Page 1 VMG1312-Bx0D Wireless N VDSL2 Gateway with USB Version 5.11 Edition 2, 03/2016 Quick Start Guide User’s Guide Default Login Details LAN IP Address http://192.168.1.1 Login admin, user www.zyxel.com Password 1234, user Copyright © 2016 ZyXEL Communications Corporation...
Page 2 Related Documentation • Quick Start Guide The Quick Start Guide shows how to connect the VMG and get up and running right away. • More Information Go to support.zyxel.com to find other information on the VMG. VMG1312-Bx0D User’s Guide...
Page 3: Table Of Contents
ARP Table .............................217 Routing Table ............................219 Multicast Status ............................221 xDSL Statistics ............................223 3G Statistics ............................226 System ..............................228 User Account ............................229 Remote Management ..........................231 SNMP ..............................234 Time Settings ............................236 E-mail Notification ..........................239 Logs Setting ............................241 Firmware Upgrade ..........................244 VMG1312-Bx0D User’s Guide...
Page 4 Contents Overview Backup/Restore .............................246 Diagnostic .............................249 Troubleshooting ............................253 Appendices ............................260 VMG1312-Bx0D User’s Guide...
Page 5: Table Of Contents
2.2.3 Navigation Panel ........................24 Chapter 3 Quick Start............................28 3.1 Overview ............................28 3.2 Quick Start Setup ..........................28 Chapter 4 Tutorials ...............................31 4.1 Overview ............................31 4.2 Setting Up an ADSL PPPoE Connection ..................31 4.3 Setting Up a Secure Wireless Network .....................34 VMG1312-Bx0D User’s Guide...
Page 6 6.6 The 802.1x Screen ..........................80 6.6.1 Modify 802.1X Settings ......................81 6.7 Technical Reference ..........................81 Chapter 7 Wireless ...............................87 7.1 Overview ............................87 7.1.1 What You Can Do in this Chapter ....................87 7.1.2 What You Need to Know ......................87 VMG1312-Bx0D User’s Guide...
Page 7 8.7 The Wake on LAN Screen ......................127 8.8 The TFTP Server Name Screen .....................128 8.9 Technical Reference ........................128 8.9.1 LANs, WANs and the VMG ....................128 8.9.2 DHCP Setup ..........................129 8.9.3 DNS Server Addresses ......................129 8.9.4 LAN TCP/IP ...........................130 Chapter 9 Routing ..............................132 VMG1312-Bx0D User’s Guide...
Page 8 11.4.1 Add/Edit Port Triggering Rule .....................164 11.5 The DMZ Screen ...........................165 11.6 The ALG Screen ..........................166 11.7 The Address Mapping Screen .......................166 11.7.1 Add/Edit Address Mapping Rule ..................167 11.8 The Sessions Screen ........................168 11.9 Technical Reference ........................169 VMG1312-Bx0D User’s Guide...
Page 9 15.1.3 Before You Begin .........................185 15.2 The File Sharing Screen .......................185 15.2.1 The Add New User Screen ....................186 15.3 The Media Server Screen ......................187 Chapter 16 Firewall ..............................189 16.1 Overview ............................189 16.1.1 What You Can Do in this Chapter ..................189 VMG1312-Bx0D User’s Guide...
Page 10 20.4.2 Import Trusted CA Certificate ....................210 Chapter 21 Log ..............................211 21.1 Overview ............................211 21.1.1 What You Can Do in this Chapter ..................211 21.1.2 What You Need To Know ..................... 211 21.2 The System Log Screen ........................212 VMG1312-Bx0D User’s Guide...
Page 11 26.1 The xDSL Statistics Screen ......................223 Chapter 27 3G Statistics .............................226 27.1 Overview ............................226 27.2 The 3G Statistics Screen .......................226 Chapter 28 System ...............................228 28.1 Overview ............................228 28.2 The System Screen ........................228 Chapter 29 User Account ............................229 VMG1312-Bx0D User’s Guide...
Page 12 34.2 The Logs Setting Screen .......................241 34.2.1 Example E-mail Log ......................242 Chapter 35 Firmware Upgrade ..........................244 35.1 Overview ............................244 35.2 The Firmware Screen ........................244 Chapter 36 Backup/Restore ..........................246 36.1 Overview ............................246 36.2 The Backup/Restore Screen ......................246 36.3 The Reboot Screen ........................248 VMG1312-Bx0D User’s Guide...
Page 13 38.4 Wireless Internet Access .......................257 38.5 USB Device Connection ........................258 38.6 UPnP .............................258 Part III: Appendices ..................260 Appendix A Customer Support ......................261 Appendix B Wireless LANs......................267 Appendix C IPv6 ..........................280 Appendix D Services ........................288 Appendix E Legal Information......................292 Index ..............................300 VMG1312-Bx0D User’s Guide...
Page 14: User's Guide
User’s Guide...
Page 15: Introducing The Vmg
VMG to its factory default settings. If you backed up an earlier configuration file, you would not have to totally re-configure the VMG. You could simply restore your last configuration. VMG1312-Bx0D User’s Guide...
Page 16: Applications For The Vmg
VMG. Refer to Section 6.2 on page 63 for the Network Setting > Broadband screen. Figure 1 VMG’s Internet Access Application: DSL WLAN Bridging IPoE PPPoE ADSL / VDSL WLAN Bridging PPPoE IPoE PPPoA IPoA ADSL VMG1312-Bx0D User’s Guide...
