on the icon for your Device and select Invoke. The web configurator login screen displays.
Page 123 Chapter 7 Home Networking Right-click on the icon for your Device and select Properties. A properties window displays with basic information about the Device. Network Connections: My Network Places: Properties: Example VMG8324-B10A / VMG8324-B30A Series User’s Guide...
Page 124: The Additional Subnet Screen
Chapter 7 Home Networking 7.7 The Additional Subnet Screen Use the Additional Subnet screen to configure IP alias and public static IP. IP alias allows you to partition a physical network into different logical networks over the same Ethernet interface. The Device supports multiple logical LAN interfaces via its physical Ethernet interface with the Device itself as the gateway for the LAN network.
Page 125: The Stb Vendor Id Screen
Chapter 7 Home Networking Table 35 Network Setting > Home Networking > Additional Subnet (continued) LABEL DESCRIPTION Offer Public IP Select the checkbox to enable the Device to provide public IP addresses by DHCP server. by DHCP Enable ARP Select the checkbox to enable the ARP (Address Resolution Protocol) proxy. Proxy Apply Click Apply to save your changes.
Page 126: The Lan Vlan Screen
Chapter 7 Home Networking Note: The Device needs to restart to make the role change take effect. Figure 62 Network Setting > Home Networking > 5th Ethernet Port The following table describes the labels in this screen. Table 37 Network Setting > Home Networking > 5th Ethernet Port LABEL DESCRIPTION State...
Page 127: The Wake On Lan Screen
Chapter 7 Home Networking The following table describes the labels in this screen. Table 38 Network Setting > Home Networking > LAN VLAN LABEL DESCRIPTION Lan Port These represent the Device’s LAN ports. Tag Operation Select what you want the Device to do to the IEEE 802.1q VLAN ID and priority tags of downstream traffic before sending it out through this LAN port.
Page 128: Technical Reference
Chapter 7 Home Networking 7.12 Technical Reference This section provides some technical background information about the topics covered in this chapter. 7.12.1 LANs, WANs and the Device The actual physical connection determines whether the Device ports are LAN or WAN ports. There are two separate IP networks, one inside the LAN network and the other outside the WAN network as shown next.
Page 129: Lan Tcp/Ip
Chapter 7 Home Networking • Some ISPs choose to disseminate the DNS server addresses using the DNS server extensions of IPCP (IP Control Protocol) after the connection is up. If your ISP did not give you explicit DNS servers, chances are the DNS servers are conveyed through IPCP negotiation. The Device supports the IPCP DNS server extensions through the DNS proxy feature.
Page 130 Chapter 7 Home Networking You can obtain your IP address from the IANA, from an ISP or it can be assigned from a private network. If you belong to a small organization and your Internet access is through an ISP, the ISP can provide you with the Internet addresses for your local networks.
Page 131: Routing
H A PT ER Routing 8.1 Overview The Device usually uses the default gateway to route outbound traffic from computers on the LAN to the Internet. To have the Device send data to devices not reachable through the default gateway, use static routes.
Page 132: The Routing Screen
Chapter 8 Routing 8.2 The Routing Screen Use this screen to view and configure the static route rules on the Device. Click Network Setting > Routing > Static Route to open the following screen. Figure 67 Network Setting > Routing > Static Route The following table describes the labels in this screen.
Page 133: Add/Edit Static Route
Chapter 8 Routing 8.2.1 Add/Edit Static Route Use this screen to add or edit a static route. Click Add new static route in the Routing screen or the Edit icon next to the static route you want to edit. The screen shown next appears. Figure 68 Routing: Add/Edit The following table describes the labels in this screen.
Page 134: The Dns Route Screen
Chapter 8 Routing 8.3 The DNS Route Screen Use this screen to view and configure DNS routes on the Device. Click Network Setting > Routing > DNS Route to open the following screen. Figure 69 Network Setting > Routing > DNS Route The following table describes the labels in this screen.
Page 135: The Policy Forwarding Screen
Chapter 8 Routing The following table describes the labels in this screen. Table 43 DNS Route Add LABEL DESCRIPTION Domain Name Enter the domain name of the DNS route entry. Interface Select the WAN connection through which the Device forwards DNS requests for this domain name.
Page 136: Add/Edit Policy Forwarding
Chapter 8 Routing Table 44 Network Setting > Routing >Policy Forwarding (continued) LABEL DESCRIPTION This is the WAN interface through which the traffic is routed. Modify Click the Edit icon to edit this policy. Click the Delete icon to remove a policy from the Device. A window displays asking you to confirm that you want to delete the policy.
Page 137: Rip
Chapter 8 Routing 8.5 RIP Routing Information Protocol (RIP, RFC 1058 and RFC 1389) allows a device to exchange routing information with other routers. 8.5.1 The RIP Screen Click Network Setting > Routing > RIP to open the RIP screen. Figure 73 RIP The following table describes the labels in this screen.
Page 138 Chapter 8 Routing VMG8324-B10A / VMG8324-B30A Series User’s Guide...
Page 139: Quality Of Service (Qos)
H A PT ER Quality of Service (QoS) 9.1 Overview Quality of Service (QoS) refers to both a network’s ability to deliver data with minimum delay, and the networking methods used to control the use of bandwidth. Without QoS, all traffic data is equally likely to be dropped when the network is congested.
Page 140 Chapter 9 Quality of Service (QoS) similar types of traffic together and treating each type as a class. You can use CoS to give different priorities to different packet types. CoS technologies include IEEE 802.1p layer 2 tagging and DiffServ (Differentiated Services or DS). IEEE 802.1p tagging makes use of three bits in the packet header, while DiffServ is a new protocol and defines a new DS field, which replaces the eight-bit ToS (Type of Service) field in the IP header.
Page 141: The Quality Of Service General Screen
Chapter 9 Quality of Service (QoS) which are performed on the colored packets. See Section 9.8 on page 152 for more information on each metering algorithm. 9.3 The Quality of Service General Screen Click Network Setting > QoS > General to open the screen as shown next. Use this screen to enable or disable QoS and set the upstream bandwidth.
Page 142: The Queue Setup Screen
Chapter 9 Quality of Service (QoS) Table 47 Network Setting > QoS > General (continued) (continued) LABEL DESCRIPTION LAN Managed Enter the amount of downstream bandwidth for the LAN interfaces (including WLAN) that Downstream you want to allocate using QoS. Bandwidth The recommendation is to set this speed to match the WAN interfaces’...
Page 143: Adding A Qos Queue
Chapter 9 Quality of Service (QoS) The following table describes the labels in this screen. Table 48 Network Setting > QoS > Queue Setup LABEL DESCRIPTION Add new Queue Click this button to create a new queue entry. This is the index number of the entry. Status This field displays whether the queue is active or not.
Page 144: The Class Setup Screen
Chapter 9 Quality of Service (QoS) Table 49 Queue Setup: Add (continued) LABEL DESCRIPTION Priority Select the priority level (from 1 to 7) of this queue. The smaller the number, the higher the priority level. Traffic assigned to higher priority queues gets through faster while traffic in lower priority queues is dropped if the network is congested.
Page 145 Chapter 9 Quality of Service (QoS) Table 50 Network Setting > QoS > Class Setup (continued) LABEL DESCRIPTION DSCP Mark This is the DSCP number added to traffic of this classifier. 802.1P Mark This is the IEEE 802.1p priority level assigned to traffic of this classifier. VLAN ID Tag This is the VLAN ID number assigned to traffic of this classifier.
Page 146: Add/Edit Qos Class
Chapter 9 Quality of Service (QoS) 9.5.1 Add/Edit QoS Class Click Add new Classifier in the Class Setup screen or the Edit icon next to a classifier to open the following screen. Figure 78 Class Setup: Add/Edit VMG8324-B10A / VMG8324-B30A Series User’s Guide...
Page 147 Chapter 9 Quality of Service (QoS) The following table describes the labels in this screen. Table 51 Class Setup: Add/Edit LABEL DESCRIPTION Active Select this to enable this classifier. Class Name Enter a descriptive name of up to 15 printable English keyboard characters, not including spaces.
Page 148 Chapter 9 Quality of Service (QoS) Table 51 Class Setup: Add/Edit (continued) LABEL DESCRIPTION Service This field is available only when you select IP in the Ether Type field. This field simplifies classifier configuration by allowing you to select a predefined application.
Page 149: The Qos Policer Setup Screen
Chapter 9 Quality of Service (QoS) Table 51 Class Setup: Add/Edit (continued) LABEL DESCRIPTION To Queue Index Select a queue that applies to this class. You should have configured a queue in the Queue Setup screen already. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving.
Page 150: Add/Edit A Qos Policer
Chapter 9 Quality of Service (QoS) 9.6.1 Add/Edit a QoS Policer Click Add new Policer in the Policer Setup screen or the Edit icon next to a policer to show the following screen. Figure 80 Policer Setup: Add/Edit The following table describes the labels in this screen. Table 53 Policer Setup: Add/Edit LABEL DESCRIPTION...
Page 151: The Qos Monitor Screen
Chapter 9 Quality of Service (QoS) Table 53 Policer Setup: Add/Edit LABEL DESCRIPTION Available Class Select a QoS classifier to apply this QoS policer to traffic that matches the QoS classifier. Selected Class Highlight a QoS classifier in the Available Class box and use the > button to move it to the Selected Class box.
Page 152: Technical Reference
Chapter 9 Quality of Service (QoS) Table 54 Network Setting > QoS > Monitor (continued) LABEL DESCRIPTION Name This shows the name of the queue. Pass Rate This shows how many packets assigned to this queue are transmitted successfully. Drop Rate This shows how many packets assigned to this queue are dropped.
Page 153 Chapter 9 Quality of Service (QoS) indicating the level of service desired. This allows the intermediary DiffServ-compliant network devices to handle the packets differently depending on the code points without the need to negotiate paths or remember state information for every flow. In addition, applications do not have to request a particular service or give advanced notice of where the traffic is going.
Page 154 Chapter 9 Quality of Service (QoS) Table 56 Internal Layer2 and Layer3 QoS Mapping LAYER 2 LAYER 3 PRIORITY IEEE 802.1P USER QUEUE PRIORITY TOS (IP IP PACKET DSCP (ETHERNET PRECEDENCE) LENGTH (BYTE) PRIORITY) 010110 010100 010010 010000 011110 <250 011100 011010 011000...
Page 155 Chapter 9 Quality of Service (QoS) Configure the bucket size to be equal to or less than the amount of the bandwidth that the interface can support. It does not help if you set it to a bucket size over the interface’s capability. The smaller the bucket size, the lower the data transmission rate and that may cause outgoing packets to be dropped.
Page 156 Chapter 9 Quality of Service (QoS) All packets are evaluated against the PIR. If a packet exceeds the PIR it is marked red. Otherwise it is evaluated against the CIR. If it exceeds the CIR then it is marked yellow. Finally, if it is below the CIR then it is marked green.
Page 157: Network Address Translation (Nat)
HAPTER Network Address Translation (NAT) 10.1 Overview This chapter discusses how to configure NAT on the Device. NAT (Network Address Translation - NAT, RFC 1631) is the translation of the IP address of a host in a packet, for example, the source address of an outgoing packet, used within one network to a different IP address known within another network.
Page 158: Configuring Servers Behind Port Forwarding
Chapter 10 Network Address Translation (NAT) In the simplest form, NAT changes the source IP address in a packet received from a subscriber (the inside local address) to another (the inside global address) before forwarding the packet to the WAN side. When the response comes back, NAT translates the destination address (the inside global address) back to the inside local address before forwarding it to the original inside host.
Page 159 Chapter 10 Network Address Translation (NAT) third (C in the example). You assign the LAN IP addresses and the ISP assigns the WAN IP address. The NAT network appears as a single host on the Internet. Figure 82 Multiple Servers Behind NAT Example A=192.168.1.33 B=192.168.1.34 192.168.1.1...
Page 160: Add/Edit Port Forwarding
Chapter 10 Network Address Translation (NAT) Table 57 Network Setting > NAT > Port Forwarding (continued) LABEL DESCRIPTION Protocol This shows the IP protocol supported by this virtual server, whether it is TCP, UDP, or TCP/ UDP. Modify Click the Edit icon to edit this rule. Click the Delete icon to delete an existing rule.
Page 161: The Applications Screen
Chapter 10 Network Address Translation (NAT) Table 58 Port Forwarding: Add/Edit (continued) LABEL DESCRIPTION End Port Enter the last port of the original destination port range. To forward only one port, enter the port number in the Start Port field above and then enter it again in this field.
Page 162: Add New Application
Chapter 10 Network Address Translation (NAT) 10.3.1 Add New Application This screen lets you create new NAT application rules. Click Add new application in the Applications screen to open the following screen. Figure 86 Applications: Add The following table describes the labels in this screen. Table 60 Applications: Add LABEL DESCRIPTION...
