Summary of Contents for ZyXEL Communications eircom D1000
Page 1
D1000 modem Wireless N ADSL2+ 4-port Gateway Version 3.00 Edition 2, 9/2014 User’s Guide Default Login Details LAN IP Address http://192.168.1.254 User Name admin see wireless key on the Password back label...
Page 4
IMPORTANT! READ CAREFULLY BEFORE USE. KEEP THIS GUIDE FOR FUTURE REFERENCE. Screenshots and graphics in this book may differ slightly from your product due to differences in your product firmware or your computer operating system. Every effort has been made to ensure that the information in this manual is accurate.
4.1.2 What You Need to Know About WAN ..................31 4.1.3 Before You Begin ........................32 4.2 The Internet Connection Screen .......................32 4.3 The More Connections Screen ......................36 4.3.1 More Connections Edit ......................37 4.4 The 3G Backup Screen ........................40 eircom D1000 modem User’s Guide...
Page 6
Home Networking ..........................77 6.1 Overview ............................77 6.1.1 What You Can Do in the LAN Screens ..................77 6.1.2 What You Need To Know ......................78 6.1.3 Before You Begin ........................79 6.2 The LAN Setup Screen ........................79 eircom D1000 modem User’s Guide...
Page 7
8.2 The Quality of Service General Screen ................... 114 8.3 The Queue Setup Screen ....................... 115 8.3.1 Adding a QoS Queue ......................116 8.4 The Class Setup Screen ........................ 117 8.4.1 Class Setup Add/Edit ......................117 8.5 The QoS Game List Screen ......................121 eircom D1000 modem User’s Guide...
Page 8
12.1.2 What You Need to Know About Filtering ................141 12.2 The IP/MAC Filter Screen ......................141 12.3 IPv6/MAC Filter ..........................143 Firewall .............................. 147 13.1 Overview ............................147 13.1.1 What You Can Do in the Firewall Screens ................147 eircom D1000 modem User’s Guide...
Page 9
17.1 Overview ............................175 17.1.1 What You Can Do in this Chapter ..................175 17.2 The WAN Status Screen .......................175 17.3 The LAN Status Screen .........................176 17.4 The NAT Screen ..........................177 User Account ............................ 179 18.1 Overview ............................179 eircom D1000 modem User’s Guide...
Page 10
25.1.1 What You Can Do in the Diagnostic Screens ..............205 25.2 The General Screen ........................205 25.3 The DSL Line Screen ........................206 Troubleshooting..........................209 26.1 Power, Hardware Connections, and LEDs ..................209 26.2 Device Access and Login ......................210 eircom D1000 modem User’s Guide...
Page 11
26.3 Internet Access ..........................211 LED Descriptions ..........................213 27.1 LED Descriptions ..........................213 Appendix A Legal Information......................215 Index ..............................219 eircom D1000 modem User’s Guide...
Introduction 1.1 Overview The eircom D1000 modem is an ADSL2+ router that integrates DSL and NAT, and provides ease of installation and high-speed, shared Internet access. The Device is also a complete security solution with a robust firewall and content filtering.
PDAs and iPads. It allows them to connect to the Internet without having to rely on inconvenient Ethernet cables. You can set up a wireless network with WPS (WiFi Protected Setup) or manually add a client to your wireless network. Figure 2 Wireless Access Example eircom D1000 modem User’s Guide...
To set the device back to the factory default settings, press the RESET button for ten seconds or until the POWER LED begins to blink and then release it. When the POWER LED begins to blink, the defaults have been restored and the device restarts. eircom D1000 modem User’s Guide...
Login. Figure 3 Password Screen Note: For security reasons, the Device automatically logs you out if you do not use the web configurator for 900 seconds (default). If this happens, log in again. eircom D1000 modem User’s Guide...
Page 20
The following screen displays and asks if you want to change your wireless settings, including SSID and wireless security key. If you have changed the settings, click Apply. If not, click Skip to proceed to the Connection Status screen if you do not want to change them now. eircom D1000 modem User’s Guide...
Page 21
Chapter 2 Introducing the Web Configurator Figure 6 Change Wireless Settings Screen The Connection Status screen appears. Figure 7 Connection Status The System Info screen shows. You can view the Device’s interface and system information. eircom D1000 modem User’s Guide...
Click the Help icon to go to eircom’s support website. Click the Logout icon to log out of the web configurator. 2.2.2 Main Window The main window displays information and configuration fields. It is discussed in the rest of this document. eircom D1000 modem User’s Guide...
Use this screen to configure ISP parameters, WAN IP address Connection assignment, DNS servers and other advanced properties. More Connections Use this screen to configure additional WAN connections. 3G Backup Use this screen to configure your 3G backup Internet connection settings. eircom D1000 modem User’s Guide...
Page 24
Use this screen to activate/deactivate port isolation. Port Isolation Use this screen to configure and view port binding groups. Dynamic DNS Dynamic DNS Use this screen to allow a static hostname alias for a dynamic IP address. Security eircom D1000 modem User’s Guide...
Page 25
Use this screen to enable specific traffic directions for specific SNMP, DNS, ICMP, network service. Diagnostic Ping Use this screen to test the connections to other devices. DSL Line Use this screen to identify problems with the DSL connection. eircom D1000 modem User’s Guide...
Page 26
Chapter 2 Introducing the Web Configurator eircom D1000 modem User’s Guide...
The System Info Screen 3.1 Overview After you log into the web configurator, the System Info screen shows. Use this screen to view the status of the Device. 3.2 The System Info Screen Figure 10 System Info Screen eircom D1000 modem User’s Guide...
Page 30
Primary/ This is the primary/secondary DNS server IP address assigned to the Device. Secondary DNS 3G Status This shows the current status of your 3G connection. NoDevice is shown when no 3G card is inserted. eircom D1000 modem User’s Guide...
Click LAN Device in the System Info screen to view the information of the client(s) connected to the Device. In this screen, you can configure how often you want the Device to update this screen in Refresh Interval. eircom D1000 modem User’s Guide...
