Page 1 VMG1312-Bx0D Wireless N VDSL2 Gateway with USB Version 5.11 Edition 1, 05/2015 Quick Start Guide User’s Guide Default Login Details LAN IP Address http://192.168.1.1 Login admin, user www.zyxel.com Password 1234, user Copyright © 2015 ZyXEL Communications Corporation...
Page 2 Every effort has been made to ensure that the information in this manual is accurate. Related Documentation • Quick Start Guide The Quick Start Guide shows how to connect the VMG and get up and running right away. VMG1312-Bx0D User’s Guide...
Page 3: Table Of Contents
ARP Table .............................219 Routing Table ............................221 Multicast Status ............................223 xDSL Statistics ............................225 3G Statistics ............................228 System ..............................231 User Account ............................232 Remote Management ..........................235 TR-069 Client ............................239 SNMP ..............................241 Time Settings ............................243 E-mail Notification ..........................245 Log Setting ............................247 VMG1312-Bx0D User’s Guide...
Page 4 Contents Overview Firmware Upgrade ..........................251 Backup Restore .............................255 Diagnostic .............................258 Troubleshooting ............................263 Appendices ............................269 VMG1312-Bx0D User’s Guide...
Page 5: Table Of Contents
2.2.3 Navigation Panel ........................26 Chapter 3 Quick Start............................31 3.1 Overview ............................31 3.2 Quick Start Setup ..........................31 Chapter 4 Tutorials ...............................33 4.1 Overview ............................33 4.2 Setting Up an ADSL PPPoE Connection ..................33 4.3 Setting Up a Secure Wireless Network .....................36 VMG1312-Bx0D User’s Guide...
Page 6 6.5.1 Modify 802.1X Settings ......................80 6.6 Technical Reference ..........................81 Chapter 7 Wireless ...............................87 7.1 Overview ............................87 7.1.1 What You Can Do in this Chapter ....................87 7.1.2 What You Need to Know ......................87 7.2 The General Screen .........................88 VMG1312-Bx0D User’s Guide...
Page 7 8.7 The Wake on LAN Screen ......................128 8.8 The TFTP Server Name Screen .....................128 8.9 Technical Reference ........................129 8.9.1 LANs, WANs and the VMG ....................129 8.9.2 DHCP Setup ..........................129 8.9.3 DNS Server Addresses ......................130 8.9.4 LAN TCP/IP ...........................130 Chapter 9 Routing ..............................133 VMG1312-Bx0D User’s Guide...
Page 8 11.5 The DMZ Screen ...........................163 11.6 The ALG Screen ..........................163 11.7 The Address Mapping Screen .......................164 11.7.1 Add/Edit Address Mapping Rule ..................165 11.8 The Sessions Screen ........................166 11.9 Technical Reference ........................166 11.9.1 NAT Definitions ........................167 11.9.2 What NAT Does ........................167 VMG1312-Bx0D User’s Guide...
Page 9 15.2.1 The Add New User Screen ....................185 15.3 The Media Server Screen ......................186 Chapter 16 Firewall ..............................189 16.1 Overview ............................189 16.1.1 What You Can Do in this Chapter ..................189 16.1.2 What You Need to Know ......................190 16.2 The Firewall Screen ........................190 VMG1312-Bx0D User’s Guide...
Page 10 21.1 Overview ............................211 21.1.1 What You Can Do in this Chapter ..................211 21.1.2 What You Need To Know ..................... 211 21.2 The System Log Screen ........................212 21.3 The Security Log Screen .......................212 Chapter 22 Traffic Status ............................215 VMG1312-Bx0D User’s Guide...
Page 11 27.2 The 3G Statistics Screen .......................228 Chapter 28 System ...............................231 28.1 Overview ............................231 28.2 The System Screen ........................231 Chapter 29 User Account ............................232 29.1 Overview ............................232 29.2 The User Account Screen ......................232 29.2.1 The User Account Add and Edit Screens ................232 VMG1312-Bx0D User’s Guide...
Page 12 35.2 The Log Settings Screen .......................247 35.2.1 Example E-mail Log ......................248 Chapter 36 Firmware Upgrade ..........................251 36.1 Overview ............................251 36.2 The Firmware Screen ........................251 Chapter 37 Backup Restore ..........................255 37.1 Overview ............................255 37.2 The Backup Restore Screen ......................255 VMG1312-Bx0D User’s Guide...
Page 13 39.5 USB Device Connection ........................268 39.6 UPnP .............................268 Part III: Appendices ..................269 Appendix A Customer Support ......................271 Appendix B Wireless LANs......................277 Appendix C IPv6 ..........................291 Appendix D Services ........................299 Appendix E Legal Information......................304 Index ..............................311 VMG1312-Bx0D User’s Guide...
Page 14 Table of Contents VMG1312-Bx0D User’s Guide...
Page 15: User's Guide
User’s Guide...
Page 17: Introducing The Vmg
VMG to its factory default settings. If you backed up an earlier configuration file, you would not have to totally re-configure the VMG. You could simply restore your last configuration. VMG1312-Bx0D User’s Guide...
Page 18: Applications For The Vmg
This means that probes from the outside to your network are not allowed, but you can safely browse the Internet and download files. 1.4.2 VMG’s USB Support The USB port of the VMG is used for file-sharing and media server. VMG1312-Bx0D User’s Guide...
Page 19: Leds (Lights)
USB device (B) connected to the VMG’s USB port (without having to copy them to another computer). Figure 3 USB Media Server Application 1.5 LEDs (Lights) The following graphic displays the labels of the LEDs. VMG1312-Bx0D User’s Guide...
Page 20: The Reset Button
This means that you will lose all configurations that you had previously and the password will be reset to “1234”. Make sure the PWR/SYS LED is on (not blinking). VMG1312-Bx0D User’s Guide...
Page 21: Wireless Access
Once the connection is successfully made, the WLAN/WPS LED shines green. To turn off the wireless network, press the WLAN button for one to five seconds. The WLAN/WPS LED turns off when the wireless network is off. VMG1312-Bx0D User’s Guide...
Page 22 Chapter 1 Introducing the VMG VMG1312-Bx0D User’s Guide...
Page 23: The Web Configurator
Login. Figure 6 Password Screen The following screen displays if you have not yet changed your password. Enter a new password, retype it to confirm and click Apply. VMG1312-Bx0D User’s Guide...
Page 24 Figure 7 Change Password Screen configure basic Internet access, and wireless settings. The Network Map page appears. Figure 8 Network Map Click Status to display the Status screen, where you can view the VMG’s interface and system information. VMG1312-Bx0D User’s Guide...
Page 25: Web Configurator Layout
Language: Select the language you prefer. Quick Start: Click this icon to open screens where you can configure the VMG’s time zone Internet access, and wireless settings. Logout: Click this icon to log out of the web configurator. VMG1312-Bx0D User’s Guide...
Page 26: Main Window
Use this screen to configure 3G WAN connection. Advanced Use this screen to enable or disable PTM over ADSL, Annex M/Annex J, and DSL PhyR functions. 802.1x Use this screen to view and configure the IEEE 802.1x settings on the VMG. VMG1312-Bx0D User’s Guide...
Page 27 Use this screen to enable or disable SIP ALG. Address Mapping Use this screen to change your VMG’s address mapping settings. Sessions Use this screen to configure the maximum number of NAT sessions each client host is allowed to have through the VMG. VMG1312-Bx0D User’s Guide...
Page 28 Levels include: • Emergency • Alert • Critical • Error • Warning • Notice • Informational • Debugging Categories include: • Account • Attack • Firewall • MAC Filter VMG1312-Bx0D User’s Guide...
Page 29 Use this screen to configure CFM (Connectivity Fault Management) MD (maintenance domain) and MA (maintenance association), perform connectivity tests and view test reports. OAM Ping Use this screen to view information to help you identify problems with the DSL connection. VMG1312-Bx0D User’s Guide...
Page 30 Chapter 2 The Web Configurator VMG1312-Bx0D User’s Guide...
Page 31: Quick Start
Select the time zone of your location. Click Next. Figure 11 Quick Start - Welcome Enter your Internet connection information in this screen. The screen and fields to enter may vary depending on your current connection type. Click Next. VMG1312-Bx0D User’s Guide...
Page 32 Turn the wireless LAN on or off. If you keep it on, record the security settings so you can configure your wireless clients to connect to the VMG. Click Save. Figure 13 Quick Start - Wireless Your VMG saves your settings and attempts to connect to the Internet. VMG1312-Bx0D User’s Guide...
Page 33: Tutorials
Broadband screens. Click Network Setting > Broadband to open the following screen. Click Add New WAN Interface. In this example, the DSL connection has the following information. General Name MyDSLConnection Type ADSL VMG1312-Bx0D User’s Guide...
Page 34 Then select DNS as Static and enter the DNS server addresses provided to you, such as 192.168.5.2 (DNS server1)/192.168.5.1 (DNS server2). Leave the rest of the fields to the default settings. Click Apply to save your settings. VMG1312-Bx0D User’s Guide...
Page 35 Chapter 4 Tutorials VMG1312-Bx0D User’s Guide...
Page 36: Setting Up A Secure Wireless Network
802.11b/g/n Mixed Click Network Setting > Wireless to open the General screen. Select More Secure as the security level and WPA2-PSK as the security mode. Configure the screen using the provided parameters (see page 36). Click Apply. VMG1312-Bx0D User’s Guide...
Page 37: Using Wps
This section shows you how to set up a wireless network using WPS. It uses the VMG as the AP and ZyXEL NWD210N as the wireless client which connects to the notebook. Note: The wireless client must be a WPS-aware device (for example, a WPS USB adapter or PCMCIA card). VMG1312-Bx0D User’s Guide...
Page 38 Both buttons have exactly the same function: you can use one or the other. Note: It doesn’t matter which button is pressed first. You must press the second button within two minutes of pressing the first one. VMG1312-Bx0D User’s Guide...
Page 39 Launch your wireless client’s configuration utility. Go to the WPS settings and select the PIN method to get a PIN number. Log into VMG’s web configurator and go to the Network Setting > Wireless > WPS screen. Enable the WPS function and click Apply. VMG1312-Bx0D User’s Guide...
Page 40 This may take up to two minutes. The wireless client is then able to communicate with the VMG securely. The following figure shows you how to set up a wireless network and its security on a VMG and a wireless client by using PIN method. VMG1312-Bx0D User’s Guide...
Page 41: Without Wps
Use the wireless adapter’s utility installed on the notebook to search for the “Example” SSID. Then enter the “DoNotStealMyWirelessNetwork” pre-shared key to establish an wireless Internet connection. Note: The VMG supports IEEE 802.11b and IEEE 802.11g wireless clients. Make sure that your notebook or computer’s wireless adapter supports one of these standards. VMG1312-Bx0D User’s Guide...
Page 42: Setting Up Multiple Wireless Groups
Pre-Shared Key ForCompanyOnly 123456789 guest123 Click Network Setting > Wireless to open the General screen. Use this screen to set up the company’s general wireless network group. Configure the screen using the provided parameters and click Apply. VMG1312-Bx0D User’s Guide...
Page 43 Chapter 4 Tutorials Click Network Setting > Wireless > Guest/More AP to open the following screen. Click the Edit icon to configure the second wireless network group. Configure the screen using the provided parameters and click Apply. VMG1312-Bx0D User’s Guide...
