Page 1 Wireless N VDSL2 VoIP Combo WAN Gigabit IAD Version 1.00 Edition 1, 6/2013 User’s Guide Default Login Details LAN IP Address http://192.168.1.254 Login admin Default password is the Password wireless key printed on the back of the Device. Copyright © 2013 ZyXEL Communications Corporation...
Page 2 Screenshots and graphics in this book may differ slightly from your product due to differences in your product firmware or your computer operating system. Every effort has been made to ensure that the information in this manual is accurate. eir F1000 Modem User’s Guide...
Page 3: Table Of Contents
Routing Table ............................237 IGMP/MLD Status ..........................239 xDSL Statistics ............................241 3G Statistics ............................245 User Account ............................247 Remote Management ..........................249 TR-064 ..............................253 SNMP ..............................255 Time Settings ............................257 E-mail Notification ..........................261 Log Setting ............................263 Firmware Upgrade ..........................267 Configuration ............................269 eir F1000 Modem User’s Guide...
Page 4 Contents Overview Diagnostic .............................273 Troubleshooting ............................279 eir F1000 Modem User’s Guide...
Page 5: Table Of Contents
2.2.2 Main Window ...........................28 2.2.3 Navigation Panel ........................29 Part II: Technical Reference................33 Chapter 3 Status and Network Map Screens ..................... 35 3.1 Overview ............................35 3.2 The Connection Status Screen ......................35 3.3 The Network Map Screen .........................37 eir F1000 Modem User’s Guide...
Page 6 5.9 The Channel Status Screen ......................89 5.10 Technical Reference ........................89 5.10.1 Wireless Network Overview ....................89 5.10.2 Additional Wireless Terms .....................91 5.10.3 Wireless Security Overview ....................91 5.10.4 Signal Problems ........................93 5.10.5 BSS ............................94 5.10.6 MBSSID ..........................94 5.10.7 Preamble Type ........................95 eir F1000 Modem User’s Guide...
Page 7 7.5.1 The RIP Screen ........................133 Chapter 8 Quality of Service (QoS)........................135 8.1 Overview ............................135 8.1.1 What You Can Do in this Chapter ..................135 8.2 What You Need to Know .........................135 8.3 The Quality of Service General Screen ..................137 eir F1000 Modem User’s Guide...
Page 8 10.1.1 What You Can Do in this Chapter ..................171 10.1.2 What You Need To Know .....................172 10.2 The DNS Entry Screen ........................172 10.2.1 Add/Edit DNS Entry ......................173 10.3 The Dynamic DNS Screen ......................173 Chapter 11 Interface Group ..........................175 11.1 Overview ............................175 eir F1000 Modem User’s Guide...
Page 9 14.2 The MAC Filter Screen ........................195 Chapter 15 Parental Control ..........................197 15.1 Overview ............................197 15.2 The Parental Control Screen ......................197 15.2.1 Add/Edit a Parental Control Rule ..................198 Chapter 16 Scheduler Rule..........................201 16.1 Overview ............................201 eir F1000 Modem User’s Guide...
Page 10 19.1.1 What You Can Do in this Chapter ..................225 19.1.2 What You Need To Know .....................225 19.2 The System Log Screen ........................226 19.3 The Security Log Screen .......................227 Chapter 20 Traffic Status ............................ 229 20.1 Overview ............................229 eir F1000 Modem User’s Guide...
Page 11 26.2 The 3G Statistics Screen .......................245 Chapter 27 User Account ............................ 247 27.1 Overview ............................247 27.2 The User Account Screen ......................247 Chapter 28 Remote Management........................249 28.1 Overview ............................249 28.2 The Remote MGMT Screen ......................249 eir F1000 Modem User’s Guide...
Page 12 Firmware Upgrade ..........................267 34.1 Overview ............................267 34.2 The Firmware Screen ........................267 Chapter 35 Configuration ............................ 269 35.1 Overview ............................269 35.2 The Configuration Screen ......................269 35.3 The Reboot Screen ........................271 Chapter 36 Diagnostic ............................273 eir F1000 Modem User’s Guide...
Page 13 Appendix B IP Addresses and Subnetting ..................307 Appendix C Pop-up Windows, JavaScripts and Java Permissions ..........315 Appendix D Wireless LANs......................325 Appendix E IPv6 ..........................339 Appendix F Services ........................347 Appendix G Legal Information ......................351 Index ..............................353 eir F1000 Modem User’s Guide...
Page 14 Table of Contents eir F1000 Modem User’s Guide...
Page 15: User's Guide
User’s Guide...
Page 17: Introducing The Device
Device to its factory default settings. If you backed up an earlier configuration file, you would not have to totally re-configure the Device. You could simply restore your last configuration. eir F1000 Modem User’s Guide...
Page 18: Applications For The Device
Internet to your network is blocked by default unless it is initiated from your network. This means that probes from the outside to your network are not allowed, but you can safely browse the Internet and download files. eir F1000 Modem User’s Guide...
Page 19: Device's Usb Support
You can also use the Device as a media server. This lets anyone on your network play video, music, and photos from a USB device (B) connected to the Device’s USB port (without having to copy them to another computer). Figure 3 USB Media Server Application eir F1000 Modem User’s Guide...
Page 20: Leds (Lights)
The Device detected an error while self-testing, or there is a device malfunction. The Device is not receiving power. Green The ADSL or VDSL line is up. Blinking The Device is initializing the ADSL or VDSL line. The DSL line is down. eir F1000 Modem User’s Guide...
Page 21 The Device recognizes a USB connection through the USB2 slot. Blinking The Device is sending/receiving data to /from the USB device connected USB2 to it. The Device does not detect a USB connection through the USB2 slot. eir F1000 Modem User’s Guide...
Page 22: The Reset Button
You can also use the WPS button to quickly set up a secure wireless connection between the Device and a WPS-compatible client by adding one device at a time. To activate WPS: Make sure the PWR/SYS LED is on and not blinking. Press the WPS button for five seconds and release it. eir F1000 Modem User’s Guide...
Page 23: Wall-Mounting Instructions
Drill the two screw holes in the wall. Be careful to avoid damaging pipes or cables located inside the wall when drilling holes for the screws. Align and insert the bracket to the wall-mounting notches on the rear panel of the Device. eir F1000 Modem User’s Guide...
Page 24 Push the bracket up to tightly attach it to the Device. Mount the Device on the screws which are already installed on the wall. Make sure that the Device is firmly attached to the screws so it does not fall off. eir F1000 Modem User’s Guide...
Page 25: The Web Configurator
A password screen displays. Type “admin” (default) as the username and enter the default password (which is the same as the wireless key on the Device’s back label), then click Login. If you have changed the password, enter your new password and click Login. Figure 7 Login Screen eir F1000 Modem User’s Guide...
Page 26 Connection Status screen if you do not want to change them now. Figure 9 Change Wireless Settings Screen The Connection Status screen appears. You can view the Device’s interface and system information. eir F1000 Modem User’s Guide...
Page 27 Chapter 2 The Web Configurator Figure 10 Connection Status eir F1000 Modem User’s Guide...
Page 28: Web Configurator Layout
Click the Help icon to get support on eir’s website. Click the Logout icon to log out of the web configurator. 2.2.2 Main Window The main window displays information and configuration fields. It is discussed in the rest of this document. eir F1000 Modem User’s Guide...
Page 29: Navigation Panel
Use this screen to configure 3G WAN connection. Advanced Use this screen to enable or disable PTM over ADSL, Annex M/Annex J, and DSL PhyR functions. 802.1x Use this screen to view and configure the IEEE 802.1x settings on the Device. eir F1000 Modem User’s Guide...
Page 30 Use this screen to enable QoS and traffic prioritizing. You can also configure the QoS rules and actions. Queue Setup Use this screen to configure QoS queues. Class Setup Use this screen to define a classifier. Policer Setup Use these screens to configure QoS policers. eir F1000 Modem User’s Guide...
Page 31 Use this screen to view the status of events that occurred to the Device. You can export or e-mail the logs. Security Log Use this screen to view the login record of the Device. You can export or e-mail the logs. eir F1000 Modem User’s Guide...
Page 32 Use this screen to view information to help you identify problems with the DSL connection. WAN Diagnostics Use this screen to perform a test on the current WAN connection and Tests view the result on the screen. eir F1000 Modem User’s Guide...
Page 33: Technical Reference
Technical Reference...
Page 35: Status And Network Map Screens
Use the Network Map screen to view the network connection status of the Device and clients connected to it. 3.2 The Connection Status Screen Use this screen to view the status of the Device. Click Connection Status to open this screen. Figure 13 Connection Status Screen eir F1000 Modem User’s Guide...
Page 36 This is the descriptive name used to identify the Device in a wireless LAN. Channel This is the channel number used by the Device now. Security This displays the type of security mode the Device is using in the wireless LAN. eir F1000 Modem User’s Guide...
Page 37: The Network Map Screen
3.3 The Network Map Screen Use this screen to view the network connection status of the device and its clients. A warning message appears if there is a connection problem. You can click the link from the warning message eir F1000 Modem User’s Guide...
Page 38 • Click Info to view information about the client. Select Add device into Static DHCP and click the Static DHCP link to configure a static DHCP client list. See Section 6.3 on page 109 for more information. eir F1000 Modem User’s Guide...
Page 39: The Diagnostic Screens
Device to update this screen in Refresh interval. Figure 15 Network Map: List View Mode 3.3.1 The Diagnostic Screens Depending on your WAN connection problem, a different screen appears. Follow the on-screen instructions to troubleshoot the problem. eir F1000 Modem User’s Guide...
Page 40 • This screen appears when your WAN connection is up but the Device fails to connect to the Internet. Figure 17 Diagnostic Screen - Internet Connection Is Not Working • Click the following link to start a diagnostic test and view the result on the screen. Figure 18 Link for Diagnostic Test eir F1000 Modem User’s Guide...
Page 41: Broadband
• Use the Broadband screen to view, remove or add a WAN interface. You can also configure the WAN settings on the Device for Internet access (Section 4.2 on page 45). • Use the 3G Backup screen to configure 3G WAN connection (Section 4.3 on page 55). eir F1000 Modem User’s Guide...
Page 42: What You Need To Know
It is used by the Device to communicate with other devices in other networks. It can be static (fixed) or dynamically assigned by the ISPeir each time the Device tries to access the Internet. eir F1000 Modem User’s Guide...
Page 43 IPv6 Prefix and Prefix Length Similar to an IPv4 subnet mask, IPv6 uses an address prefix to represent the network address. An IPv6 prefix length specifies how many most significant bits (start from the left) in the address eir F1000 Modem User’s Guide...
Page 44 Transition Router (AFTR in the graphic) to connect to the IPv4 Internet. The local network can also use IPv6 services. The Device uses it’s configured IPv6 WAN IP to route IPv6 traffic to the IPv6 Internet. eir F1000 Modem User’s Guide...
Page 45: Before You Begin
This shows whether it is an ATM, Ethernet or a PTM connection. Mode This shows whether the connection is in routing or bridge mode. Encapsulation This is the method of encapsulation used by this connection. eir F1000 Modem User’s Guide...
Page 46 This shows whether Multicast Listener Discovery (MLD) is activated or not for this connection. MLD is not available when the connection uses the bridging service. Modify Click the Edit icon to configure the WAN connection. Click the Delete icon to remove the WAN connection. eir F1000 Modem User’s Guide...
Page 47: Add/Edit Internet Connection
LABEL DESCRIPTION General Active Select this to activate the WAN configuration settings. Name Specify a descriptive name for this connection. Type Select whether it is an ADSL/VDSL over PTM, ADSL over ATM connection or Ethernet. eir F1000 Modem User’s Guide...
Page 48 Divide the DSL line rate (bps) by 424 (the size of an ATM cell) to find the Peak Cell Rate (PCR). This is the maximum rate at which the sender can send cells. Type the PCR here.This field is not available when you select UBR Without PCR. eir F1000 Modem User’s Guide...
Page 49 Static IP Select this option If the ISP assigned a fixed IP address. Address IP Address Enter the static IP address provided by your ISP. Subnet Enter the subnet mask provided by your ISP. Mask eir F1000 Modem User’s Guide...