Page 17: Vmg's Usb Support
ZyXEL website and upload it to the VMG using the Maintenance > Firmware Upgrade screen. See the product page on ZyXEL’s website for the list of 3G/LTE USB dongles that are compatible. Figure 3 VMG’s Internet Access Application: 3G WAN WLAN 3G/LTE VMG1312-Bx0D User’s Guide...
Page 18: Wireless Access
1.5 Wireless Access The VMG is a wireless Access Point (AP) for wireless clients, such as notebook computers or PDAs and iPads. It allows them to connect to the Internet without having to rely on inconvenient Ethernet cables. VMG1312-Bx0D User’s Guide...
Page 19: Using The Wi-Fi And Wps Buttons
To turn off the wireless network, press the WLAN button for one to five seconds. The WLAN/WPS LED turns off when the wireless network is off. 1.6 LEDs (Lights) The following graphic displays the labels of the LEDs. Figure 7 LEDs on the VMG VMG1312-Bx0D User’s Guide...
Page 20: The Reset Button
To set the device back to the factory default settings, press the RESET button for ten seconds or until the POWER LED begins to blink and then release it. When the POWER LED begins to blink, the defaults have been restored and the device restarts. VMG1312-Bx0D User’s Guide...
Page 21: The Web Configurator
Login. Figure 8 Password Screen The following screen displays if you have not yet changed your password. Enter a new password, retype it to confirm and click Apply. VMG1312-Bx0D User’s Guide...
Page 22 After you finished or closed the Quick Start Wizard screen, the Network Map page appears. Figure 10 Network Map Clickthe right arrow icon to display the Status screen, where you can view the VMG’s interface and system information. VMG1312-Bx0D User’s Guide...
Page 23: Web Configurator Layout
Language: Select the language you prefer. Quick Start: Click this icon to open screens where you can configure the VMG’s time zone Internet access, and wireless settings. Logout: Click this icon to log out of the web configurator. VMG1312-Bx0D User’s Guide...
Page 24: Main Window
Use this screen to set up Wireless Distribution System (WDS) links to other access points. Others Use this screen to configure advanced wireless settings. Channel Status Use this screen to scan wireless LAN channel noises and view the results. VMG1312-Bx0D User’s Guide...
Page 25 Use this screen to map a port to a PVC or bridge group. Grouping Grouping USB Service File Sharing Use this screen to enable file sharing via the VMG. Media Server Use this screen to use the VMG as a media server. VMG1312-Bx0D User’s Guide...
Page 26 Use this screen to view the status of all IGMP settings on the VMG. Status MLD Status Use this screen to view the status of all MLD settings on the VMG. xDSL Statistics xDSL Statistics Use this screen to view the VMG’s xDSL traffic statistics. VMG1312-Bx0D User’s Guide...
Page 27 Use this screen to configure CFM (Connectivity Fault Management) MD (maintenance domain) and MA (maintenance association), perform connectivity tests and view test reports. OAM Ping Use this screen to view information to help you identify problems with the DSL connection. VMG1312-Bx0D User’s Guide...
Page 28: Quick Start
Select the time zone of your location. Click Next. Figure 12 Quick Start - Welcome Enter your Internet connection information in this screen. The screen and fields to enter may vary depending on your current connection type. Click Next. VMG1312-Bx0D User’s Guide...
Page 29 Turn the wireless LAN on or off. If you keep it on, record the security settings so you can configure your wireless clients to connect to the VMG. Click Save. Figure 14 Quick Start - Wireless Setting Your VMG saves your settings and attempts to connect to the Internet. Click Close to complete the setup. VMG1312-Bx0D User’s Guide...
Page 30 Chapter 3 Quick Start Figure 15 Quick Start - Result Summary VMG1312-Bx0D User’s Guide...
Page 31: Tutorials
Service Provider (ISP) to configure the VMG. Be sure to contact your service provider for any information you need to configure the Broadband screens. Click Network Setting > Broadband to open the following screen. Click Add New WAN Interface. In this example, the DSL connection has the following information. VMG1312-Bx0D User’s Guide...
Page 32 Then select DNS as Static and enter the DNS server addresses provided to you, such as 192.168.5.2 (DNS server1)/192.168.5.1 (DNS server2). Leave the rest of the fields to the default settings. Click Apply to save your settings. VMG1312-Bx0D User’s Guide...
Page 33 You should see a summary of your new DSL connection setup in the Broadband screen as follows. Try to connect to a website to see if you have correctly set up your Internet connection. Be sure to contact your service provider for any information you need to configure the WAN screens. VMG1312-Bx0D User’s Guide...
Page 34: Setting Up A Secure Wireless Network
802.11b/g/n Mixed Click Network Setting > Wireless to open the General screen. Select More Secure as the security level and WPA2-PSK as the security mode. Configure the screen using the provided parameters (see page 34). Click Apply. VMG1312-Bx0D User’s Guide...
Page 35 Chapter 4 Tutorials Go to the Wireless > Others screen and select 802.11b/g/n Mixed in the 802.11 Mode field. Click Apply. VMG1312-Bx0D User’s Guide...
Page 36: Using Wps
Push and hold the WPS button located on the VMG’s front panel for more than 5 seconds. Alternatively, you may log into VMG’s web configurator and go to the Network Setting > Wireless > WPS screen. Enable the WPS function for method 1 and click Apply. Then click the WPS button. VMG1312-Bx0D User’s Guide...