Page 44 Chapter 4 Tutorials In the Guest/More AP screen, click the Edit icon to configure the third wireless network group.Configure the screen using the provided parameters and click Apply. VMG1312-Bx0D User’s Guide...
Page 45: Configuring Static Route For Routing To Another Network
In order to extend your Intranet and control traffic flowing directions, you may connect a router to the VMG’s LAN. The router may be used to separate two department networks. This tutorial shows how to configure a static routing rule for two network routings. VMG1312-Bx0D User’s Guide...
Page 46 B. This tutorial uses the following example IP settings: Table 4 IP Settings in this Tutorial DEVICE / COMPUTER IP ADDRESS The VMG’s WAN 172.16.1.1 The VMG’s LAN 192.168.1.1 IP Type IPv4 Use Interface VDSL/ppp1.1 192.168.1.34 VMG1312-Bx0D User’s Guide...
Page 47: Configuring Qos Queue And Class Setup
Now B should be able to receive traffic from A. You may need to additionally configure B’s firewall settings to allow specific traffic to pass through. 4.6 Configuring QoS Queue and Class Setup This section contains tutorials on how you can configure the QoS screen. VMG1312-Bx0D User’s Guide...
Page 48 Bandwidth to 10,000 kbps (or leave this blank to have the VMG automatically determine this figure). Click Apply. Tutorial: Advanced > QoS Click Queue Setup > Add new Queue to create a new queue. In the screen that opens, check Active and enter or select the following values: • Name: E-mail VMG1312-Bx0D User’s Guide...
Page 49 • Weight: 8 • Rate Limit: 5,000 (kbps) Tutorial: Advanced > QoS > Queue Setup Click Class Setup > Add new Classifier to create a new class. Check Active and follow the settings as shown in the screen below. VMG1312-Bx0D User’s Guide...
Page 50 Type the MAC address of your computer - AA:FF:AA:FF:AA:FF. Type the MAC Mask if you know it. To Queue Link this to an item in the Network Setting > QoS > Queue Setup screen, which is the E- Index mail queue created in this example. VMG1312-Bx0D User’s Guide...
Page 51: Access The Vmg Using Ddns
• IP Address: Enter the WAN IP address that your VMG is currently using. You can find the IP address on the VMG’s Web Configurator Status page. Then you will need to configure the same account and host name on the VMG later. VMG1312-Bx0D User’s Guide...
Page 52: Configuring Ddns On Your Vmg
Josephine’s computer connects wirelessly to the Internet through the VMG. Thomas decides to use the Security > MAC Filter screen to grant wireless network access to his computer but not to Josephine’s computer. VMG1312-Bx0D User’s Guide...
Page 53: Access Your Shared Files From A Computer
4.9 Access Your Shared Files From a Computer Here is how to use an FTP program to access a file storage device connected to the VMG’s USB port. Note: This example uses the FileZilla FTP program to browse your shared files. VMG1312-Bx0D User’s Guide...
Page 54 In FileZilla enter the IP address of the VMG (the default is 192.168.1.1), your account’s user name and password and port 21 and click Quickconnect. A screen asking for password authentication appears. File Sharing via Windows Explorer Once you log in the USB device displays in the folder. VMG1312-Bx0D User’s Guide...
Page 55: Technical Reference
Technical Reference...
Page 57: Network Map And Status Screens
5.2 The Network Map Screen Use this screen to view the network connection status of the device and its clients. A warning message appears if there is a connection problem. Figure 14 Network Map: Icon View Mode VMG1312-Bx0D User’s Guide...
Page 58: The Status Screen
VMG to update this screen in Refresh interval. Figure 15 Network Map: List View Mode 5.3 The Status Screen Use this screen to view the status of the VMG. Click Status to open this screen. Figure 16 Status Screen VMG1312-Bx0D User’s Guide...
Page 59 This field displays how long the VMG has been running since it last started up. The VMG Time starts up when you plug it in, when you restart it (Maintenance > Reboot), or when you reset it. VMG1312-Bx0D User’s Guide...
Page 60 For the WLAN interface, it displays the maximum transmission rate or N/A with WLAN disabled. For the 3G interface, this field displays Up when a 3G device is installed in a USB slot and N/A when no device is detected in any USB slot. VMG1312-Bx0D User’s Guide...
Page 61: Broadband
CONNECTION SETTINGS TYPE ADSL/VDSL Routing PPPoE PPP information, IPv4/IPv6 IP over PTM address, routing feature, DNS server, VLAN, QoS, and MTU IPoE IPv4/IPv6 IP address, routing feature, DNS server, VLAN, QoS, and MTU Bridge VLAN and QoS VMG1312-Bx0D User’s Guide...
Page 62: What You Need To Know
IPv6 address size to 128 bits (from the 32-bit IPv4 address) allows up to 3.4 x 10 addresses. The VMG can use IPv4/IPv6 dual stack to connect to IPv4 and IPv6 networks, and supports IPv6 rapid deployment (6RD). VMG1312-Bx0D User’s Guide...
Page 63 ISP’s Border Relay router (BR in the figure) to connect to the native IPv6 Internet. The local network can also use IPv4 services. The VMG uses it’s configured IPv4 WAN IP to route IPv4 traffic to the IPv4 Internet. VMG1312-Bx0D User’s Guide...
Page 64: Before You Begin
ISP (IPv6) IPv6 Internet IPv6 IPv6 IPv4 IPv4 in IPv6 AFTR IPv4 Internet 6.1.3 Before You Begin You need to know your Internet access settings such as encapsulation and WAN IP address. Get this information from your ISP. VMG1312-Bx0D User’s Guide...
Page 65: The Broadband Screen
This shows whether Multicast Listener Discovery (MLD) is activated or not for this connection. MLD is not available when the connection uses the bridging service. Modify Click the Edit icon to configure the WAN connection. Click the Delete icon to remove the WAN connection. VMG1312-Bx0D User’s Guide...
Page 66: Add/Edit Internet Connection
The following example screen displays when you select the ADSL/VDSL over ATM connection type, Routing mode, and PPPoE encapsulation. The screen varies when you select other interface type, encapsulation, and IPv6/IPv4 mode. Figure 21 Network Setting > Broadband > Add New WAN Interface/Edit (Routing Mode) VMG1312-Bx0D User’s Guide...
Page 67 IP address. Static IP Select this option If the ISP assigned a fixed IP address. Address IP Address Enter the static IP address provided by your ISP. Subnet Enter the subnet mask provided by your ISP. Mask VMG1312-Bx0D User’s Guide...
Page 68 VMG to get subscribing information and maintain a joined member list for each multicast group. It can reduce multicast traffic significantly. Apply as Select this option to have the VMG use the WAN interface of this connection as the system Default default gateway. Gateway VMG1312-Bx0D User’s Guide...
Page 69 Select this checkbox to have the VMG act as an MLD proxy on this connection. This allows Enable the VMG to get subscription information and maintain a joined member list for each multicast group. It can reduce multicast traffic significantly. VMG1312-Bx0D User’s Guide...
Page 70: Bridge Mode
Select Bridge as the encapsulation mode. The screen varies depending on the interface type you select. If you select ADSL/VDSL over PTM as the interface type, the following screen appears. VMG1312-Bx0D User’s Guide...
Page 71 Type the VLAN ID number (from 0 to 4094) for traffic through this connection. Click OK to save your changes. Cancel Click Cancel to exit this screen without saving. If you select ADSL over ATM as the interface type, the following screen appears. VMG1312-Bx0D User’s Guide...
Page 72 To transport multiple protocols, the VMG needs separate VCs. There is a binding between a VC and the type of the network protocol carried on the VC. This reduces payload overhead since there is no need to carry protocol information in each Protocol Data Unit (PDU) payload. VMG1312-Bx0D User’s Guide...
Page 73: The 3G Backup Screen
WAN connection when available. Note: This VMG supports connecting one 3G dongle at a time. Figure 24 Internet Access Application: 3G WAN Use this screen to configure your 3G settings. Click Network Setting > Broadband > 3G Backup. VMG1312-Bx0D User’s Guide...
Page 74 VMG. Otherwise, it displays N/A. Username Type the user name (of up to 64 ASCII printable characters) given to you by your service provider. Password Type the password (of up to 64 ASCII printable characters) associated with the user name above. VMG1312-Bx0D User’s Guide...
Page 75 Send Notifications are sent to the e-mail address specified in this field. If this field is left blank, Notification to notifications cannot be sent via e-mail. Email Advanced Click this to show the advanced 3G backup settings. VMG1312-Bx0D User’s Guide...
Page 76 Select an e-mail address you have configured in Maintenance > Email Notification. The VMG uses the corresponding mail server to send notifications. You must have configured a mail server already in the Maintenance > Email Notification screen. VMG1312-Bx0D User’s Guide...
Page 77: The Advanced Screen
17.5 8.832 2048 4.3125 20.5 1972 4.3125 11.5 8.832 2048 4.3125 14.5 2783 4.3125 14.5 2783 4.3125 14.5 17.664 4096 4.3125 14.5 3479 8.625 14.5 Click Network Setting > Broadband > Advanced to display the following screen. VMG1312-Bx0D User’s Guide...
Page 78 ITU G.992.2 (better known as G.lite) is an ITU standard for ADSL using discrete multitone modulation. G.lite does not strictly require the use of DSL filters, but like all variants of ADSL generally functions better with splitters. VMG1312-Bx0D User’s Guide...
Page 79: The 802.1X Screen
6.5 The 802.1x Screen You can view and configure the 802.1X authentication settings in the 802.1x screen. Click Network Setting > Broadband > 802.1x to display the following screen. Figure 27 Network Setting > Broadband > 802.1x VMG1312-Bx0D User’s Guide...
Page 80: Modify 802.1X Settings
6.5.1 Modify 802.1X Settings Use this screen to edit 802.1X authentication settings. Click the Edit icon next to the rule you want to edit. The screen shown next appears. Figure 28 Network Setting > Broadband > 802.1x > Modify VMG1312-Bx0D User’s Guide...
Page 81: Technical Reference
RFC1483 and sends it through an ATM PVC (Permanent Virtual Circuit) to the Internet Service Provider’s (ISP) DSLAM (digital access multiplexer). Please refer to RFC 2364 for more information on PPPoA. Refer to RFC 1661 for more information on PPP. VMG1312-Bx0D User’s Guide...
Page 82 Traffic Shaping is an agreement between the carrier and the subscriber to regulate the average rate and fluctuations of data transmission over an ATM network. This agreement helps eliminate congestion, which is important for transmission of real time data such as audio and video connections. VMG1312-Bx0D User’s Guide...
Page 83 Variable Bit Rate (VBR) traffic class can be grouped into real time (VBR-RT) or non-real time (VBR-nRT) connections. The VBR-RT (real-time Variable Bit Rate) type is used with bursty connections that require closely controlled delay and delay variation. It also provides a fixed amount of bandwidth (a PCR is VMG1312-Bx0D User’s Guide...
Page 84 Ethernet port has a CFI set to 1, then that frame should not be forwarded as it is to an untagged port. The remaining twelve bits define the VLAN ID, giving a possible maximum VMG1312-Bx0D User’s Guide...
Page 85 DNS server fields to get the DNS server address from the ISP. IPv6 Addressing The 128-bit IPv6 address is written as eight 16-bit hexadecimal blocks separated by colons (:). This is an example IPv6 address 2001:0db8:1a2b:0015:0000:0000:1a2f:0000. IPv6 addresses can be abbreviated in two ways: VMG1312-Bx0D User’s Guide...
Page 86 IPv6 prefix length specifies how many most significant bits (start from the left) in the address compose the network address. The prefix length is written as “/x” where x is a number. For example, 2001:db8:1a2b:15::1a2f:0/32 means that the first 32 bits (2001:db8) is the subnet prefix. VMG1312-Bx0D User’s Guide...
Page 87: Wireless
However, wireless networking is different from that of most traditional radio communications in that there a number of wireless networking standards available with different methods of data encryption. VMG1312-Bx0D User’s Guide...
Page 88: The General Screen
This shows the wireless band which this radio profile is using. 2.4GHz is the frequency used by IEEE 802.11b/g/n wireless clients. Wireless You can Enable or Disable the wireless LAN in this field. Channel Use Auto to have the VMG automatically determine a channel to use. VMG1312-Bx0D User’s Guide...