Page 50 When you set the 6RD Type to Static, specify the relay server’s IPv4 address in this field. Relay Server IP 6RD IPv6 Prefix Enter an IPv6 prefix for tunneling IPv6 traffic to the ISP’s border relay router and connecting to the native IPv6 Internet. eir F1000 Modem User’s Guide...
Page 51 Type the VLAN ID number (from 1 to 4094) for traffic through this connection. Rate Limit Enter the rate limit for the connection. This is the maximum transmission rate allowed for traffic on this connection. eir F1000 Modem User’s Guide...
Page 52: Bridge Mode
Bridge, you cannot use routing functions, such as QoS, Firewall, DHCP server and NAT on traffic from the selected LAN port(s). VLAN This section is available only when you select ADSL/VDSL over PTM in the Type field. eir F1000 Modem User’s Guide...
Page 53 Enter a service name of the connection. Type Select ADSL over ATM as the interface for which you want to configure here. The Device uses the ADSL technology for data transmission over the DSL port. eir F1000 Modem User’s Guide...
Page 54 Maximum Burst Size (MBS) refers to the maximum number of cells that can be sent at the Size peak rate. Type the MBS, which is less than 65535. This field is available only when you select Non Realtime VBR or Realtime VBR. eir F1000 Modem User’s Guide...
Page 55: The 3G Backup Screen
WAN connection. The Device automatically uses a wired WAN connection when available. Note: This Device supports connecting one 3G dongle at a time. Figure 27 Internet Access Application: 3G WAN Use this screen to configure your 3G settings. Click Network Setting > Broadband > 3G Backup. eir F1000 Modem User’s Guide...
Page 56 Select this to have the Device ping the particular host name or IP address you typed in this field. 3G Connection Settings Card This field displays the manufacturer and model name of your 3G card if you inserted one in description the Device. Otherwise, it displays N/A. eir F1000 Modem User’s Guide...
Page 57 Maintenance > Email Notification screen. 3G backup Type a title that you want to be in the subject line of the e-mail notifications that the Device Send Email sends. Title eir F1000 Modem User’s Guide...
Page 58 Select Keep to maintain an existing 3G connection or Drop to disconnect it. connection Actions Enable Email Select this to enable the e-mail notification function. The Device will e-mail you a Notification notification when there over budget occurs. eir F1000 Modem User’s Guide...
Page 59: The Advanced Screen
However, enabling PhyR US can decrease the US line rate. Enabling or disabling PhyR will require the CPE to retrain. For PhyR to function, the DSLAM must also support PhyR and have it enabled. eir F1000 Modem User’s Guide...
Page 60: The 802.1X Screen
This shows the Trusted CA used for this authentication. This displays N/A when there is no Trusted CA assigned. Apply Click Apply to save your changes back to the Device. Cancel Click Cancel to return to the previous configuration. eir F1000 Modem User’s Guide...
Page 61: Edit 802.1X Settings
Security > Certificates > Trusted CA screen. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. 4.6 Technical Reference The following section contains additional technical information about the Device features described in this chapter. eir F1000 Modem User’s Guide...
Page 62 (AAL5). The first method allows multiplexing of multiple protocols over a single ATM virtual circuit (LLC-based multiplexing) and the second method assumes that each protocol is carried over a separate ATM virtual circuit (VC-based multiplexing). Please refer to RFC 1483 for more detailed information. eir F1000 Modem User’s Guide...
Page 63 (up to the MBS) can be sent at the PCR again. If the PCR, SCR or MBS is set to the default of "0", the system will assign a maximum value that correlates to your upstream line rate. eir F1000 Modem User’s Guide...
Page 64 The Unspecified Bit Rate (UBR) ATM traffic class is for bursty data transfers. However, UBR doesn't guarantee any bandwidth and only delivers traffic when the network has spare bandwidth. An example application is background file transfer. eir F1000 Modem User’s Guide...
Page 65 4096 possible VIDs, a VID of 0 is used to identify priority frames and value 4095 (FFF) is reserved, so the maximum possible VLAN configurations are 4,094. TPID User Priority VLAN ID 2 Bytes 3 Bits 1 Bit 12 Bits eir F1000 Modem User’s Guide...
Page 66 IPv6 Prefix and Prefix Length Similar to an IPv4 subnet mask, IPv6 uses an address prefix to represent the network address. An IPv6 prefix length specifies how many most significant bits (start from the left) in the address eir F1000 Modem User’s Guide...
Page 67 Chapter 4 Broadband compose the network address. The prefix length is written as “/x” where x is a number. For example, 2001:db8:1a2b:15::1a2f:0/32 means that the first 32 bits (2001:db8) is the subnet prefix. eir F1000 Modem User’s Guide...
Page 68 Chapter 4 Broadband eir F1000 Modem User’s Guide...
Page 69: Wireless
• Use the Others screen to configure wireless advanced features, such as the RTS/CTS Threshold (Section 5.8 on page 86). • Use the Channel Status screen to scan wireless LAN channel noises and view the results (Section 5.9 on page 89). eir F1000 Modem User’s Guide...
Page 70: What You Need To Know
Device’s SSID, channel or security settings, you will lose your wireless connection when you press Apply to confirm. You must then change the wireless settings of your computer to match the Device’s new settings. eir F1000 Modem User’s Guide...
Page 71 Wireless Network Setup Wireless You can Enable or Disable the wireless LAN in this field. Band This shows the wireless band which this radio profile is using. 2.4GHz is the frequency used by IEEE 802.11b/g/n wireless clients. eir F1000 Modem User’s Guide...
Page 72 Specify the maximum rate for downstream wireless traffic to this WLAN from the WAN in Downstream kilobits per second (Kbps). Bandwidth BSSID This shows the MAC address of the wireless interface on the Device when wireless LAN is enabled. Security Level eir F1000 Modem User’s Guide...
Page 73: No Security
WPA or WPA2 if your wireless devices support it and you have a RADIUS server. If your wireless devices support nothing stronger than WEP, use the highest encryption level available. eir F1000 Modem User’s Guide...
Page 74 Select password unmask to show your entered password in plain text. WEP Encryption Select 64-bits or 128-bits. This dictates the length of the security key that the network is going to use. Notes Click Notes: to show more information about the WEP key. eir F1000 Modem User’s Guide...
Page 75: More Secure (Wpa(2)-Psk)
This field appears when you choose WPA-PSK2 as the Security Mode. Compatible Check this field to allow wireless devices using WPA-PSK security mode to connect to your Device. The Device supports WPA-PSK and WPA2-PSK simultaneously. eir F1000 Modem User’s Guide...
Page 76: Wpa(2) Authentication
The following table describes the labels in this screen. Table 17 Wireless > General: More Secure: WPA(2) LABEL DESCRIPTION Security Level Select More Secure to enable WPA(2)-PSK data encryption. Security Mode Choose WPA or WPA2 from the drop-down list box. Authentication Server eir F1000 Modem User’s Guide...
Page 77: The More Ap Screen
This screen allows you to enable and configure multiple Basic Service Sets (BSSs) on the Device. Click Network Setting > Wireless > More AP. The following screen displays. Figure 38 Network Setting > Wireless > More AP eir F1000 Modem User’s Guide...
Page 78 If Home Guest displays, clients can connect to each other directly. If External Guest displays, clients are blocked from connecting to each other directly. N/A displays if guest WLAN is disabled. Modify Click the Edit icon to configure the SSID profile. eir F1000 Modem User’s Guide...
Page 79: Edit More Ap
The SSID (Service Set IDentity) identifies the service set with which a wireless device is Network Name associated. Wireless devices associating to the access point (AP) must have the same SSID. (SSID) Enter a descriptive name (up to 32 English keyboard characters) for the wireless LAN. eir F1000 Modem User’s Guide...
Page 80 Specify the maximum rate for upstream wireless traffic to the WAN from this WLAN in Bandwidth kilobits per second (Kbps). Max. Specify the maximum rate for downstream wireless traffic to this WLAN from the WAN in Downstream kilobits per second (Kbps). Bandwidth eir F1000 Modem User’s Guide...
Page 81: Mac Authentication
Select Deny to block access to the Device. MAC addresses not listed will be allowed to access the Device. Select Allow to permit access to the Device. MAC addresses not listed will be denied access to the Device. eir F1000 Modem User’s Guide...
Page 82: The Wps Screen
Click Network Setting > Wireless > WPS. The following screen displays. Select Enable and click Apply to activate the WPS function. Then you can configure the WPS settings in this screen. Figure 41 Network Setting > Wireless > WPS eir F1000 Modem User’s Guide...
Page 83: The Wmm Screen
Use this screen to enable Wi-Fi MultiMedia (WMM) and WMM Power Save in wireless networks for multimedia applications. Click Network Setting > Wireless > WMM. The following screen displays. Figure 42 Network Setting > Wireless > WMM eir F1000 Modem User’s Guide...
Page 84: The Wds Screen
Note: WDS security is independent of the security settings between the Device and any wireless clients. Note: At the time of writing, WDS is compatible with other ZyXEL APs only. Not all models support WDS links. Check your other AP’s documentation. eir F1000 Modem User’s Guide...
Page 85 Click the Delete icon to remove this entry. Scan Click the Scan icon to search and display the available APs within range. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. eir F1000 Modem User’s Guide...
Page 86: Wds Scan
Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. 5.8 The Others Screen Use this screen to configure advanced wireless settings. Click Network Setting > Wireless > Others. The screen appears as shown. eir F1000 Modem User’s Guide...
Page 87 Delivery Traffic Indication Message (DTIM) is the time period after which broadcast and multicast packets are transmitted to mobile clients in the Power Saving mode. A high DTIM value can cause clients to lose connectivity with the network. This value can be set from 1 to 255. eir F1000 Modem User’s Guide...
Page 88 Select Enable to allow coexistence between 20 MHz and 40 MHz Overlapping Basic Service Coexistence Sets (OBSS) in wireless local area networks. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. eir F1000 Modem User’s Guide...
Page 89: The Channel Status Screen
• A bridge is a radio that relays communications between access points and wireless clients, extending a network’s range. Traditionally, a wireless network operates in one of two ways. eir F1000 Modem User’s Guide...
Page 90 Radio Channels In the radio spectrum, there are certain frequency bands allocated for unlicensed, civilian use. For the purposes of wireless networking, these bands are divided into numerous channels. This allows a eir F1000 Modem User’s Guide...
Page 91: Additional Wireless Terms
- but it is not very secure if you use a short key which is very easy to guess - for example, a three-letter word from the dictionary. eir F1000 Modem User’s Guide...
Page 92 Some wireless devices, such as scanners, can detect wireless networks but cannot use wireless networks. These kinds of wireless devices might not have MAC addresses. Hexadecimal characters are 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, A, B, C, D, E, and F. eir F1000 Modem User’s Guide...
Page 93: Signal Problems
Problems with distance occur when the two radios are too far apart. Problems with interference occur when other radio waves interrupt the data signal. Interference may come from other radio transmissions, such as military or air traffic control communications, or from machines that are eir F1000 Modem User’s Guide...
Page 94: Bss
BSSs simultaneously. You can then assign varying QoS priorities and/or security modes to different SSIDs. Wireless devices can use different BSSIDs to associate with the same AP. 5.10.6.1 Notes on Multiple BSSs • A maximum of eight BSSs are allowed on one AP simultaneously. eir F1000 Modem User’s Guide...
Page 95: Preamble Type
5.10.9 WiFi Protected Setup (WPS) Your Device supports WiFi Protected Setup (WPS), which is an easy way to set up a secure wireless network. WPS is an industry standard specification, defined by the WiFi Alliance. eir F1000 Modem User’s Guide...
Page 96 Take the following steps to set up a WPS connection between an access point or wireless router (referred to here as the AP) and a client device using the PIN method. eir F1000 Modem User’s Guide...
Page 97 On a computer connected to the wireless client, try to connect to the Internet. If you can connect, WPS was successful. If you cannot connect, check the list of associated wireless clients in the AP’s configuration utility. If you see the wireless client in the list, WPS was successful. eir F1000 Modem User’s Guide...
Page 98 WPA-PSK or WPA2-PSK pre-shared key to the enrollee. Whether WPA-PSK or WPA2-PSK is used depends on the standards supported by the devices. If the registrar is already part of a network, it sends the existing information. If not, it generates the SSID and WPA(2)-PSK randomly. eir F1000 Modem User’s Guide...
Page 99 This section shows how security settings are distributed in an example WPS setup. The following figure shows an example network. In step 1, both AP1 and Client 1 are unconfigured. When WPS is activated on both, they perform the handshake. In this example, AP1 eir F1000 Modem User’s Guide...
Page 100 (it already has security information for the network). AP1 supplies the existing security information to Client 2. Figure 53 WPS: Example Network Step 2 REGISTRAR EXISTING CONNECTION CLIENT 1 ENROLLEE CLIENT 2 eir F1000 Modem User’s Guide...