Page 37 Launch your wireless client’s configuration utility. Go to the WPS settings and select the PIN method to get a PIN number. Log into VMG’s web configurator and go to the Network Setting > Wireless > WPS screen. Enable the WPS function and click Apply. VMG1312-Bx0D User’s Guide...
Page 38 This may take up to two minutes. The wireless client is then able to communicate with the VMG securely. The following figure shows you how to set up a wireless network and its security on a VMG and a wireless client by using PIN method. VMG1312-Bx0D User’s Guide...
Page 39: Without Wps
Use the wireless adapter’s utility installed on the notebook to search for the “Example” SSID. Then enter the “DoNotStealMyWirelessNetwork” pre-shared key to establish an wireless Internet connection. Note: The VMG supports IEEE 802.11b and IEEE 802.11g wireless clients. Make sure that your notebook or computer’s wireless adapter supports one of these standards. VMG1312-Bx0D User’s Guide...
Page 40: Setting Up Multiple Wireless Groups
Pre-Shared Key ForCompanyOnly 123456789 guest123 Click Network Setting > Wireless to open the General screen. Use this screen to set up the company’s general wireless network group. Configure the screen using the provided parameters and click Apply. VMG1312-Bx0D User’s Guide...
Page 41 Chapter 4 Tutorials Click Network Setting > Wireless > Guest/More AP to open the following screen. Click the Edit icon to configure the second wireless network group. Configure the screen using the provided parameters and click Apply. VMG1312-Bx0D User’s Guide...
Page 42 Chapter 4 Tutorials In the Guest/More AP screen, click the Edit icon to configure the third wireless network group.Configure the screen using the provided parameters and click Apply. VMG1312-Bx0D User’s Guide...
Page 43: Configuring Static Route For Routing To Another Network
In order to extend your Intranet and control traffic flowing directions, you may connect a router to the VMG’s LAN. The router may be used to separate two department networks. This tutorial shows how to configure a static routing rule for two network routings. VMG1312-Bx0D User’s Guide...
Page 44 B. This tutorial uses the following example IP settings: Table 4 IP Settings in this Tutorial DEVICE / COMPUTER IP ADDRESS The VMG’s WAN 172.16.1.1 The VMG’s LAN 192.168.1.1 IP Type IPv4 Use Interface VDSL/ppp1.1 192.168.1.34 VMG1312-Bx0D User’s Guide...
Page 45: Configuring Qos Queue And Class Setup
Now B should be able to receive traffic from A. You may need to additionally configure B’s firewall settings to allow specific traffic to pass through. 4.6 Configuring QoS Queue and Class Setup This section contains tutorials on how you can configure the QoS screen. VMG1312-Bx0D User’s Guide...
Page 46 Bandwidth to 10,000 kbps (or leave this blank to have the VMG automatically determine this figure). Click Apply. Tutorial: Advanced > QoS Click Queue Setup > Add new Queue to create a new queue. In the screen that opens, check Active and enter or select the following values: • Name: E-mail VMG1312-Bx0D User’s Guide...
Page 47 • Weight: 8 • Rate Limit: 5,000 (kbps) Tutorial: Advanced > QoS > Queue Setup Click Class Setup > Add new Classifier to create a new class. Check Active and follow the settings as shown in the screen below. VMG1312-Bx0D User’s Guide...
Page 48 Type the MAC address of your computer - AA:FF:AA:FF:AA:FF. Type the MAC Mask if you know it. To Queue Link this to an item in the Network Setting > QoS > Queue Setup screen, which is the E- Index mail queue created in this example. VMG1312-Bx0D User’s Guide...
Page 49: Access The Vmg Using Ddns
• IP Address: Enter the WAN IP address that your VMG is currently using. You can find the IP address on the VMG’s Web Configurator Status page. Then you will need to configure the same account and host name on the VMG later. VMG1312-Bx0D User’s Guide...
Page 50: Configuring Ddns On Your Vmg
Josephine’s computer connects wirelessly to the Internet through the VMG. Thomas decides to use the Security > MAC Filter screen to grant wireless network access to his computer but not to Josephine’s computer. VMG1312-Bx0D User’s Guide...
Page 51: Access Your Shared Files From A Computer
4.9 Access Your Shared Files From a Computer Here is how to use an FTP program to access a file storage device connected to the VMG’s USB port. Note: This example uses the FileZilla FTP program to browse your shared files. VMG1312-Bx0D User’s Guide...
Page 52 In FileZilla enter the IP address of the VMG (the default is 192.168.1.1), your account’s user name and password and port 21 and click Quickconnect. A screen asking for password authentication appears. File Sharing via Windows Explorer Once you log in the USB device displays in the folder. VMG1312-Bx0D User’s Guide...
Page 53: Technical Reference
Technical Reference...
Page 54: Network Map And Status Screens
5.2 The Network Map Screen Use this screen to view the network connection status of the device and its clients. A warning message appears if there is a connection problem. Figure 16 Network Map: Icon View Mode VMG1312-Bx0D User’s Guide...
Page 55: The Status Screen
Figure 17 Network Map: List View Mode 5.3 The Status Screen Use this screen to view the status of the VMG. Click the right arrow icon in the Network Map (Connection Status) screen to open this screen. VMG1312-Bx0D User’s Guide...
Page 56 This field displays the current IP address of the VMG in the WAN. Click Release to release your IP address to 0.0.0.0. If you want to renew your IP address, click Renew. IP Subnet Mask This field displays the current subnet mask in the WAN. VMG1312-Bx0D User’s Guide...