Page 89 Or you can select No Security to allow any client to associate this network without any data encryption or authentication. See the following sections for more details about this field. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG1312-Bx0D User’s Guide...
Page 90: No Security
Your VMG allows you to configure up to four 64-bit or 128-bit WEP keys but only one key can be enabled at any one time. In order to configure and enable WEP encryption, click Network Setting > Wireless to display the General screen, then select Basic as the security level. VMG1312-Bx0D User’s Guide...
Page 91: More Secure (Wpa2-Psk)
The WPA2-PSK security mode is a newer, more robust version of the WPA encryption standard. It offers slightly better security, although the use of PSK makes it less robust than it could be. Click Network Setting > Wireless to display the General screen. Select More Secure as the security level. VMG1312-Bx0D User’s Guide...
Page 92: The Guest / More Ap Screen
This screen allows you to enable and configure multiple Basic Service Sets (BSSs) on the VMG. Click Network Setting > Wireless > Guest / More AP. The following screen displays. Figure 34 Network Setting > Wireless > Guest / More AP VMG1312-Bx0D User’s Guide...
Page 93: Edit Guest / More Ap
Click the Edit icon to configure the SSID profile. 7.3.1 Edit Guest / More AP Use this screen to edit an SSID profile. Click the Edit icon next to an SSID in the Guest / More AP screen. The following screen displays. VMG1312-Bx0D User’s Guide...
Page 94 Table 21 Network Setting > Wireless > Guest / More AP > Edit LABEL DESCRIPTION Wireless Network Setup Wireless You can Enable or Disable the wireless LAN in this field. Passphrase Passphrase type cannot be changed. The default is None. Type Wireless Network Settings VMG1312-Bx0D User’s Guide...
Page 95: The Wps Screen
Click OK to save your changes. Cancel Click Cancel to exit this screen without saving. 7.4 The WPS Screen Use this screen to configure WiFi Protected Setup (WPS) on your VMG. VMG1312-Bx0D User’s Guide...
Page 96 Method 2 Use this section to set up a WPS wireless network by entering the PIN of the client into the VMG. Select Enable and click Apply to activate WPS method 2 on the VMG. VMG1312-Bx0D User’s Guide...
Page 97: The Wmm Screen
Use this screen to enable Wi-Fi MultiMedia (WMM) and WMM Power Save in wireless networks for multimedia applications. Click Network Setting > Wireless > WMM. The following screen displays. Figure 37 Network Setting > Wireless > WMM VMG1312-Bx0D User’s Guide...
Page 98: The Wds Screen
Note: At the time of writing, WDS is compatible with other ZyXEL APs only. Not all models support WDS links. Check your other AP’s documentation. Click Network Setting > Wireless > WDS. The following screen displays. Figure 38 Network Setting > Wireless > WDS VMG1312-Bx0D User’s Guide...
Page 99: Wds Scan
You can click the Scan icon in Wireless > WDS to have the VMG automatically search and display the available APs within range. Select an AP and click Apply to have the VMG establish a wireless link with the selected wireless device. Figure 39 WDS: Scan VMG1312-Bx0D User’s Guide...
Page 100: The Others Screen
Data with its frame size larger than this value will perform the RTS (Request To Send)/CTS Threshold (Clear To Send) handshake. Enter a value between 0 and 2347. Fragmentation This is the maximum data fragment size that can be sent. Enter a value between 256 and Threshold 2346. VMG1312-Bx0D User’s Guide...
Page 101 Select Enable for higher speeds, especially if you have both IEEE 802.11b and IEEE Technology 802.11g wireless clients. The wireless clients do not have to support XPress™ Technology, although the performance enhancement is greater if they do. Select Disabled to disable this feature. VMG1312-Bx0D User’s Guide...
Page 102: The Channel Status Screen
You can go to the General screen, click the Network Setting > Wireless > more link, and then change the channel width setting in the Bandwidth field. Figure 41 Network Setting > Wireless > Channel Status VMG1312-Bx0D User’s Guide...
Page 103: Technical Reference
The wireless network is the part in the blue circle. In this wireless network, devices A and B use the access point (AP) to interact with the other devices (such as the printer) or with the Internet. Your VMG is the AP. VMG1312-Bx0D User’s Guide...
Page 104: Additional Wireless Terms
Once an unauthorized person has access to the network, he or she can steal information or introduce malware (malicious software) intended to VMG1312-Bx0D User’s Guide...
Page 105 Some wireless devices, such as scanners, can detect wireless networks but cannot use wireless networks. These kinds of wireless devices might not have MAC addresses. Hexadecimal characters are 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, A, B, C, D, E, and F. VMG1312-Bx0D User’s Guide...
Page 106 Note: It is recommended that wireless networks use WPA-PSK, WPA, or stronger encryption. The other types of encryption are better than none at all, but it is still possible for unauthorized wireless devices to figure out the original information pretty quickly. VMG1312-Bx0D User’s Guide...
Page 107: Signal Problems
A and B can access the wired network and communicate with each other. When Intra-BSS traffic blocking is enabled, wireless station A and B can still access the wired network but cannot communicate with each other. VMG1312-Bx0D User’s Guide...
Page 108: Mbssid
• MBSSID should not replace but rather be used in conjunction with 802.1x security. 7.9.7 Preamble Type Preamble is used to signal that data is coming to the receiver. Short and long refer to the length of the synchronization field in a packet. VMG1312-Bx0D User’s Guide...
Page 109: Wireless Distribution System (Wds)
When WPS is activated on a device, it has two minutes to find another device that also has WPS activated. Then, the two devices connect and set up a secure network by themselves. VMG1312-Bx0D User’s Guide...
Page 110: Pin Configuration
Look for the client’s WPS PIN; it will be displayed either on the device, or in the WPS section of the client’s configuration interface (see the device’s User’s Guide for how to find the WPS PIN - for the VMG, see Section 7.4 on page 95). Enter the client’s PIN in the AP’s configuration interface. VMG1312-Bx0D User’s Guide...
Page 111 WPS-enabled AP via the PIN method. Figure 45 Example WPS Process: PIN Method ENROLLEE REGISTRAR This device’s WPS PIN: 123456 Enter WPS PIN from other device: START START WITHIN 2 MINUTES SECURE EAP TUNNEL SSID WPA(2)-PSK COMMUNICATION VMG1312-Bx0D User’s Guide...
Page 112: How Wps Works
WPS-enabled device has connected to another device using WPS, it becomes “configured”. A configured wireless client can still act as enrollee or registrar in subsequent WPS connections, but a configured access point can no longer act as enrollee. It will be the registrar in all subsequent WPS VMG1312-Bx0D User’s Guide...
Page 113 In step 3, you add another access point (AP2) to your network. AP2 is out of range of AP1, so you cannot use AP1 for the WPS handshake with the new access point. However, you know that Client 2 supports the registrar function, so you use it to perform the WPS handshake instead. VMG1312-Bx0D User’s Guide...
Page 114: Limitations Of Wps
If this happens, open the access point’s configuration interface and look at the list of associated clients (usually displayed by MAC address). It does not matter if the VMG1312-Bx0D User’s Guide...
Page 115 Check the MAC addresses of your wireless clients (usually printed on a label on the bottom of the device). If there is an unknown MAC address you can remove it or reset the AP. VMG1312-Bx0D User’s Guide...
Page 116 Chapter 7 Wireless VMG1312-Bx0D User’s Guide...
Page 117: Home Networking
• Use the Wake on Lan screen to remotely turn on a device on the network. (Section 8.7 on page 128). • Use the TFTP Server Name screen to identify a TFTP server for configuration file download using DHCP option 66. (Section 8.8 on page 128). VMG1312-Bx0D User’s Guide...
Page 118: What You Need To Know
UPnP devices and enable exchange of simple product and service descriptions. NAT traversal allows the following: • Dynamic port mapping • Learning public IP addresses VMG1312-Bx0D User’s Guide...
Page 119: Before You Begin
This will become the IP address of your VMG. Enter the IP subnet mask into the IP Subnet Mask field. Unless instructed otherwise it is best to leave this alone, the configurator will automatically compute a subnet mask based upon the IP address you entered. VMG1312-Bx0D User’s Guide...
Page 120 IP Address you enter, so do not change this field unless you are instructed to do so. IGMP Snooping Status Select the Enable IGMP Snooping checkbox to allows the VMG to passively learn multicast group. VMG1312-Bx0D User’s Guide...
Page 121 Select this to manually enter an interface ID for the LAN interface’s global IPv6 address. LAN IPv6 Address Setup Delegate prefix Select this option to automatically obtain an IPv6 network prefix from the service provider from WAN or an uplink router. VMG1312-Bx0D User’s Guide...
Page 122 IPv4 DNS Server First: The VMG forwards the requests to the IPv4 DNS server first and then the IPv6 DNS server. Then it sends clients the first DNS information it receives. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG1312-Bx0D User’s Guide...
Page 123: The Static Dhcp Screen
If you click Static DHCP Configuration in the Static DHCP screen or the Edit icon next to a static DHCP entry, the following screen displays. Figure 52 Static DHCP: Static DHCP Configuration/Edit VMG1312-Bx0D User’s Guide...
Page 124: The Upnp Screen
UPnP. Use the following screen to configure the UPnP settings on your VMG. Click Network Setting > Home Networking > UPnP to display the screen shown next. Figure 53 Network Setting > Home Networking > UPnP VMG1312-Bx0D User’s Guide...
Page 125: Turning On Upnp In Windows 7 Example
Make sure the computer is connected to a LAN port of the VMG. Turn on your computer and the VMG. Click the start icon, Control Panel and then the Network and Sharing Center. Click Change Advanced Sharing Settings. VMG1312-Bx0D User’s Guide...
Page 126: The Additional Subnet Screen
Use the Additional Subnet screen to configure IP alias and public static IP. IP alias allows you to partition a physical network into different logical networks over the same Ethernet interface. The VMG supports multiple logical LAN interfaces via its physical Ethernet VMG1312-Bx0D User’s Guide...
Page 127: The Stb Vendor Id Screen
STBs, which have the VMG automatically created static DHCP entries for them when they request IP addresses. Click Network Setting > Home Networking > STB Vendor ID to open this screen. Figure 55 Network Setting > Home Networking > STB Vendor ID VMG1312-Bx0D User’s Guide...
Page 128: The Wake On Lan Screen
Use the TFTP Server Name screen to identify a TFTP server for configuration file download using DHCP option 66. RFC 2132 defines the option 66 open standard. DHCP option 66 supports the IP address or the hostname of a single TFTP server. VMG1312-Bx0D User’s Guide...
Page 129: Technical Reference
When configured as a server, the VMG provides the TCP/IP configuration for the clients. If you turn DHCP service off, you must have another DHCP server on your LAN, or else the computer must be manually configured. VMG1312-Bx0D User’s Guide...
Page 130: Dns Server Addresses
192.168.1.0 as the network number; which covers 254 individual addresses, from 192.168.1.1 to 192.168.1.254 (zero and 255 are reserved). In other words, the first three numbers specify the network number while the last number identifies an individual computer on that network. VMG1312-Bx0D User’s Guide...
Page 131 Note: Regardless of your particular situation, do not create an arbitrary IP address; always follow the guidelines above. For more information on address assignment, please refer to RFC 1597, “Address Allocation for Private Internets” and RFC 1466, “Guidelines for Management of IP Address Space”. VMG1312-Bx0D User’s Guide...
Page 132 Chapter 8 Home Networking VMG1312-Bx0D User’s Guide...
Page 133: Routing