Page 163 Chapter 10 Network Address Translation (NAT) For example: Figure 87 Trigger Port Forwarding Process: Example Jane requests a file from the Real Audio server (port 7070). Port 7070 is a “trigger” port and causes the Device to record Jane’s computer IP address. The Device associates Jane's computer IP address with the "open"...
Page 164: Add/Edit Port Triggering Rule
Chapter 10 Network Address Translation (NAT) Table 61 Network Setting > NAT > Port Triggering (continued) LABEL DESCRIPTION Open Start Port The open port is a port (or a range of ports) that a server on the WAN uses when it sends out a particular service.
Page 165: The Dmz Screen
Chapter 10 Network Address Translation (NAT) Table 62 Port Triggering: Configuration Add/Edit (continued) LABEL DESCRIPTION Open Start Port The open port is a port (or a range of ports) that a server on the WAN uses when it sends out a particular service. The Device forwards the traffic with this port (or range of ports) to the client computer on the LAN that requested the service.
Page 166: The Alg Screen
Chapter 10 Network Address Translation (NAT) 10.6 The ALG Screen Some NAT routers may include a SIP Application Layer Gateway (ALG). A SIP ALG allows SIP calls to pass through NAT by examining and translating IP addresses embedded in the data stream. When the Device registers with the SIP register server, the SIP ALG translates the Device’s private IP address inside the SIP data stream to a public IP address.
Page 167: Add/Edit Address Mapping Rule
Chapter 10 Network Address Translation (NAT) The following table describes the fields in this screen. Table 65 Network Setting > NAT > Address Mapping LABEL DESCRIPTION Add new rule Click this to create a new rule. This is the index number of the address mapping set. Local Start IP This is the starting Inside Local IP Address (ILA).
Page 168: The Address Mapping Screen
Chapter 10 Network Address Translation (NAT) The following table describes the fields in this screen. Table 66 Address Mapping: Add/Edit LABEL DESCRIPTION Type Choose the IP/port mapping type from one of the following. One-to-One: This mode maps one local IP address to one global IP address. Note that port numbers do not change for the One-to-one NAT mapping type.
Page 169: The Sessions Screen
Chapter 10 Network Address Translation (NAT) Table 67 Network Setting > NAT > Address Mapping (continued) LABEL DESCRIPTION Global Start IP This is the starting Inside Global IP Address (IGA). Enter 0.0.0.0 here if you have a dynamic IP address from your ISP. You can only do this for the Many-to-One mapping type. Global End IP This is the ending Inside Global IP Address (IGA).
Page 170: Nat Definitions
Chapter 10 Network Address Translation (NAT) 10.10.1 NAT Definitions Inside/outside denotes where a host is located relative to the Device, for example, the computers of your subscribers are the inside hosts, while the web servers on the Internet are the outside hosts.
Page 171: What Nat Does
Chapter 10 Network Address Translation (NAT) Note that inside/outside refers to the location of a host, while global/local refers to the IP address of a host used in a packet. Thus, an inside local address (ILA) is the IP address of an inside host in a packet when the packet is still in the local network, while an inside global address (IGA) is the IP address of the same inside host when the packet is on the WAN side.
Page 172: How Nat Works
Chapter 10 Network Address Translation (NAT) 10.10.3 How NAT Works Each packet has two addresses – a source address and a destination address. For outgoing packets, the ILA (Inside Local Address) is the source address on the LAN, and the IGA (Inside Global Address) is the source address on the WAN.
Page 173: Nat Application
Chapter 10 Network Address Translation (NAT) 10.10.4 NAT Application The following figure illustrates a possible NAT application, where three inside LANs (logical LANs using IP alias) behind the Device can communicate with three distinct WAN networks. Figure 97 NAT Application With IP Alias Port Forwarding: Services and Port Numbers The most often used port numbers are shown in the following table.
Page 174 Chapter 10 Network Address Translation (NAT) Port Forwarding Example Let's say you want to assign ports 21-25 to one FTP, Telnet and SMTP server (A in the example), port 80 to another (B in the example) and assign a default server IP address of 192.168.1.35 to a third (C in the example).
Page 175: Dynamic Dns Setup
HAPTER Dynamic DNS Setup 11.1 Overview DNS (Domain Name System) is for mapping a domain name to its corresponding IP address and vice versa. The DNS server is extremely important because without it, you must know the IP address of a machine before you can access it. In addition to the system DNS server(s), each WAN interface (service) is set to have its own static or dynamic DNS server list.
Page 176: What You Need To Know
Chapter 11 Dynamic DNS Setup 11.1.2 What You Need To Know DYNDNS Wildcard Enabling the wildcard feature for your host causes *.yourhost.dyndns.org to be aliased to the same IP address as yourhost.dyndns.org. This feature is useful if you want to be able to use, for example, www.yourhost.dyndns.org and still reach your hostname.
Page 177: Add/Edit Dns Entry
Chapter 11 Dynamic DNS Setup 11.2.1 Add/Edit DNS Entry You can manually add or edit the Device’s DNS name and IP address entry. Click Add new DNS entry in the DNS Entry screen or the Edit icon next to the entry you want to edit. The screen shown next appears.
Page 178 Chapter 11 Dynamic DNS Setup The following table describes the fields in this screen. Table 73 Network Setting > DNS > > Dynamic DNS LABEL DESCRIPTION Dynamic DNS Select Enable to use dynamic DNS. Service Select your Dynamic DNS service provider from the drop-down list box. Provider Hostname Type the domain name assigned to your Device by your Dynamic DNS provider.
Page 179: Interface Group
HAPTER Interface Group 12.1 Overview By default, all LAN and WAN interfaces on the Device are in the same group and can communicate with each other. Create interface groups to have the Device assign the IP addresses in different domains to different groups. Each group acts as an independent network on the Device. This lets devices connected to an interface group’s LAN interfaces communicate through the interface group’s WAN or LAN interfaces but not other WAN or LAN interfaces.
Page 180: Interface Group Configuration
Chapter 12 Interface Group In the following example, the client that sends packets with the DHCP Vendor ID option set to MSFT 5.0 (meaning it is a Windows 2000 DHCP client) is assigned the IP address 192.168.2.2 and uses the WAN VDSL_PoE/ppp0.1 interface. Figure 102 Interface Grouping Application Default: ETH 2~4 192.168.1.x/24...
Page 181 Chapter 12 Interface Group Note: An interface can belong to only one group at a time. Figure 104 Interface Group Configuration The following table describes the fields in this screen. Table 75 Interface Group Configuration LABEL DESCRIPTION Group Name Enter a name to identify this group. You can enter up to 30 characters. You can use letters, numbers, hyphens (-) and underscores (_).
Page 182: Interface Grouping Criteria
Chapter 12 Interface Group Table 75 Interface Group Configuration (continued) LABEL DESCRIPTION This shows the index number of the rule. Filter Criteria This shows the filtering criteria. The LAN interface on which the matched traffic is received will belong to this group automatically. WildCard This shows if wildcard on DHCP option 60 is enabled.
Page 183 Chapter 12 Interface Group Table 76 Interface Grouping Criteria (continued) LABEL DESCRIPTION DHCP Option Select this and enter the device identity of the matched traffic. IAID Enter the Identity Association Identifier (IAID) of the device, for example, the WAN connection index number. DUID type Select DUID-LLT (DUID Based on Link-layer Address Plus Time) to enter the hardware type, a time value and the MAC address of the device.
Page 184 Chapter 12 Interface Group VMG8324-B10A / VMG8324-B30A Series User’s Guide...
Page 185: Usb Service
HAPTER USB Service 13.1 Overview You can share files on a USB memory stick or hard drive connected to your Device with users on your network. The following figure is an overview of the Device’s file server feature. Computers A and B can access files on a USB device (C) which is connected to the Device.
Page 186 Chapter 13 USB Service 13.1.2.1 About File Sharing Workgroup name This is the name given to a set of computers that are connected on a network and share resources such as a printer or files. Windows automatically assigns the workgroup name when you set up a network.
Page 187: Before You Begin
Chapter 13 USB Service Supported OSs Your operating system must support TCP/IP ports for printing and be compatible with the RAW (port 9100) protocol. The following OSs support Device’s printer sharing feature. • Microsoft Windows 95, Windows 98 SE (Second Edition), Windows Me, Windows NT 4.0, Windows 2000, Windows XP or Macintosh OS X.
Page 188: The File Sharing Screen
Chapter 13 USB Service 13.2 The File Sharing Screen Use this screen to set up file sharing through the Device. The Device’s LAN users can access the shared folder (or share) from the USB device inserted in the Device. To access this screen, click Network Setting >...
Page 189: The Add New Share Screen
Chapter 13 USB Service Table 77 Network Setting > Home Networking > File Sharing LABEL DESCRIPTION Share Name This field shows the name of a folder that is shared through the Device. Share Path This field shows the location of the share in the Device. Share This field shows a short description of the share.
Page 190: The Add New User Screen
Chapter 13 USB Service Table 78 Network Setting > Home Networking > File Sharing > Add new share LABEL DESCRIPTION Access Level Select Public to allow all users on the network to access the shared files. Select Security to require users to log in to access shared files. Set up user accounts in the Account Management section.
Page 191: Printer Server
Chapter 13 USB Service media clients (like Windows Media Player). The Digital Living Network Alliance (DLNA) is a group of personal computer and electronics companies that works to make products compatible in a home network. The Device media server enables you to: •...
Page 192: The Printer Server Screen
Chapter 13 USB Service • A USB printer with the driver already installed on your computer. • The computers on your network must have the printer software already installed before they can create a TCP/IP port for printing via the network. Follow your printer manufacturers instructions on how to install the printer software on your computer.
Page 193: Power Management
HAPTER Power Management 14.1 Overview Power management allows you to turn on/off one or more interfaces and all LED lights without power off the whole system when necessary. You can configure a schedule to do so automatically or manually do it on the Web Configurator. 14.1.1 What You Can Do in this Chapter •...
Page 194: The Auto Switch Off Screen
Chapter 14 Power Management Each field is described in the following table. Table 82 Network Setting > Power Management LABEL DESCRIPTION Manually Select POWER ON or POWER OFF to turn on/off the interface or LED lights. Switch On/Off Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings.
Page 195: The Auto Switch Off Add/Edit Screen
Chapter 14 Power Management 14.3.1 The Auto Switch Off Add/Edit Screen Use this screen to manage the auto switch off schedules. To access this screen, click the Add or modify rules link in the Network Setting > Power Management > Auto Switch Off screen. Figure 114 Network Setting >...
Page 196 Chapter 14 Power Management Each field is described in the following table. Table 85 Network Setting > Power Management > Auto Switch Off > Add or modify rules > Add new rule/Edit> LABEL DESCRIPTION Rule Name Type up to 31 alphanumberic characters for the name of this rule. Select the week day(s) of the schedule.
Page 197: Firewall
HAPTER Firewall 15.1 Overview This chapter shows you how to enable and configure the Device’s security settings. Use the firewall to protect your Device and network from attacks by hackers on the Internet and control access to it. By default the firewall: •...
Page 198: What You Need To Know
Chapter 15 Firewall 15.1.2 What You Need to Know SYN Attack A SYN attack floods a targeted system with a series of SYN packets. Each packet causes the targeted system to issue a SYN-ACK response. While the targeted system waits for the ACK that follows the SYN-ACK, it queues up all outstanding SYN-ACK responses on a backlog queue.
Page 199: The Firewall Screen
Chapter 15 Firewall 15.2 The Firewall Screen Use this screen to set the security level of the firewall on the Device. Firewall rules are grouped based on the direction of travel of packets to which they apply. Click Security > Firewall to display the General screen. Figure 117 Security >...
Page 200: Add/Edit A Service
Chapter 15 Firewall Click Security > Firewall > Protocol to display the following screen. Figure 118 Security > Firewall > Protocol The following table describes the labels in this screen. Table 87 Security > Firewall > Protocol LABEL DESCRIPTION Add new Click this to add a new service.
Page 201: The Access Control Screen
Chapter 15 Firewall The following table describes the labels in this screen. Table 88 Service: Add/Edit LABEL DESCRIPTION Protocol Choose the IP protocol (TCP, UDP, ICMP, or Other) that defines your customized port from the drop-down list box. Select Other to be able to enter a protocol number. Source/ These fields are displayed if you select TCP or UDP as the IP port.