Page 57 When this percentage is close to 100%, the VMG is running at full load, and the throughput is not going to improve anymore. If you want some applications to have more throughput, you should turn off other applications (for example, using QoS; see Chapter 10 on page 139). VMG1312-Bx0D User’s Guide...
Page 58 For the WLAN interface, it displays the maximum transmission rate or N/A with WLAN disabled. For the 3G interface, this field displays signal strength bars when a 3G device is installed in a USB slot and N/A when no device is detected in the USB slot. VMG1312-Bx0D User’s Guide...
Page 59: Broadband
• Use the Ethernet WAN screen to convert LAN port number four as a WAN port or restore the Ethernet WAN port to a LAN port (Section 6.5 on page 79). • Use the 802.1x screen to view and configure the IEEE 802.1X settings on the VMG (Section 6.6 on page 80). VMG1312-Bx0D User’s Guide...
Page 60: What You Need To Know
Service) can be guaranteed. ATM uses a connection-oriented model and establishes a virtual circuit (VC) between Finding Out More Packet Transfer Mode (PTM) is packet-oriented and supported by the VDSL2 standard. In PTM, packets are encapsulated directly in the High-level Data Link Control (HDLC) frames. It is designed VMG1312-Bx0D User’s Guide...
Page 61 6rd to encapsulate IPv6 packets in IPv4 packets to cross the ISP’s IPv4 network. The VMG generates a global IPv6 prefix from its IPv4 WAN address and tunnels IPv6 traffic to the ISP’s Border Relay router (BR in the figure) to connect to the native IPv6 Internet. The local VMG1312-Bx0D User’s Guide...
Page 62 IPv6 services. The VMG uses it’s configured IPv6 WAN IP to route IPv6 traffic to the IPv6 Internet. Figure 21 Dual Stack Lite - IPv6 - IPv6 - IPv4 in IPv6 - IPv4 ISP (IPv6) IPv6 Internet IPv6 IPv6 IPv4 IPv4 in IPv6 AFTR IPv4 Internet VMG1312-Bx0D User’s Guide...
Page 63: Before You Begin
This shows whether Multicast Listener Discovery (MLD) is activated or not for this connection. MLD is not available when the connection uses the bridging service. Modify Click the Edit icon to configure the WAN connection. Click the Delete icon to remove the WAN connection. VMG1312-Bx0D User’s Guide...
Page 64: Add/Edit Internet Connection
The following example screen displays when you select the ADSL/VDSL over ATM connection type, Routing mode, and PPPoE encapsulation. The screen varies when you select other interface type, encapsulation, and IPv6/IPv4 mode. Figure 23 Network Setting > Broadband > Add New WAN Interface/Edit (Routing Mode) VMG1312-Bx0D User’s Guide...
Page 65 IP address. Static IP Select this option If the ISP assigned a fixed IP address. Address IP Address Enter the static IP address provided by your ISP. Subnet Enter the subnet mask provided by your ISP. Mask VMG1312-Bx0D User’s Guide...
Page 66 VMG to get subscribing information and maintain a joined member list for each multicast group. It can reduce multicast traffic significantly. Apply as Select this option to have the VMG use the WAN interface of this connection as the system Default default gateway. Gateway VMG1312-Bx0D User’s Guide...
Page 67 Select this and enter any string that identifies the device. IAID Enter the Identity Association Identifier (IAID) of the device, for example, the WAN connection index number. DUID Enter the hardware type, a time value and the MAC address of the device. VMG1312-Bx0D User’s Guide...
Page 68 ADSL concurrent WAN uses the same VCI/PVI in both routing and bridge modes. • VDSL concurrent WAN uses same VLAN in both routing and bridge mode. Click OK to save your changes back to the VMG. Cancel Click Cancel to exit this screen without saving. VMG1312-Bx0D User’s Guide...
Page 69: Bridge Mode
IEEE 802.1p defines up to 8 separate traffic types by inserting a tag into a MAC-layer frame that contains bits to define class of service. Select the IEEE 802.1p priority level (from 0 to 7) to add to traffic through this connection. The greater the number, the higher the priority level. VMG1312-Bx0D User’s Guide...
Page 70 The valid range for the VPI is 0 to 255. Enter the VPI assigned to you. The valid range for the VCI is 32 to 65535 (0 to 31 is reserved for local management of ATM traffic). Enter the VCI assigned to you. VMG1312-Bx0D User’s Guide...
Page 71: The 3G Backup Screen
3G network for Internet access. You can have the VMG use the 3G WAN connection as a backup. Disconnect the DSL and Ethernet WAN ports to use the 3G dongle as your primary WAN connection. The VMG automatically uses a wired WAN connection when available. VMG1312-Bx0D User’s Guide...
Page 72 Chapter 6 Broadband Note: This VMG supports connecting one 3G dongle at a time. Figure 26 Internet Access Application: 3G WAN Use this screen to configure your 3G settings. Click Network Setting > Broadband > 3G Backup. VMG1312-Bx0D User’s Guide...
Page 73 Chapter 6 Broadband Note: The actual data rate you obtain varies depending the 3G card you use, the signal strength to the service provider’s base station, and so on. Figure 27 Network Setting > Broadband > 3G Backup VMG1312-Bx0D User’s Guide...
Page 74 Automatically Use the Select this option if the ISP assigned a fixed IP address. following static IP address IP Address Enter your WAN IP address in this field if you selected Use the following static IP address. VMG1312-Bx0D User’s Guide...