9.2 The Routing Screen Use this screen to view and configure the static route rules on the VMG. Click Network Setting > Routing > Static Route to open the following screen. Figure 60 Network Setting > Routing > Static Route VMG1312-Bx0D User’s Guide...
Page 134: Add/Edit Static Route
Route Name Enter a descriptive name for the static route. IP Type Select whether your IP type is IPv4 or IPv6. Destination IP Enter the IPv4 or IPv6 network address of the final destination. Address VMG1312-Bx0D User’s Guide...
Page 135: The Dns Route Screen
Click the Delete icon to delete the DNS route. 9.3.1 The DNS Route Add Screen You can manually add the VMG’s DNS route entry. Click Add New DNS Route in the Network Setting > Routing > DNS Route screen. The screen shown next appears. VMG1312-Bx0D User’s Guide...
Page 136: The Policy Route Screen
The following table describes the labels in this screen. Table 41 Network Setting > Routing >Policy Route LABEL DESCRIPTION Add New Policy Click this to create a new policy forwarding rule. Route This is the index number of the entry. VMG1312-Bx0D User’s Guide...
Page 137: Add/Edit Policy Route
Enter a descriptive name of up to 8 printable English keyboard characters, not including spaces. Source IP Enter the source IP address. Source Subnet Enter the source subnet mask address. Mask Protocol Select the transport layer protocol (TCP or UDP). VMG1312-Bx0D User’s Guide...
Page 138: Rip
Select Active to have the VMG advertise its route information and also listen for routing updates from neighboring routers. Enabled Select the check box to activate the settings. Apply Click Apply to save your changes back to the VMG. VMG1312-Bx0D User’s Guide...
Page 139: Quality Of Service (Qos)
• The Classification Setup screen lets you add, edit or delete QoS classifiers (Section 10.5 on page 144). • The Shaper Setup screen limits outgoing traffic transmission rate on the selected interface (Section 10.6 on page 149). VMG1312-Bx0D User’s Guide...
Page 140: What You Need To Know
(or queues). Your VMG uses the Token Bucket algorithm to allow a certain amount of large bursts while keeping a limit at the average rate. Traffic Rate Traffic Rate Time Time (Before Traffic Shaping) (After Traffic Shaping) VMG1312-Bx0D User’s Guide...
Page 141: The Quality Of Service General Screen
Click Network Setting > QoS > General to open the screen as shown next. Use this screen to enable or disable QoS and set the upstream bandwidth. See Section 10.1 on page 139 for more information. Figure 67 Network Settings > QoS > General VMG1312-Bx0D User’s Guide...
Page 142: The Queue Setup Screen
10.4 The Queue Setup Screen Click Network Setting > QoS > Queue Setup to open the screen as shown next. Use this screen to configure QoS queue assignment. Figure 68 Network Setting > QoS > Queue Setup VMG1312-Bx0D User’s Guide...
Page 143: Adding A Qos Queue
DESCRIPTION Enable Select to enable or disable this queue. Name Enter the descriptive name of this queue. Interface Select the interface to which this queue is applied. This field is read-only if you are editing the queue. VMG1312-Bx0D User’s Guide...
Page 144: The Classification Setup Screen
This field displays whether the classifier is active or not. A yellow bulb signifies that this classifier is active. A gray bulb signifies that this classifier is not active. Class Name This is the name of the classifier. VMG1312-Bx0D User’s Guide...
Page 145: Add/Edit Qos Class
Click the Delete icon to delete an existing classifier. Note that subsequent rules move up by one when you take this action. 10.5.1 Add/Edit QoS Class Click Add New Classification in the Classification Setup screen or the Edit icon next to a classifier to open the following screen. VMG1312-Bx0D User’s Guide...
Page 146 Select an existing number for where you want to put this classifier to move the classifier to the number you selected after clicking Apply. Select Last to put this rule in the back of the classifier list. VMG1312-Bx0D User’s Guide...
Page 147 This field is available only when you select IP in the Ether Type field. Select this option and select the protocol (service type) from TCP, UDP, ICMP or IGMP. If you select User defined, enter the protocol (service type) number. VMG1312-Bx0D User’s Guide...
Page 148 Step4: Class Routing Forward to Select a WAN interface through which traffic of this class will be forwarded out. If you select Interface Unchange, the VMG forward traffic of this class according to the default routing table. VMG1312-Bx0D User’s Guide...
Page 149: The Qos Shaper Setup Screen
This shows the average rate limit of traffic bursts for this shaper. (kbps) Modify Click the Edit icon to edit the shaper. Click the Delete icon to delete an existing shaper. Note that subsequent rules move up by one when you take this action. VMG1312-Bx0D User’s Guide...
Page 150: Add/Edit A Qos Shaper
A VLAN tag includes the 12-bit VLAN ID and 3-bit user priority. The VLAN ID associates a frame with a specific VLAN and provides the information that devices need to process the frame across the network. VMG1312-Bx0D User’s Guide...
Page 151 The DSCP value determines the forwarding behavior, the PHB (Per-Hop Behavior), that each packet gets across the DiffServ network. Based on the marking rule, different kinds of traffic can be marked for different kinds of forwarding. Resources can then be allocated according to the DSCP values and the configured policies. VMG1312-Bx0D User’s Guide...
Page 152: Automatic Priority Queue Assignment
QUEUE PRIORITY TOS (IP IP PACKET DSCP (ETHERNET PRECEDENCE) LENGTH (BYTE) PRIORITY) 000000 000000 >1100 001110 250~1100 001100 001010 001000 010110 010100 010010 010000 011110 <250 011100 011010 011000 100110 100100 100010 100000 101110 101000 110000 111000 VMG1312-Bx0D User’s Guide...
Page 153 CBS bucket is equal to or greater than the size of the packet (in bytes). • After a packet is transmitted, a number of tokens corresponding to the packet size is removed from the CBS bucket. VMG1312-Bx0D User’s Guide...
Page 154 • If the PBS bucket has enough tokens, the VMG checks the CBS bucket. The packet is marked green and can be transmitted if the number of tokens in the CBS bucket is equal to or greater than the size of the packet (in bytes). Otherwise, the packet is marked yellow. VMG1312-Bx0D User’s Guide...
Page 155: Network Address Translation (Nat)
IP address of a host when the packet is in the local network, while the global address refers to the IP address of the host when the same packet is traveling in the WAN side. VMG1312-Bx0D User’s Guide...
Page 156: The Port Forwarding Screen
80 to another (B in the example) and assign a default server IP address of 192.168.1.35 to a third (C in the example). You assign the LAN IP addresses and the ISP assigns the WAN IP address. The NAT network appears as a single host on the Internet. VMG1312-Bx0D User’s Guide...
Page 157 Protocol This shows the IP protocol supported by this virtual server, whether it is TCP, UDP, or TCP/ UDP. Modify Click the Edit icon to edit this rule. Click the Delete icon to delete an existing rule. VMG1312-Bx0D User’s Guide...
Page 158: Add/Edit Port Forwarding
This shows the port number to which you want the VMG to translate the incoming port. For Start Port a range of ports, enter the first number of the range to which you want the incoming ports translated. Translation End This shows the last port of the translated port range. Port VMG1312-Bx0D User’s Guide...
Page 159: The Applications Screen
This field displays the destination IP address for the service. Address Modify Click the Delete icon to delete the rule. 11.3.1 Add New Application This screen lets you create new NAT application rules. Click Add New Application in the Applications screen to open the following screen. VMG1312-Bx0D User’s Guide...
Page 160: The Port Triggering Screen
LAN can use the service in the same manner. This way you do not need to configure a new IP address each time you want a different LAN computer to use the application. For example: VMG1312-Bx0D User’s Guide...
Page 161 IP address of the LAN computer that sent the traffic to a server on the WAN. This is the first port number that identifies a service. Trigger End This is the last port number that identifies a service. Port Trigger Proto. This is the trigger transport layer protocol. VMG1312-Bx0D User’s Guide...
Page 162: Add/Edit Port Triggering Rule
Type a port number or the starting port number in a range of port numbers. Trigger End Type a port number or the ending port number in a range of port numbers. Port Trigger Protocol Select the transport layer protocol from TCP or UDP. VMG1312-Bx0D User’s Guide...
Page 163: The Dmz Screen
VMG is behind a SIP ALG. Use this screen to enable and disable the NAT and SIP (VoIP) ALG in the VMG. To access this screen, click Network Setting > NAT > ALG. VMG1312-Bx0D User’s Guide...
Page 164: The Address Mapping Screen
IP address from your ISP. You can only do this for the Many-to-One mapping type. Global End IP This is the ending Inside Global IP Address (IGA). This field is blank for One-to-One and Many-to-One mapping types. VMG1312-Bx0D User’s Guide...
Page 165: Add/Edit Address Mapping Rule
SUA (i.e., PAT, port address translation), the VMG's Single User Account feature that previous routers supported only. Many-to-Many: This mode maps multiple local IP addresses to shared global IP addresses. Local Start IP Enter the starting Inside Local IP Address (ILA). VMG1312-Bx0D User’s Guide...
Page 166: The Sessions Screen
NAT sessions. Apply Click this to save your changes on this screen. Cancel Click this to exit this screen without saving any changes. 11.9 Technical Reference This part contains more information regarding NAT. VMG1312-Bx0D User’s Guide...
Page 167: Nat Definitions
Many-to-Many Overload mapping), NAT offers the additional benefit of firewall protection. With no servers defined, your VMG filters out all incoming inquiries, thus preventing intruders from probing your network. For more information on IP address translation, refer to RFC 1631, The IP Network Address Translator (NAT). VMG1312-Bx0D User’s Guide...
Page 168: How Nat Works
Inside Global Address (ILA) Address (IGA) 192.168.1.11 192.168.1.10 11.9.4 NAT Application The following figure illustrates a possible NAT application, where three inside LANs (logical LANs using IP alias) behind the VMG can communicate with three distinct WAN networks. VMG1312-Bx0D User’s Guide...
Page 169 Let's say you want to assign ports 21-25 to one FTP, Telnet and SMTP server (A in the example), port 80 to another (B in the example) and assign a default server IP address of 192.168.1.35 to a VMG1312-Bx0D User’s Guide...
Page 170 (C in the example). You assign the LAN IP addresses and the ISP assigns the WAN IP address. The NAT network appears as a single host on the Internet. Figure 89 Multiple Servers Behind NAT Example A=192.168.1.33 192.168.1.1 B=192.168.1.34 IP address assigned by ISP C=192.168.1.35 D=192.168.1.36 VMG1312-Bx0D User’s Guide...
Page 171: Dynamic Dns Setup
Enabling the wildcard feature for your host causes *.yourhost.dyndns.org to be aliased to the same IP address as yourhost.dyndns.org. This feature is useful if you want to be able to use, for example, www.yourhost.dyndns.org and still reach your hostname. VMG1312-Bx0D User’s Guide...
Page 172: The Dns Entry Screen
You can manually add or edit the VMG’s DNS name and IP address entry. Click Add New DNS Entry in the DNS Entry screen or the Edit icon next to the entry you want to edit. The screen shown next appears. Figure 91 DNS Entry: Add/Edit VMG1312-Bx0D User’s Guide...
Page 173: The Dynamic Dns Screen
This shows the last time the IP address the Dynamic DNS provider has associated Time with the hostname was updated. Current Dynamic This shows the IP address your Dynamic DNS provider has currently associated with the hostname. VMG1312-Bx0D User’s Guide...
Page 174 Chapter 12 Dynamic DNS Setup Table 68 Network Setting > DNS > > Dynamic DNS (continued) LABEL DESCRIPTION Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG1312-Bx0D User’s Guide...
Page 175: Vlan Group
Use these screens to group separate VLAN groups together to be treated as one VLAN group. 13.2 The Vlan Group Screen Click Network Setting > Vlan Group to open the following screen. Figure 94 Network Setting > Vlan Group VMG1312-Bx0D User’s Guide...
Page 176: Add/Edit A Vlan Group