Page 202: Add/Edit An Acl Rule
Chapter 15 Firewall Table 89 Security > Firewall > Access Control (continued) LABEL DESCRIPTION Name This displays the name of the rule. Src IP This displays the source IP addresses to which this rule applies. Please note that a blank source address is equivalent to Any.
Page 203 Chapter 15 Firewall The following table describes the labels in this screen. Table 90 Access Control: Add/Edit LABEL DESCRIPTION Filter Name Enter a descriptive name of up to 16 alphanumeric characters, not including spaces, underscores, and dashes. You must enter the filter name to add an ACL rule. This field is read-only if you are editing the ACL rule.
Page 204: The Dos Screen
Chapter 15 Firewall 15.5 The DoS Screen DoS (Denial of Service) attacks can flood your Internet connection with invalid packets and connection requests, using so much bandwidth and so many resources that Internet access becomes unavailable. Use the DoS screen to activate protection against DoS attacks. Click Security > Firewall > DoS to display the following screen.
Page 205: Mac Filter
HAPTER MAC Filter 16.1 Overview You can configure the Device to permit access to clients based on their MAC addresses in the MAC Filter screen. This applies to wired and wireless connections. Every Ethernet device has a unique MAC (Media Access Control) address. The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02.
Page 206 Chapter 16 MAC Filter The following table describes the labels in this screen. Table 92 Security > MAC Filter LABEL DESCRIPTION MAC Address Filter Select Enable to activate the MAC filter function. This is the index number of the MAC address. Allow Select Allow to permit access to the Device.
Page 207: Parental Control
HAPTER Parental Control 17.1 Overview Parental control allows you to block web sites with the specific URL. You can also define time periods and days during which the Device performs parental control on a specific user. 17.2 The Parental Control Screen Use this screen to enable parental control, view the parental control rules and schedules.
Page 208: Add/Edit A Parental Control Rule
Chapter 17 Parental Control Table 93 Security > Parental Control (continued) LABEL DESCRIPTION Internet Access This shows the day(s) and time on which parental control is enabled. Schedule Network This shows whether the network service is configured. If not, None will be shown. Service Website Block This shows whether the website block is configured.
Page 209 Chapter 17 Parental Control The following table describes the fields in this screen. Table 94 Parental Control Rule: Add/Edit LABEL DESCRIPTION General Active Select the checkbox to activate this parental control rule. Parental Enter a descriptive name for the rule. Control Profile Name Home Network...
Page 210 Chapter 17 Parental Control VMG8324-B10A / VMG8324-B30A Series User’s Guide...
Page 211: Scheduler Rule
HAPTER Scheduler Rule 18.1 Overview You can define time periods and days during which the Device performs scheduled rules of certain features (such as Firewall Access Control) in the Scheduler Rule screen. 18.2 The Scheduler Rule Screen Use this screen to view, add, or edit time schedule rules. Click Security >...
Page 212: Add/Edit A Schedule
Chapter 18 Scheduler Rule 18.2.1 Add/Edit a Schedule Click the Add button in the Scheduler Rule screen or click the Edit icon next to a schedule rule to open the following screen. Use this screen to configure a restricted access schedule. Figure 127 Scheduler Rule: Add/Edit The following table describes the fields in this screen.
Page 213: Certificates
HAPTER Certificates 19.1 Overview The Device can use certificates (also called digital IDs) to authenticate users. Certificates are based on public-private key pairs. A certificate contains the certificate owner’s identity and public key. Certificates provide a way to exchange public keys for use in authentication. 19.1.1 What You Can Do in this Chapter •...
Page 214: Create Certificate Request
Chapter 19 Certificates The following table describes the labels in this screen. Table 97 Security > Certificates > Local Certificates LABEL DESCRIPTION Private Key is Select the checkbox and enter the private key into the text box to store it on the Device. protected by a The private key should not exceed 63 ASCII characters (not including spaces).
Page 215: Load Signed Certificate
Chapter 19 Certificates The following table describes the labels in this screen. Table 98 Create Certificate Request LABEL DESCRIPTION Certificate Type up to 63 ASCII characters (not including spaces) to identify this certificate. Name Common Name Select Auto to have the Device configure this field automatically. Or select Customize to enter it manually.
Page 216: The Trusted Ca Screen
Chapter 19 Certificates Note: You must remove any spaces from the certificate’s filename before you can import Figure 131 Load Signed Certificate The following table describes the labels in this screen. Table 99 Load Signed Certificate LABEL DESCRIPTION Certificate This is the name of the signed certificate. Name Certificate Copy and paste the signed certificate into the text box to store it on the Device.
Page 217 Chapter 19 Certificates being trustworthy; thus you do not need to import any certificate that is signed by one of these certification authorities. Figure 132 Security > Certificates > Trusted CA The following table describes the fields in this screen. Table 100 Security >...
Page 218: View Trusted Ca Certificate
Chapter 19 Certificates 19.4.1 View Trusted CA Certificate Click the View icon in the Trusted CA screen to open the following screen. Use this screen to view in-depth information about the certification authority’s certificate. Figure 133 Trusted CA: View The following table describes the fields in this screen. Table 101 Trusted CA: View LABEL DESCRIPTION...
Page 219: Import Trusted Ca Certificate
Chapter 19 Certificates 19.4.2 Import Trusted CA Certificate Click the Import Certificate button in the Trusted CA screen to open the following screen. The Device trusts any valid certificate signed by any of the imported trusted CA certificates. Figure 134 Trusted CA: Import Certificate The following table describes the fields in this screen.
Page 220 Chapter 19 Certificates VMG8324-B10A / VMG8324-B30A Series User’s Guide...
Page 221: Vpn
HAPTER 20.1 Overview A virtual private network (VPN) provides secure communications over the the Internet. Internet Protocol Security (IPSec) is a standards-based VPN that provides confidentiality, data integrity, and authentication. This chapter shows you how to configure the Device’s VPN settings. 20.2 The IPSec VPN General Screen Use this screen to view and manage your VPN tunnel policies.
Page 222: The Ipsec Vpn Add/Edit Screen
Chapter 20 VPN This screen contains the following fields: Table 103 Security > IPSec VPN LABEL DESCRIPTION Add New Click this button to add an item to the list. Connection This displays the index number of an entry. Status This displays whether the VPN policy is enabled (Enable) or not (Disable). Connection Name The name of the VPN policy.
Page 223 Chapter 20 VPN Figure 137 Security > IPSec VPN: Add/Edit This screen contains the following fields: Table 104 Security > IPSec VPN: Add/Edit LABEL DESCRIPTION Active Select this to activate this VPN policy. IPSec Connection Enter the name of the VPN policy. Name Remote IPSec Enter the IP address of the remote IPSec router in the IKE SA.
Page 224 Chapter 20 VPN Table 104 Security > IPSec VPN: Add/Edit LABEL DESCRIPTION IP Address for If Single Address is selected, enter a (static) IP address on the LAN behind your Device. If Subnet is selected, specify IP addresses on a network by their subnet mask by entering a (static) IP address on the LAN behind your Device.
Page 225 Chapter 20 VPN Table 104 Security > IPSec VPN: Add/Edit LABEL DESCRIPTION Local ID Content When you select IP in the Local ID Type field, type the IP address of your computer in this field. If you configure this field to 0.0.0.0 or leave it blank, the Device automatically uses the Pre-Shared Key (refer to the Pre-Shared Key field description).
Page 226 Chapter 20 VPN Table 104 Security > IPSec VPN: Add/Edit LABEL DESCRIPTION Encryption Select which key size and encryption algorithm to use in the IKE SA. Choices are: Algorithm DES - a 56-bit key with the DES encryption algorithm 3DES - a 168-bit key with the DES encryption algorithm AES - 128 - a 128-bit key with the AES encryption algorithm AES - 196 - a 196-bit key with the AES encryption algorithm AES - 256 - a 256-bit key with the AES encryption algorithm...
Page 227 Chapter 20 VPN Table 104 Security > IPSec VPN: Add/Edit LABEL DESCRIPTION Perfect Forward Select whether or not you want to enable Perfect Forward Secrecy (PFS) Secrecy (PFS) PFS changes the root key that is used to generate encryption keys for each IPSec SA. The longer the key, the more secure the encryption, but also the longer it takes to encrypt and decrypt information.
Page 228: The Ipsec Vpn Monitor Screen
Chapter 20 VPN 20.4 The IPSec VPN Monitor Screen Use this screen to check your VPN tunnel’s current status. You can also manually trigger a VPN tunnel to the remote network. Click Security > IPSec VPN > Monitor to open this screen as shown next.
Page 229: Encapsulation
Chapter 20 VPN Figure 139 IPSec Architecture IPSec Algorithms The ESP (Encapsulating Security Payload) Protocol (RFC 2406) and AH (Authentication Header) protocol (RFC 2402) describe the packet formats and the default standards for packet structure (including implementation algorithms). The Encryption Algorithm describes the use of encryption techniques such as DES (Data Encryption Standard) and Triple DES algorithms.
Page 230: Ike Phases
Chapter 20 VPN Transport Mode Transport mode is used to protect upper layer protocols and only affects the data in the IP packet. In Transport mode, the IP packet contains the security protocol (AH or ESP) located after the original IP header and options, but before any upper layer protocols contained in the packet (such as TCP and UDP).
Page 231: Negotiation Mode
Chapter 20 VPN Figure 141 Two Phases to Set Up the IPSec SA In phase 1 you must: • Choose a negotiation mode. • Authenticate the connection by entering a pre-shared key. • Choose an encryption algorithm. • Choose an authentication algorithm. •...
Page 232: Ipsec And Nat
Chapter 20 VPN • Aggressive Mode is quicker than Main Mode because it eliminates several steps when the communicating parties are negotiating authentication (phase 1). However the trade-off is that faster speed limits its negotiating power and it also does not provide identity protection. It is useful in remote access situations where the address of the initiator is not know by the responder and both parties want to use pre-shared key authentication.
Page 233: Id Type And Content
Chapter 20 VPN Figure 142 NAT Router Between IPSec Routers Normally you cannot set up an IKE SA with a NAT router between the two IPSec routers because the NAT router changes the header of the IPSec packet. NAT traversal solves the problem by adding a UDP port 500 header to the IPSec packet.
Page 234: Pre-Shared Key
Chapter 20 VPN The type of ID can be a domain name, an IP address or an e-mail address. The content is the IP address, domain name, or e-mail address. Table 108 Local ID Type and Content Fields LOCAL ID TYPE= CONTENT= Type the IP address of your computer.
Page 235: Voice
HAPTER Voice 21.1 Overview Use this chapter to: • Connect an analog phone to the Device. • Make phone calls over the Internet, as well as the regular phone network. • Configure settings such as speed dial. • Configure network settings to optimize the voice quality of your phone calls. 21.1.1 What You Can Do in this Chapter These screens allow you to configure your Device to make phone calls over the Internet and your regular phone line, and to set up the phones you connect to the Device.
Page 236: What You Need To Know About Voip
Chapter 21 Voice 21.1.2 What You Need to Know About VoIP VoIP VoIP stands for Voice over IP. IP is the Internet Protocol, which is the message-carrying standard the Internet runs on. So, Voice over IP is the sending of voice signals (speech) over the Internet (or another network that uses the Internet Protocol).
Page 237: The Sip Account Add/Edit Screen
Chapter 21 Voice call, you need to enable and configure a SIP account, and map it to a phone port. The SIP account contains information that allows your Device to connect to your VoIP service provider. Section 21.3.1 on page 237 for how to map a SIP account to a phone port.
Page 238 Chapter 21 Voice Note: Click more to see all the fields in the screen. You don’t necessarily need to use all these fields to set up your account. Click less to see and configure only the fields needed for this feature. Figure 144 VoIP >...
Page 239 Chapter 21 Voice Table 112 VoIP > SIP > SIP Account > Add new accoun/Edit (continued) LABEL DESCRIPTION Apply To Phone Select a phone port on which you want to make or receive phone calls for this SIP account. If you map a phone port to more than one SIP account, there is no way to distinguish between the SIP accounts when you receive phone calls.
Page 240 Chapter 21 Voice Table 112 VoIP > SIP > SIP Account > Add new accoun/Edit (continued) LABEL DESCRIPTION Send Caller ID Select this if you want to send identification when you make VoIP phone calls. Clear this if you do not want to send identification. Enable Call Select this to enable call transfer on the Device.
Page 241: The Sip Service Provider Screen