Page 101 (if the device supports this feature). Then, you can enter the key into the non-WPS device and join the network as normal (the non-WPS device must also support WPA-PSK or WPA2-PSK). eir F1000 Modem User’s Guide...
Page 102 Check the MAC addresses of your wireless clients (usually printed on a label on the bottom of the device). If there is an unknown MAC address you can remove it or reset the AP. eir F1000 Modem User’s Guide...
Page 103: Home Networking
• Use the LAN VLAN screen to control the VLAN ID and IEEE 802.1p priority tags of traffic sent out through individual LAN ports (Section 6.10 on page 122). • Use the Wake on Lan screen to remotely turn on a device on the network. (Section 6.11 on page 123). eir F1000 Modem User’s Guide...
Page 104: What You Need To Know
UPnP devices and enable exchange of simple product and service descriptions. NAT traversal allows the following: • Dynamic port mapping • Learning public IP addresses eir F1000 Modem User’s Guide...
Page 105: Before You Begin
Enter the IP subnet mask into the IP Subnet Mask field. Unless instructed otherwise it is best to leave this alone, the configurator will automatically compute a subnet mask based upon the IP address you entered. eir F1000 Modem User’s Guide...
Page 106 Select Disable to stop the DHCP server on the Device. Select DHCP Relay to have the Device forward DHCP request to the DHCP server. DHCP Relay This field is only available when you select DHCP Relay in the DHCP field. Server Address eir F1000 Modem User’s Guide...
Page 107 LAN IPv6 address. An IPv6 prefix length specifies how many most significant bits (starting from the left) in the address compose the network address. This field displays the bit number of the IPv6 subnet mask. eir F1000 Modem User’s Guide...
Page 108 IPv4 DNS Server First: The Device forwards the requests to the IPv4 DNS server first and then the IPv6 DNS server. Then it sends clients the first DNS information it receives. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. eir F1000 Modem User’s Guide...
Page 109: The Static Dhcp Screen
Click the Edit icon to have the IP address field editable and change it. Click the Delete icon to delete a static DHCP entry. A window displays asking you to confirm that you want to delete the selected entry. eir F1000 Modem User’s Guide...
Page 110: The Upnp Screen
IP address, convey its capabilities and learn about other devices on the network. In turn, a device can leave a network smoothly and automatically when it is no longer in use. page 104 for more information on UPnP. eir F1000 Modem User’s Guide...
Page 111: Installing Upnp In Windows Example
6.5 Installing UPnP in Windows Example This section shows how to install UPnP in Windows Me and Windows XP. Installing UPnP in Windows Me Follow the steps below to install the UPnP in Windows Me. eir F1000 Modem User’s Guide...
Page 112 Chapter 6 Home Networking Click Start and Control Panel. Double-click Add/Remove Programs. Click on the Windows Setup tab and select Communication in the Components selection box. Click Details. eir F1000 Modem User’s Guide...
Page 113 Follow the steps below to install the UPnP in Windows XP. Click Start and Control Panel. Double-click Network Connections. In the Network Connections window, click Advanced in the main menu and select Optional Networking Components …. eir F1000 Modem User’s Guide...
Page 114: Using Upnp In Windows Xp Example
6.6 Using UPnP in Windows XP Example This section shows you how to use the UPnP feature in Windows XP. You must already have UPnP installed in Windows XP and UPnP activated on the Device. eir F1000 Modem User’s Guide...
Page 115 Click Start and Control Panel. Double-click Network Connections. An icon displays under Internet Gateway. Right-click the icon and select Properties. In the Internet Connection Properties window, click Settings to see the port mappings there were automatically created. eir F1000 Modem User’s Guide...
Page 116 When the UPnP-enabled device is disconnected from your computer, all port mappings will be deleted automatically. Select Show icon in notification area when connected option and click OK. An icon displays in the system tray. eir F1000 Modem User’s Guide...
Page 117 Device first. This comes helpful if you do not know the IP address of the Device. Follow the steps below to access the web configurator. Click Start and then Control Panel. Double-click Network Connections. eir F1000 Modem User’s Guide...
Page 118 Select My Network Places under Other Places. An icon with the description for each UPnP-enabled device displays under Local Network. Right-click on the icon for your Device and select Invoke. The web configurator login screen displays. eir F1000 Modem User’s Guide...
Page 119 Chapter 6 Home Networking Right-click on the icon for your Device and select Properties. A properties window displays with basic information about the Device. eir F1000 Modem User’s Guide...
Page 120: The Additional Subnet Screen
Select the checkbox to enable the Public LAN feature. Your ISP must support Public LAN and Static IP. IPv4 Address Enter the public IPv4 IP address provided by your ISP. Subnet Mask/ Enter the public IP subnet mask provided by your ISP. Prefix Length eir F1000 Modem User’s Guide...
Page 121: The Stb Vendor Id Screen
If you use a DSL connection, you can configure your Ethernet WAN port as an extra LAN port. This Gigabit Ethernet port provides faster transmission speeds. Click Network Setting > Home Networking > 5th Ethernet Port to open this screen. eir F1000 Modem User’s Guide...
Page 122: The Lan Vlan Screen
Click Network Setting > Home Networking > LAN VLAN to open this screen. Use this screen to control the VLAN ID and IEEE 802.1p priority tags of traffic sent out through individual LAN ports. Figure 62 Network Setting > Home Networking > LAN VLAN eir F1000 Modem User’s Guide...
Page 123: The Wake On Lan Screen
Enter the MAC address of the device to turn it on. A MAC address consists of six hexadecimal character pairs. Wake up Click this to send a wake up packet to wake up the specified device. eir F1000 Modem User’s Guide...
Page 124: Technical Reference
• The ISP tells you the DNS server addresses, usually in the form of an information sheet, when you sign up. If your ISP gives you DNS server addresses, enter them in the DNS Server fields in the DHCP Setup screen. eir F1000 Modem User’s Guide...
Page 125: Lan Tcp/Ip
However, the Internet Assigned Numbers Authority (IANA) has reserved the following three blocks of IP addresses specifically for private networks: • 10.0.0.0 — 10.255.255.255 • 172.16.0.0 — 172.31.255.255 • 192.168.0.0 — 192.168.255.255 eir F1000 Modem User’s Guide...
Page 126 Note: Regardless of your particular situation, do not create an arbitrary IP address; always follow the guidelines above. For more information on address assignment, please refer to RFC 1597, “Address Allocation for Private Internets” and RFC 1466, “Guidelines for Management of IP Address Space”. eir F1000 Modem User’s Guide...
Page 127: Routing
ISP behind router R2. You create another static route to communicate with a separate network behind a router R3 connected to the LAN. Figure 65 Example of Routing Topology eir F1000 Modem User’s Guide...
Page 128: The Routing Screen
Click the Edit icon to edit the static route on the Device. Click the Delete icon to remove a static route from the Device. A window displays asking you to confirm that you want to delete the route. eir F1000 Modem User’s Guide...
Page 129: Add/Edit Static Route
Enter the IP address of the gateway. Address Use Interface Select the WAN interface you want to use for this static route. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. eir F1000 Modem User’s Guide...
Page 130: The Dns Route Screen
7.3.1 The DNS Route Add Screen You can manually add the Device’s DNS route entry. Click Add new DNS Route in the Network Setting > Routing > DNS Route screen. The screen shown next appears. Figure 69 DNS Route Add eir F1000 Modem User’s Guide...
Page 131: The Policy Forwarding Screen
This is the name of the rule. Source IP This is the source IP address. Source Subnet his is the source subnet mask address. Mask Protocol This is the transport layer protocol. Source Port This is the source port number. eir F1000 Modem User’s Guide...
Page 132: Add/Edit Policy Forwarding
Select a WAN interface through which the traffic is sent. You must have the WAN interface(s) already configured in the Broadband screens. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. eir F1000 Modem User’s Guide...
Page 133: Rip
Select Active to have the Device advertise its route information and also listen for routing updates from neighboring routers. Enabled Select the check box to activate the settings. Apply Click Apply to save your changes back to the Device. eir F1000 Modem User’s Guide...
Page 134 Chapter 7 Routing eir F1000 Modem User’s Guide...
Page 135: Quality Of Service (Qos)
QoS versus Cos QoS is used to prioritize source-to-destination traffic flows. All packets in the same flow are given the same priority. CoS (class of service) is a way of managing traffic in a network by grouping eir F1000 Modem User’s Guide...
Page 136 (Before Traffic Policing) (After Traffic Policing) The Device supports three incoming traffic metering algorithms: Token Bucket Filter (TBF), Single Rate Two Color Maker (srTCM), and Two Rate Two Color Marker (trTCM). You can specify actions eir F1000 Modem User’s Guide...
Page 137: The Quality Of Service General Screen
Device to not use some of the interfaces’ available bandwidth. If you leave this field blank, the Device automatically sets this number to be 95% of the WAN interfaces’ actual upstream transmission speed. eir F1000 Modem User’s Guide...
Page 138: The Queue Setup Screen
8.4 The Queue Setup Screen Click Network Setting > QoS > Queue Setup to open the screen as shown next. Use this screen to configure QoS queue assignment. Figure 74 Network Setting > QoS > Queue Setup eir F1000 Modem User’s Guide...
Page 139: Adding A Qos Queue
Select to enable or disable this queue. Name Enter the descriptive name of this queue. Interface Select the interface to which this queue is applied. This field is read-only if you are editing the queue. eir F1000 Modem User’s Guide...
Page 140: The Class Setup Screen
The following table describes the labels in this screen. Table 47 Network Setting > QoS > Class Setup LABEL DESCRIPTION Add new Classifier Click this to create a new classifier. This is the index number of the entry. eir F1000 Modem User’s Guide...
Page 141 This is the name of the queue in which traffic of this classifier is put. Modify Click the Edit icon to edit the classifier. Click the Delete icon to delete an existing classifier. Note that subsequent rules move up by one when you take this action. eir F1000 Modem User’s Guide...
Page 142: Add/Edit Qos Class
Chapter 8 Quality of Service (QoS) 8.5.1 Add/Edit QoS Class Click Add new Classifier in the Class Setup screen or the Edit icon next to a classifier to open the following screen. Figure 77 Class Setup: Add/Edit eir F1000 Modem User’s Guide...
Page 143 For example, if you set the MAC address to 00:13:49:00:00:00 and the mask to ff:ff:ff:00:00:00, a packet with a MAC address of 00:13:49:12:34:56 matches this criteria. Exclude Select this option to exclude the packets that match the specified criteria from this classifier. Others eir F1000 Modem User’s Guide...
Page 144 If you select Unchange, the Device keep the VLAN ID in the packets. Forward to Select a WAN interface through which traffic of this class will be forwarded out. If you select Interface Unchange, the Device forward traffic of this class according to the default routing table. eir F1000 Modem User’s Guide...
Page 145: The Qos Policer Setup Screen
QoS classes. Modify Click the Edit icon to edit the policer. Click the Delete icon to delete an existing policer. Note that subsequent rules move up by one when you take this action. eir F1000 Modem User’s Guide...
Page 146: Add/Edit A Qos Policer
(two rate three color) or excess burst size (single rate three color) if it is also configured. This is the maximum size of the (first) token bucket in a traffic metering algorithm. eir F1000 Modem User’s Guide...
Page 147: The Qos Monitor Screen
WAN interface is connected. Use this screen to monitor the traffic statistics for both the WAN and LAN interfaces. To view the Device’s QoS packet statistics, click Network Setting > QoS > Monitor. The screen appears as shown. Figure 80 Network Setting > QoS > Monitor eir F1000 Modem User’s Guide...
Page 148: Technical Reference
Typically used for controlled load, latency-sensitive traffic such as SNA (Systems Network Architecture) transactions. Level 3 Typically used for “excellent effort” or better than best effort and would include important business traffic that can tolerate some delay. Level 2 This is for “spare bandwidth”. eir F1000 Modem User’s Guide...
Page 149 Automatic Priority Queue Assignment If you enable QoS on the Device, the Device can automatically base on the IEEE 802.1p priority level, IP precedence and/or packet length to assign priority to traffic which does not match a class. eir F1000 Modem User’s Guide...
Page 150 • A packet can be transmitted if the number of tokens in the bucket is equal to or greater than the size of the packet (in bytes). • After a packet is transmitted, a number of tokens corresponding to the packet size is removed from the bucket. eir F1000 Modem User’s Guide...
Page 151 (CIR) and the Peak Information Rate (PIR). The CIR specifies the average rate at which packets are admitted to the network. The PIR is greater than or equal to the CIR. CIR and PIR values are based eir F1000 Modem User’s Guide...