Select Include to add the associated LAN interface to this VLAN group. Select Txtagging to tag outgoing traffic from the associated LAN port with the VLAN ID number entered above. Click OK to save your changes. Cancel Click Cancel to exit this screen without saving. VMG1312-Bx0D User’s Guide...
Page 177: Interface Group
In the following example, the client that sends packets with the DHCP Vendor ID option set to MSFT 5.0 (meaning it is a Windows 2000 DHCP client) is assigned the IP address 192.168.2.2 and uses the WAN VDSL_PoE/ppp0.1 interface. VMG1312-Bx0D User’s Guide...
Page 178: Interface Group Configuration
Click the Add New Interface Group button in the Interface Group screen to open the following screen. Use this screen to create a new interface group. Note: An interface can belong to only one group at a time. VMG1312-Bx0D User’s Guide...
Page 179 This shows if wildcard on DHCP option 60 is enabled. Support Remove Click the Remove icon to delete this rule from the VMG. Click OK to save your changes. Cancel Click Cancel to exit this screen without saving. VMG1312-Bx0D User’s Guide...
Page 180: Interface Grouping Criteria
Enterprise Enter the vendor’s 32-bit enterprise number registered with the IANA (Internet Assigned Number Numbers Authority). Manufactur Specify the vendor’s OUI (Organization Unique Identifier). It is usually the first three bytes er OUI of the MAC address. VMG1312-Bx0D User’s Guide...
Page 181 Enter the serial number of the device. Number VLAN Group Select this and the VLAN group of the matched traffic from the drop-down list box. Click OK to save your changes. Cancel Click Cancel to exit this screen without saving. VMG1312-Bx0D User’s Guide...
Page 182 Chapter 14 Interface Group VMG1312-Bx0D User’s Guide...
Page 183: Usb Service
• Use the Media Server screen to enable or disable the sharing of media files (Section 15.3 on page 186). 15.1.2 What You Need To Know The following terms and concepts may help as you read this chapter. VMG1312-Bx0D User’s Guide...
Page 184: Before You Begin
Use this screen to set up file sharing through the VMG. The VMG’s LAN users can access the shared folder (or share) from the USB device inserted in the VMG. To access this screen, click Network Setting > USB Service > File Sharing. VMG1312-Bx0D User’s Guide...
Page 185: The Add New User Screen
Use this screen to create a user account that can access the secured shares on the USB device. To access this screen, click the Add New User button in the Network Setting > USB Service > File Sharing screen. VMG1312-Bx0D User’s Guide...
Page 186: The Media Server Screen
The media server is enabled by default with the video, photo, and music shares published. To change your VMG’s media server settings, click Network Setting > USB Service > Media Server. The screen appears as shown. VMG1312-Bx0D User’s Guide...
Page 187 Media Library Enter the path clients use to access the media files on a USB storage device connected to Path the VMG. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG1312-Bx0D User’s Guide...
Page 188 Chapter 15 USB Service VMG1312-Bx0D User’s Guide...
Page 189: Firewall
• Use the Access Control screen to view and configure incoming/outgoing filtering rules (Section 16.4 on page 193). • Use the DoS screen to activate protection against Denial of Service (DoS) attacks (.Section 16.5 on page 195). VMG1312-Bx0D User’s Guide...
Page 190: What You Need To Know
Use this screen to set the security level of the firewall on the VMG. Firewall rules are grouped based on the direction of travel of packets to which they apply. Click Security > Firewall to display the General screen. VMG1312-Bx0D User’s Guide...
Page 191: The Protocol Screen
IANA (Internet Assigned Number Authority) website. See Appendix D on page 299 for some examples. Click Security > Firewall > Protocol to display the following screen. Figure 106 Security > Firewall > Protocol VMG1312-Bx0D User’s Guide...
Page 192: Add/Edit A Service
Select Other to be able to enter a protocol number. Protocol This field is displayed if you select Other as the protocol. Number Enter the protocol number of your customized port. Click OK to save your changes. Cancel Click Cancel to exit this screen without saving. VMG1312-Bx0D User’s Guide...
Page 193: The Access Control Screen
Click the Move To icon to change the order of the rule. Enter the number in the # field. 16.4.1 Add/Edit an ACL Rule Click Add new ACL rule or the Edit icon next to an existing ACL rule in the Access Control screen. The following screen displays. VMG1312-Bx0D User’s Guide...
Page 194 Select the transport layer protocol that defines your customized port from the drop-down list box. The specific protocol rule sets you add in the Security > Firewall > Service > Add screen display in this list. If you want to configure a customized protocol, select Specific Service. VMG1312-Bx0D User’s Guide...
Page 195: The Dos Screen
DoS Protection Select Enable to enable protection against DoS attacks. Blocking Deny Ping Select Enable to block ping request packets. Response Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG1312-Bx0D User’s Guide...
Page 196 Chapter 16 Firewall VMG1312-Bx0D User’s Guide...
Page 197: Mac Filter
Select Active to enable the MAC filter rule. The rule will not be applied if Active is not selected. Host Name Enter the host name of the wireless or LAN clients that are allowed access to the VMG. VMG1312-Bx0D User’s Guide...
Page 198 VMG in these address fields. Enter the MAC addresses in a valid MAC address format, that is, six hexadecimal character pairs, for example, 12:34:56:78:9a:bc. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG1312-Bx0D User’s Guide...
Page 199: Parental Control
This shows the day(s) and time on which parental control is enabled. Schedule Network This shows whether the network service is configured. If not, None will be shown. Service Website Block This shows whether the website block is configured. If not, None will be shown. VMG1312-Bx0D User’s Guide...
Page 200: Add/Edit A Parental Control Profile
Use this screen to configure a restricted access schedule and/or URL filtering settings to block the users on your network from accessing certain web sites. Figure 113 Parental Control Rule: Add/Edit Rule VMG1312-Bx0D User’s Guide...
Page 201 + sign to enter a computer MAC address for this PCP. Up to five are allowed. Click the - sign to remove one. Internet Access Schedule Select check boxes for the days that you want the VMG to perform parental control. VMG1312-Bx0D User’s Guide...
Page 202 Select this to redirect users who access any blocked websites listed above to the ZyXEL blocked site to Family Safety page as shown next. ZyXEL Family Figure 116 ZyXEL Family Safety Page Example Safety page Click OK to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG1312-Bx0D User’s Guide...
Page 203: Scheduler Rule
19.2.1 Add/Edit a Schedule Click the Add New Rule button in the Scheduler Rule screen or click the Edit icon next to a schedule rule to open the following screen. Use this screen to configure a restricted access schedule. VMG1312-Bx0D User’s Guide...
Page 204 Enter the time period of each day, in 24-hour format, during which the rule will be enforced. Range Description Enter a description for this scheduler rule. Click OK to save your changes. Cancel Click Cancel to exit this screen without saving. VMG1312-Bx0D User’s Guide...
Page 205: Certificates
20.3 The Local Certificates Screen Click Security > Certificates to open the Local Certificates screen. This is the VMG’s summary list of certificates and certification requests. Figure 119 Security > Certificates > Local Certificates VMG1312-Bx0D User’s Guide...
Page 206: Create Certificate Request
20.3.1 Create Certificate Request Click Security > Certificates > Local Certificates and then Create Certificate Request to open the following screen. Use this screen to have the VMG generate a certification request. VMG1312-Bx0D User’s Guide...
Page 207 You may use any character, including spaces, but the VMG drops trailing spaces. Country/Region Select a country to identify the nation where the certificate owner is located. Name Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG1312-Bx0D User’s Guide...
Page 208: The Trusted Ca Screen
20.4.1 Import Trusted CA Certificate Click the Import Certificate button in the Trusted CA screen to open the following screen. The VMG trusts any valid certificate signed by any of the imported trusted CA certificates. Figure 122 Trusted CA: Import Certificate VMG1312-Bx0D User’s Guide...
Page 209 Type in the location of the certificate you want to upload in this field or click Choose File to Path find it. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG1312-Bx0D User’s Guide...
Page 210 Chapter 20 Certificates VMG1312-Bx0D User’s Guide...
Page 211: Log
CODE SEVERITY Emergency: The system is unusable. Alert: Action must be taken immediately. Critical: The system condition is critical. Error: There is an error condition on the system. Warning: There is a warning condition on the system. VMG1312-Bx0D User’s Guide...
Page 212: The System Log Screen
This field states the reason for the log. 21.3 The Security Log Screen Use the Security Log screen to see the security-related logs for the categories that you select. Click System Monitor > Log > Security Log to open the following screen. VMG1312-Bx0D User’s Guide...
Page 213 This field displays the severity level of the log that the device is to send to this syslog server. Category This field displays the type of the log. Messages This field states the reason for the log. VMG1312-Bx0D User’s Guide...
Page 214 Chapter 21 Log VMG1312-Bx0D User’s Guide...
Page 215: Traffic Status
This shows the name of the WAN interface that is currently connected. Interface Packets Sent Data This indicates the number of transmitted packets on this interface. Error This indicates the number of frames with errors transmitted on this interface. VMG1312-Bx0D User’s Guide...
Page 216: The Lan Status Screen
The following table describes the fields in this screen. Table 96 System Monitor > Traffic Status > LAN LABEL DESCRIPTION Refresh Interval Select how often you want the VMG to update this screen. Interface This shows the LAN or WLAN interface. VMG1312-Bx0D User’s Guide...
Page 217: The Nat Status Screen
This displays what percentage of NAT sessions the VMG can support is currently being used by all connected hosts. You can also see the number of active NAT sessions and the maximum number of NAT sessions the VMG can support. VMG1312-Bx0D User’s Guide...
Page 218 Chapter 22 Traffic Status VMG1312-Bx0D User’s Guide...
Page 219: Arp Table
MAC address that replied. 23.2 ARP Table Screen Use the ARP table to view IP-to-MAC address mapping(s). To open this screen, click System Monitor > ARP Table. Figure 128 System Monitor > ARP Table VMG1312-Bx0D User’s Guide...
Page 220 This is the MAC address of the device with the listed IP address. Device This is the type of interface used by the device. You can click on the device type to go to its configuration screen. VMG1312-Bx0D User’s Guide...
Page 221: Routing Table
This indicates the destination IPv4 address or IPv6 address and prefix of this route. Gateway This indicates the IPv4 address or IPv6 address of the gateway that helps forward this route’s traffic. Subnet Mask This indicates the destination subnet mask of the IPv4 route. VMG1312-Bx0D User’s Guide...
Page 222 This indicates the name of the interface through which the route is forwarded. brx indicates a LAN interface where x can be 0~3 to represent LAN1 to LAN4 respectively. ptm0 indicates a WAN interface using IPoE or in bridge mode. ppp0 indicates a WAN interface using PPPoE. VMG1312-Bx0D User’s Guide...
Page 223: Multicast Status
25.3 The MLD Status Screen Use this screen to look at the current list of multicast groups the VMG has joined and which ports have joined it. To open this screen, click System Monitor > Multicast Status > MLD Status. VMG1312-Bx0D User’s Guide...
Page 224 Source List This is the list of IP addresses that are allowed or not allowed to receive the multicast group’s traffic depending on the filter mode. Member This is the list of members in the multicast group. VMG1312-Bx0D User’s Guide...
Page 225: Xdsl Statistics