Page 32
Viewing mode selection box. Figure 12 LAN Device: Icon View Click on a client’s name to show an Info button. • Click it to view information about the client. Click OK to close the screen. eircom D1000 modem User’s Guide...
WAN connection to the Internet, you need to use the same encapsulation method used by your ISP (Internet Service Provider). If your ISP offers a dial-up Internet connection using PPPoE (PPP over Ethernet) or PPPoA, they should also provide a username and password (and service name) for user authentication. eircom D1000 modem User’s Guide...
ISP. 4.2 The Internet Connection Screen Use this screen to change your Device’s WAN settings. Click Network Setting > Broadband > Internet Connection. The screen differs by the WAN type and encapsulation you select. eircom D1000 modem User’s Guide...
Page 35
Password (PPPoA and PPPoE encapsulation only) Enter the password associated with the user name above. Service Name (PPPoE only) Type the name of your PPPoE service here. eircom D1000 modem User’s Guide...
Page 36
IPv6 Address (The following fields are available only when you select IPv6 in the IPv6/IPv4 Dual Stack field.) Obtain an IP Address Select this option if you want to have the Device use the IPv6 prefix from the Automatically connected router’s Router Advertisement (RA) to generate an IPv6 address. eircom D1000 modem User’s Guide...
Page 37
(packets sent to one computer) and broadcast packets (packets sent to every computer). Internet Group Multicast Protocol (IGMP) is a network-layer protocol used to establish membership in a multicast group. The Device supports IGMP-v1/IGMP-v2/IGMP- v3. Select None to disable it. eircom D1000 modem User’s Guide...
Internet access connections click Network Setting > Broadband > More Connections. The screen differs by the encapsulation you select. When you use the Broadband > Internet Connection screen to set up Internet access, you are configuring the first WAN connection. eircom D1000 modem User’s Guide...
Click the Remove icon to delete the Internet access setup from your connection list. 4.3.1 More Connections Edit Use this screen to configure a connection. Click the edit icon in the More Connections screen to display the following screen. eircom D1000 modem User’s Guide...
Page 40
LABEL DESCRIPTION General Active Select the check box to activate or clear the check box to deactivate this connection. Node Name Enter a unique, descriptive name of up to 13 ASCII characters for this connection. eircom D1000 modem User’s Guide...
Page 41
Select the RIP Direction from None, Both, In Only and Out Only. RIP Version This field is not configurable if you select None in the RIP Direction field. Select the RIP Version from RIP-1, RIP2-B and RIP2-M. eircom D1000 modem User’s Guide...
Use this screen to configure your 3G settings. Click Network Setting > Broadband > 3G Backup. Note: The actual data rate you obtain varies depending the 3G card you use, the signal strength to the service provider’s base station, and so on. eircom D1000 modem User’s Guide...
Page 43
Enter the phone number (dial string) used to dial up a connection to your service provider’s base station. Your ISP should provide the phone number. For example, *99# is the dial string to establish a GPRS or 3G connection in Taiwan. eircom D1000 modem User’s Guide...
IP packets are routed between the Ethernet interface and the WAN interface and then formatted so that they can be understood in a bridged environment. For instance, it encapsulates routed Ethernet frames into bridged ATM cells. ENET ENCAP requires that you specify eircom D1000 modem User’s Guide...
In this case, by prior mutual agreement, each protocol is assigned to a specific virtual circuit; for example, VC1 carries IP, etc. VC-based multiplexing may be dominant in environments where dynamic creation of large numbers of ATM VCs is fast and economical. eircom D1000 modem User’s Guide...
A nailed-up connection can be very expensive for obvious reasons. Do not specify a nailed-up connection unless your telephone company offers flat-rate service or you need a constant connection and the cost is of no concern. eircom D1000 modem User’s Guide...
The following figure illustrates the relationship between PCR, SCR and MBS. Figure 18 Example of Traffic Shaping 4.6.1 ATM Traffic Classes These are the basic ATM traffic classes defined by the ATM Forum Traffic Management 4.0 Specification. eircom D1000 modem User’s Guide...
Page 48
The Unspecified Bit Rate (UBR) ATM traffic class is for bursty data transfers. However, UBR doesn't guarantee any bandwidth and only delivers traffic when the network has spare bandwidth. An example application is background file transfer. eircom D1000 modem User’s Guide...
You don’t necessarily need to use all these screens to set up your wireless connection. For example, you may just want to set up a network name, a wireless radio channel and security in the General screen. eircom D1000 modem User’s Guide...
Device’s SSID, channel or security settings, you will lose your wireless connection when you press Apply to confirm. You must then change the wireless settings of your computer to match the Device’s new settings. Click Network Setting > Wireless to open the General screen. eircom D1000 modem User’s Guide...
Page 51
Internet through the Device. Channel Set the operating channel manually by selecting a channel from the Channel Selection Selection list or use Auto to have it automatically determine a channel to use. eircom D1000 modem User’s Guide...
RADIUS server. If your wireless devices support nothing stronger than WEP, use the highest encryption level available. Your Device allows you to configure one 64-bit or 128-bit WEP key. eircom D1000 modem User’s Guide...
WPA encryption standard. It offers slightly better security, although the use of PSK makes it less robust than it could be. Click Network Setting > Wireless to display the General screen. Select More Secure as the security level. Then select WPA-PSK or WPA2-PSK from the Security Mode list. eircom D1000 modem User’s Guide...
RADIUS server to authenticate user credentials and is a full implementation the security protocol. Use this security option for maximum protection of your network. However, it is the least backwards compatible with older devices. eircom D1000 modem User’s Guide...
Page 55
RADIUS server, the reauthentication timer on the RADIUS server has priority. WPA Compatible This field is only available for WPA2. Select this if you want the Device to support WPA and WPA2 simultaneously. eircom D1000 modem User’s Guide...