Chapter 21 Voice Table 112 VoIP > SIP > SIP Account > Add new accoun/Edit (continued) LABEL DESCRIPTION Warm Line Select this to have the Device dial the specified warm line number after you pick up the telephone and do not press any keys on the keypad for a period of time. Hot Line Select this to have the Device dial the specified hot line number immediately when you pick up the telephone.
Page 242: The Sip Service Provider Add/Edit Screen
Chapter 21 Voice Each field is described in the following table. Table 113 VoIP > SIP > SIP Service Provider LABEL DESCRIPTION Add new provider This is the index number of the entry. SIP Service This shows the name of the SIP service provider. Provider Name SIP Server This shows the IP address or domain name of the SIP server.
Page 243 Chapter 21 Voice Note: Click more to see all the fields in the screen. You don’t necessarily need to use all these fields to set up your account. Click less to see and configure only the fields needed for this feature. Figure 146 VoIP >...
Page 244 Chapter 21 Voice Table 114 VoIP > SIP > SIP Service Provider > Add new provider/Edit (continued) LABEL DESCRIPTION SIP Server Enter the IP address or domain name of the SIP server provided by your VoIP service Address provider. You can use up to 95 printable ASCII characters. It does not matter whether the SIP server is a proxy, redirect or register server.
Page 245 Chapter 21 Voice Table 114 VoIP > SIP > SIP Service Provider > Add new provider/Edit (continued) LABEL DESCRIPTION Bound If you select LAN or Any_WAN, the Device automatically activates the VoIP service when Interface Name any LAN or WAN connection is up. If you select Multi_WAN, you also need to select two or more pre-configured WAN interfaces.
Page 246 Chapter 21 Voice Table 114 VoIP > SIP > SIP Service Provider > Add new provider/Edit (continued) LABEL DESCRIPTION Ignore Direct IP Select Enable to have the connected CPE devices accept SIP requests only from the SIP proxy/register server specified above. SIP requests sent from other IP addresses will be ignored.
Page 247 Chapter 21 Voice Table 114 VoIP > SIP > SIP Service Provider > Add new provider/Edit (continued) LABEL DESCRIPTION No Answer Call Enter the key combinations that you can enter to forward incoming calls to the phone Forward Enable number you specified in the SIP > SIP Account screen if the calls are unanswered. No Answer Call Enter the key combinations that you can enter to turn the no answer call forward function Forward...
Page 248: Dial Plan Rules
Chapter 21 Voice 21.4.2 Dial Plan Rules A dial plan defines the dialing patterns, such as the length and range of the digits for a telephone number. It also includes country codes, access codes, area codes, local numbers, long distance numbers or international call prefixes.
Page 249: The Phone Screen
Chapter 21 Voice 21.5 The Phone Screen Use this screen to maintain settings that depend on which region of the world the Device is in. To access this screen, click VoIP > Phone. Figure 147 VoIP > Phone Each field is described in the following table. Table 115 VoIP >...
Page 250: The Call History Summary Screen
Chapter 21 Voice rule, you can use a shortcut (the speed dial number, #01 for example) on your phone's keypad to call the phone number. Figure 148 VoIP > Call Rule Each field is described in the following table. Table 116 VoIP > Call Rule LABEL DESCRIPTION Clear all speed...
Page 251: The Call History Outgoing Calls Screen
Chapter 21 Voice Each field is described in the following table. Table 117 VoIP > Call History > Call History Summary LABEL DESCRIPTION Refresh Click this button to renew the call history list. Clear All Click this button to remove all entries from the call history list. This is a read-only index number.
Page 252: Technical Reference
Chapter 21 Voice Click VoIP > Call History > Call History Incoming Calls. The following screen displays. Figure 151 VoIP > Call History > Call History Incoming Calls Each field is described in the following table. Table 119 VoIP > Call History > Call History Incoming LABEL DESCRIPTION Refresh...
Page 253 Chapter 21 Voice way similar to the way an e-mail address identifies an e-mail account. The format of a SIP identity is SIP-Number@SIP-Service-Domain. SIP Number The SIP number is the part of the SIP URI that comes before the “@” symbol. A SIP number can use letters like in an e-mail address (johndoe@your-ITSP.com for example) or numbers like a telephone number (1122334455@VoIP-provider.com for example).
Page 254 Chapter 21 Voice SIP User Agent A SIP user agent can make and receive VoIP telephone calls. This means that SIP can be used for peer-to-peer communications even though it is a client-server protocol. In the following figure, either A or B can act as a SIP user agent client to initiate a call. A and B can also both act as a SIP user agent to receive the call.
Page 255 Chapter 21 Voice In the following example, you want to use client device A to call someone who is using client device Client device A sends a call invitation for C to the SIP redirect server (B). The SIP redirect server sends the invitation back to A with C’s IP address (or domain name). Client device A then sends the call invitation to client device C.
Page 256 Chapter 21 Voice SIP Call Progression The following figure displays the basic steps in the setup and tear down of a SIP call. A calls B. Table 120 SIP Call Progression 1. INVITE 2. Ringing 3. OK 4. ACK 5.Dialogue (voice traffic) 6.
Page 257 Chapter 21 Voice The following figure shows the SIP and session traffic flow between the user agents (UA 1 and UA 2) and the proxy servers (this example shows two proxy servers, PROXY 1 and PROXY 2). Figure 155 SIP Call Through Proxy Servers PROXY 1 PROXY 2 &...
Page 258 Chapter 21 Voice User Agent 2 sends an OK response to Proxy 2 after the call is answered. This is also relayed back to User Agent 1 via Proxy 1. User Agent 1 and User Agent 2 exchange RTP packets containing voice data directly, without involving the proxies.
Page 259 Chapter 21 Voice Custom Tones (IVR) IVR (Interactive Voice Response) is a feature that allows you to use your telephone to interact with the Device. The Device allows you to record custom tones for the Early Media and Music On Hold functions.
Page 260: Quality Of Service (Qos)
Chapter 21 Voice You can continue to add, listen to, or delete tones, or you can hang up the receiver when you are done. 21.10.1 Quality of Service (QoS) Quality of Service (QoS) refers to both a network's ability to deliver data with minimum delay, and the networking methods used to provide bandwidth for real-time multimedia applications.
Page 261 Chapter 21 Voice • Call Return • Call Hold • Call Waiting • Making a Second Call • Call Transfer • Call Forwarding • Three-Way Conference • Internal Calls • Call Park and Pickup • Do not Disturb • IVR •...
Page 262 Chapter 21 Voice Table 123 European Flash Key Commands COMMAND SUB-COMMAND DESCRIPTION Flash 1. Switch back and forth between two calls. 2. Put a current call on hold to answer an incoming call. 3. Separate the current three-way conference call into two individual calls (one is on-line, the other is on hold).
Page 263 Chapter 21 Voice European Three-Way Conference Use the following steps to make three-way conference calls. When you are on the phone talking to someone, press the flash key to put the caller on hold and get a dial tone. Dial a phone number directly to make another call. When the second call is answered, press the flash key and press “3”...
Page 264: Usa Call Transfer
Chapter 21 Voice USA Call Transfer Do the following to transfer an incoming call (that you have answered) to another phone. Press the flash key to put the caller on hold. When you hear the dial tone, dial “*98#” followed by the number to which you want to transfer the call.
Page 265 Chapter 21 Voice Table 125 Phone Functions Summary ACTION FUNCTION DESCRIPTION One Shot Caller Display Call Activate or deactivate caller ID for the next call only. One Shot Caller Hidden Call VMG8324-B10A / VMG8324-B30A Series User’s Guide...
Page 266 Chapter 21 Voice VMG8324-B10A / VMG8324-B30A Series User’s Guide...
Page 267: Log
HAPTER 22.1 Overview The web configurator allows you to choose which categories of events and/or alerts to have the Device log and then display the logs or have the Device send them to an administrator (as e-mail) or to a syslog server. 22.1.1 What You Can Do in this Chapter •...
Page 268: The System Log Screen
Chapter 22 Log Table 126 Syslog Severity Levels CODE SEVERITY Notice: There is a normal but significant condition on the system. Informational: The syslog contains an informational message. Debug: The message is intended for debug-level purposes. 22.2 The System Log Screen Use the System Log screen to see the system logs.
Page 269: The Security Log Screen
Chapter 22 Log 22.3 The Security Log Screen Use the Security Log screen to see the security-related logs for the categories that you select. Click System Monitor > Log > Security Log to open the following screen. Figure 158 System Monitor > Log > Security Log The following table describes the fields in this screen.
Page 270 Chapter 22 Log VMG8324-B10A / VMG8324-B30A Series User’s Guide...
Page 271: Traffic Status
HAPTER Traffic Status 23.1 Overview Use the Traffic Status screens to look at network traffic status and statistics of the WAN, LAN interfaces and NAT. 23.1.1 What You Can Do in this Chapter • Use the WAN screen to view the WAN traffic statistics (Section 23.2 on page 271).
Page 272 Chapter 23 Traffic Status The following table describes the fields in this screen. Table 129 System Monitor > Traffic Status > WAN LABEL DESCRIPTION Connected This shows the name of the WAN interface that is currently connected. Interface Packets Sent Data This indicates the number of transmitted packets on this interface.
Page 273: The Lan Status Screen
Chapter 23 Traffic Status 23.3 The LAN Status Screen Click System Monitor > Traffic Status > LAN to open the following screen. The figure in this screen shows the interface that is currently connected on the Device. Figure 160 System Monitor > Traffic Status > LAN The following table describes the fields in this screen.
Page 274: The Nat Status Screen
Chapter 23 Traffic Status 23.4 The NAT Status Screen Click System Monitor > Traffic Status > NAT to open the following screen. The figure in this screen shows the NAT session statistics for hosts currently connected on the Device. Figure 161 System Monitor > Traffic Status > NAT The following table describes the fields in this screen.
Page 275: Voip Status
HAPTER VoIP Status 24.1 The VoIP Status Screen Click System Monitor > VoIP Status to open the following screen. You can view the VoIP registration, current call status and phone numbers in this screen. Figure 162 System Monitor > VoIP Status The following table describes the fields in this screen.
Page 276 Chapter 24 VoIP Status Table 132 System Monitor > VoIP Status (continued) LABEL DESCRIPTION Message This field indicates whether or not there are any messages waiting for the SIP account. Waiting Last Incoming This field displays the last number that called the SIP account. The field is blank if no Number number has ever dialed the SIP account.
Page 277: Arp Table
HAPTER ARP Table 25.1 Overview Address Resolution Protocol (ARP) is a protocol for mapping an Internet Protocol address (IP address) to a physical machine address, also known as a Media Access Control or MAC address, on the local area network. An IP (version 4) address is 32 bits long.
Page 278 Chapter 25 ARP Table The following table describes the labels in this screen. Table 133 System Monitor > ARP Table LABEL DESCRIPTION This is the ARP table entry number. IPv4/IPv6 This is the learned IPv4 or IPv6 IP address of a device connected to a port. Address MAC Address This is the MAC address of the device with the listed IP address.
Page 279: Routing Table
HAPTER Routing Table 26.1 Overview Routing is based on the destination address only and the Device takes the shortest path to forward a packet. 26.2 The Routing Table Screen Click System Monitor > Routing Table to open the following screen. Figure 164 System Monitor >...
Page 280 Chapter 26 Routing Table Table 134 System Monitor > Routing Table (continued) LABEL DESCRIPTION Flag This indicates the route status. U-Up: The route is up. !-Reject: The route is blocked and will force a route lookup to fail. G-Gateway: The route uses a gateway to forward traffic. H-Host: The target of the route is a host.
Page 281: Igmp/Mld Status
HAPTER IGMP/MLD Status 27.1 Overview Use the IGMP Status screens to look at IGMP/MLD group status and traffic statistics. 27.2 The IGMP/MLD Group Status Screen Use this screen to look at the current list of multicast groups the Device has joined and which ports have joined it.
Page 282 Chapter 27 IGMP/MLD Status Table 135 System Monitor > IGMP/MLD Group Status (continued) LABEL DESCRIPTION Filter Mode INCLUDE means that only the IP addresses in the Source List get to receive the multicast group’s traffic. EXCLUDE means that the IP addresses in the Source List are not allowed to receive the multicast group’s traffic but other IP addresses can.
Page 283: Xdsl Statistics
HAPTER xDSL Statistics 28.1 The xDSL Statistics Screen Use this screen to view detailed DSL statistics. Click System Monitor > xDSL Statistics to open the following screen. Figure 166 System Monitor > xDSL Statistics VMG8324-B10A / VMG8324-B30A Series User’s Guide...
Page 284 Chapter 28 xDSL Statistics VMG8324-B10A / VMG8324-B30A Series User’s Guide...
Page 285 Chapter 28 xDSL Statistics The following table describes the labels in this screen. Table 136 Status > xDSL Statistics LABEL DESCRIPTION Refresh Interval Select the time interval for refreshing statistics. Line Select which DSL line’s statistics you want to display. xDSL Training This displays the current state of setting up the DSL connection.