Page 152 • If the PBS bucket has enough tokens, the Device checks the CBS bucket. The packet is marked green and can be transmitted if the number of tokens in the CBS bucket is equal to or greater than the size of the packet (in bytes). Otherwise, the packet is marked yellow. eir F1000 Modem User’s Guide...
Page 153: Network Address Translation (Nat)
IP address of a host when the packet is in the local network, while the global address refers to the IP address of the host when the same packet is traveling in the WAN side. eir F1000 Modem User’s Guide...
Page 154: The Port Forwarding Screen
Let's say you want to assign ports 21-25 to one FTP, Telnet and SMTP server (A in the example), port 80 to another (B in the example) and assign a default server IP address of 192.168.1.35 to a eir F1000 Modem User’s Guide...
Page 155 This is the last external port number that identifies a service. Translation This is the first internal port number that identifies a service. Start Port Translation End This is the last internal port number that identifies a service. Port eir F1000 Modem User’s Guide...
Page 156: Add/Edit Port Forwarding
You must have already configured a WAN connection with NAT enabled. WAN IP Enter the WAN IP address for which the incoming service is destined. If the packet’s destination IP address doesn’t match the one specified here, the port forwarding rule will not be applied. eir F1000 Modem User’s Guide...
Page 157: The Applications Screen
This screen provides a summary of all NAT applications and their configuration. In addition, this screen allows you to create new applications and/or remove existing ones. To access this screen, click Network Setting > NAT > Applications. The following screen appears. Figure 84 Network Setting > NAT > Applications eir F1000 Modem User’s Guide...
Page 158: Add New Application
View Rule Click this to display the configuration of the service that you have chosen in Application Fowarded. Click OK to save your changes. Cancel Click Cancel to exit this screen without saving. eir F1000 Modem User’s Guide...
Page 159: The Port Triggering Screen
(Transfer Control Protocol/Internet Protocol). Click Network Setting > NAT > Port Triggering to open the following screen. Use this screen to view your Device’s trigger port settings. Figure 87 Network Setting > NAT > Port Triggering eir F1000 Modem User’s Guide...
Page 160: Add/Edit Port Triggering Rule
9.4.1 Add/Edit Port Triggering Rule This screen lets you create new port triggering rules. Click Add new rule in the Port Triggering screen or click a rule’s Edit icon to open the following screen. Figure 88 Port Triggering: Add/Edit eir F1000 Modem User’s Guide...
Page 161: The Dmz Screen
In addition to the servers for specified services, NAT supports a default server IP address. A default server receives packets from ports that are not specified in the NAT Port Forwarding Setup screen. Figure 89 Network Setting > NAT > DMZ eir F1000 Modem User’s Guide...
Page 162: The Alg Screen
Enable this to have the Device detect RTSP traffic and help build RTSP sessions through its NAT. The Real Time Streaming (media control) Protocol (RTSP) is a remote control for multimedia on the Internet. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. eir F1000 Modem User’s Guide...
Page 163: The Address Mapping Screen
Click the Edit icon to go to the screen where you can edit the address mapping rule. Click the Delete icon to delete an existing address mapping rule. Note that subsequent address mapping rules move up by one when you take this action. eir F1000 Modem User’s Guide...
Page 164: Add/Edit Address Mapping Rule
Enter the ending Inside Global IP Address (IGA). This field is blank for One-to-One and Many-to-One mapping types. Select the number of the mapping set for which you want to configure. Click OK to save your changes. Cancel Click Cancel to exit this screen without saving. eir F1000 Modem User’s Guide...
Page 165: The Sessions Screen
IP address of a host when the packet is in the local network, while the global address refers to the IP address of the host when the same packet is traveling in the WAN side. eir F1000 Modem User’s Guide...
Page 166: What Nat Does
With no servers defined, your Device filters out all incoming inquiries, thus preventing intruders from probing your network. For more information on IP address translation, refer to RFC 1631, The IP Network Address Translator (NAT). eir F1000 Modem User’s Guide...
Page 167: How Nat Works
NAT Table Inside Local Inside Global IP Address IP Address 192.168.1.10 IGA 1 192.168.1.13 192.168.1.11 IGA 2 192.168.1.12 IGA 3 192.168.1.13 IGA 4 192.168.1.12 192.168.1.10 IGA1 Inside Local Inside Global Address (ILA) Address (IGA) 192.168.1.11 192.168.1.10 eir F1000 Modem User’s Guide...
Page 168: Nat Application
SMTP (Simple Mail Transfer Protocol) DNS (Domain Name System) Finger HTTP (Hyper Text Transfer protocol or WWW, Web) POP3 (Post Office Protocol) NNTP (Network News Transport Protocol) SNMP (Simple Network Management Protocol) SNMP trap PPTP (Point-to-Point Tunneling Protocol) 1723 eir F1000 Modem User’s Guide...
Page 169 (C in the example). You assign the LAN IP addresses and the ISP assigns the WAN IP address. The NAT network appears as a single host on the Internet. Figure 96 Multiple Servers Behind NAT Example A=192.168.1.33 192.168.1.1 B=192.168.1.34 IP address assigned by ISP C=192.168.1.35 D=192.168.1.36 eir F1000 Modem User’s Guide...
Page 170 Chapter 9 Network Address Translation (NAT) eir F1000 Modem User’s Guide...
Page 171: Dynamic Dns Setup
• Use the DNS Entry screen to view, configure, or remove DNS routes (Section 10.2 on page 172). • Use the Dynamic DNS screen to enable DDNS and configure the DDNS settings on the Device (Section 10.3 on page 173). eir F1000 Modem User’s Guide...
Page 172: What You Need To Know
This indicates the host name or domain name. IP Address This indicates the IP address assigned to this computer. Modify Click the Edit icon to edit the rule. Click the Delete icon to delete an existing rule. eir F1000 Modem User’s Guide...
Page 173: Add/Edit Dns Entry
10.3 The Dynamic DNS Screen Use this screen to change your Device’s DDNS. Click Network Setting > DNS > Dynamic DNS. The screen appears as shown. Figure 99 Network Setting > DNS > Dynamic DNS eir F1000 Modem User’s Guide...
Page 174 This field shows the most recent date and time the dynamic DNS information was updated. Time Current This field shows the WAN IP address the Device is currently using. Dynamic IP Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. eir F1000 Modem User’s Guide...
Page 175: Interface Group
If you set the Device to assign IP addresses based on the client’s DHCP Vendor ID option information, you must enable DHCP server and configure LAN TCP/IP settings for both the default and user-defined groups. See Chapter 6 on page for more information. eir F1000 Modem User’s Guide...
Page 176: Interface Group Configuration
Click this button to create a new group. 11.2.1 Interface Group Configuration Click the Add New Interface Group button in the Interface Group screen to open the following screen. Use this screen to create a new interface group. eir F1000 Modem User’s Guide...
Page 177 This shows the filtering criteria. The LAN interface on which the matched traffic is received will belong to this group automatically. WildCard This shows if wildcard on DHCP option 60 is enabled. Support Remove Click the Remove icon to delete this rule from the Device. eir F1000 Modem User’s Guide...
Page 178: Interface Grouping Criteria
DHCP option 60. DHCP option 60 option DHCP Option Select this and enter the device identity of the matched traffic. IAID Enter the Identity Association Identifier (IAID) of the device, for example, the WAN connection index number. eir F1000 Modem User’s Guide...
Page 179 Enter the model name of the device. Name Serial Enter the serial number of the device. Number Apply Click Apply to save your changes back to the Device. Cancel Click Cancel to exit this screen without saving. eir F1000 Modem User’s Guide...
Page 180 Chapter 11 Interface Group eir F1000 Modem User’s Guide...
Page 181: Usb Service
184). • Use the Printer Server screen to enable the print server (Section 12.4.2 on page 185). 12.1.2 What You Need To Know The following terms and concepts may help as you read this chapter. eir F1000 Modem User’s Guide...
Page 182 A port maps a network service such as http to a process running on your computer, such as a process run by your web browser. When traffic from the Internet is received on your computer, the port number is used to identify which process running on your computer it is intended for. eir F1000 Modem User’s Guide...
Page 183: Before You Begin
Select Enable to activate file sharing through the Device. Services Host Name Enter the host name on the share. Apply Click this to save your changes to the Device. Cancel Click this to restore your previously saved settings. eir F1000 Modem User’s Guide...
Page 184: The Media Server Screen
The Device allows you to share a USB printer on your LAN. You can do this by connecting a USB printer to one of the USB ports on the Device and then configuring a TCP/IP port on the computers connected to your network. eir F1000 Modem User’s Guide...
Page 185: Before You Begin
System Printer This field shows the printer’s system name the Device has detected from one of the USB Name ports. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. eir F1000 Modem User’s Guide...
Page 186 Chapter 12 USB Service eir F1000 Modem User’s Guide...
Page 187: Firewall
• Use the Access Control screen to view and configure incoming/outgoing filtering rules (Section 13.4 on page 191). • Use the DoS screen to activate protection against Denial of Service (DoS) attacks (.Section 13.5 on page 194). eir F1000 Modem User’s Guide...
Page 188: What You Need To Know
Stateful Packet Inspection (SPI) tracks each connection crossing the firewall and makes sure it is valid. Filtering decisions are based not only on rules but also context. For example, traffic from the WAN may only be allowed to cross the firewall in response to a request from the LAN. eir F1000 Modem User’s Guide...
Page 189: The Firewall Screen
You can configure customized services and port numbers in the Protocol screen. For a comprehensive list of port numbers and services, visit the IANA (Internet Assigned Number Authority) website. See Appendix F on page 347 for some examples. eir F1000 Modem User’s Guide...
Page 190: Add/Edit A Service
Use this screen to add a customized service rule that you can use in the firewall’s ACL rule configuration. Click Add new service entry or the edit icon next to an existing service rule in the Service screen to display the following screen. Figure 111 Service: Add/Edit eir F1000 Modem User’s Guide...
Page 191: The Access Control Screen
Table 79 Security > Firewall > Access Control LABEL DESCRIPTION Add new ACL Click this to go to add a filter rule for incoming or outgoing IP traffic. rule This is the index number of the entry. eir F1000 Modem User’s Guide...
Page 192: Add/Edit An Acl Rule
Click the Move To icon to change the order of the rule. Enter the number in the # field. 13.4.1 Add/Edit an ACL Rule Click Add new ACL rule or the Edit icon next to an existing ACL rule in the Access Control screen. The following screen displays. Figure 113 Access Control: Add/Edit eir F1000 Modem User’s Guide...
Page 193 Add New Rule. This will bring you to the Security > Scheduler Rules screen. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. eir F1000 Modem User’s Guide...
Page 194: The Dos Screen
Select Enable to enable protection against DoS attacks. Blocking Deny Ping Select Enable to block ping request packets. Response Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. eir F1000 Modem User’s Guide...
Page 195: Mac Filter
Device. If you clear this, the MAC Address field for this set clears. Host name Enter the host name of the wireless or LAN clients that are allowed access to the Device. eir F1000 Modem User’s Guide...
Page 196 Device in these address fields. Enter the MAC addresses in a valid MAC address format, that is, six hexadecimal character pairs, for example, 12:34:56:78:9a:bc. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. eir F1000 Modem User’s Guide...
Page 197: Parental Control
A yellow bulb signifies that this rule is active. A gray bulb signifies that this rule is not active. PCP Name This shows the name of the rule. Home Network This shows the MAC address of the LAN user’s computer to which this rule applies. User (MAC) eir F1000 Modem User’s Guide...
Page 198: Add/Edit A Parental Control Rule
Use this screen to configure a restricted access schedule and/or URL filtering settings to block the users on your network from accessing certain web sites. Figure 117 Parental Control Rule: Add/Edit eir F1000 Modem User’s Guide...
Page 199 Click Add to show a screen to enter the URL of web site or URL keyword to which the Device URL Keyword blocks access. Click Delete to remove it. Apply Click this button to save your settings back to the Device. Cancel Click Cancel to restore your previously saved settings. eir F1000 Modem User’s Guide...
Page 200 Chapter 15 Parental Control eir F1000 Modem User’s Guide...
Page 201: Scheduler Rule
This shows the description of this rule. Modify Click the Edit icon to edit the schedule. Click the Delete icon to delete a scheduler rule. Note: You cannot delete a scheduler rule once it is applied to a certain feature. eir F1000 Modem User’s Guide...
Page 202: Add/Edit A Schedule
Enter the time period of each day, in 24-hour format, during which the rule will be enforced. Range Description Enter a description for this scheduler rule. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. eir F1000 Modem User’s Guide...
Page 203: Certificates