Click the Edit icon to configure the SSID profile. 5.3.1 More AP Edit Use this screen to edit an SSID profile. Click the Edit icon next to an SSID in the More AP screen. The following screen displays. eircom D1000 modem User’s Guide...
Page 57
Device. After you select to use a security, additional options appears in this screen. Or you can select No Security to allow any client to associate this network without any data encryption or authentication. eircom D1000 modem User’s Guide...
12:34:56:78:9a:bc. This is the index number of the entry. MAC Address This is the MAC addresses of the wireless devices that are allowed or denied access to the Device. eircom D1000 modem User’s Guide...
Click Network Setting > Wireless > WPS. The following screen displays. Select Enable and click Apply to activate the WPS function. Then you can configure the WPS settings in this screen. Figure 27 Network Setting > Wireless > WPS eircom D1000 modem User’s Guide...
Page 60
Pre-Shared Key This field displays the pre-shared key the Device uses when the security mode is set to WPA(2)-PSK. Apply Click this to save your changes. Cancel Click this to restore your previously saved settings. eircom D1000 modem User’s Guide...
12:34:56:78:9a:bc). Enter a Pre-Shared Key (PSK) from 8 to 63 case-sensitive ASCII characters (including spaces and symbols). Apply Click this to save your changes. Cancel Click this to restore your previously saved settings. eircom D1000 modem User’s Guide...
Click Cancel to restore your previously saved settings. 5.8 The Scheduling Screen Use the wireless LAN scheduling to configure the days you want to enable or disable the wireless LAN. Click Network Setting > Wireless > Scheduling. The following screen displays. eircom D1000 modem User’s Guide...
Use this screen to configure advanced wireless settings. Click Network Setting > Wireless > Advanced, the screen appears as shown. Section 5.10.2 on page 64 for detailed definitions of the terms listed in this screen. eircom D1000 modem User’s Guide...
Page 64
This field is available only when you set the 802.11 Mode to 802.11n or 802.11b+g+n in the Advanced Setup screen. Apply Click this to save your changes. Cancel Click this to restore your previously saved settings. eircom D1000 modem User’s Guide...
The wireless network is the part in the blue circle. In this wireless network, devices A and B use the access point (AP) to interact with the other devices (such as the printer) or with the Internet. Your Device is the AP. eircom D1000 modem User’s Guide...
These security standards do two things. First, they authenticate. This means that only people presenting the right credentials (often a username and password, or a “key” phrase) can access the network. Second, they encrypt. This means that the information sent over the air is encoded. Only eircom D1000 modem User’s Guide...
Page 67
Some wireless devices, such as scanners, can detect wireless networks but cannot use wireless networks. These kinds of wireless devices might not have MAC addresses. Hexadecimal characters are 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, A, B, C, D, E, and F. eircom D1000 modem User’s Guide...
Page 68
WPA as well. In this case, if some of the devices support WPA and some support WPA2, you should set up WPA2-PSK or WPA2 (depending on the type of wireless network login) and select the WPA compatible option in the Device. eircom D1000 modem User’s Guide...
A and B can access the wired network and communicate with each other. When Intra-BSS traffic blocking is enabled, wireless station A and B can still access the wired network but cannot communicate with each other. Figure 33 Basic Service set eircom D1000 modem User’s Guide...
PIN (a unique Personal Identification Number that allows one device to authenticate the other) in each of the two devices. When WPS is activated on a device, it has two eircom D1000 modem User’s Guide...
Page 71
(referred to here as the AP) and a client device using the PIN method. Ensure WPS is enabled on both devices. Access the WPS section of the AP’s configuration interface. See the device’s User’s Guide for how to do this. eircom D1000 modem User’s Guide...
Page 72
If you cannot connect, check the list of associated wireless clients in the AP’s configuration utility. If you see the wireless client in the list, WPS was successful. The following figure shows a WPS-enabled wireless client (installed in a notebook computer) connecting to the WPS-enabled AP via the PIN method. eircom D1000 modem User’s Guide...
If the registrar is already part of a network, it sends the existing information. If not, it generates the SSID and WPA(2)-PSK randomly. The following figure shows a WPS-enabled client (installed in a notebook computer) connecting to a WPS-enabled access point. eircom D1000 modem User’s Guide...
Page 74
When WPS is activated on both, they perform the handshake. In this example, AP1 is the registrar, and Client 1 is the enrollee. The registrar randomly generates the security information to set up the network, since it is unconfigured and has no existing information. eircom D1000 modem User’s Guide...
Page 75
In step 3, you add another access point (AP2) to your network. AP2 is out of range of AP1, so you cannot use AP1 for the WPS handshake with the new access point. However, you know that Client 2 supports the registrar function, so you use it to perform the WPS handshake instead. eircom D1000 modem User’s Guide...
Page 76
If this happens, open the access point’s configuration interface and look at the list of associated clients (usually displayed by MAC address). It does not matter if the eircom D1000 modem User’s Guide...
Page 77
Check the MAC addresses of your wireless clients (usually printed on a label on the bottom of the device). If there is an unknown MAC address you can remove it or reset the AP. eircom D1000 modem User’s Guide...
• Use the File Sharing screen (Section 6.7 on page 88) to set up file sharing via the Device. • Use the Print Server screen (Section 6.8 on page 91) to enable the print server function on the Device. eircom D1000 modem User’s Guide...
UPnP devices and enable exchange of simple product and service descriptions. NAT traversal allows the following: • Dynamic port mapping • Learning public IP addresses • Assigning lease times to mappings Windows Messenger is an example of an application that supports NAT traversal and UPnP. eircom D1000 modem User’s Guide...
Use this screen to set the Local Area Network IP address, subnet mask and advanced networking settings such as RIP, multicast of your Device. Click Network Setting > Home Networking to open the LAN Setup screen. eircom D1000 modem User’s Guide...