Page 75 Select the date on which the VMG resets the budget every month. Select last if you want budget the VMG to reset the budget on the last day of the month. Select specific and enter the counters on number of the date you want the VMG to reset the budget VMG1312-Bx0D User’s Guide...
Page 76: The Advanced Screen
(Seamless Rate Adaptation) functions. The VMG supports the PhyR retransmission scheme. PhyR is a retransmission scheme designed to provide protection against noise on the DSL line. It improves voice, video and data transmission resilience by utilizing a retransmission buffer. VMG1312-Bx0D User’s Guide...
Page 77 8.832 2048 4.3125 14.5 2783 4.3125 14.5 2783 4.3125 14.5 17.664 4096 4.3125 14.5 3479 8.625 14.5 Click Network Setting > Broadband > Advanced to display the following screen. Figure 28 Network Setting > Broadband > Advanced VMG1312-Bx0D User’s Guide...
Page 78 DSLAM to the customer's premises. VDSL Profile VDSL2 profiles differ in the width of the frequency band used to transmit the broadband signal. Profiles that use a wider frequency band can deliver higher maximum speeds. VMG1312-Bx0D User’s Guide...
Page 79: The Ethernet Wan Screen
Select Enable to convert LAN port number four to a WAN port. Select Disable to restore LAN port number four to a LAN port. Apply Click Apply to save your changes back to the VMG. Cancel Click Cancel to return to the previous configuration. VMG1312-Bx0D User’s Guide...
Page 80: The 802.1X Screen
This shows the certificate used for this authentication. This displays N/A when there is no certificate assigned. Trusted CA This shows the Trusted CA used for this authentication. This displays N/A when there is no Trusted CA assigned. Modify Click this icon to edit an item. VMG1312-Bx0D User’s Guide...
Page 81: Modify 802.1X Settings
The following section contains additional technical information about the VMG features described in this chapter. Encapsulation Be sure to use the encapsulation method required by your ISP. The VMG can work in bridge mode or routing mode. When the VMG is in routing mode, it supports the following methods. VMG1312-Bx0D User’s Guide...
Page 82 ATM virtual circuit (VC-based multiplexing). Please refer to RFC 1483 for more detailed information. Multiplexing There are two conventions to identify what protocols the virtual circuit (VC) is carrying. Be sure to use the multiplexing method required by your ISP. VC-based Multiplexing VMG1312-Bx0D User’s Guide...
Page 83 If the PCR, SCR or MBS is set to the default of "0", the system will assign a maximum value that correlates to your upstream line rate. The following figure illustrates the relationship between PCR, SCR and MBS. Figure 32 Example of Traffic Shaping VMG1312-Bx0D User’s Guide...
Page 84 When properly configured, VLAN prevents one subscriber from accessing the network resources of another on the same LAN, thus a user will not see the printers and hard disks of another user in the same building. VMG1312-Bx0D User’s Guide...
Page 85 VMG periodically updates this information. DNS Server Address Assignment Use Domain Name System (DNS) to map a domain name to its corresponding IP address and vice versa, for instance, the IP address of www.zyxel.com is 204.217.0.2. The DNS server is extremely VMG1312-Bx0D User’s Guide...
Page 86 IPv6 prefix length specifies how many most significant bits (start from the left) in the address compose the network address. The prefix length is written as “/x” where x is a number. For example, 2001:db8:1a2b:15::1a2f:0/32 means that the first 32 bits (2001:db8) is the subnet prefix. VMG1312-Bx0D User’s Guide...
Page 87: Wireless
However, wireless networking is different from that of most traditional radio communications in that there a number of wireless networking standards available with different methods of data encryption. VMG1312-Bx0D User’s Guide...
Page 88: The General Screen
VMG’s SSID, channel or security settings, you will lose your wireless connection when you press Apply to confirm. You must then change the wireless settings of your computer to match the VMG’s new settings. Click Network Setting > Wireless to open the General screen. VMG1312-Bx0D User’s Guide...
Page 89 This shows the wireless band which this radio profile is using. 2.4GHz is the frequency used by IEEE 802.11b/g/n wireless clients. Wireless You can Enable or Disable the wireless LAN in this field. Channel Use Auto to have the VMG automatically determine a channel to use. VMG1312-Bx0D User’s Guide...
Page 90 Or you can select No Security to allow any client to associate this network without any data encryption or authentication. See the following sections for more details about this field. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG1312-Bx0D User’s Guide...
Page 91: No Security
Your VMG allows you to configure up to four 64-bit or 128-bit WEP keys but only one key can be enabled at any one time. In order to configure and enable WEP encryption, click Network Setting > Wireless to display the General screen, then select Basic as the security level. VMG1312-Bx0D User’s Guide...
Page 92: More Secure (Wpa(2)-Psk)
WPA encryption standard. It offers slightly better security, although the use of PSK makes it less robust than it could be. Click Network Setting > Wireless to display the General screen. Select More Secure as the security level. VMG1312-Bx0D User’s Guide...
Page 93: The Guest/More Ap Screen
7.3 The Guest/More AP Screen This screen allows you to enable and configure multiple Basic Service Sets (BSSs) on the VMG. Click Network Setting > Wireless > Guest/More AP. The following screen displays. VMG1312-Bx0D User’s Guide...