17.3 The Local Certificates Screen Click Security > Certificates to open the Local Certificates screen. This is the Device’s summary list of certificates and certification requests. Figure 120 Security > Certificates > Local Certificates eir F1000 Modem User’s Guide...
Page 204: Create Certificate Request
17.3.1 Create Certificate Request Click Security > Certificates > Local Certificates and then Create Certificate Request to open the following screen. Use this screen to have the Device generate a certification request. Figure 121 Create Certificate Request eir F1000 Modem User’s Guide...
Page 205: Load Signed Certificate
17.3.2 Load Signed Certificate After you create a certificate request and have it signed by a Certificate Authority, in the Local Certificates screen click the certificate request’s Load Signed icon to import the signed certificate into the Device. eir F1000 Modem User’s Guide...
Page 206: The Trusted Ca Screen
Click Security > Certificates > Trusted CA to open the following screen. This screen displays a summary list of certificates of the certification authorities that you have set the Device to accept as trusted. The Device accepts any valid certificate signed by a certification authority on this list as eir F1000 Modem User’s Guide...
Page 207 Click the View icon to open a screen with an in-depth list of information about the certificate (or certification request). Click the Delete button to delete the certificate (or certification request). You cannot delete a certificate that one or more features is configured to use. eir F1000 Modem User’s Guide...
Page 208: View Trusted Ca Certificate
(via floppy disk for example). Back Click Back to return to the previous screen. eir F1000 Modem User’s Guide...
Page 209: Import Trusted Ca Certificate
CA will be displayed in the Network Setting > Broadband > 802.1x: Authentication Edit screen. Certificate Copy and paste the certificate into the text box to store it on the Device. Click OK to save your changes. Cancel Click Cancel to exit this screen without saving. eir F1000 Modem User’s Guide...
Page 210 Chapter 17 Certificates eir F1000 Modem User’s Guide...
Page 211: Vpn
Figure 127 IPSec Fields Summary Remote Network Local Network VPN Tunnel Click Security > IPSec VPN to open this screen as shown next. Figure 128 Security > IPSec VPN eir F1000 Modem User’s Guide...
Page 212: The Ipsec Vpn Add/Edit Screen
Click the Delete icon to delete the VPN policy. 18.3 The IPSec VPN Add/Edit Screen Use these settings to add or edit VPN policies. Click the Add New Connection button in the Security > VPN screen to open this screen as shown next. eir F1000 Modem User’s Guide...
Page 213 Gateway Address Tunnel access Select Single Address to have only one local LAN IP address use the VPN tunnel. Select from local IP Subnet to specify local LAN IP addresses by their subnet mask. addresses eir F1000 Modem User’s Guide...
Page 214 Select DNS to identify this Device by a domain name. Select ASN1DN (Abstract Syntax Notation one - Distinguished Name) to this Device by the subject field in a certificate. This is used only with certificate-based authentication. eir F1000 Modem User’s Guide...
Page 215 Main - this encrypts the Device’s and remote IPSec router’s identities but takes more time to establish the IKE SA. Aggressive - this is faster but does not encrypt the identities. The Device and the remote IPSec router must use the same negotiation mode. eir F1000 Modem User’s Guide...
Page 216 Longer keys require more processing power, resulting in increased latency and decreased throughput. Integrity Select which hash algorithm to use to authenticate packet data. Choices are MD5 and Algorithm SHA1. SHA is generally considered stronger than MD5, but it is also slower. eir F1000 Modem User’s Guide...
Page 217 The SPI is used to identify the Device during authentication. The Device and remote IPSec router must use the same SPI. Click OK to save your changes. Cancel Click Cancel to restore your previously saved settings. eir F1000 Modem User’s Guide...
Page 218: The Ipsec Vpn Monitor Screen
Click Trigger to establish a VPN connection with the remote network. 18.5 Technical Reference This section provides some technical background information about the topics covered in this section. 18.5.1 IPSec Architecture The overall IPSec architecture is shown as follows. eir F1000 Modem User’s Guide...
Page 219: Encapsulation
18.5.2 Encapsulation The two modes of operation for IPSec VPNs are Transport mode and Tunnel mode. At the time of writing, the Device supports Tunnel mode only. Figure 132 Transport and Tunnel Mode IPSec Encapsulation eir F1000 Modem User’s Guide...
Page 220: Ike Phases
There are two phases to every IKE (Internet Key Exchange) negotiation – phase 1 (Authentication) and phase 2 (Key Exchange). A phase 1 exchange establishes an IKE SA and the second one uses that SA to negotiate SAs for IPSec. eir F1000 Modem User’s Guide...
Page 221: Negotiation Mode
(phase 1). It uses 6 messages in three round trips: SA negotiation, Diffie-Hellman exchange and an exchange of nonces (a nonce is a random number). This mode features identity protection (your identity is not revealed in the negotiation). eir F1000 Modem User’s Guide...
Page 222: Ipsec And Nat
NAT is not normally compatible with ESP in transport mode either, but the Device’s NAT Traversal feature provides a way to handle this. NAT traversal allows you to set up an IKE SA when there are NAT routers between the two IPSec routers. eir F1000 Modem User’s Guide...
Page 223: Id Type And Content
(DES, 3DES and AES), two authentication algorithms (MD5 and SHA1) and eight key groups when you configure a VPN rule (see Section 18.2 on page 211). The ID type and content act as an extra level of identification for incoming SAs. eir F1000 Modem User’s Guide...
Page 224: Pre-Shared Key
Diffie-Hellman is used within IKE SA setup to establish session keys. Upon completion of the Diffie-Hellman exchange, the two peers have a shared secret, but the IKE SA is not authenticated. For authentication, use pre-shared keys. eir F1000 Modem User’s Guide...
Page 225: Log
Emergency: The system is unusable. Alert: Action must be taken immediately. Critical: The system condition is critical. Error: There is an error condition on the system. Warning: There is a warning condition on the system. eir F1000 Modem User’s Guide...
Page 226: The System Log Screen
Level This field displays the severity level of the logs that the device is to send to this syslog server. Messages This field states the reason for the log. eir F1000 Modem User’s Guide...
Page 227: The Security Log Screen
Level This field displays the severity level of the logs that the device is to send to this syslog server. Messages This field states the reason for the log. eir F1000 Modem User’s Guide...
Page 228 Chapter 19 Log eir F1000 Modem User’s Guide...
Page 229: Traffic Status
Click System Monitor > Traffic Status to open the WAN screen. The figure in this screen shows the number of bytes received and sent on the Device. Figure 137 System Monitor > Traffic Status > WAN eir F1000 Modem User’s Guide...
Page 230 This indicates the number of received packets on this interface. Error This indicates the number of frames with errors received on this interface. Drop This indicates the number of received packets dropped on this interface. eir F1000 Modem User’s Guide...
Page 231: The Lan Status Screen
This indicates the number of received packets on this interface. Error This indicates the number of frames with errors received on this interface. Drop This indicates the number of received packets dropped on this interface. eir F1000 Modem User’s Guide...
Page 232: The Nat Status Screen
No. of Open This displays the number of NAT sessions currently opened for the connected Session host. Total This displays what percentage of NAT sessions the Device can support is currently being used by all connected hosts. eir F1000 Modem User’s Guide...
Page 233: Voip Status
Time is blank if the Device has never successfully registered this account. This field displays the account number and service domain of the SIP account. You can change these in the VoIP > SIP screens. eir F1000 Modem User’s Guide...
Page 234 This field displays the SIP number that you use to make calls on this phone port. Number Incoming This field displays the SIP number that you use to receive calls on this phone port. Number eir F1000 Modem User’s Guide...
Page 235: Arp Table
MAC address that replied. 22.2 ARP Table Screen Use the ARP table to view IP-to-MAC address mapping(s). To open this screen, click System Monitor > ARP Table. Figure 141 System Monitor > ARP Table eir F1000 Modem User’s Guide...
Page 236 This is the MAC address of the device with the listed IP address. Device This is the type of interface used by the device. You can click on the device type to go to its configuration screen. eir F1000 Modem User’s Guide...
Page 237: Routing Table
This indicates the destination IPv4 address or IPv6 address and prefix of this route. Gateway This indicates the IPv4 address or IPv6 address of the gateway that helps forward this route’s traffic. Subnet Mask This indicates the destination subnet mask of the IPv4 route. eir F1000 Modem User’s Guide...
Page 238 This indicates the name of the interface through which the route is forwarded. brx indicates a LAN interface where x can be 0~3 to represent LAN1 to LAN4 respectively. ptm0 indicates a WAN interface using IPoE or in bridge mode. ppp0 indicates a WAN interface using PPPoE. eir F1000 Modem User’s Guide...
Page 239: Igmp/Mld Status
This field displays the name of an interface on the Device that belongs to an IGMP or MLD multicast group. Multicast Group This field displays the name of the IGMP or MLD multicast group to which the interface belongs. eir F1000 Modem User’s Guide...
Page 240 EXCLUDE means that the IP addresses in the Source List are not allowed to receive the multicast group’s traffic but other IP addresses can. Source List This is the list of IP addresses that are allowed or not allowed to receive the multicast group’s traffic depending on the filter mode. eir F1000 Modem User’s Guide...
Page 241: Xdsl Statistics
Statistics 25.1 The xDSL Statistics Screen Use this screen to view detailed DSL statistics. Click System Monitor > xDSL Statistics to open the following screen. Figure 144 System Monitor > xDSL Statistics eir F1000 Modem User’s Guide...
Page 242 This displays how long the port has been running (or connected) since the last time it was started. xDSL Port Details Upstream These are the statistics for the traffic direction going out from the port to the service provider. eir F1000 Modem User’s Guide...
Page 243 This is the number of Severely Errored Seconds meaning the number of seconds containing 30% or more errored blocks or at least one defect. This is a subset of ES. This is the number of UnAvailable Seconds. This is the number of Loss Of Signal seconds. eir F1000 Modem User’s Guide...
Page 244 Chapter 25 xDSL Statistics Table 111 Status > xDSL Statistics (continued) LABEL DESCRIPTION This is the number of Loss Of Frame seconds. This is the number of Loss of Margin seconds. eir F1000 Modem User’s Guide...
Page 245: Statistics
EDGE - Enhanced Data rates for GSM Evolution, 2.75G WCDMA - Wideband Code Division Multiple Access, 3G HSDPA - High-Speed Downlink Packet Access, 3.5G HSUPA - High-Speed Uplink Packet Access, 3.75G HSPA - HSDPA+HSUPA, 3.75G eir F1000 Modem User’s Guide...
Page 246: Chapter 26 3G Statistics
This field displays the firmware version of the 3G card. Version SIM Card IMSI The International Mobile Subscriber Identity or IMSI is a unique identification number associated with all cellular networks. This number is provisioned in the SIM card. eir F1000 Modem User’s Guide...
Page 247: User Account
Web Configurator. Clear this to let any LAN and wireless LAN users access the Web Configurator directly without user authentication. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. eir F1000 Modem User’s Guide...
Page 248 Chapter 27 User Account eir F1000 Modem User’s Guide...
Page 249: Remote Management
Select the Enable check box for the corresponding services that you want to allow access to the Device from the LAN/WLAN. Select the Enable check box for the corresponding services that you want to allow access to the Device from the WAN. eir F1000 Modem User’s Guide...
Page 250: The Trust Domain Screen
LABEL DESCRIPTION Add Trust Click this to add a trusted host IP address. Domain IPv4 Address This field shows a trusted host IP address. Delete Click the Delete icon to remove the trust IP address. eir F1000 Modem User’s Guide...
Page 251: The Add Trust Domain Screen
Enter a public IPv4 IP address which is allowed to access the service on the Device from the WAN. Apply Click Apply to save your changes back to the Device. Cancel Click Cancel to restore your previously saved settings. eir F1000 Modem User’s Guide...
Page 252 Chapter 28 Remote Management eir F1000 Modem User’s Guide...
Page 253: Chapter 29 Tr-064
The following table describes the fields in this screen. Table 117 Maintenance > TR-064 LABEL DESCRIPTION State Select Enable to activate management via TR-064 on the LAN. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. eir F1000 Modem User’s Guide...
Page 254 Chapter 29 TR-064 eir F1000 Modem User’s Guide...
Page 255: Snmp
The managed devices contain object variables/managed objects that define each piece of information to be collected about a device. Examples of variables include such as number of packets received, node port status etc. A Management Information Base (MIB) is a collection of eir F1000 Modem User’s Guide...
Page 256 Trap Destination Type the IP address of the station to send your SNMP traps to. Apply Click this to save your changes back to the Device. Cancel Click this to restore your previously saved settings. eir F1000 Modem User’s Guide...