Page 82
The Device supports IGMP v1/IGMP v2/IGMP v3. Select None to disable it. IGMP Snooping Select Enabled to activate IGMP Snooping. This allows the Device to passively learn memberships in multicast groups. Otherwise, select Disabled to deactivate it. DHCP Server State eircom D1000 modem User’s Guide...
This table allows you to assign IP addresses on the LAN to specific individual computers based on their MAC Addresses. Every Ethernet device has a unique MAC (Media Access Control) address. The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02. eircom D1000 modem User’s Guide...
Page 84
If you select Manual Input in the Select Device Info field, enter the IP address that you want to assign to the computer on your LAN with the MAC address that you will also specify. Click OK to save your changes. Cancel Click Cancel to exit this screen without saving. eircom D1000 modem User’s Guide...
78 for more information on UPnP. Use the following screen to enable or disable the UPnP function on your Device. Click Network Setting > Home Networking > UPnP to display the screen shown next. eircom D1000 modem User’s Guide...
Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. 6.6 The IPv6 LAN Setup Screen Use this screen to configure the IPv6 settings for your Device’s LAN interface. eircom D1000 modem User’s Guide...
Page 87
Chapter 6 Home Networking Figure 45 Network Setting > Home Networking > IPv6 LAN Setup eircom D1000 modem User’s Guide...
Page 88
Delegate M/O flag Select this to have the Device obtain the M/O (Managed/Other) flag setting from the from WAN service provider or uplink router. Manual Select this to specify the M/O flag setting manually. eircom D1000 modem User’s Guide...
Page 89
Information refresh Enter the number of seconds a DHCPv6 client should wait before refreshing time information retrieved from DHCPv6. Apply Click this to save your changes. Cancel Click this to restore your previously saved settings. eircom D1000 modem User’s Guide...
Device supports File Allocation Table (FAT) and FAT32 file systems. Windows/CIFS Common Internet File System (CIFS) is a standard protocol supported by most operating systems in order to share files across the network. eircom D1000 modem User’s Guide...
Note: If your USB device cannot be detected by the Device, try disconnecting and reconnecting it. 6.7.3 The File Sharing Screen Use this screen to set up file sharing via the Device. To access this screen, click Network Setting > Home Networking > File Sharing. eircom D1000 modem User’s Guide...
Page 92
Delete Click this to remove a user account from the list. Apply Click this to save your changes to the Device. Cancel Click this to set every field in this screen to its last-saved value. eircom D1000 modem User’s Guide...
The Device allows you to share a USB printer on your LAN. You can do this by connecting a USB printer to one of the USB ports on the Device and then allowing the computers connected to your network to communicate with the print server (Device) using the Internet Printing Protocol. eircom D1000 modem User’s Guide...
The following OSs support Device’s printer sharing feature. • Microsoft Windows 2000, Windows XP, Windows 7, Windows Vista or Macintosh OS X and later versions. 6.8.2 Before You Begin To configure the print server you need the following: eircom D1000 modem User’s Guide...
Windows XP Professional operating system. Some menu items may look different on your operating system. Click Start > Control Panel > Printers and Faxes to open the Printers and Faxes screen. Click Add a Printer. eircom D1000 modem User’s Guide...
Page 96
Chapter 6 Home Networking Figure 51 Printers Folder The Add Printer Wizard screen displays. Click Next. Figure 52 Add Printer Wizard: Welcome Select A network printer, or a printer attached to another computer and click Next. eircom D1000 modem User’s Guide...
Page 97
If your printer is not displayed in the list of Printers, you can insert the printer driver installation CD/disk or download the driver file to your computer, click Have Disk… and install the new printer driver. Click Next to continue. eircom D1000 modem User’s Guide...
Page 98
Otherwise select No and then click Next to continue. Figure 56 Add Printer Wizard: Default Printer 10 The following screen shows your current printer settings. Select Finish to complete adding a new printer. Figure 57 Add Printer Wizard Complete eircom D1000 modem User’s Guide...
Mac hard disk icon (Mac OS X in this example) on your desktop to open the Mac HD window. Figure 58 Mac OS X HD 12 Open the Applications folder. Figure 59 Macintosh HD Folder 13 Open the Utilities folder. eircom D1000 modem User’s Guide...
Page 100
15 Click the Add icon at the top of the screen. Figure 62 Printer List: Add 16 Click the IP Printer tab to set up your printer. • Press the alt key and click More Printers in the Printer Browser screen. eircom D1000 modem User’s Guide...
Page 101
17 The new network printer displays in the Printer List. The default printer Name displays in bold type. Figure 64 Printer List 18 Your print server driver setup is complete. You can now use the Device’s print server to print from a Mac computer. eircom D1000 modem User’s Guide...
Click the Finder icon on the Dock or double-click your Mac hard disk icon (Mac OS X in this example) on your desktop to open the Mac HD window. Figure 65 Mac OS X HD Open the Applications folder. Figure 66 Macintosh HD Folder Double-click the System Preferences icon. eircom D1000 modem User’s Guide...
Page 103
Chapter 6 Home Networking Figure 67 Applications Folder Click the Print & Fax icon. Figure 68 System Preferences Select the Printing tab and click the + icon to add a new printer. eircom D1000 modem User’s Guide...
Page 104
• Enter a descriptive name for the printer and where it is located. • Select your printer manufacturer from the Print Using drop-down list and then select a printer model. Click Add to save and close the Printer Browser configuration screen. eircom D1000 modem User’s Guide...
Your print server driver setup is complete. You can now use the Device’s print server to print from a Mac computer. 6.11 Home Networking Technical Reference This section provides some technical background information about the topics covered in this chapter. eircom D1000 modem User’s Guide...
• The ISP tells you the DNS server addresses, usually in the form of an information sheet, when you sign up. If your ISP gives you DNS server addresses, enter them in the DNS Server fields in the DHCP Setup screen. eircom D1000 modem User’s Guide...