Page 94: Edit Guest/More Ap
Click the Edit icon to configure the SSID profile. 7.3.1 Edit Guest/More AP Use this screen to edit an SSID profile. Click the Edit icon next to an SSID in the Guest/More AP screen. The following screen displays. VMG1312-Bx0D User’s Guide...
Page 95 Select None to set the VMG’s password generation to not be based on a passphrase. Select Fixed to use a 16 character passphrase for generating a password. Select Variable to use a 16 to 63 character passphrase for generating a password. VMG1312-Bx0D User’s Guide...
Page 96 Or you can select No Security to allow any client to associate this network without any data encryption or authentication. Section 7.2.1 on page 91 for more details about this field. Click OK to save your changes. Cancel Click Cancel to exit this screen without saving. VMG1312-Bx0D User’s Guide...
Page 97: The Mac Authentication Screen
This is the MAC addresses of the wireless devices that are allowed or denied access to the VMG. Modify Click the Edit icon to change the MAC address. Click the Delete icon to remove the entry. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG1312-Bx0D User’s Guide...
Page 98: The Wps Screen
Method 2 Use this section to set up a WPS wireless network by entering the PIN of the client into the VMG. Select Enable and click Apply to activate WPS method 2 on the VMG. VMG1312-Bx0D User’s Guide...
Page 99: The Wmm Screen
Use this screen to enable Wi-Fi MultiMedia (WMM) and WMM Power Save in wireless networks for multimedia applications. Click Network Setting > Wireless > WMM. The following screen displays. Figure 41 Network Setting > Wireless > WMM VMG1312-Bx0D User’s Guide...
Page 100: The Others Screen
Use this screen to configure advanced wireless settings. Click Network Setting > Wireless > Others. The screen appears as shown. Section 7.9.2 on page 105 for detailed definitions of the terms listed in this screen. Figure 42 Network Setting > Wireless > Others VMG1312-Bx0D User’s Guide...
Page 101 RX Chain Power Select Enable to activate the RX Chain Power Save feature. It turns off one of the Receive Save chains to save power when it is not in use. Select Disabled to disable this feature. VMG1312-Bx0D User’s Guide...
Page 102: The Channel Status Screen
Note: The Scan button only works when the VMG uses 20MHz for the wireless channel width. You can go to the General screen, click the Network Setting > Wireless > more link, and then change the channel width setting in the Bandwidth field. VMG1312-Bx0D User’s Guide...
Page 103: Technical Reference
Traditionally, a wireless network operates in one of two ways. • An “infrastructure” type of network has one or more access points and one or more wireless clients. The wireless clients connect to the access points. VMG1312-Bx0D User’s Guide...
Page 104 This allows a variety of networks to exist in the same place without interfering with one another. When you create a network, you must select a channel to use. VMG1312-Bx0D User’s Guide...
Page 105: Additional Wireless Terms
- for example, a twenty-letter long string of apparently random numbers and letters - but it is not very secure if you use a short key which is very easy to guess - for example, a three-letter word from the dictionary. VMG1312-Bx0D User’s Guide...
Page 106: User Authentication
Some wireless devices, such as scanners, can detect wireless networks but cannot use wireless networks. These kinds of wireless devices might not have MAC addresses. Hexadecimal characters are 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, A, B, C, D, E, and F. VMG1312-Bx0D User’s Guide...
Page 107: Signal Problems
Problems with distance occur when the two radios are too far apart. Problems with interference occur when other radio waves interrupt the data signal. Interference may come from other radio transmissions, such as military or air traffic control communications, or from machines that are VMG1312-Bx0D User’s Guide...
Page 108: Bss
BSSs simultaneously. You can then assign varying QoS priorities and/or security modes to different SSIDs. Wireless devices can use different BSSIDs to associate with the same AP. 7.9.6.1 Notes on Multiple BSSs • A maximum of eight BSSs are allowed on one AP simultaneously. VMG1312-Bx0D User’s Guide...
Page 109: Preamble Type
Take the following steps to set up WPS using the button. Ensure that the two devices you want to set up are within wireless range of one another. VMG1312-Bx0D User’s Guide...
Page 110: Pin Configuration
On a computer connected to the wireless client, try to connect to the Internet. If you can connect, WPS was successful. If you cannot connect, check the list of associated wireless clients in the AP’s configuration utility. If you see the wireless client in the list, WPS was successful. VMG1312-Bx0D User’s Guide...
Page 111: How Wps Works
If the registrar is already part of a network, it sends the existing information. If not, it generates the SSID and WPA(2)-PSK randomly. The following figure shows a WPS-enabled client (installed in a notebook computer) connecting to a WPS-enabled access point. VMG1312-Bx0D User’s Guide...
Page 112: Example Wps Network Setup
When WPS is activated on both, they perform the handshake. In this example, AP1 is the registrar, and Client 1 is the enrollee. The registrar randomly generates the security information to set up the network, since it is unconfigured and has no existing information. VMG1312-Bx0D User’s Guide...
Page 113 In step 3, you add another access point (AP2) to your network. AP2 is out of range of AP1, so you cannot use AP1 for the WPS handshake with the new access point. However, you know that Client 2 supports the registrar function, so you use it to perform the WPS handshake instead. VMG1312-Bx0D User’s Guide...
Page 114: Limitations Of Wps
If this happens, open the access point’s configuration interface and look at the list of associated clients (usually displayed by MAC address). It does not matter if the VMG1312-Bx0D User’s Guide...