Page 257: Time Settings
To change your Device’s time and date, click Maintenance > Time. The screen appears as shown. Use this screen to configure the Device’s time based on your local time zone. Figure 153 Maintenance > Time eir F1000 Modem User’s Guide...
Page 258 October. The time you select in the o'clock field depends on your time zone. In Germany for instance, you would select 2 in the Hour field because Germany's time zone is one hour ahead of GMT or UTC (GMT+1). eir F1000 Modem User’s Guide...
Page 259 Chapter 31 Time Settings Table 119 Maintenance > Time (continued) LABEL DESCRIPTION Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. eir F1000 Modem User’s Guide...
Page 260 Chapter 31 Time Settings eir F1000 Modem User’s Guide...
Page 261: E-Mail Notification
This field displays the password of the sender’s mail account. Email Address This field displays the e-mail address that you want to be in the from/sender line of the e- mail that the Device sends. Delete Click this button to delete the selected entry(ies). eir F1000 Modem User’s Guide...
Page 262: Email Notification Edit
If you activate SSL/TLS authentication, the e-mail address must be able to be authenticated by the mail server as well. Apply Click this button to save your changes and return to the previous screen. Cancel Click this button to begin configuring this screen afresh. eir F1000 Modem User’s Guide...
Page 263: Log Setting
You can configure where the Device sends logs and which logs and/or immediate alerts the Device records in the Log Setting screen. 33.2 The Log Settings Screen To change your Device’s log settings, click Maintenance > Log Setting. The screen appears as shown. Figure 156 Maintenance > Log Setting eir F1000 Modem User’s Guide...
Page 264: Example E-Mail Log
• You may edit the subject title. • The date format here is Day-Month-Year. • The date format here is Month-Day-Year. The time format is Hour-Minute-Second. eir F1000 Modem User’s Guide...
Page 265 |<1,02> 127|Apr 7 00 |From:192.168.1.131 To:192.168.1.255 |match |forward | 10:05:17 |UDP src port:00520 dest port:00520 |<1,02> 128|Apr 7 00 |From:192.168.1.1 To:192.168.1.255 |match |forward | 10:05:30 |UDP src port:00520 dest port:00520 |<1,02> End of Firewall Log eir F1000 Modem User’s Guide...
Page 266 Chapter 33 Log Setting eir F1000 Modem User’s Guide...
Page 267: Firmware Upgrade
Click this to find the .bin file you want to upload. Remember that you must decompress compressed (.zip) files before you can upload them. Upload Click this to begin the upload process. This process may take up to two minutes. eir F1000 Modem User’s Guide...
Page 268 After two minutes, log in again and check your new firmware version in the Status screen. If the upload was not successful, the following screen will appear. Click OK to go back to the Firmware Upgrade screen. Figure 161 Error Message eir F1000 Modem User’s Guide...
Page 269: Configuration
The backup configuration file will be useful in case you need to return to your previous settings. Click Backup to save the Device’s current configuration to your computer. eir F1000 Modem User’s Guide...
Page 270 IP address. If the upload was not successful, the following screen will appear. Click OK to go back to the Configuration screen. Figure 164 Configuration Upload Error eir F1000 Modem User’s Guide...
Page 271: The Reboot Screen
System restart allows you to reboot the Device remotely without turning the power off. You may need to do this if the Device hangs, for example. Click Maintenance > Reboot. Click Reboot to have the Device reboot. This does not affect the Device's configuration. Figure 167 Maintenance > Reboot eir F1000 Modem User’s Guide...
Page 272 Chapter 35 Configuration eir F1000 Modem User’s Guide...
Page 273: Chapter 36 Diagnostic
If an MEP port does not respond to the source MEP, this may indicate a fault. Administrators can take further action to check and resume services from the fault according to the line connectivity status report. eir F1000 Modem User’s Guide...
Page 274: Ping & Traceroute & Nslookup
Click this button to perform the traceroute function. This determines the path a packet takes to the specified computer. Nslookup Click this button to perform a DNS lookup on the IP address of a computer you enter. eir F1000 Modem User’s Guide...
Page 275 Click this button to have the selected MEP send the LBM (Loop Back Message) to a specified remote end point. Send Linktrace Click this button to have the selected MEP send the LTMs (Link Trace Messages) to a specified remote end point. eir F1000 Modem User’s Guide...
Page 276: Oam Ping
ATM device. End-to-end loopback tests allow you to verify integrity of an end-to-end PVC. Note: The DSLAM to which the Device is connected must also support ATM F4 and/or F5 to use this test. eir F1000 Modem User’s Guide...
Page 277: Wan Diagnostics Tests
WAN connection by clicking the Wan Connection Test button. The test result then displays in the text box. Figure 172 Maintenance > Diagnostic > WAN Diagnostics Tests eir F1000 Modem User’s Guide...
Page 278 Chapter 36 Diagnostic eir F1000 Modem User’s Guide...
Page 279: Chapter 37 Troubleshooting
Make sure you understand the normal behavior of the LED. See Section 1.5 on page Check the hardware connections. Inspect your cables for damage. Contact the vendor to replace any damaged cables. Turn the Device off and on. eir F1000 Modem User’s Guide...
Page 280: Device Access And Login
Make sure your Internet browser does not block pop-up windows and has JavaScripts and Java enabled. See Appendix C on page 315. If it is possible to log in from another interface, check the service control settings for HTTP and HTTPS (Maintenance > Remote MGMT). eir F1000 Modem User’s Guide...
Page 281 I cannot use FTP to upload / download the configuration file. / I cannot use FTP to upload new firmware. See the troubleshooting suggestions for I cannot see or access the Login screen in the web configurator. Ignore the suggestions about your browser. eir F1000 Modem User’s Guide...
Page 282: Internet Access
I cannot access the Internet anymore. I had access to the Internet (with the Device), but my Internet connection is not available anymore. Your session with the Device may have expired. Try logging into the Device again. eir F1000 Modem User’s Guide...
Page 283: Wireless Internet Access
Internet. What is a Server Set ID (SSID)? An SSID is a name that uniquely identifies a wireless network. The AP and all the clients within a wireless network must use the same SSID. eir F1000 Modem User’s Guide...
Page 284: Usb Device Connection
The Local Area Connection icon for UPnP disappears in the screen. Restart your computer. I cannot open special applications such as white board, file transfer and video when I use the MSN messenger. Wait more than three minutes. Restart the applications. eir F1000 Modem User’s Guide...
Page 285: Appendix A Setting Up Your Computer's Ip Address
IP addresses that place them in the same subnet as the Device’s LAN port. Windows 95/98/Me Click Start, Settings, Control Panel and double-click the Network icon to open the Network window. Figure 173 WIndows 95/98/Me: Network: Configuration eir F1000 Modem User’s Guide...
Page 286 Restart your computer so the changes you made take effect. Configuring In the Network window Configuration tab, select your network adapter's TCP/IP entry and click Properties Click the IP Address tab. • If your IP address is dynamic, select Obtain an IP address automatically. eir F1000 Modem User’s Guide...
Page 287 • If you know your DNS information, select Enable DNS and type the information in the fields below (you may not need to fill them all in). Figure 175 Windows 95/98/Me: TCP/IP Properties: DNS Configuration eir F1000 Modem User’s Guide...
Page 288 Select your network adapter. You should see your computer's IP address, subnet mask and default gateway. Windows 2000/NT/XP The following example figures use the default Windows XP GUI theme. Click start (Start in Windows 2000/NT), Settings, Control Panel. Figure 176 Windows XP: Start Menu eir F1000 Modem User’s Guide...
Page 289 In the Control Panel, double-click Network Connections (Network and Dial-up Connections in Windows 2000/NT). Figure 177 Windows XP: Control Panel Right-click Local Area Connection and then click Properties. Figure 178 Windows XP: Control Panel: Network Connections: Properties eir F1000 Modem User’s Guide...
Page 290 • If you have a dynamic IP address click Obtain an IP address automatically. • If you have a static IP address click Use the following IP Address and fill in the IP address, Subnet mask, and Default gateway fields. eir F1000 Modem User’s Guide...
Page 291 (the number of transmission hops), clear the Automatic metric check box and type a metric in Metric. • Click Add. • Repeat the previous three steps for each default gateway you want to add. eir F1000 Modem User’s Guide...
Page 292 • Click Obtain DNS server address automatically if you do not know your DNS server IP address(es). • If you know your DNS server IP address(es), click Use the following DNS server addresses, and type them in the Preferred DNS server and Alternate DNS server fields. eir F1000 Modem User’s Guide...
Page 293 In the Command Prompt window, type "ipconfig" and then press [ENTER]. You can also open Network Connections, right-click a network connection, click Status and then click the Support tab. Windows Vista This section shows screens from Windows Vista Enterprise Version 6.0. eir F1000 Modem User’s Guide...
Page 294 Click the Start icon, Control Panel. Figure 183 Windows Vista: Start Menu In the Control Panel, double-click Network and Internet. Figure 184 Windows Vista: Control Panel Click Network and Sharing Center. Figure 185 Windows Vista: Network And Internet eir F1000 Modem User’s Guide...
Page 295 Right-click Local Area Connection and then click Properties. Note: During this procedure, click Continue whenever Windows displays a screen saying that it needs your permission to continue. Figure 187 Windows Vista: Network and Sharing Center eir F1000 Modem User’s Guide...
Page 296 • If you have a dynamic IP address click Obtain an IP address automatically. • If you have a static IP address click Use the following IP address and fill in the IP address, Subnet mask, and Default gateway fields. eir F1000 Modem User’s Guide...
Page 297 (the number of transmission hops), clear the Automatic metric check box and type a metric in Metric. • Click Add. • Repeat the previous three steps for each default gateway you want to add. eir F1000 Modem User’s Guide...
Page 298 • Click Obtain DNS server address automatically if you do not know your DNS server IP address(es). • If you know your DNS server IP address(es), click Use the following DNS server addresses, and type them in the Preferred DNS server and Alternate DNS server fields. eir F1000 Modem User’s Guide...
Page 299 Click Start, All Programs, Accessories and then Command Prompt. In the Command Prompt window, type "ipconfig" and then press [ENTER]. You can also open Network Connections, right-click a network connection, click Status and then click the Support tab. eir F1000 Modem User’s Guide...
Page 300 Appendix A Setting up Your Computer’s IP Address Macintosh OS 8/9 Click the Apple menu, Control Panel and double-click TCP/IP to open the TCP/IP Control Panel. Figure 192 Macintosh OS 8/9: Apple Menu eir F1000 Modem User’s Guide...
Page 301 Macintosh OS X Click the Apple menu, and click System Preferences to open the System Preferences window. Figure 194 Macintosh OS X: Apple Menu Click Network in the icon bar. • Select Automatic from the Location list. eir F1000 Modem User’s Guide...
Page 302 • Type the IP address of your Device in the Router address box. Click Apply Now and close the window. Turn on your Device and restart your computer (if prompted). Verifying Settings Check your TCP/IP properties in the Network window. eir F1000 Modem User’s Guide...
Page 303 Follow the steps below to configure your computer IP address using the KDE. Click the Red Hat button (located on the bottom left corner), select System Setting and click Network. Figure 196 Red Hat 9.0: KDE: Network Configuration: Devices eir F1000 Modem User’s Guide...
Page 304 If you know your DNS server IP address(es), click the DNS tab in the Network Configuration screen. Enter the DNS server information in the fields provided. Figure 198 Red Hat 9.0: KDE: Network Configuration: DNS Click the Devices tab. eir F1000 Modem User’s Guide...
Page 305 The following example shows an example where the static IP address is 192.168.1.10 and the subnet mask is 255.255.255.0. Figure 201 Red Hat 9.0: Static IP Address Setting in ifconfig-eth0 DEVICE=eth0 ONBOOT=yes BOOTPROTO=static IPADDR=192.168.1.10 NETMASK=255.255.255.0 USERCTL=no PEERDNS=yes TYPE=Ethernet eir F1000 Modem User’s Guide...
Page 306 Bcast:172.23.19.255 Mask:255.255.255.0 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:717 errors:0 dropped:0 overruns:0 frame:0 TX packets:13 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:100 RX bytes:730412 (713.2 Kb) TX bytes:1570 (1.5 Kb) Interrupt:10 Base address:0x1000 [root@localhost]# eir F1000 Modem User’s Guide...
Page 307: Appendix B Ip Addresses And Subnetting
192.168.1.1). Each of these four parts is known as an octet. An octet is an eight-digit binary number (for example 11000000, which is 192 in decimal notation). Therefore, each octet has a possible range of 00000000 to 11111111 in binary, or 0 to 255 in decimal. eir F1000 Modem User’s Guide...
Page 308 00000010 By convention, subnet masks always consist of a continuous sequence of ones beginning from the leftmost bit of the mask, followed by a continuous sequence of zeros, for a total number of 32 bits. eir F1000 Modem User’s Guide...