However, the Internet Assigned Numbers Authority (IANA) has reserved the following three blocks of IP addresses specifically for private networks: • 10.0.0.0 — 10.255.255.255 • 172.16.0.0 — 172.31.255.255 • 192.168.0.0 — 192.168.255.255 eircom D1000 modem User’s Guide...
224.0.0.1 is used for query messages and is assigned to the permanent group of all IP hosts (including gateways). All hosts must join the 224.0.0.1 group in order to participate in IGMP. The address 224.0.0.2 is assigned to the multicast routers group. eircom D1000 modem User’s Guide...
Page 109
At start up, the Device queries all directly connected networks to gather group membership. After that, the Device periodically updates this information. IP multicasting can be enabled/disabled on the Device LAN and/or WAN interfaces in the web configurator (LAN; WAN). Select None to disable IP multicasting on these interfaces. eircom D1000 modem User’s Guide...
(Section 7.2 on page 110) to view and configure IP static routes on the Device. • Use the IPv6 Static Route screens (Section 7.3 on page 111) to view and configure IPv6 static routes on the Device. eircom D1000 modem User’s Guide...
Use this screen to add or edit a static route. Click Add new Static Route Entry in the Routing screen or the Edit icon next to the static route you want to edit. The screen shown next appears. Figure 75 Network Setting > Static Route Add/Edit eircom D1000 modem User’s Guide...
Click the Edit icon to go to the screen where you can set up a static route on the Device. Click the Remove icon to remove a static route from the Device. A window displays asking you to confirm that you want to delete the route. eircom D1000 modem User’s Guide...
PVC IPv6 Address Select the interface through which the traffic is routed. Click this to save your changes. Cancel Click this to restore your previously saved settings. eircom D1000 modem User’s Guide...
Boss: Queue 5 IP=192.168.1.23 8.1.1 What You Can Do in the QoS Screens • Use the General screen (Section 8.2 on page 114) to enable QoS on the Device, and specify the type of scheduling. eircom D1000 modem User’s Guide...
Use this screen to enable or disable QoS and set the upstream bandwidth. Click Network Setting > QoS > General to open the screen as shown next. Figure 79 Network Setting > QoS > General eircom D1000 modem User’s Guide...
This shows the descriptive name of this queue. Interface This shows the name of the Device’s interface through which traffic in this queue passes. Priority This shows the priority of this queue. Weight This shows the weight of this queue. eircom D1000 modem User’s Guide...
Queues with larger weights get more bandwidth than queues with smaller weights. Rate Limit Specify the maximum transmission rate (in Kbps) allowed for traffic on this queue. Click OK to save your changes. Cancel Click Cancel to exit this screen without saving. eircom D1000 modem User’s Guide...
8.4.1 Class Setup Add/Edit Click Add new Classifier in the Network Setting > QoS > Class Setup screen or click the Edit icon next to a class, the screen appears as shown next. eircom D1000 modem User’s Guide...
Page 120
Chapter 8 Quality of Service (QoS) Figure 83 QoS > Class Setup Add/Edit eircom D1000 modem User’s Guide...
Page 121
Enter the destination prefix length if you select IPv6 as the Ether Type. Prefix Length Port Range If you select TCP/UDP, TCP or UDP in the IP Protocol field, select the check box and enter the port number(s) of the source. eircom D1000 modem User’s Guide...
Page 122
If traffic of this class comes from a WAN interface and is in a queue that forwards traffic through the LAN/WLAN interface, the Device ignores the setting here. IPP/DS Field Select IPP/TOS to specify an IP precedence range and type of services. Select DSCP to specify a DiffServ Code Point (DSCP) range. eircom D1000 modem User’s Guide...
Use this screen to give priority to traffic for specific games. Click Network Setting > QoS > Game List to open the screen as shown next. Figure 84 Network Setting > QoS > Game List eircom D1000 modem User’s Guide...
IP precedence uses three bits of the eight-bit ToS (Type of Service) field in the IP header. There are eight classes of services (ranging from zero to seven) in IP precedence. Zero is the lowest priority level and seven is the highest. eircom D1000 modem User’s Guide...
(the inside local address) to another (the inside global address) before forwarding the packet to the WAN side. When the response comes back, NAT translates the destination address (the inside global address) back to the inside local address before forwarding it to the original inside host. eircom D1000 modem User’s Guide...
Network Setting > NAT > General screen. For other WAN connections (PVC1~PVC7), activate NAT for an individual WAN connection in the Broadband > More Connections > Edit screen. Figure 86 Network Setting > NAT > Port Forwarding eircom D1000 modem User’s Guide...
The following table describes the fields in this screen. Table 44 Network Setting > NAT > Port Forwarding: Edit LABEL DESCRIPTION Active Click this check box to enable the rule. Service Name Select the name of this port-forwarding rule. eircom D1000 modem User’s Guide...
IP address. A default server receives packets from the specified WAN connection and the ports that are not specified in the NAT Port Forwarding Setup screen. Figure 88 Network Setting > NAT > DMZ eircom D1000 modem User’s Guide...
Select Enable to make sure SIP (VoIP) works correctly with NAT. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. 9.6 NAT Technical Reference This chapter contains more information regarding NAT. eircom D1000 modem User’s Guide...
IP addresses to globally unique ones required for communication with hosts on other networks. It replaces the original IP source address (and TCP or UDP source port numbers for Many-to-One and Many-to-Many Overload NAT mapping) in each packet and then forwards it to the Internet. The eircom D1000 modem User’s Guide...
The following figure illustrates a possible NAT application, where three inside LANs (logical LANs using IP alias) behind the Device can communicate with three distinct WAN networks. Figure 91 NAT Application With IP Alias 9.6.5 NAT Mapping Types NAT supports five types of IP/port mapping. They are: eircom D1000 modem User’s Guide...
Page 135
… Many-to-Many Overload ILA1 IGA1 ILA2 IGA2 ILA3 IGA1 ILA4 IGA2 … Many-to-Many No Overload ILA1 IGA1 ILA2 IGA2 ILA3 IGA3 … Server Server 1 IP IGA1 Server 2 IP IGA1 Server 3 IP IGA1 eircom D1000 modem User’s Guide...