Page 115 Check the MAC addresses of your wireless clients (usually printed on a label on the bottom of the device). If there is an unknown MAC address you can remove it or reset the AP. VMG1312-Bx0D User’s Guide...
Page 116: Home Networking
• Use the Wake on LAN screen to remotely turn on a device on the network. (Section 8.7 on page 127). • Use the TFTP Server Name screen to set a TFTP server address which is passed to the clients using DHCP option 66. (Section 8.8 on page 128). VMG1312-Bx0D User’s Guide...
Page 117: What You Need To Know
UPnP devices and enable exchange of simple product and service descriptions. NAT traversal allows the following: • Dynamic port mapping • Learning public IP addresses VMG1312-Bx0D User’s Guide...
Page 118: Before You Begin
This will become the IP address of your VMG. Enter the IP subnet mask into the IP Subnet Mask field. Unless instructed otherwise it is best to leave this alone, the configurator will automatically compute a subnet mask based upon the IP address you entered. VMG1312-Bx0D User’s Guide...
Page 119 Chapter 8 Home Networking Click Apply to save your settings. Figure 51 Network Setting > Home Networking > LAN Setup VMG1312-Bx0D User’s Guide...
Page 120 Enter the first and second DNS (Domain Name System) server IP addresses the VMG passes to the DHCP clients. LAN IPv6 Mode Setup IPv6 Active Select Enable to activate the IPv6 mode and configure IPv6 settings on the VMG. Link Local Address Type VMG1312-Bx0D User’s Guide...
Page 121 Select User-Defined if you have the IPv6 address of a DNS server. Enter the DNS server IPv6 addresses the VMG passes to the DHCP clients. Select None if you do not want to configure IPv6 DNS servers. VMG1312-Bx0D User’s Guide...
Page 122: The Static Dhcp Screen
Click the Edit icon to have the IP address field editable and change it. Click the Delete icon to delete a static DHCP entry. A window displays asking you to confirm that you want to delete the selected entry. VMG1312-Bx0D User’s Guide...
Page 123: The Upnp Screen
IP address, convey its capabilities and learn about other devices on the network. In turn, a device can leave a network smoothly and automatically when it is no longer in use. page 117 for more information on UPnP. VMG1312-Bx0D User’s Guide...
Page 124: Turning On Upnp In Windows 7 Example
Windows 7. Activate UPnP on the VMG. Make sure the computer is connected to a LAN port of the VMG. Turn on your computer and the VMG. Click the start icon, Control Panel and then the Network and Sharing Center. VMG1312-Bx0D User’s Guide...
Page 125 Select Turn on network discovery and click Save Changes. Network discovery allows your computer to find other computers and devices on the network and other computers on the network to find your computer. This makes it easier to share files and printers. VMG1312-Bx0D User’s Guide...
Page 126: The Additional Subnet Screen
Enter the public IP subnet mask provided by your ISP. Offer Public IP Select Enable to allow the VMG to provide public IP addresses by DHCP server. by DHCP Enable ARP Select Enable to activate the ARP (Address Resolution Protocol) proxy. Proxy VMG1312-Bx0D User’s Guide...
Page 127: The Stb Vendor Id Screen
You need to know the MAC address of the LAN device. It may be on a label on the device or in its documentation. Click Network Setting > Home Networking > Wake on LAN to open this screen. Figure 57 Network Setting > Home Networking > Wake on LAN VMG1312-Bx0D User’s Guide...
Page 128: The Tftp Server Name Screen
LANs, WANs and the VMG The actual physical connection determines whether the VMG ports are LAN or WAN ports. There are two separate IP networks, one inside the LAN network and the other outside the WAN network as shown next. VMG1312-Bx0D User’s Guide...
Page 129: Dhcp Setup
DNS servers out of the DHCP setup under all circumstances. If your ISP gives you explicit DNS servers, make sure that you enter their IP addresses in the DHCP Setup screen. VMG1312-Bx0D User’s Guide...
Page 130: Lan Tcp/Ip
If you belong to a small organization and your Internet access is through an ISP, the ISP can provide you with the Internet addresses for your local networks. On the other hand, if you are part of a much larger organization, you should consult your network administrator for the appropriate IP addresses. VMG1312-Bx0D User’s Guide...
Page 131 Note: Regardless of your particular situation, do not create an arbitrary IP address; always follow the guidelines above. For more information on address assignment, please refer to RFC 1597, “Address Allocation for Private Internets” and RFC 1466, “Guidelines for Management of IP Address Space”. VMG1312-Bx0D User’s Guide...
Page 132: Routing
9.2 The Routing Screen Use this screen to view and configure the static route rules on the VMG. Click Network Setting > Routing > Static Route to open the following screen. Figure 61 Network Setting > Routing > Static Route VMG1312-Bx0D User’s Guide...
Page 133: Add/Edit Static Route
Use this screen to add or edit a static route. Click Add new static route in the Routing screen or the Edit icon next to the static route you want to edit. The screen shown next appears. Figure 62 Routing: Add/Edit VMG1312-Bx0D User’s Guide...
Page 134: The Dns Route Screen
DNS route is active. A gray bulb signifies that this DNS route is not active. Domain Name This is the host name or domain name of the DNS route entry. WAN Interface This is the WAN connection through which the VMG forwards DNS requests for this domain name. VMG1312-Bx0D User’s Guide...
Page 135: The Dns Route Add Screen
Policy-based routing is applied to outgoing packets, prior to the normal routing. You can use source-based policy forwarding to direct traffic from different users through different connections or distribute traffic among multiple paths for load sharing. VMG1312-Bx0D User’s Guide...