Select the time interval for refreshing statistics. Line Select which DSL line’s statistics you want to display. xDSL Training This displays the current state of setting up the DSL connection. Status Mode This displays the ITU standard used for this connection. VMG1312-Bx0D User’s Guide...
Page 226 These are the statistics for the traffic direction coming into the port from the service provider. Upstream These are the statistics for the traffic direction going out from the port to the service provider. This is the number of Far End Corrected blocks. This is the number of Cyclic Redundancy Checks. VMG1312-Bx0D User’s Guide...
Page 227 30% or more errored blocks or at least one defect. This is a subset of ES. This is the number of UnAvailable Seconds. This is the number of Loss Of Signal seconds. This is the number of Loss Of Frame seconds. This is the number of Loss of Margin seconds. VMG1312-Bx0D User’s Guide...
Page 228: Statistics
WCDMA - Wideband Code Division Multiple Access, 3G HSDPA - High-Speed Downlink Packet Access, 3.5G HSUPA - High-Speed Uplink Packet Access, 3.75G HSPA - HSDPA+HSUPA, 3.75G Service This field displays the name of the service provider. Provider VMG1312-Bx0D User’s Guide...
Page 229 The International Mobile Subscriber Identity or IMSI is a unique identification number associated with all cellular networks. This number is provisioned in the SIM card. VID/PID This field displays the USB Vendor ID and Product ID of the 3G card. VMG1312-Bx0D User’s Guide...
Page 230 Chapter 27 3G Statistics VMG1312-Bx0D User’s Guide...
Page 231: System
Type a hostname for your VMG. Enter a descriptive name of up to 16 alphanumeric characters, not including spaces, underscores, and dashes. Domain Name Type a Domain name for your host VMG. Apply Click Apply to save your changes. Cancel Click Cancel to abandon this screen without saving. VMG1312-Bx0D User’s Guide...
Page 232: User Account
Click the Delete icon to remove the entry. 29.2.1 The User Account Add and Edit Screens Click Add New Account or the Edit icon of an existing account in the Maintenance > User Account to open the following screen. VMG1312-Bx0D User’s Guide...
Page 233 Retry Times. Group Specify whether this user will have Administrator or User privleges. Click OK to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG1312-Bx0D User’s Guide...
Page 234 Chapter 29 User Account VMG1312-Bx0D User’s Guide...
Page 235: Remote Management
Select the Enable check box for the corresponding services that you want to allow access to the VMG from the LAN/WLAN. Select the Enable check box for the corresponding services that you want to allow access to the VMG from all WAN connections. VMG1312-Bx0D User’s Guide...
Page 236: The Trust Domain Screen
Use this screen to configure a public IP address which is allowed to access the VMG. Click the Add Trust Domain button in the Maintenance > Remote MGMT > Turst Domain screen to open the following screen. VMG1312-Bx0D User’s Guide...
Page 237 Enter a public IPv4 IP address which is allowed to access the service on the VMG from the WAN. Click OK to save your changes back to the VMG. Cancel Click Cancel to restore your previously saved settings. VMG1312-Bx0D User’s Guide...
Page 238 Chapter 30 Remote Management VMG1312-Bx0D User’s Guide...
Page 239: Client
ACS and specify the ACS IP address or domain name and username and password. Click Maintenance > TR-069 Client to open the following screen. Use this screen to configure your VMG to be managed by an ACS. Figure 140 Maintenance > TR-069 Client VMG1312-Bx0D User’s Guide...
Page 240 You can choose a local certificate used by TR-069 client. The local certificate should be used by TR-069 imported in the Security > Certificates > Local Certificates screen. client Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG1312-Bx0D User’s Guide...
Page 241: Snmp
Examples of variables include such as number of packets received, node port status etc. A Management Information Base (MIB) is a collection of managed objects. SNMP allows a manager and agents to communicate for the purpose of accessing these objects. VMG1312-Bx0D User’s Guide...
Page 242 Enter the SNMP system contact. Trap Destination Type the IP address of the station to send your SNMP traps to. Apply Click this to save your changes back to the VMG. Cancel Click this to restore your previously saved settings. VMG1312-Bx0D User’s Guide...
Page 243: Time Settings
Each time you reload this page, the VMG synchronizes the time with the time server. Current Date This field displays the date of your VMG. Each time you reload this page, the VMG synchronizes the date with the time server. VMG1312-Bx0D User’s Guide...
Page 244 In Germany for instance, you would select 2 in the Hour field because Germany's time zone is one hour ahead of GMT or UTC (GMT+1). Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG1312-Bx0D User’s Guide...
Page 245: E-Mail Notification
Delete Click this button to delete the selected entry(ies). 34.2.1 Email Notification Edit Click the Add button in the Email Notification screen. Use this screen to configure the required information for sending e-mail via a mail server. VMG1312-Bx0D User’s Guide...
Page 246 If you activate SSL/TLS authentication, the e-mail address must be able to be authenticated by the mail server as well. Click this button to save your changes and return to the previous screen. Cancel Click this button to begin configuring this screen afresh. VMG1312-Bx0D User’s Guide...
Page 247: Log Setting
The following table describes the fields in this screen. Table 115 Maintenance > Logs Setting LABEL DESCRIPTION Syslog Setting Syslog Logging The VMG sends a log to an external syslog server. Select Enable to enable syslog logging. VMG1312-Bx0D User’s Guide...
Page 248: Example E-Mail Log
• You may edit the subject title. • The date format here is Day-Month-Year. • The date format here is Month-Day-Year. The time format is Hour-Minute-Second. • "End of Log" message shows that a complete log has been sent. VMG1312-Bx0D User’s Guide...
Page 249 |<1,02> 127|Apr 7 00 |From:192.168.1.131 To:192.168.1.255 |match |forward | 10:05:17 |UDP src port:00520 dest port:00520 |<1,02> 128|Apr 7 00 |From:192.168.1.1 To:192.168.1.255 |match |forward | 10:05:30 |UDP src port:00520 dest port:00520 |<1,02> End of Firewall Log VMG1312-Bx0D User’s Guide...
Page 250 Chapter 35 Log Setting VMG1312-Bx0D User’s Guide...
Page 251: Firmware Upgrade
Do NOT turn off the VMG while firmware upload is in progress! Figure 148 Maintenance > Firmware Upgrade The following table describes the labels in this screen. After you see the firmware updating screen, wait two minutes before logging into the VMG again. VMG1312-Bx0D User’s Guide...
Page 252 After two minutes, log in again and check your new firmware version in the Status screen. If the upload was not successful, the following screen will appear. Click OK to go back to the Firmware Upgrade screen. VMG1312-Bx0D User’s Guide...
Page 253 Chapter 36 Firmware Upgrade Figure 151 Error Message VMG1312-Bx0D User’s Guide...
Page 254 Chapter 36 Firmware Upgrade VMG1312-Bx0D User’s Guide...
Page 255: Backup Restore
The backup configuration file will be useful in case you need to return to your previous settings. Click Backup to save the VMG’s current configuration to your computer. VMG1312-Bx0D User’s Guide...
Page 256 If the upload was not successful, the following screen will appear. Click OK to go back to the Configuration screen. Figure 154 Configuration Upload Error Reset to Factory Defaults Click the Reset button to clear all user-entered configuration information and return the VMG to its factory defaults. The following warning screen appears. VMG1312-Bx0D User’s Guide...
Page 257: The Rom-D Screen
System restart allows you to reboot the VMG remotely without turning the power off. You may need to do this if the VMG hangs, for example. Click Maintenance > Reboot. Click Reboot to have the VMG reboot. This does not affect the VMG's configuration. Figure 158 Maintenance > Reboot VMG1312-Bx0D User’s Guide...
Page 258: Diagnostic
If an MEP port does not respond to the source MEP, this may indicate a fault. Administrators can take further action to check and resume services from the fault according to the line connectivity status report. VMG1312-Bx0D User’s Guide...
Page 259: Ping & Traceroute & Nslookup
Click this button to perform a DNS lookup on the IP address of a computer you enter. 38.4 802.1ag Click Maintenance > Diagnostic > 8.2.1ag to open the following screen. Use this screen to perform CFM actions. VMG1312-Bx0D User’s Guide...
Page 260: Oam Ping
OAM (Operation, Administration and Maintenance) F4 or F5 loopback test on a PVC. The VMG sends an OAM F4 or F5 packet to the DSLAM or ATM switch and then returns it to the VMG. The test result then displays in the text box. VMG1312-Bx0D User’s Guide...
Page 261 ATM device. End-to-end loopback tests allow you to verify integrity of an end-to-end PVC. Note: The DSLAM to which the VMG is connected must also support ATM F4 and/or F5 to use this test. Note: This screen is available only when you configure an ATM layer-2 interface. VMG1312-Bx0D User’s Guide...
Page 262 Press this to perform an OAM F4 segment loopback test. F4 end-end Press this to perform an OAM F4 end-to-end loopback test. F5 segment Press this to perform an OAM F5 segment loopback test. F5 end-end Press this to perform an OAM F5 end-to-end loopback test. VMG1312-Bx0D User’s Guide...
Page 263: Troubleshooting
Make sure you understand the normal behavior of the LED. See Section 1.5 on page Check the hardware connections. Inspect your cables for damage. Contact the vendor to replace any damaged cables. Turn the VMG off and on. VMG1312-Bx0D User’s Guide...
Page 264: Vmg Access And Login
Make sure your Internet browser does not block pop-up windows and has JavaScripts and Java enabled. If it is possible to log in from another interface, check the service control settings for HTTP and HTTPS (Maintenance > Remote MGMT). VMG1312-Bx0D User’s Guide...
Page 265 I cannot use FTP to upload / download the configuration file. / I cannot use FTP to upload new firmware. See the troubleshooting suggestions for I cannot see or access the Login screen in the web configurator. Ignore the suggestions about your browser. VMG1312-Bx0D User’s Guide...
Page 266: Internet Access
ADSL or VDSL connection at one time. I cannot connect to the Internet using a 3G connection. The DSL connection has priority in that order. If the DSL connection is up, then the 3G connection will be down. VMG1312-Bx0D User’s Guide...
Page 267: Wireless Internet Access
APs if necessary. • Try closing some programs that use the Internet, especially peer-to-peer applications. If the wireless client is sending or receiving a lot of information, it may have too many programs open that use the Internet. VMG1312-Bx0D User’s Guide...
Page 268: Usb Device Connection
When using UPnP and the VMG reboots, my computer cannot detect UPnP and refresh My Network Places > Local Network. Disconnect the Ethernet cable from the VMG’s LAN port or from your computer. Re-connect the Ethernet cable. The Local Area Connection icon for UPnP disappears in the screen. Restart your computer. VMG1312-Bx0D User’s Guide...
Page 269: Appendices
Appendices Appendices contain general information. Some information may not apply to your device.
Page 271: Appendix A Customer Support
• Brief description of the problem and the steps you took to solve it. Corporate Headquarters (Worldwide) Taiwan • ZyXEL Communications Corporation • http://www.zyxel.com Asia China • ZyXEL Communications (Shanghai) Corp. ZyXEL Communications (Beijing) Corp. ZyXEL Communications (Tianjin) Corp. • http://www.zyxel.cn India • ZyXEL Technology India Pvt Ltd • http://www.zyxel.in Kazakhstan •...
Page 272 • ZyXEL Singapore Pte Ltd. • http://www.zyxel.com.sg Taiwan • ZyXEL Communications Corporation • http://www.zyxel.com Thailand • ZyXEL Thailand Co., Ltd • http://www.zyxel.co.th Vietnam • ZyXEL Communications Corporation-Vietnam Office • http://www.zyxel.com/vn/vi Europe Austria • ZyXEL Deutschland GmbH • http://www.zyxel.de VMG1312-Bx0D User’s Guide...
Page 273 • ZyXEL BY • http://www.zyxel.by Belgium • ZyXEL Communications B.V. • http://www.zyxel.com/be/nl/ Bulgaria • ZyXEL България • http://www.zyxel.com/bg/bg/ Czech • ZyXEL Communications Czech s.r.o • http://www.zyxel.cz Denmark • ZyXEL Communications A/S • http://www.zyxel.dk Estonia • ZyXEL Estonia • http://www.zyxel.com/ee/et/ Finland •...