WAN PVC connections. The first PVC (PVC0) is for non time-sensitive data traffic. The second and third PVCs (PVC1 and PVC2) are for time sensitive Media-On-Demand (MOD) video traffic and VoIP traffic, respectively. Figure 92 Port Isolation Groups Data PVC0 PVC1 VoIP PVC2 eircom D1000 modem User’s Guide...
Add the selected port isolation group configuration. 10.3 The Port Isolation Screen Use this screen to set up port isolation groups. Click Network Setting > Port Isolation > Port Isolation to display the following screen. eircom D1000 modem User’s Guide...
10.3.1 Port Isolation Summary Screen Use this screen to view configured port isolation groups. In the Port Isolation screen, click the Port Isolation Summary button in the Group Summary section to display the following screen. eircom D1000 modem User’s Guide...
Page 140
The following table describes the labels in this screen. Table 51 Network Setting > Port Isolation > Port Isolation Summary LABEL DESCRIPTION Group ID This field displays the group index number. Group Port This field displays the ports included in the group. eircom D1000 modem User’s Guide...
If you have a private WAN IP address, then you cannot use Dynamic DNS. 11.2 The Dynamic DNS Screen Use this screen to change your Device’s DDNS. Click Network Setting > Dynamic DNS. The screen appears as shown. eircom D1000 modem User’s Guide...
Page 142
Type your user name. Password Type the password assigned to you. Enable Wildcard Select the check box to enable DynDNS Wildcard. Option Apply Click this to save your changes. Cancel Click this to restore your previously saved settings. eircom D1000 modem User’s Guide...
12.2 The IP/MAC Filter Screen Use this screen to create and apply IP and MAC filters. Click Security > Filter > IP/MAC Filter. The screen appears as shown. eircom D1000 modem User’s Guide...
Page 144
Source IP Address Enter the source IP address of the packets you wish to filter. This field is ignored if it is 0.0.0.0. Subnet Mask Enter the IP subnet mask for the source IP address eircom D1000 modem User’s Guide...
Click this to remove the filter rule. Cancel Click this to restore your previously saved settings. 12.3 IPv6/MAC Filter Use this screen to create and apply IPv6 filters. Click Security > Filter > IPv6/MAC Filter. The screen appears as shown. eircom D1000 modem User’s Guide...
Page 146
Destination IPv6 Address Enter the destination IPv6 address of the packets you wish to filter. This field is ignored if it is ::. Destination Prefix Length Enter the prefix length for the destination IPv6 address. eircom D1000 modem User’s Guide...
Page 147
This is the (upper layer) protocol that defines the service to which this rule applies. By default it is ICMPv6. Apply Click this to apply your changes. Delete Click this to remove the filter rule. Cancel Click this to restore your previously saved settings. eircom D1000 modem User’s Guide...
• Use the DoS screen (Section 13.5 on page 156) to set the thresholds that the Device uses to determine when to start dropping sessions that do not become fully established (half-open sessions). eircom D1000 modem User’s Guide...
DoS, probing, redirection attacks and renumbering attacks that can be carried out through ICMPv6. Since ICMPv6 error messages are critical for establishing and maintaining communications, filtering policy focuses on ICMPv6 informational messages. eircom D1000 modem User’s Guide...
(Telnet, FTP, HTTP, HTTPS, DNS, POP3, SMTP) is permitted. Medium This is the recommended setting. It allows traffic to the Internet but blocks anyone from the Internet from accessing any services on your local network. eircom D1000 modem User’s Guide...
ICMP destination-unreachable message (for a UDP packet) to the sender. Select Permit to allow the passage of the packets. Apply Click this to save your changes. Cancel Click this to restore your previously saved settings. eircom D1000 modem User’s Guide...
Action This field displays whether the firewall silently discards packets (Drop), discards packets and sends a TCP reset packet or an ICMP destination-unreachable message to the sender (Reject) or allows the passage of packets (Permit). eircom D1000 modem User’s Guide...
Use this screen to configure firewall rules. In the Rules screen, select an index number and click Add or click a rule’s Edit icon to display this screen and refer to the following table for information on the labels. eircom D1000 modem User’s Guide...
Page 155
Maximum Burst Set the maximum number of packets that can be sent at the peak rate. Number This field determines if a log for packets that match the rule is created or not. eircom D1000 modem User’s Guide...
Authority) website. Click the Edit Customized Services button while editing a firewall rule to configure a custom service port. This displays the following screen. Figure 104 Security > Firewall > Rules: Edit: Edit Customized Services eircom D1000 modem User’s Guide...
Type a single port number or the range of port numbers that define your customized service. Back Click this to return to the previous screen without saving. Apply Click this to save your changes. Cancel Click this to restore your previously saved settings. eircom D1000 modem User’s Guide...
(acknowledgment). After this handshake, a connection is established. Figure 107 Three-Way Handshake For UDP, half-open means that the firewall has detected no return traffic. An unusually high number (or arrival rate) of half-open sessions could indicate a DOS attack. eircom D1000 modem User’s Guide...
Device may classify them as DoS attacks. 13.5.2 Configuring Firewall Thresholds Click Security > Firewall > DoS > Advanced to display the following screen. Figure 108 Security > Firewall > DoS > Advanced eircom D1000 modem User’s Guide...
Note: The LAN includes both the LAN port and the WLAN. By default, the Device’s stateful packet inspection allows packets traveling in the following directions: • LAN to Router These rules specify which computers on the LAN can manage the Device (remote management). eircom D1000 modem User’s Guide...
Don't enable any local service (such as telnet or FTP) that you don't use. Any enabled service could present a potential security risk. A determined hacker might be able to find creative ways to misuse the enabled services to access the firewall or the network. eircom D1000 modem User’s Guide...