Page 309 This is usually specified by writing a “/” followed by the number of bits in the mask after the address. For example, 192.1.1.0 /25 is equivalent to saying 192.1.1.0 with subnet mask 255.255.255.128. eir F1000 Modem User’s Guide...
Page 310 You can “borrow” one of the host ID bits to divide the network 192.168.1.0 into two separate sub- networks. The subnet mask is now 25 bits (255.255.255.128 or /25). The “borrowed” host ID bit can have a value of either 0 or 1, allowing two subnets; 192.168.1.0 /25 and 192.168.1.128 /25. eir F1000 Modem User’s Guide...
Page 311 Table 132 Subnet 1 LAST OCTET BIT IP/SUBNET MASK NETWORK NUMBER VALUE IP Address (Decimal) 192.168.1. IP Address (Binary) 11000000.10101000.00000001. 00000000 Subnet Mask (Binary) 11111111.11111111.11111111. 11000000 eir F1000 Modem User’s Guide...
Page 312 Similarly, use a 27-bit mask to create eight subnets (000, 001, 010, 011, 100, 101, 110 and 111). The following table shows IP address last octet values for each subnet. Table 136 Eight Subnets SUBNET LAST BROADCAST SUBNET FIRST ADDRESS ADDRESS ADDRESS ADDRESS eir F1000 Modem User’s Guide...
Page 313 255.255.224.0 (/19) 8190 255.255.240.0 (/20) 4094 255.255.248.0 (/21) 2046 255.255.252.0 (/22) 1022 255.255.254.0 (/23) 255.255.255.0 (/24) 255.255.255.128 (/25) 255.255.255.192 (/26) 1024 255.255.255.224 (/27) 2048 255.255.255.240 (/28) 4096 255.255.255.248 (/29) 8192 255.255.255.252 (/30) 16384 255.255.255.254 (/31) 32768 eir F1000 Modem User’s Guide...
Page 314 Regardless of your particular situation, do not create an arbitrary IP address; always follow the guidelines above. For more information on address assignment, please refer to RFC 1597, Address Allocation for Private Internets and RFC 1466, Guidelines for Management of IP Address Space. eir F1000 Modem User’s Guide...
Page 315: Appendix C Pop-Up Windows, Javascripts And Java Permissions
In Internet Explorer, select Tools, Pop-up Blocker and then select Turn Off Pop-up Blocker. Figure 208 Pop-up Blocker You can also check if pop-up blocking is disabled in the Pop-up Blocker section in the Privacy tab. In Internet Explorer, select Tools, Internet Options, Privacy. eir F1000 Modem User’s Guide...
Page 316 Click Apply to save this setting. Enable Pop-up Blockers with Exceptions Alternatively, if you only want to allow pop-up windows from your device, see the following steps. In Internet Explorer, select Tools, Internet Options and then the Privacy tab. eir F1000 Modem User’s Guide...
Page 317 Select Settings…to open the Pop-up Blocker Settings screen. Figure 210 Internet Options: Privacy Type the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.167.1. eir F1000 Modem User’s Guide...
Page 318 Figure 211 Pop-up Blocker Settings Click Close to return to the Privacy screen. Click Apply to save this setting. JavaScripts If pages of the web configurator do not display properly in Internet Explorer, check that JavaScripts are allowed. eir F1000 Modem User’s Guide...
Page 319 Figure 212 Internet Options: Security Click the Custom Level... button. Scroll down to Scripting. Under Active scripting make sure that Enable is selected (the default). Under Scripting of Java applets make sure that Enable is selected (the default). eir F1000 Modem User’s Guide...
Page 320 Java Permissions From Internet Explorer, click Tools, Internet Options and then the Security tab. Click the Custom Level... button. Scroll down to Microsoft VM. Under Java permissions make sure that a safety level is selected. eir F1000 Modem User’s Guide...
Page 321 Click OK to close the window. Figure 214 Security Settings - Java JAVA (Sun) From Internet Explorer, click Tools, Internet Options and then the Advanced tab. Make sure that Use Java 2 for <applet> under Java (Sun) is selected. eir F1000 Modem User’s Guide...
Page 322 Mozilla Firefox 2.0 screens are used here. Screens for other versions may vary. You can enable Java, Javascripts and pop-ups in one screen. Click Tools, then click Options in the screen that appears. Figure 216 Mozilla Firefox: Tools > Options eir F1000 Modem User’s Guide...
Page 323 Appendix C Pop-up Windows, JavaScripts and Java Permissions Click Content.to show the screen below. Select the check boxes as shown in the following screen. Figure 217 Mozilla Firefox Content Security eir F1000 Modem User’s Guide...
Page 324 Appendix C Pop-up Windows, JavaScripts and Java Permissions eir F1000 Modem User’s Guide...
Page 325: Appendix D Wireless Lans
(AP). Intra-BSS traffic is traffic between wireless clients in the BSS. When Intra-BSS is enabled, wireless client A and B can access the wired network and communicate with each other. When Intra-BSS is eir F1000 Modem User’s Guide...
Page 326 APs is called a Distribution System (DS). This type of wireless LAN topology is called an Infrastructure WLAN. The Access Points not only provide communication with the wired network but also mediate wireless network traffic in the immediate neighborhood. eir F1000 Modem User’s Guide...
Page 327 A hidden node occurs when two stations are within range of the same access point, but are not within range of each other. The following figure illustrates a hidden node. Both stations (STA) are within range of the access point (AP) or wireless gateway, but out-of-range of each other, so they eir F1000 Modem User’s Guide...
Page 328 AP will fragment the packet into smaller data frames. A large Fragmentation Threshold is recommended for networks not prone to interference while you should set a smaller threshold for busy networks or networks that are prone to interference. eir F1000 Modem User’s Guide...
Page 329 IEEE802.1x EAP with RADIUS Server Authentication Wi-Fi Protected Access (WPA) WPA2 Most Secure Note: You must enable the same wireless security settings on the Device and on all wireless clients that you want to associate with it. eir F1000 Modem User’s Guide...
Page 330 Sent by a RADIUS server requesting more information in order to allow access. The access point sends a proper response from the user and then sends another Access-Request message. The following types of RADIUS messages are exchanged between the access point and the RADIUS server for user accounting: eir F1000 Modem User’s Guide...
Page 331 This makes user identity vulnerable to passive attacks. A digital certificate is an electronic ID card that authenticates the sender’s identity. However, to implement EAP-TLS, you need a Certificate Authority (CA) to handle certificates, which imposes a management overhead. eir F1000 Modem User’s Guide...
Page 332 EAP-MD5 EAP-TLS EAP-TTLS PEAP LEAP Mutual Authentication Certificate – Client Optional Optional Certificate – Server Dynamic Key Exchange Credential Integrity None Strong Strong Strong Moderate Deployment Difficulty Easy Hard Moderate Moderate Moderate Client Identity Protection eir F1000 Modem User’s Guide...
Page 333 The encryption mechanisms used for WPA(2) and WPA(2)-PSK are the same. The only difference between the two is that WPA(2)-PSK uses a simple common password, instead of user-specific credentials. The common-password approach makes WPA(2)-PSK susceptible to brute-force eir F1000 Modem User’s Guide...
Page 334 The RADIUS server then checks the user's identification against its database and grants or denies network access accordingly. A 256-bit Pairwise Master Key (PMK) is derived from the authentication process by the RADIUS server and the client. eir F1000 Modem User’s Guide...
Page 335 The AP and wireless clients use the TKIP or AES encryption process, the PMK and information exchanged in a handshake to create temporal encryption keys. They use these keys to encrypt data exchanged between them. Figure 223 WPA(2)-PSK Authentication eir F1000 Modem User’s Guide...
Page 336 Antenna gain, measured in dB (decibel), is the increase in coverage within the RF beam width. Higher antenna gain improves the range of the signal for better communications. For an indoor site, each 1 dB increase in antenna gain results in a range increase of approximately eir F1000 Modem User’s Guide...
Page 337 For a single AP application, place omni-directional antennas as close to the center of the coverage area as possible. For directional antennas, point the antenna in the direction of the desired coverage area. eir F1000 Modem User’s Guide...
Page 338 Appendix D Wireless LANs eir F1000 Modem User’s Guide...
Page 339: Appendix E Ipv6
A link-local unicast address has a predefined prefix of fe80::/10. The link-local unicast address format is as follows. Table 143 Link-local Unicast Address Format 1111 1110 10 Interface ID 10 bits 54 bits 64 bits eir F1000 Modem User’s Guide...
Page 340 All DHCP severs on a local site. The following table describes the multicast addresses which are reserved and can not be assigned to a multicast group. Table 145 Reserved Multicast Address MULTICAST ADDRESS FF00:0:0:0:0:0:0:0 FF01:0:0:0:0:0:0:0 FF02:0:0:0:0:0:0:0 FF03:0:0:0:0:0:0:0 FF04:0:0:0:0:0:0:0 FF05:0:0:0:0:0:0:0 FF06:0:0:0:0:0:0:0 FF07:0:0:0:0:0:0:0 eir F1000 Modem User’s Guide...
Page 341 DHCPv6 server uses T1 and T2 to control the time at which the client contacts with the server to extend the lifetimes on any addresses in the IA_NA before the lifetimes expire. After T1, the client sends the server (S1) (from which the addresses in the IA_NA were obtained) a Renew message. If eir F1000 Modem User’s Guide...
Page 342 • Neighbor solicitation: A request from a host to determine a neighbor’s link-layer address (MAC address) and detect if the neighbor is still reachable. A neighbor being “reachable” means it responds to a neighbor solicitation message (from the host) with a neighbor advertisement message. eir F1000 Modem User’s Guide...
Page 343 Done message to the router or switch. The router or switch then sends a group-specific query to the port on which the Done message is received to determine if other devices connected to this port should remain in the group. eir F1000 Modem User’s Guide...
Page 344 Install Dibbler and select the DHCPv6 client option on your computer. After the installation is complete, select Start > All Programs > Dibbler-DHCPv6 > Client Install as service. Select Start > Control Panel > Administrative Tools > Services. eir F1000 Modem User’s Guide...
Page 345 To enable IPv6 in Windows 7: Select Control Panel > Network and Sharing Center > Local Area Connection. Select the Internet Protocol Version 6 (TCP/IPv6) checkbox to enable it. Click OK to save the change. eir F1000 Modem User’s Guide...
Page 346 IPv4 Address... : 172.16.100.61 Subnet Mask ... : 255.255.255.0 Default Gateway ..: fe80::213:49ff:feaa:7125%11 172.16.100.254 eir F1000 Modem User’s Guide...
Page 347: Appendix F Services
• If the Protocol is USER, this is the IP protocol number. • Description: This is a brief explanation of the applications that use this service or the situations in which this service is used. eir F1000 Modem User’s Guide...
Page 348 This is another popular Internet chat program. MSN Messenger 1863 Microsoft Networks’ messenger service uses this protocol. NetBIOS TCP/UDP The Network Basic Input/Output System is used for communication between TCP/UDP computers in a LAN. TCP/UDP TCP/UDP eir F1000 Modem User’s Guide...
Page 349 SMTPS This is a more secure version of SMTP that runs over SSL. SNMP TCP/UDP Simple Network Management Program. SNMP-TRAPS TCP/UDP Traps for use with the SNMP (RFC:1215). eir F1000 Modem User’s Guide...
Page 350 UNIX environments. It operates over TCP/ IP networks. Its primary function is to allow users to log into remote host systems. VDOLIVE 7000 A videoconferencing solution. The UDP port number is specified in the application. user- defined eir F1000 Modem User’s Guide...
Page 352: Safety Warnings
Your product is marked with this symbol, which is known as the WEEE mark. WEEE stands for Waste Electronics and Electrical Equipment. It means that used electrical and electronic products should not be mixed with general waste. Used electrical and electronic equipment should be treated separately. eir F1000 Modem User’s Guide...
Page 353: Index
LAN configuration client list Basic Service Set, See BSS compatibility, WDS Basic Service Set, see BSS configuration blinking LEDs backup Broadband firewalls broadcast reset restoring 94, 325 eir F1000 Modem User’s Guide...
Page 354 DS field fragmentation threshold 87, 91, 328 DS, dee differentiated services 154, 168 DSCP dynamic DNS wildcard Dynamic Host Configuration Protocol, see DHCP dynamic WEP key exchange General wireless LAN screen DYNDNS wildcard eir F1000 Modem User’s Guide...
Page 355 Link Trace Response, see LTR default ping login private passwords 25, 26 logout IP Address Assignment automatic IP alias logs 225, 229, 239, 245, 263 NAT applications Loop Back Response, see LBR IPSec loopback algorithms architecture eir F1000 Modem User’s Guide...
Page 356 IP alias PPPoE example 42, 62 Benefits global PPTP preamble preamble 88, 91 inside mode prefix IPSec delegation pre- local shared key outside Printer Server port forwarding printer sharing and port number services requirements SIP ALG eir F1000 Modem User’s Guide...
Page 357 RFC 3164 static VLAN status router features firmware version Routing Information Protocol. See RIP RTS (Request To Send) threshold 327, 328 wireless LAN RTS threshold 87, 91 status indicators subnet subnet mask 104, 125, 308 eir F1000 Modem User’s Guide...
Page 358 WEP encryption unicast WEP key Wi-Fi Protected Access Universal Plug and Play, see UPnP upgrading firmware wireless client WPA supplicants UPnP Wireless Distribution System, see WDS cautions wireless LAN 69, 89 example authentication 91, 92 eir F1000 Modem User’s Guide...
Page 359 WPA-PSK wireless client supplicant with RADIUS application example WPA2 user authentication vs WPA2-PSK wireless client supplicant with RADIUS application example WPA2-Pre-Shared Key WPA2-PSK application example WPA-PSK 93, 333 application example eir F1000 Modem User’s Guide...