Page 274 • ZyXEL Communications Poland • http://www.zyxel.pl Romania • ZyXEL Romania • http://www.zyxel.com/ro/ro Russia • ZyXEL Russia • http://www.zyxel.ru Slovakia • ZyXEL Communications Czech s.r.o. organizacna zlozka • http://www.zyxel.sk Spain • ZyXEL Spain • http://www.zyxel.es Sweden • ZyXEL Communications • http://www.zyxel.se Switzerland •...
Page 275 • http://www.zyxel.com/ec/es/ Ecuador • ZyXEL Communication Corporation • http://www.zyxel.com/ec/es/ Middle East Egypt • ZyXEL Communication Corporation • http://www.zyxel.com/homepage.shtml Middle East • ZyXEL Communication Corporation • http://www.zyxel.com/homepage.shtml North America • ZyXEL Communications, Inc. - North America Headquarters • http://www.us.zyxel.com/ VMG1312-Bx0D User’s Guide...
Page 276 Appendix A Customer Support Oceania Australia • ZyXEL Communications Corporation • http://www.zyxel.com/au/en/ Africa South Africa • Nology (Pty) Ltd. • http://www.zyxel.co.za VMG1312-Bx0D User’s Guide...
Page 277: Appendix B Wireless Lans
Intra-BSS traffic is traffic between wireless clients in the BSS. When Intra-BSS is enabled, wireless client A and B can access the wired network and communicate with each other. When Intra-BSS is disabled, wireless client A and B can still access the wired network but cannot communicate with each other. VMG1312-Bx0D User’s Guide...
Page 278 An ESSID (ESS IDentification) uniquely identifies each ESS. All access points and their associated wireless clients within the same ESS must have the same ESSID in order to communicate. VMG1312-Bx0D User’s Guide...
Page 279 (AP) or wireless gateway, but out-of-range of each other, so they cannot "hear" each other, that is they do not know if the channel is currently being used. Therefore, they are considered hidden from each other. VMG1312-Bx0D User’s Guide...
Page 280 If the Fragmentation Threshold value is smaller than the RTS/CTS value (see previously) you set then the RTS (Request To Send)/CTS (Clear to Send) handshake will never occur as data frames will be fragmented before they reach RTS/CTS size. VMG1312-Bx0D User’s Guide...
Page 281 It is supported by Windows XP and a number of network devices. Some advantages of IEEE 802.1x are: • User based identification that allows for roaming. VMG1312-Bx0D User’s Guide...
Page 282 In order to ensure network security, the access point and the RADIUS server use a shared secret key, which is a password, they both know. The key is not sent over the network. In addition to the VMG1312-Bx0D User’s Guide...
Page 283 Client authentication is then done by sending username and password through the secure connection, thus client identity is protected. For client authentication, EAP-TTLS supports EAP methods and legacy authentication methods such as PAP, CHAP, MS-CHAP and MS-CHAP v2. VMG1312-Bx0D User’s Guide...
Page 284 Key differences between WPA or WPA2 and WEP are improved data encryption and user authentication. If both an AP and the wireless clients support WPA2 and you have an external RADIUS server, use WPA2 for stronger data encryption. If you don't have an external RADIUS server, you should use VMG1312-Bx0D User’s Guide...
Page 285 RADIUS database. WPA2 reduces the number of key exchange messages from six to four (CCMP 4-way handshake) and shortens the time required to connect to a network. Other WPA2 authentication features that are different from WPA include key caching and VMG1312-Bx0D User’s Guide...
Page 286 The RADIUS server distributes the PMK to the AP. The AP then sets up a key hierarchy and management system, using the PMK to dynamically generate unique data encryption keys. The keys are used to encrypt every data packet that is wirelessly communicated between the AP and the wireless clients. VMG1312-Bx0D User’s Guide...
Page 287 The AP and wireless clients use the TKIP or AES encryption process, the PMK and information exchanged in a handshake to create temporal encryption keys. They use these keys to encrypt data exchanged between them. Figure 168 WPA(2)-PSK Authentication VMG1312-Bx0D User’s Guide...
Page 288: Security Parameters Summary
Antenna gain, measured in dB (decibel), is the increase in coverage within the RF beam width. Higher antenna gain improves the range of the signal for better communications. For an indoor site, each 1 dB increase in antenna gain results in a range increase of approximately VMG1312-Bx0D User’s Guide...
Page 289 For a single AP application, place omni-directional antennas as close to the center of the coverage area as possible. For directional antennas, point the antenna in the direction of the desired coverage area. VMG1312-Bx0D User’s Guide...
Page 290 Appendix B Wireless LANs VMG1312-Bx0D User’s Guide...
Page 291: Appendix C Ipv6
“private IP address” in IPv4. You can have the same link-local address on multiple interfaces on a device. A link-local unicast address has a predefined prefix of fe80::/10. The link-local unicast address format is as follows. Table 125 Link-local Unicast Address Format 1111 1110 10 Interface ID 10 bits 54 bits 64 bits VMG1312-Bx0D User’s Guide...
Page 292 All DHCP severs on a local site. FF05:0:0:0:0:0:1:3 The following table describes the multicast addresses which are reserved and can not be assigned to a multicast group. Table 127 Reserved Multicast Address MULTICAST ADDRESS FF00:0:0:0:0:0:0:0 FF01:0:0:0:0:0:0:0 FF02:0:0:0:0:0:0:0 FF03:0:0:0:0:0:0:0 FF04:0:0:0:0:0:0:0 FF05:0:0:0:0:0:0:0 FF06:0:0:0:0:0:0:0 FF07:0:0:0:0:0:0:0 VMG1312-Bx0D User’s Guide...
Page 293 DHCPv6 server uses T1 and T2 to control the time at which the client contacts with the server to extend the lifetimes on any addresses in the IA_NA before the lifetimes expire. After T1, the client sends the server (S1) (from which the addresses in the IA_NA were obtained) a Renew message. If VMG1312-Bx0D User’s Guide...
Page 294 • Neighbor solicitation: A request from a host to determine a neighbor’s link-layer address (MAC address) and detect if the neighbor is still reachable. A neighbor being “reachable” means it responds to a neighbor solicitation message (from the host) with a neighbor advertisement message. VMG1312-Bx0D User’s Guide...
Page 295 Done message to the router or switch. The router or switch then sends a group-specific query to the port on which the Done message is received to determine if other devices connected to this port should remain in the group. VMG1312-Bx0D User’s Guide...
Page 296 Install Dibbler and select the DHCPv6 client option on your computer. After the installation is complete, select Start > All Programs > Dibbler-DHCPv6 > Client Install as service. Select Start > Control Panel > Administrative Tools > Services. Double click Dibbler - a DHCPv6 client. VMG1312-Bx0D User’s Guide...
Page 297 Windows 7 supports IPv6 by default. DHCPv6 is also enabled when you enable IPv6 on a Windows 7 computer. To enable IPv6 in Windows 7: Select Control Panel > Network and Sharing Center > Local Area Connection. Select the Internet Protocol Version 6 (TCP/IPv6) checkbox to enable it. Click OK to save the change. VMG1312-Bx0D User’s Guide...
Page 298 IPv4 Address... : 172.16.100.61 Subnet Mask ... : 255.255.255.0 Default Gateway ..: fe80::213:49ff:feaa:7125%11 172.16.100.254 VMG1312-Bx0D User’s Guide...
Page 299: Appendix D Services
• If the Protocol is TCP, UDP, or TCP/UDP, this is the IP port number. • If the Protocol is USER, this is the IP protocol number. • Description: This is a brief explanation of the applications that use this service or the situations in which this service is used. VMG1312-Bx0D User’s Guide...
Page 300 Microsoft Networks’ messenger service uses this protocol. NetBIOS TCP/UDP The Network Basic Input/Output System is used for communication between computers in a LAN. TCP/UDP TCP/UDP TCP/UDP NEW-ICQ 5190 An Internet chat program. NEWS A protocol for news groups. VMG1312-Bx0D User’s Guide...
Page 301 UNIX systems and network servers. SSDP 1900 The Simple Service Discovery Protocol supports Universal Plug-and-Play (UPnP). TCP/UDP Secure Shell Remote Login Program. STRM WORKS 1558 Stream Works Protocol. VMG1312-Bx0D User’s Guide...
Page 302 Internet and in UNIX environments. It operates over TCP/IP networks. Its primary function is to allow users to log into remote host systems. VDOLIVE 7000 A videoconferencing solution. The UDP port number is specified in the application. user- defined VMG1312-Bx0D User’s Guide...
Page 303 Appendix D Services VMG1312-Bx0D User’s Guide...
Page 304: Appendix E Legal Information
The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation. All rights reserved.
Page 305 Hrvatski ZyXEL ovime izjavljuje da je radijska oprema tipa u skladu s Direktivom 1999/5/EC. (Croatian) Íslenska Hér með lýsir, ZyXEL því yfir að þessi búnaður er í samræmi við grunnkröfur og önnur viðeigandi ákvæði tilskipunar (Icelandic) 1999/5/EC. VMG1312-Bx0D User’s Guide...
Page 306 Italia. Se non viene installato all 'interno del proprio fondo, l'utilizzo di prodotti Wireless LAN richiede una “Autorizzazione Generale”. Consultare http://www.sviluppoeconomico.gov.it/ per maggiori dettagli. Latvia The outdoor usage of the 2.4 GHz band requires an authorization from the Electronic Communications Office. Please check http:// www.esd.lv for more details. VMG1312-Bx0D User’s Guide...
Page 307: Safety Warnings
FOR COUNTRY CODE SELECTION USAGE (WLAN DEVICES) Note: The country code selection is for non-US model only and is not available to all US model. Per FCC regulation, all Wi-Fi product marketed in US must fixed to US operation channels only. VMG1312-Bx0D User’s Guide...
Page 308 Lo smaltimento abusivo del prodotto da parte del detentore comporta l’applicazione delle sanzioni amministrative previste dalla normativa vigente." VMG1312-Bx0D User’s Guide...
Page 309 Appendix E Legal Information Environmental Product Declaration VMG1312-Bx0D User’s Guide...
Page 310: Zyxel Limited Warranty
You can download the latest firmware at www.zyxel.com. If you cannot find it there, contact your vendor or ZyXEL Technical Support at support@zyxel.com.tw. To obtain the source code covered under those Licenses, please contact your vendor or ZyXEL Technical Support at support@zyxel.com.tw. VMG1312-Bx0D User’s Guide...
Page 311: Index
Basic Service Set, See BSS compatibility, WDS Basic Service Set, see BSS configuration blinking LEDs backup Broadband firewalls broadcast reset restoring 107, 277 static route example 80, 134, 135, 172 Connectivity Check Messages, see CCMs VMG1312-Bx0D User’s Guide...
Page 312 DS field version DS, dee differentiated services forwarding ports DSCP fragmentation threshold 100, 104, 280 dynamic DNS 156, 169 wildcard Dynamic Host Configuration Protocol, see DHCP dynamic WEP key exchange DYNDNS wildcard General wireless LAN screen VMG1312-Bx0D User’s Guide...
Page 313 ID Maintenance End Point, see MEP link-local address Management Information Base (MIB) Neighbor Discovery Protocol managing the device ping good habits prefix 63, 86, 291 Maximum Burst Size (MBS) prefix delegation MBSSID prefix length 63, 86, 291 VMG1312-Bx0D User’s Guide...
Page 314 NNTP RADIUS message types messages shared secret key RADIUS server Pairwise Master Key (PMK) 285, 287 registration passwords product remote management TR-069 Peak Cell Rate (PCR) Remote Procedure Calls, see RPCs Per-Hop Behavior, see PHB VMG1312-Bx0D User’s Guide...
Page 315 SIP ALG activation SMTP SNMP Tag Control Information See TCI 169, 241, 242 agents Tag Protocol Identifier See TPID GetNext Manager thresholds managers data fragment 100, 104 RTS/CTS 100, 104 network components time Trap TPID versions TR-069 VMG1312-Bx0D User’s Guide...
Page 316 VLAN Identifier See VID VLAN tag WPA-PSK 109, 112 example limitations push button 21, 110 Wake on LAN wireless security Wireless tutorial status wizard setup Wide Area Network, see WAN Internet warranty WLAN note interference 98, 109 security parameters VMG1312-Bx0D User’s Guide...
Page 317 RADIUS application example WPA2 user authentication vs WPA2-PSK wireless client supplicant with RADIUS application example WPA2-Pre-Shared Key WPA2-PSK application example WPA-PSK 107, 285 application example 109, 112 example limitations example push button 21, 110 ZyXEL Family Safety page VMG1312-Bx0D User’s Guide...