Page 286 Chapter 28 xDSL Statistics Table 136 Status > xDSL Statistics (continued) LABEL DESCRIPTION Downstream These are the statistics for the traffic direction coming into the port from the service provider. Upstream These are the statistics for the traffic direction going out from the port to the service provider.
Page 287: Statistics
HAPTER 3G Statistics 29.1 Overview Use the 3G Statistics screens to look at 3G Internet connection status. 29.2 The 3G Statistics Screen To open this screen, click System Monitor > 3G Statistics. The 3G status is available on this screen only when you insert a compatible 3G dongle in a USB port on the Device. Figure 167 System Monitor >...
Page 288 Chapter 29 3G Statistics Table 137 System Monitor > 3G Statistics (continued) LABEL DESCRIPTION Signal Strength This field displays the strength of the signal in dBm. Connection This field displays the time the connection has been up. Uptime 3G Card This field displays the manufacturer of the 3G card.
Page 289: User Account
HAPTER User Account 30.1 Overview In the Users Account screen, you can change the password of the “admin” user account that you used to log in the Device. 30.2 The User Account Screen Click Maintenance > User Account to open the following screen. Figure 168 Maintenance >...
Page 290 Chapter 30 User Account VMG8324-B10A / VMG8324-B30A Series User’s Guide...
Page 291: Remote Management
HAPTER Remote Management 31.1 Overview Remote management controls through which interface(s), which services can access the Device. Note: The Device is managed using the Web Configurator. 31.2 The Remote MGMT Screen Use this screen to configure through which interface(s), which services can access the Device. You can also specify the port numbers the services must use to connect to the Device.
Page 292: The Trust Domain Screen
Chapter 31 Remote Management Table 139 Maintenance > Remote MGMT (continued) LABEL DESCRIPTION Port You may change the server port number for a service if needed, however you must use the same port number in order to use that service for remote management. Certificate HTTPS Select a certificate the HTTPS server (the Device) uses to authenticate itself to the HTTPS...
Page 293: The Add Trust Domain Screen
Chapter 31 Remote Management 31.4 The Add Trust Domain Screen Use this screen to configure a public IP address which is allowed to access the Device. Click the Add Trust Domain button in the Maintenance > Remote MGMT > Turst Domain screen to open the following screen.
Page 294 Chapter 31 Remote Management VMG8324-B10A / VMG8324-B30A Series User’s Guide...
Page 295: Client
HAPTER TR-069 Client 32.1 Overview This chapter explains how to configure the Device’s TR-069 auto-configuration settings. 32.2 The TR-069 Client Screen TR-069 defines how Customer Premise Equipment (CPE), for example your Device, can be managed over the WAN by an Auto Configuration Server (ACS). TR-069 is based on sending Remote Procedure Calls (RPCs) between an ACS and a client device.
Page 296 Chapter 32 TR-069 Client The following table describes the fields in this screen. Table 142 Maintenance > TR-069 Client LABEL DESCRIPTION Inform Select Enable for the Device to send periodic inform via TR-069 on the WAN. Otherwise, select Disable. Inform Interval Enter the time interval (in seconds) at which the Device sends information to the auto- configuration server.
Page 297: Chapter 33 Tr-064
HAPTER TR-064 33.1 Overview This chapter explains how to configure the Device’s TR-064 auto-configuration settings. 33.2 The TR-064 Screen TR-064 is a LAN-Side DSL CPE Configuration protocol defined by the DSL Forum. TR-064 is built on top of UPnP. It allows the users to use a TR-064 compliant CPE management application on their computers from the LAN to discover the CPE and configure user-specific parameters, such as the username and password.
Page 298 Chapter 33 TR-064 VMG8324-B10A / VMG8324-B30A Series User’s Guide...
Page 299: Snmp
HAPTER SNMP 34.1 Overview This chapter explains how to configure the SNMP settings on the Device. 34.2 The SNMP Screen Simple Network Management Protocol is a protocol used for exchanging management information between network devices. Your Device supports SNMP agent functionality, which allows a manager station to manage and monitor the Device through the network.
Page 300 Chapter 34 SNMP managed objects. SNMP allows a manager and agents to communicate for the purpose of accessing these objects. SNMP itself is a simple request/response protocol based on the manager/agent model. The manager issues a request and the agent returns responses using the following protocol operations: •...
Page 301: Time Settings
HAPTER Time Settings 35.1 Overview This chapter shows you how to configure system related settings, such as system time, password, name, the domain name and the inactivity timeout interval. 35.2 The Time Screen To change your Device’s time and date, click Maintenance > Time. The screen appears as shown. Use this screen to configure the Device’s time based on your local time zone.
Page 302 Chapter 35 Time Settings The following table describes the fields in this screen. Table 145 Maintenance > Time LABEL DESCRIPTION Current Date/Time Current Time This field displays the time of your Device. Each time you reload this page, the Device synchronizes the time with the time server. Current Date This field displays the date of your Device.
Page 303 Chapter 35 Time Settings Table 145 Maintenance > Time (continued) LABEL DESCRIPTION Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG8324-B10A / VMG8324-B30A Series User’s Guide...
Page 304 Chapter 35 Time Settings VMG8324-B10A / VMG8324-B30A Series User’s Guide...
Page 305: E-Mail Notification
HAPTER E-mail Notification 36.1 Overview A mail server is an application or a computer that runs such an application to receive, forward and deliver e-mail messages. To have the Device send reports, logs or notifications via e-mail, you must specify an e-mail server and the e-mail addresses of the sender and receiver.
Page 306: Email Notification Edit
Chapter 36 E-mail Notification 36.2.1 Email Notification Edit Click the Add button in the Email Notification screen. Use this screen to configure the required information for sending e-mail via a mail server. Figure 178 Email Notification > Add The following table describes the labels in this screen. Table 147 Email Notification >...
Page 307: Logs Setting
HAPTER Logs Setting 37.1 Overview You can configure where the Device sends logs and which logs and/or immediate alerts the Device records in the Logs Setting screen. 37.2 The Log Settings Screen To change your Device’s log settings, click Maintenance > Logs Setting. The screen appears as shown.
Page 308: Example E-Mail Log
Chapter 37 Logs Setting The following table describes the fields in this screen. Table 148 Maintenance > Logs Setting LABEL DESCRIPTION Syslog Setting Syslog Logging The Device sends a log to an external syslog server. Select Enable to enable syslog logging. Mode Select the syslog destination from the drop-down list box.
Page 309 Chapter 37 Logs Setting • "End of Log" message shows that a complete log has been sent. Figure 180 E-mail Log Example Subject: Firewall Alert From Date: Fri, 07 Apr 2000 10:05:42 From: user@zyxel.com user@zyxel.com 1|Apr 7 00 |From:192.168.1.1 To:192.168.1.255 |default policy |forward | 09:54:03 |UDP...
Page 310 Chapter 37 Logs Setting VMG8324-B10A / VMG8324-B30A Series User’s Guide...
Page 311: Firmware Upgrade
HAPTER Firmware Upgrade 38.1 Overview This chapter explains how to upload new firmware to your Device. You can download new firmware releases from your nearest ZyXEL FTP site (or www.zyxel.com) to use to upgrade your device’s performance. Only use firmware for your device’s specific model. Refer to the label on the bottom of your Device.
Page 312 Chapter 38 Firmware Upgrade After you see the firmware updating screen, wait two minutes before logging into the Device again. Figure 182 Firmware Uploading The Device automatically restarts in this time causing a temporary network disconnect. In some operating systems, you may see the following icon on your desktop. Figure 183 Network Temporarily Disconnected After two minutes, log in again and check your new firmware version in the Status screen.
Page 313: Configuration
HAPTER Configuration 39.1 Overview The Configuration screen allows you to backup and restore device configurations. You can also reset your device settings back to the factory default. 39.2 The Configuration Screen Click Maintenance > Configuration. Information related to factory defaults, backup configuration, and restoring configuration appears in this screen, as shown next.
Page 314 Chapter 39 Configuration Restore Configuration Restore Configuration allows you to upload a new or previously saved configuration file from your computer to your Device. Table 150 Restore Configuration LABEL DESCRIPTION File Path Type in the location of the file you want to upload in this field or click Browse ... to find it. Browse...
Page 315: The Reboot Screen
Chapter 39 Configuration Reset to Factory Defaults Click the Reset button to clear all user-entered configuration information and return the Device to its factory defaults. The following warning screen appears. Figure 188 Reset Warning Message Figure 189 Reset In Process Message You can also press the RESET button on the rear panel to reset the factory defaults of your Device.
Page 316 Chapter 39 Configuration VMG8324-B10A / VMG8324-B30A Series User’s Guide...
Page 317: Diagnostic
HAPTER Diagnostic 40.1 Overview The Diagnostic screens display information to help you identify problems with the Device. The route between a CO VDSL switch and one of its CPE may go through switches owned by independent organizations. A connectivity fault point generally takes time to discover and impacts subscriber’s network access.
Page 318: Ping & Traceroute & Nslookup
Chapter 40 Diagnostic 40.3 Ping & TraceRoute & NsLookup Use this screen to ping, traceroute, or nslookup an IP address. Click Maintenance > Diagnostic > Ping&TraceRoute&NsLookup to open the screen shown next. Figure 191 Maintenance > Diagnostic > Ping &TraceRoute&NsLookup The following table describes the fields in this screen.
Page 319 Chapter 40 Diagnostic 40.4 802.1ag Click Maintenance > Diagnostic > 8.2.1ag to open the following screen. Use this screen to perform CFM actions. Figure 192 Maintenance > Diagnostic > 802.1ag The following table describes the fields in this screen. Table 152 Maintenance > Diagnostic > 802.1ag LABEL DESCRIPTION 802.1ag Connectivity Fault Management...
Page 320: Oam Ping
Chapter 40 Diagnostic 40.5 OAM Ping Click Maintenance > Diagnostic > OAM Ping to open the screen shown next. Use this screen to perform an OAM (Operation, Administration and Maintenance) F4 or F5 loopback test on a PVC. The Device sends an OAM F4 or F5 packet to the DSLAM or ATM switch and then returns it to the Device.
Page 321 Chapter 40 Diagnostic Note: This screen is available only when you configure an ATM layer-2 interface. Figure 194 Maintenance > Diagnostic > OAM Ping The following table describes the fields in this screen. Table 153 Maintenance > Diagnostic > OAM Ping LABEL DESCRIPTION Select a PVC on which you want to perform the loopback test.
Page 322 Chapter 40 Diagnostic VMG8324-B10A / VMG8324-B30A Series User’s Guide...
Page 323: Troubleshooting
HAPTER Troubleshooting This chapter offers some suggestions to solve problems you might encounter. The potential problems are divided into the following categories. • Power, Hardware Connections, and LEDs • Device Access and Login • Internet Access • Wireless Internet Access •...
Page 324: Device Access And Login
Chapter 41 Troubleshooting If the problem continues, contact the vendor. 41.2 Device Access and Login I forgot the IP address for the Device. The default LAN IP address is 192.168.1.1. If you changed the IP address and have forgotten it, you might get the IP address of the Device by looking up the IP address of the default gateway for your computer.
Page 325 Chapter 41 Troubleshooting Reset the device to its factory defaults, and try to access the Device with the default IP address. Section 1.6 on page If the problem continues, contact the network administrator or vendor, or try one of the advanced suggestions.
Page 326: Internet Access
Chapter 41 Troubleshooting 41.3 Internet Access I cannot access the Internet. Check the hardware connections, and make sure the LEDs are behaving as expected. See the Quick Start Guide and Section 1.5 on page Make sure you entered your ISP account information correctly in the Network Setting > Broadband screen.
Page 327: Wireless Internet Access
Chapter 41 Troubleshooting Check the hardware connections, and make sure the LEDs are behaving as expected. See the Quick Start Guide and Section 1.5 on page Turn the Device off and on. If the problem continues, contact your ISP. 41.4 Wireless Internet Access What factors may cause intermittent or unstabled wireless connection? How can I solve this problem? The following factors may cause interference:...
Page 328: Usb Device Connection
Chapter 41 Troubleshooting 41.5 USB Device Connection The Device fails to detect my USB device. Disconnect the USB device. Reboot the Device. If you are connecting a USB hard drive that comes with an external power supply, make sure it is connected to an appropriate power source that is on.
Page 329: Appendix A Customer Support
• Brief description of the problem and the steps you took to solve it. Corporate Headquarters (Worldwide) Taiwan • ZyXEL Communications Corporation • http://www.zyxel.com Asia China • ZyXEL Communications (Shanghai) Corp. ZyXEL Communications (Beijing) Corp. ZyXEL Communications (Tianjin) Corp. • http://www.zyxel.cn India • ZyXEL Technology India Pvt Ltd • http://www.zyxel.in Kazakhstan •...