Internet (through one or more ISPs). If an alternate gateway is on the LAN (and its IP address is in the same subnet as the Device’s LAN IP address), eircom D1000 modem User’s Guide...
Page 163
The Device reroutes the packet to Gateway A, which is in Subnet 2. The reply from the WAN goes to the Device. The Device then sends it to the computer on the LAN in Subnet 1. eircom D1000 modem User’s Guide...
This shows the MAC address of the LAN user’s computer to which this rule applies. Internet Access This shows the day(s) and time on which parental control is enabled. Schedule Network Service This shows whether the network service is configured. If not, None will be shown. eircom D1000 modem User’s Guide...
Use this screen to configure a restricted access schedule and/or URL filtering settings to block the users on your network from accessing certain web sites. Figure 113 Add/Edit Parental Control Rule eircom D1000 modem User’s Guide...
Page 167
Click the Delete icon to delete an existing rule. Blocked Site/URL Enter the URL of web sites or URL keywords to which the Device blocks access. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. eircom D1000 modem User’s Guide...
X.509 certificate into a printable form. 15.3 Local Certificates Use this screen to view the Device’s summary list of certificates and certification requests. You can import the following certificates to your Device: eircom D1000 modem User’s Guide...
Page 170
Type in the location of the SSH certificate file you want to upload in this field or click Browse to find it. Current File This field displays the name used to identify this certificate. It is recommended that you give each certificate a unique name. eircom D1000 modem User’s Guide...
Click Remove to delete the certificate. 15.5 Trusted CA Import Click Import Certificate in the Trusted CA screen to open the Import Certificate screen. You can save a trusted certification authority’s certificate to the Device. eircom D1000 modem User’s Guide...
Click Security > Certificates > Trusted CA to open the Trusted CA screen. Click the View icon to open the View Certificate screen. Figure 117 Trusted CA: View eircom D1000 modem User’s Guide...
Page 173
(via floppy disk for example). Back Click this to return to the previous screen. eircom D1000 modem User’s Guide...
Critical: The system condition is critical. Error: There is an error condition on the system. Warning: There is a warning condition on the system. Notice: There is a normal but significant condition on the system. eircom D1000 modem User’s Guide...
This field displays the time the log was recorded. Level This field displays the severity level of the logs that the device is to send to this syslog server. Message This field states the reason for the log. eircom D1000 modem User’s Guide...
Click this button to apply the new poll interval you entered in the Refresh Interval field. Stop Click Stop to stop refreshing statistics. Connected This shows the name of the WAN interface that is currently connected. Interface eircom D1000 modem User’s Guide...
This shows the LAN or WLAN interface. Bytes Sent This indicates the number of bytes transmitted on this interface. Bytes Received This indicates the number of bytes received on this interface. Interface This shows the LAN or WLAN interface. eircom D1000 modem User’s Guide...
IP Address This shows the IP address of the client. MAC Address This shows the MAC address of the client. No. of Open This shows the number of NAT sessions used by the client. Session eircom D1000 modem User’s Guide...
Type the new password again for confirmation. Confirm Enable Local Select this to enable local adminstrator login. admin login Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. eircom D1000 modem User’s Guide...
A value of "0" means a management session never times out, no matter how long it has been left idle (not recommended). Apply Click this to save your changes. Cancel Click this to restore your previously saved settings. eircom D1000 modem User’s Guide...
Current Date/Time Current Time This field displays the time and date of your Device. Each time you reload this page, the Device synchronizes the time and date with the time server. Time and Date Setup eircom D1000 modem User’s Guide...
Page 186
In Germany for instance, you would type 2 because Germany's time zone is one hour ahead of GMT or UTC (GMT+1). Apply Click this to save your changes. Cancel Click this to restore your previously saved settings. eircom D1000 modem User’s Guide...
You can configure where the Device sends logs the Device records in the Log Setting screen. 21.2 The Log Setting Screen To change your Device’s log settings, click Maintenance > Log Setting. The screen appears as shown. Figure 125 Maintenance > Log Setting eircom D1000 modem User’s Guide...
Page 190
Select the categories of logs that you want to record. Log Level Select the log level. See Chapter 16 on page 173 for descriptions of log levels. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. eircom D1000 modem User’s Guide...
(.zip) files before you can upload them. Upload Click this to begin the upload process. This process may take up to two minutes. After you see the firmware updating screen, wait two minutes before logging into the Device again. eircom D1000 modem User’s Guide...
Page 192
After two minutes, log in again and check your new firmware version in the Status screen. If the upload was not successful, the following screen will appear. Click OK to go back to the Firmware Upgrade screen. Figure 129 Error Message eircom D1000 modem User’s Guide...
The backup configuration file will be useful in case you need to return to your previous settings. Click Backup to save the Device’s current configuration to your computer. eircom D1000 modem User’s Guide...
Page 194
Wait until the Device’s login screen appears. You can also press the RESET button on the rear panel to reset the factory defaults of your Device. Refer to Section 1.5 on page 15 for more information on the RESET button. eircom D1000 modem User’s Guide...
System restart allows you to reboot the Device remotely without turning the power off. You may need to do this if the Device hangs, for example. Click Maintenance > Reboot. Click the Reboot button to have the Device reboot. This does not affect the Device's configuration. eircom D1000 modem User’s Guide...
IP address(es) users can use Telnet to manage the Device. • Use the FTP screen (Section 24.4 on page 199) to configure through which interface(s) and from which IP address(es) users can use FTP to access the Device. eircom D1000 modem User’s Guide...
24.2 The WWW Screen Use this screen to specify how to connect to the Device from a web browser, such as Internet Explorer. 24.2.1 Configuring the WWW Screen Click Maintenance > RemoteMGMT to display the WWW screen. eircom D1000 modem User’s Guide...
Page 199
Choose Range to just allow the computer(s) with an IP address in the range that you specify to access the Device using this service. Apply Click this to save your changes. Cancel Click this to restore your previously saved settings. eircom D1000 modem User’s Guide...