ZyXEL Communications eir F1000 User Manual

Contents Overview

Table of Contents

User's Guide

PART I User's Guide

Chapter 1 Introducing the Device

Chapter 2 The Web Configurator

Technical Reference

Part II: Technical Reference

Chapter 3 Status and Network Map Screens

Chapter 4 Broadband

Chapter 5 Wireless

Chapter 6 Home Networking

Chapter 7 Routing

Chapter 8 Quality of Service (Qos)

Chapter 9 Network Address Translation (NAT)

Chapter 10 Dynamic DNS Setup

Chapter 11 Interface Group

Chapter 12 USB Service

Chapter 13 Firewall

Chapter 14 MAC Filter

Chapter 15 Parental Control

Chapter 16 Scheduler Rule

Chapter 17 Certificates

Chapter 18 VPN

Chapter 19 Log

Chapter 20 Traffic Status

Chapter 21 Voip Status

Chapter 22 ARP Table

Chapter 23 Routing Table

Chapter 24 IGMP/MLD Status

Chapter 25 Xdsl Statistics

Chapter 26 3G Statistics

Chapter 27 User Account

Chapter 28 Remote Management

Chapter 29 TR-064

Chapter 30 SNMP

Chapter 31 Time Settings

Chapter 32 E-Mail Notification

Chapter 33 Log Setting

Chapter 34 Firmware Upgrade

Chapter 35 Configuration

Chapter 36 Diagnostic

Chapter 37 Troubleshooting

Appendix A Setting up Your Computer's IP Address

Appendix B IP Addresses and Subnetting

Appendix C Pop-Up Windows, Javascripts and Java Permissions

Appendix D Wireless Lans

Appendix E Ipv6

Appendix F Services

Appendix G Legal Information

Quick Links

Related Manuals for ZyXEL Communications eir F1000

Summary of Contents for ZyXEL Communications eir F1000