Page 330 • ZyXEL Singapore Pte Ltd. • http://www.zyxel.com.sg Taiwan • ZyXEL Communications Corporation • http://www.zyxel.com Thailand • ZyXEL Thailand Co., Ltd • http://www.zyxel.co.th Vietnam • ZyXEL Communications Corporation-Vietnam Office • http://www.zyxel.com/vn/vi Europe Austria • ZyXEL Deutschland GmbH • http://www.zyxel.de Belarus • ZyXEL BY • http://www.zyxel.by...
Page 331 Appendix A Customer Support Belgium • ZyXEL Communications B.V. • http://www.zyxel.com/be/nl/ Bulgaria • ZyXEL България • http://www.zyxel.com/bg/bg/ Czech • ZyXEL Communications Czech s.r.o • http://www.zyxel.cz Denmark • ZyXEL Communications A/S • http://www.zyxel.dk Estonia • ZyXEL Estonia • http://www.zyxel.com/ee/et/ Finland • ZyXEL Communications •...
Page 332 • ZyXEL Communications Poland • http://www.zyxel.pl Romania • ZyXEL Romania • http://www.zyxel.com/ro/ro Russia • ZyXEL Russia • http://www.zyxel.ru Slovakia • ZyXEL Communications Czech s.r.o. organizacna zlozka • http://www.zyxel.sk Spain • ZyXEL Spain • http://www.zyxel.es Sweden • ZyXEL Communications • http://www.zyxel.se Switzerland •...
Page 333 • ZyXEL Communication Corporation • http://www.zyxel.com/ec/es/ Middle East Egypt • ZyXEL Communication Corporation • http://www.zyxel.com/homepage.shtml Middle East • ZyXEL Communication Corporation • http://www.zyxel.com/homepage.shtml North America • ZyXEL Communications, Inc. - North America Headquarters • http://www.us.zyxel.com/ VMG8324-B10A / VMG8324-B30A Series User’s Guide...
Page 334 Appendix A Customer Support Oceania Australia • ZyXEL Communications Corporation • http://www.zyxel.com/au/en/ Africa South Africa • Nology (Pty) Ltd. • http://www.zyxel.co.za VMG8324-B10A / VMG8324-B30A Series User’s Guide...
Page 335: Appendix B Setting Up Your Computer's Ip Address
PP EN D I X Setting up Your Computer’s IP Address All computers must have a 10M or 100M Ethernet adapter card and TCP/IP installed. Windows 95/98/Me/NT/2000/XP/Vista, Macintosh OS 7 and later operating systems and all versions of UNIX/LINUX include the software components you need to install and use TCP/IP on your computer.
Page 336 Appendix B Setting up Your Computer’s IP Address Installing Components The Network window Configuration tab displays a list of installed components. You need a network adapter, the TCP/IP protocol and Client for Microsoft Networks. If you need the adapter: In the Network window, click Add. Select Adapter and then click Add.
Page 337 Appendix B Setting up Your Computer’s IP Address • If you have a static IP address, select Specify an IP address and type your information into the IP Address and Subnet Mask fields. Figure 196 Windows 95/98/Me: TCP/IP Properties: IP Address Click the DNS Configuration tab.
Page 338 Appendix B Setting up Your Computer’s IP Address Click the Gateway tab. • If you do not know your gateway’s IP address, remove previously installed gateways. • If you have a gateway IP address, type it in the New gateway field and click Add. Click OK to save and close the TCP/IP Properties window.
Page 339 Appendix B Setting up Your Computer’s IP Address In the Control Panel, double-click Network Connections (Network and Dial-up Connections in Windows 2000/NT). Figure 199 Windows XP: Control Panel Right-click Local Area Connection and then click Properties. Figure 200 Windows XP: Control Panel: Network Connections: Properties VMG8324-B10A / VMG8324-B30A Series User’s Guide...
Page 340 Appendix B Setting up Your Computer’s IP Address Select Internet Protocol (TCP/IP) (under the General tab in Win XP) and then click Properties. Figure 201 Windows XP: Local Area Connection Properties The Internet Protocol TCP/IP Properties window opens (the General tab in Windows XP). •...
Page 341 Appendix B Setting up Your Computer’s IP Address • Click Advanced. Figure 202 Windows XP: Internet Protocol (TCP/IP) Properties If you do not know your gateway's IP address, remove any previously installed gateways in the IP Settings tab and click OK. Do one or more of the following if you want to configure additional IP addresses: •...
Page 342 Appendix B Setting up Your Computer’s IP Address • Click OK when finished. Figure 203 Windows XP: Advanced TCP/IP Properties In the Internet Protocol TCP/IP Properties window (the General tab in Windows XP): • Click Obtain DNS server address automatically if you do not know your DNS server IP address(es).
Page 343 Appendix B Setting up Your Computer’s IP Address If you have previously configured DNS servers, click Advanced and then the DNS tab to order them. Figure 204 Windows XP: Internet Protocol (TCP/IP) Properties Click OK to close the Internet Protocol (TCP/IP) Properties window. Click Close (OK in Windows 2000/NT) to close the Local Area Connection Properties window.
Page 344 Appendix B Setting up Your Computer’s IP Address Click the Start icon, Control Panel. Figure 205 Windows Vista: Start Menu In the Control Panel, double-click Network and Internet. Figure 206 Windows Vista: Control Panel Click Network and Sharing Center. Figure 207 Windows Vista: Network And Internet VMG8324-B10A / VMG8324-B30A Series User’s Guide...
Page 345 Appendix B Setting up Your Computer’s IP Address Click Manage network connections. Figure 208 Windows Vista: Network and Sharing Center Right-click Local Area Connection and then click Properties. Note: During this procedure, click Continue whenever Windows displays a screen saying that it needs your permission to continue.
Page 346 Appendix B Setting up Your Computer’s IP Address Select Internet Protocol Version 4 (TCP/IPv4) and click Properties. Figure 210 Windows Vista: Local Area Connection Properties The Internet Protocol Version 4 (TCP/IPv4) Properties window opens (the General tab). • If you have a dynamic IP address click Obtain an IP address automatically. •...
Page 347 Appendix B Setting up Your Computer’s IP Address • Click Advanced. Figure 211 Windows Vista: Internet Protocol Version 4 (TCP/IPv4) Properties If you do not know your gateway's IP address, remove any previously installed gateways in the IP Settings tab and click OK. Do one or more of the following if you want to configure additional IP addresses: •...
Page 348 Appendix B Setting up Your Computer’s IP Address • Click OK when finished. Figure 212 Windows Vista: Advanced TCP/IP Properties In the Internet Protocol Version 4 (TCP/IPv4) Properties window, (the General tab): • Click Obtain DNS server address automatically if you do not know your DNS server IP address(es).
Page 349 Appendix B Setting up Your Computer’s IP Address If you have previously configured DNS servers, click Advanced and then the DNS tab to order them. Figure 213 Windows Vista: Internet Protocol Version 4 (TCP/IPv4) Properties 10 Click OK to close the Internet Protocol Version 4 (TCP/IPv4) Properties window. 11 Click Close to close the Local Area Connection Properties window.
Page 350 Appendix B Setting up Your Computer’s IP Address Macintosh OS 8/9 Click the Apple menu, Control Panel and double-click TCP/IP to open the TCP/IP Control Panel. Figure 214 Macintosh OS 8/9: Apple Menu VMG8324-B10A / VMG8324-B30A Series User’s Guide...
Page 351 Appendix B Setting up Your Computer’s IP Address Select Ethernet built-in from the Connect via list. Figure 215 Macintosh OS 8/9: TCP/IP For dynamically assigned settings, select Using DHCP Server from the Configure: list. For statically assigned settings, do the following: •...
Page 352 Appendix B Setting up Your Computer’s IP Address • Select Built-in Ethernet from the Show list. • Click the TCP/IP tab. For dynamically assigned settings, select Using DHCP from the Configure list. Figure 217 Macintosh OS X: Network For statically assigned settings, do the following: •...
Page 353 Appendix B Setting up Your Computer’s IP Address Linux This section shows you how to configure your computer’s TCP/IP settings in Red Hat Linux 9.0. Procedure, screens and file location may vary depending on your Linux distribution and release version. Note: Make sure you are logged in as the root administrator.
Page 354 Appendix B Setting up Your Computer’s IP Address Double-click on the profile of the network card you wish to configure. The Ethernet Device General screen displays as shown. Figure 219 Red Hat 9.0: KDE: Ethernet Device: General • If you have a dynamic IP address, click Automatically obtain IP address settings with and select dhcp from the drop down list.
Page 355: Using Configuration Files
Appendix B Setting up Your Computer’s IP Address Click the Activate button to apply the changes. The following screen displays. Click Yes to save the changes in all screens. Figure 221 Red Hat 9.0: KDE: Network Configuration: Activate After the network card restart process is complete, make sure the Status is Active in the Network Configuration screen.
Page 356: Verifying Settings
Appendix B Setting up Your Computer’s IP Address If you know your DNS server IP address(es), enter the DNS server information in the resolv.conf file in the /etc directory. The following figure shows an example where two DNS server IP addresses are specified.
Page 357: Appendix C Ip Addresses And Subnetting
PP EN D I X IP Addresses and Subnetting This appendix introduces IP addresses and subnet masks. IP addresses identify individual devices on a network. Every networking device (including computers, servers, routers, printers, etc.) needs an IP address to communicate across the network.
Page 358 Appendix C IP Addresses and Subnetting The following figure shows an example IP address in which the first three octets (192.168.1) are the network number, and the fourth octet (16) is the host ID. Figure 227 Network Number and Host ID How much of the IP address is the network number and how much is the host ID varies according to the subnet mask.
Page 359 Appendix C IP Addresses and Subnetting Subnet masks can be referred to by the size of the network number part (the bits with a “1” value). For example, an “8-bit mask” means that the first 8 bits of the mask are ones and the remaining 24 bits are zeroes.
Page 360 Appendix C IP Addresses and Subnetting The following table shows some possible subnet masks using both notations. Table 157 Alternative Subnet Mask Notation ALTERNATIVE LAST OCTET LAST OCTET SUBNET MASK NOTATION (BINARY) (DECIMAL) 255.255.255.0 0000 0000 255.255.255.128 1000 0000 255.255.255.192 1100 0000 255.255.255.224 1110 0000...
Page 361 Appendix C IP Addresses and Subnetting The following figure shows the company network after subnetting. There are now two sub- networks, A and B. Figure 229 Subnetting Example: After Subnetting In a 25-bit subnet the host ID has 7 bits, so each sub-network has a maximum of 2 –...
Page 362 Appendix C IP Addresses and Subnetting Table 158 Subnet 1 (continued) LAST OCTET BIT IP/SUBNET MASK NETWORK NUMBER VALUE Subnet Address: Lowest Host ID: 192.168.1.1 192.168.1.0 Broadcast Address: Highest Host ID: 192.168.1.62 192.168.1.63 Table 159 Subnet 2 LAST OCTET BIT IP/SUBNET MASK NETWORK NUMBER VALUE...
Page 363 Appendix C IP Addresses and Subnetting Table 162 Eight Subnets (continued) SUBNET LAST BROADCAST SUBNET FIRST ADDRESS ADDRESS ADDRESS ADDRESS Subnet Planning The following table is a summary for subnet planning on a network with a 24-bit network number. Table 163 24-bit Network Number Subnet Planning NO.
Page 364 Appendix C IP Addresses and Subnetting Configuring IP Addresses Where you obtain your network number depends on your particular situation. If the ISP or your network administrator assigns you a block of registered IP addresses, follow their instructions in selecting the IP addresses and the subnet mask. If the ISP did not explicitly give you an IP network number, then most likely you have a single user account and the ISP will assign you a dynamic IP address when the connection is established.
Page 365: Appendix D Pop-Up Windows, Javascripts And Java Permissions
PP EN D I X Pop-up Windows, JavaScripts and Java Permissions In order to use the web configurator you need to allow: • Web browser pop-up windows from your device. • JavaScripts (enabled by default). • Java permissions (enabled by default). Note: Internet Explorer 6 screens are used here.
Page 366 Appendix D Pop-up Windows, JavaScripts and Java Permissions Clear the Block pop-ups check box in the Pop-up Blocker section of the screen. This disables any web pop-up blockers you may have enabled. Figure 231 Internet Options: Privacy Click Apply to save this setting. Enable Pop-up Blockers with Exceptions Alternatively, if you only want to allow pop-up windows from your device, see the following steps.
Page 367 Appendix D Pop-up Windows, JavaScripts and Java Permissions Select Settings…to open the Pop-up Blocker Settings screen. Figure 232 Internet Options: Privacy Type the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”.
Page 368 Appendix D Pop-up Windows, JavaScripts and Java Permissions Click Add to move the IP address to the list of Allowed sites. Figure 233 Pop-up Blocker Settings Click Close to return to the Privacy screen. Click Apply to save this setting. JavaScripts If pages of the web configurator do not display properly in Internet Explorer, check that JavaScripts are allowed.
Page 369 Appendix D Pop-up Windows, JavaScripts and Java Permissions In Internet Explorer, click Tools, Internet Options and then the Security tab. Figure 234 Internet Options: Security Click the Custom Level... button. Scroll down to Scripting. Under Active scripting make sure that Enable is selected (the default). Under Scripting of Java applets make sure that Enable is selected (the default).