Choose Range to just allow the computer(s) with an IP address in the range that you specify to access the Device using this service. Apply Click this to save your changes. Cancel Click this to restore your previously saved settings. eircom D1000 modem User’s Guide...
Simple Network Management Protocol is a protocol used for exchanging management information between network devices. Your Device supports SNMP agent functionality, which allows a manager station to manage and monitor the Device through the network. The Device supports SNMP version eircom D1000 modem User’s Guide...
SNMP allows a manager and agents to communicate for the purpose of accessing these objects. 24.5.1 Configuring SNMP To change your Device’s SNMP settings, click Maintenance > RemoteMGMT > SNMP tab. The screen appears as shown. eircom D1000 modem User’s Guide...
Use this screen to set from which IP address the Device will accept DNS queries and on which interface it can send them your Device’s DNS settings. This feature is not available when the Device eircom D1000 modem User’s Guide...
Device when unsupported ports are probed. Note: If you want your device to respond to pings and requests for unauthorized services, you will also need to configure the firewall accordingly by disabling SPI. eircom D1000 modem User’s Guide...
SSH access and from which IP address the access can come. SSH is a secure communication protocol that combines authentication and data encryption to provide secure encrypted communication between two hosts over an unsecured network. Click Maintenance > RemoteMGMT > SSH tab to display the screen as shown. eircom D1000 modem User’s Guide...
Page 206
Choose Range to just allow the computer(s) with an IP address in the range that you specify to access the Device using this service. Apply Click this to save your changes. Cancel Click this to restore your previously saved settings. eircom D1000 modem User’s Guide...
Type the IP address of a computer that you want to ping in order to test a connection. Ping Click this to ping the IP address that you entered. PingV6 Click this to ping the IPv6 address that you entered. eircom D1000 modem User’s Guide...
Use this screen to view the DSL line statistics and reset the ADSL line. Click Maintenance > Diagnostic > DSL Line to open the screen shown next. Figure 143 Maintenance > Diagnostic > DSL Line eircom D1000 modem User’s Guide...
Page 209
"Start to reset ADSL Loading ADSL modem F/W... Reset ADSL Line Successfully!" WAN Connection Click this to check your WAN connection status of DSL, ATM, Ethernet PPPoE, IP, and Test Pinging. eircom D1000 modem User’s Guide...
Section 27.1 on page 213. Check the hardware connections. Inspect your cables for damage. Contact the vendor to replace any damaged cables. Turn the Device off and on. If the problem continues, contact the vendor. eircom D1000 modem User’s Guide...
Reset the device to its factory defaults, and try to access the Device with the default IP address. Section 1.5 on page If the problem continues, contact the network administrator or vendor, or try one of the advanced suggestions. Advanced Suggestions eircom D1000 modem User’s Guide...
Check the hardware connections, and make sure the LEDs are behaving as expected. See the Quick Start Guide and Section 27.1 on page 213. Make sure you entered your ISP account information correctly in the wizard. These fields are case- sensitive, so make sure [Caps Lock] is not on. eircom D1000 modem User’s Guide...
Page 214
If the problem continues, contact the network administrator or vendor, or try one of the advanced suggestions. Advanced Suggestions • Check the settings for QoS. If it is disabled, you might consider activating it. If it is enabled, you might consider raising or lowering the priority for some applications. eircom D1000 modem User’s Guide...
The Device is sending or receiving IP traffic. The Device attempted to make an IP connection but failed. Possible causes are no response from a DHCP server, no PPPoE response, PPPoE authentication failed. The Device does not have an IP connection. eircom D1000 modem User’s Guide...
The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation. All rights reserved.
Page 218
(LANs). Later in this document you will find an overview of countries inwhich additional restrictions or requirements or both are applicable. The requirements for any country may evolve. ZyXEL recommends that you check with the local authorities for the latest status of their national regulations for both the 2,4- and 5-GHz wireless LANs. eircom D1000 modem User’s Guide...
Page 219
2. The regulatory limits for maximum output power are specified in EIRP. The EIRP level (in dBm) of a device can be calculated by adding the gain of the antenna used(specified in dBi) to the output power available at the connector (specified in dBm). eircom D1000 modem User’s Guide...
Your product is marked with this symbol, which is known as the WEEE mark. WEEE stands for Waste Electronics and Electrical Equipment. It means that used electrical and electronic products should not be mixed with general waste. Used electrical and electronic equipment should be treated separately. eircom D1000 modem User’s Guide...
Common Internet File System, see CIFS status compatibility, WDS authentication 64, 66 RADIUS server configuration backup automatic logout DHCP IP alias IP precedence IP/MAC filter port forwarding reset backup configuration restoring static route Basic Service Set, see BSS 110, 112 eircom D1000 modem User’s Guide...
Page 223
78, 81, 104 78, 104 IGMP IP address 78, 79, 105 IP alias nailed-up connection configuration 35, 44 MAC address 39, 125, 131 multicast activation 80, 106 address mapping subnet mask types 78, 105 applications LAND attack eircom D1000 modem User’s Guide...
Page 224
PPPoA 33, 39, 43 PPPoE 33, 39, 43 preamble 62, 64 printer sharing schedules and LAN wireless LAN requirements 36, 40, 45 private IP address security probing, firewalls network eircom D1000 modem User’s Guide...
Page 225
VBR-nRT 36, 40, 46 system VBR-RT 36, 40, 46 firmware 34, 39, 44 passwords version reset firmware status version time Virtual Channel Identifier, see VCI System Info Virtual Path Identifier, see VPI eircom D1000 modem User’s Guide...
Page 226
Wide Area Network, see WAN WiFi Protected Setup, see WPS Wireless Distribution System, see WDS wireless LAN 47, 63 authentication 64, 66 example channel encryption example fragmentation threshold 62, 64 limitations MAC address filter 56, 65 MBSSID eircom D1000 modem User’s Guide...