ZyXEL Communications VMG1312-BX0D User Manual

Contents Overview

Table of Contents

User's Guide

PART I User's Guide

Chapter 1 Introducing the VMG

Chapter 2 The Web Configurator

Chapter 3 Quick Start

Chapter 4 Tutorials

Technical Reference

Part II: Technical Reference

Chapter 5 Network Map and Status Screens

Chapter 6 Broadband

Chapter 7 Wireless

Chapter 8 Home Networking

Chapter 9

Routing

Chapter 10 Quality of Service (Qos)

Chapter 11 Network Address Translation (NAT)

Chapter 12 Dynamic DNS Setup

Chapter 13 Vlan Group

Chapter 14 Interface Group

Chapter 15 USB Service

Chapter 16 Firewall

Chapter 17 MAC Filter

Chapter 18 Parental Control

Chapter 19 Scheduler Rule

Chapter 20 Certificates

Chapter 21 Log

Chapter 22 Traffic Status

Chapter 23 ARP Table

Chapter 24 Routing Table

Chapter 25 Multicast Status

Chapter 26 Xdsl Statistics

Chapter 27 3G Statistics

Chapter 28 System

Chapter 29 User Account

Chapter 30 Remote Management

Chapter 31 TR-069 Client

Chapter 32 SNMP

Chapter 33 Time Settings

Chapter 34 E-Mail Notification

Chapter 35 Log Setting

Chapter 36 Firmware Upgrade

Quick Links

Need help?

Questions and answers

Subscribe to Our Youtube Channel

Related Manuals for ZyXEL Communications VMG1312-BX0D

Summary of Contents for ZyXEL Communications VMG1312-BX0D