Page 370 Appendix D Pop-up Windows, JavaScripts and Java Permissions Click OK to close the window. Figure 235 Security Settings - Java Scripting Java Permissions From Internet Explorer, click Tools, Internet Options and then the Security tab. Click the Custom Level... button. Scroll down to Microsoft VM.
Page 371 Appendix D Pop-up Windows, JavaScripts and Java Permissions Click OK to close the window. Figure 236 Security Settings - Java JAVA (Sun) From Internet Explorer, click Tools, Internet Options and then the Advanced tab. Make sure that Use Java 2 for <applet> under Java (Sun) is selected. VMG8324-B10A / VMG8324-B30A Series User’s Guide...
Page 372 Appendix D Pop-up Windows, JavaScripts and Java Permissions Click OK to close the window. Figure 237 Java (Sun) Mozilla Firefox Mozilla Firefox 2.0 screens are used here. Screens for other versions may vary. You can enable Java, Javascripts and pop-ups in one screen. Click Tools, then click Options in the screen that appears.
Page 373 Appendix D Pop-up Windows, JavaScripts and Java Permissions Click Content.to show the screen below. Select the check boxes as shown in the following screen. Figure 239 Mozilla Firefox Content Security VMG8324-B10A / VMG8324-B30A Series User’s Guide...
Page 374 Appendix D Pop-up Windows, JavaScripts and Java Permissions VMG8324-B10A / VMG8324-B30A Series User’s Guide...
Page 375: Appendix E Wireless Lans
PP EN D I X Wireless LANs Wireless LAN Topologies This section discusses ad-hoc and infrastructure wireless LAN topologies. Ad-hoc Wireless LAN Configuration The simplest WLAN configuration is an independent (Ad-hoc) WLAN that connects a set of computers with wireless adapters (A, B, C). Any time two or more wireless adapters are within range of each other, they can set up an independent network, which is commonly referred to as an ad-hoc network or Independent Basic Service Set (IBSS).
Page 376 Appendix E Wireless LANs disabled, wireless client A and B can still access the wired network but cannot communicate with each other. Figure 241 Basic Service Set An Extended Service Set (ESS) consists of a series of overlapping BSSs, each containing an access point, with each access point connected together by a wired network.
Page 377 Appendix E Wireless LANs An ESSID (ESS IDentification) uniquely identifies each ESS. All access points and their associated wireless clients within the same ESS must have the same ESSID in order to communicate. Figure 242 Infrastructure WLAN Channel A channel is the radio frequency(ies) used by wireless devices to transmit and receive data. Channels available depend on your geographical area.
Page 378 Appendix E Wireless LANs cannot "hear" each other, that is they do not know if the channel is currently being used. Therefore, they are considered hidden from each other. RTS/CTS Figure 243 When station A sends data to the AP, it might not know that the station B is already using the channel.
Page 379 Appendix E Wireless LANs If the Fragmentation Threshold value is smaller than the RTS/CTS value (see previously) you set then the RTS (Request To Send)/CTS (Clear to Send) handshake will never occur as data frames will be fragmented before they reach RTS/CTS size. IEEE 802.11g Wireless LAN IEEE 802.11g is fully compatible with the IEEE 802.11b standard.
Page 380 Appendix E Wireless LANs IEEE 802.1x In June 2001, the IEEE 802.1x standard was designed to extend the features of IEEE 802.11 to support extended authentication as well as providing additional accounting and control features. It is supported by Windows XP and a number of network devices. Some advantages of IEEE 802.1x are: •...
Page 381 Appendix E Wireless LANs • Accounting-Request Sent by the access point requesting accounting. • Accounting-Response Sent by the RADIUS server to indicate that it has started or stopped accounting. In order to ensure network security, the access point and the RADIUS server use a shared secret key, which is a password, they both know.
Page 382 Appendix E Wireless LANs EAP-TTLS (Tunneled Transport Layer Service) EAP-TTLS is an extension of the EAP-TLS authentication that uses certificates for only the server- side authentications to establish a secure connection. Client authentication is then done by sending username and password through the secure connection, thus client identity is protected. For client authentication, EAP-TTLS supports EAP methods and legacy authentication methods such as PAP, CHAP, MS-CHAP and MS-CHAP v2.
Page 383 Appendix E Wireless LANs WPA and WPA2 Wi-Fi Protected Access (WPA) is a subset of the IEEE 802.11i standard. WPA2 (IEEE 802.11i) is a wireless security standard that defines stronger encryption, authentication and key management than WPA. Key differences between WPA or WPA2 and WEP are improved data encryption and user authentication.
Page 384 Appendix E Wireless LANs password-guessing attacks but it’s still an improvement over WEP as it employs a consistent, single, alphanumeric password to derive a PMK which is used to generate unique temporal encryption keys. This prevent all wireless devices sharing the same encryption keys. (a weakness of WEP) User Authentication WPA and WPA2 apply IEEE 802.1x and Extensible Authentication Protocol (EAP) to authenticate...
Page 385 Appendix E Wireless LANs The RADIUS server distributes the PMK to the AP. The AP then sets up a key hierarchy and management system, using the PMK to dynamically generate unique data encryption keys. The keys are used to encrypt every data packet that is wirelessly communicated between the AP and the wireless clients.
Page 386 Appendix E Wireless LANs Security Parameters Summary Refer to this table to see what other security parameters you should configure for each authentication method or key management protocol type. MAC address filters are not dependent on how you configure these security features. Table 168 Wireless Security Relational Matrix AUTHENTICATION ENCRYPTIO...
Page 387 Appendix E Wireless LANs 2.5%. For an unobstructed outdoor site, each 1dB increase in gain results in a range increase of approximately 5%. Actual results may vary depending on the network environment. Antenna gain is sometimes specified in dBi, which is how much the antenna increases the signal power compared to using an isotropic antenna.
Page 388 Appendix E Wireless LANs VMG8324-B10A / VMG8324-B30A Series User’s Guide...
Page 389: Appendix F Ipv6
P P EN D I X IPv6 Overview IPv6 (Internet Protocol version 6), is designed to enhance IP address size and features. The increase in IPv6 address size to 128 bits (from the 32-bit IPv4 address) allows up to 3.4 x 10 addresses.
Page 390: Global Address
Appendix F IPv6 Global Address A global address uniquely identifies a device on the Internet. It is similar to a “public IP address” in IPv4. A global unicast address starts with a 2 or 3. Unspecified Address An unspecified address (0:0:0:0:0:0:0:0 or ::) is used as the source address when a device does not have its own address.
Page 391 Appendix F IPv6 Table 171 Reserved Multicast Address (continued) MULTICAST ADDRESS FF08:0:0:0:0:0:0:0 FF09:0:0:0:0:0:0:0 FF0A:0:0:0:0:0:0:0 FF0B:0:0:0:0:0:0:0 FF0C:0:0:0:0:0:0:0 FF0D:0:0:0:0:0:0:0 FF0E:0:0:0:0:0:0:0 FF0F:0:0:0:0:0:0:0 Subnet Masking Both an IPv6 address and IPv6 subnet mask compose of 128-bit binary digits, which are divided into eight 16-bit blocks and written in hexadecimal notation. Hexadecimal uses four bits for each character (1 ~ 10, A ~ F).
Page 392 Appendix F IPv6 the time T2 is reached and the server does not respond, the client sends a Rebind message to any available server (S2). For an IA_TA, the client may send a Renew or Rebind message at the client's discretion.
Page 393 Appendix F IPv6 • Neighbor advertisement: A response from a node to announce its link-layer address. • Router solicitation: A request from a host to locate a router that can act as the default router and forward packets. • Router advertisement: A response to a router solicitation or a periodical multicast advertisement from a router to advertise its presence and other parameters.
Page 394 Appendix F IPv6 Example - Enabling IPv6 on Windows XP/2003/Vista By default, Windows XP and Windows 2003 support IPv6. This example shows you how to use the ipv6 install command on Windows XP/2003 to enable IPv6. This also displays how to use the ipconfig command to see auto-generated IP addresses.
Page 395 Appendix F IPv6 Double click Dibbler - a DHCPv6 client. Click Start and then OK. Now your computer can obtain an IPv6 address from a DHCPv6 server. Example - Enabling IPv6 on Windows 7 Windows 7 supports IPv6 by default. DHCPv6 is also enabled when you enable IPv6 on a Windows 7 computer.
Page 396 Appendix F IPv6 Click Close to exit the Local Area Connection Status screen. Select Start > All Programs > Accessories > Command Prompt. Use the ipconfig command to check your dynamic IPv6 address. This example shows a global address (2001:b021:2d::1000) obtained from a DHCP server. C:\>ipconfig Windows IP Configuration Ethernet adapter Local Area Connection:...
Page 397: Appendix G Services
PP E N D I X Services The following table lists some commonly-used services and their associated protocols and port numbers. • Name: This is a short, descriptive name for the service. You can use this one or create a different one, if you like.
Page 398 Appendix G Services Table 172 Examples of Services NAME PROTOCOL PORT(S) DESCRIPTION AH (IPSEC_TUNNEL) User-Defined The IPSEC AH (Authentication Header) tunneling protocol uses this service. 5190 AOL’s Internet Messenger service. AUTH Authentication protocol used by some servers. Border Gateway Protocol. BOOTP_CLIENT DHCP Client.
Page 399 Appendix G Services Table 172 Examples of Services (continued) NAME PROTOCOL PORT(S) DESCRIPTION NEW-ICQ 5190 An Internet chat program. NEWS A protocol for news groups. 2049 Network File System - NFS is a client/ server distributed file service that provides transparent file sharing for network environments.
Page 400 Appendix G Services Table 172 Examples of Services (continued) NAME PROTOCOL PORT(S) DESCRIPTION SQL-NET 1521 Structured Query Language is an interface to access data on many different types of database systems, including mainframes, midrange systems, UNIX systems and network servers. SSDP 1900 The Simple Service Discovery Protocol...
Page 402 Appendix H Legal Information Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. Consult the dealer or an experienced radio/TV technician for help. FCC Radiation Exposure Statement • This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter.
Page 403: Safety Warnings
Appendix H Legal Information product has been modified, misused, tampered with, damaged by an act of God, or subjected to abnormal working conditions. Note Repair or replacement, as provided under this warranty, is the exclusive remedy of the purchaser. This warranty is in lieu of all other warranties, express or implied, including any implied warranty of merchantability or fitness for a particular use or purpose.
Page 404 Appendix H Legal Information • Do not use the device outside, and make sure all the connections are indoors. There is a remote risk of electric shock from lightning. • Do NOT obstruct the device ventilation slots, as insufficient airflow may harm your device. •...
Page 405: Index
Index Index BYE request ACK message ACL rule activation 213, 381 firewalls call history media server incoming calls SIP ALG outgoing calls SSID call hold 262, 263 Address Resolution Protocol call service mode 261, 263 administrator password call transfer 262, 264 call waiting 262, 263 algorithms...
Page 406 Index Class of Service DNS server address assignment Class of Service, see CoS documentation related client list Domain Name client-server protocol Domain Name System, see DNS comfort noise generation Domain Name System. See DNS. compatibility, WDS configuration backup DS field 153, 260 firewalls DS, dee differentiated services...
Page 407 Index firewalls add protocols Independent Basic Service Set configuration See IBSS DDoS initialization vector (IV) Inside Global Address, see IGA LAND attack inside header Ping of Death Inside Local Address, see ILA SYN attack interface group firmware Internet version wizard setup flash key Internet access flashing...
Page 408 Index Maintenance End Point, see MEP Management Information Base (MIB) managing the device key combinations good habits keypad Maximum Burst Size (MBS) MBSSID media server activation iTunes server and USB printer client list MTU (Multi-Tenant Unit) DHCP 108, 128 multicast 108, 128 IP address multimedia...
Page 409 Index network map requirements NNTP private IP address non-proxy calls product registration protocol push button Push Button Configuration, see PBC push button, WPS OK response 256, 258 other documentation outside header 139, 152, 260 marking setup Pairwise Master Key (PMK) 383, 385 tagging passwords...
Page 410 Index router features GetNext Manager Routing Information Protocol. See RIP managers RPPCs network components RTS (Request To Send) threshold 377, 378 Trap RTS threshold 90, 94 versions SNMP trap speed dial srTCM security SSID wireless LAN activation Security Log MBSSID Security Parameter Index, see SPI static route 131, 137, 305...
Page 411 Index Virtual Circuit (VC) Virtual Local Area Network See VLAN VLAN Tag Control Information See TCI Introduction Tag Protocol Identifier See TPID number of possible VIDs priority frame static three-way conference 263, 264 VLAN ID thresholds VLAN Identifier See VID data fragment 90, 94 VLAN tag...
Page 412 Index fragmentation threshold example 90, 94 limitations push button 22, 99 MAC address filter 85, 95 MBSSID preamble 91, 94 RADIUS server RTS/CTS threshold 90, 94 security SSID activation status 88, 98 compatibility example WPA-PSK 98, 101 example limitations push button 22, 99 wireless security wizard setup...

This manual is also suitable for:

Vmg8324-b30a series Vmg8324-b10a b30a series

ZyXEL Communications VMG8324-B10A series User Manual

Contents Overview

Table of Contents

User's Guide

PART I User's Guide

Chapter 1 Introducing the Device

Chapter 2 The Web Configurator

Chapter 3 Quick Start

Technical Reference

Part II: Technical Reference

Chapter 4 Network Map and Status Screens

Chapter 5 Broadband

Chapter 6 Wireless

Chapter 7 Home Networking

Chapter 8 Routing

Chapter 9 Quality of Service (Qos)

Chapter 10 Network Address Translation (NAT)

Chapter 11 Dynamic DNS Setup

Chapter 12 Interface Group

Chapter 13 USB Service

Chapter 14 Power Management

Chapter 15 Firewall

Chapter 16 MAC Filter

Chapter 17 Parental Control

Chapter 18 Scheduler Rule

Chapter 19 Certificates

Chapter 20 VPN

Chapter 21 Voice

Chapter 22 Log

Chapter 23 Traffic Status

Chapter 24 Voip Status

Chapter 25 ARP Table

Chapter 26 Routing Table

Chapter 27 IGMP/MLD Status

Chapter 28 Xdsl Statistics

Chapter 29 3G Statistics

Chapter 30 User Account

Chapter 31 Remote Management

Quick Links

Related Manuals for ZyXEL Communications VMG8324-B10A series

Summary of Contents for ZyXEL Communications VMG8324-B10A series