Page 136 This is the WAN interface through which the traffic is routed. Modify Click the Edit icon to edit this policy. Click the Delete icon to remove a policy from the VMG. A window displays asking you to confirm that you want to delete the policy. VMG1312-Bx0D User’s Guide...
Page 137: Add/Edit Policy Route
Select a WAN interface through which the traffic is sent. You must have the WAN interface(s) already configured in the Broadband screens. WWAN means the wireless 3G interface. Click OK to save your changes. Cancel Click Cancel to exit this screen without saving. VMG1312-Bx0D User’s Guide...
Page 138: Rip
Select the check box to set the VMG to not send the route information to the default Gateway gateway. Apply Click Apply to save your changes back to the VMG. Cancel Click Cancel to restore your previously saved settings. VMG1312-Bx0D User’s Guide...
Page 139: Quality Of Service (Qos)
• Use the Shaper Setup screen to limit outgoing traffic transmission rate on the selected interface (Section 10.6 on page 149). • Use the Policer Setup screen to control incoming traffic transmission rate and bursts ( (Section 10.6 on page 149). VMG1312-Bx0D User’s Guide...
Page 140: What You Need To Know
(or queues). Your VMG uses the Token Bucket algorithm to allow a certain amount of large bursts while keeping a limit at the average rate. Traffic Rate Traffic Rate Time Time (Before Traffic Shaping) (After Traffic Shaping) VMG1312-Bx0D User’s Guide...
Page 141: The Quality Of Service General Screen
Click Network Setting > QoS > General to open the screen as shown next. Use this screen to enable or disable QoS and set the upstream bandwidth. See Section 10.1 on page 139 for more information. Figure 68 Network Settings > QoS > General VMG1312-Bx0D User’s Guide...
Page 142: The Queue Setup Screen
Cancel Click Cancel to restore your previously saved settings. 10.4 The Queue Setup Screen Click Network Setting > QoS > Queue Setup to open the screen as shown next. Use this screen to configure QoS queue assignment. VMG1312-Bx0D User’s Guide...
Page 143 This shows the maximum transmission rate allowed for traffic on this queue. Modify Click the Edit icon to edit the queue. Click the Delete icon to delete an existing queue. Note that subsequent rules move up by one when you take this action. VMG1312-Bx0D User’s Guide...
Page 144: Adding A Qos Queue
(packets are transmitted out of it). Rate Limit Specify the maximum transmission rate (in Kbps) allowed for traffic on this queue. Click OK to save your changes. Cancel Click Cancel to exit this screen without saving. VMG1312-Bx0D User’s Guide...
Page 145: The Classification Setup Screen
Click the Delete icon to delete an existing classifier. Note that subsequent rules move up by one when you take this action. 10.5.1 Add/Edit QoS Class Click Add New Classification in the Classification Setup screen or the Edit icon next to a classifier to open the following screen. VMG1312-Bx0D User’s Guide...
Page 146 Chapter 10 Quality of Service (QoS) Figure 72 Classification Setup: Add/Edit VMG1312-Bx0D User’s Guide...
Page 147 For example, if you set the MAC address to 00:13:49:00:00:00 and the mask to ff:ff:ff:00:00:00, a packet with a MAC address of 00:13:49:12:34:56 matches this criteria. Exclude Select this option to exclude the packets that match the specified criteria from this classifier. VMG1312-Bx0D User’s Guide...
Page 148 If you select Unchange, the VMG keep the DSCP field in the packets. 802.1P Mark Select a priority level with which the VMG replaces the IEEE 802.1p priority field in the packets. If you select Unchange, the VMG keep the 802.1p priority field in the packets. VMG1312-Bx0D User’s Guide...
Page 149: The Qos Shaper Setup Screen
This shows the average rate limit of traffic bursts for this shaper. (kbps) Modify Click the Edit icon to edit the shaper. Click the Delete icon to delete an existing shaper. Note that subsequent rules move up by one when you take this action. VMG1312-Bx0D User’s Guide...
Page 150: Add/Edit A Qos Shaper
The following table describes the labels in this screen. Table 51 Network Setting > QoS > Policer Setup LABEL DESCRIPTION Add New Click this to create a new entry. Policer This is the index number of the entry. VMG1312-Bx0D User’s Guide...
Page 151: Add/Edit A Qos Policer
Figure 76 Policer Setup: Add/Edit The following table describes the labels in this screen. Table 52 Policer Setup: Add/Edit LABEL DESCRIPTION Active Select enable or disable this policer. Name Enter the descriptive name of this policer. VMG1312-Bx0D User’s Guide...
Page 152: Technical Reference
A VLAN tag includes the 12-bit VLAN ID and 3-bit user priority. The VLAN ID associates a frame with a specific VLAN and provides the information that devices need to process the frame across the network. VMG1312-Bx0D User’s Guide...
Page 153 The DSCP value determines the forwarding behavior, the PHB (Per-Hop Behavior), that each packet gets across the DiffServ network. Based on the marking rule, different kinds of traffic can be marked for different kinds of forwarding. Resources can then be allocated according to the DSCP values and the configured policies. VMG1312-Bx0D User’s Guide...
Page 154: Automatic Priority Queue Assignment
QUEUE PRIORITY TOS (IP IP PACKET DSCP (ETHERNET PRECEDENCE) LENGTH (BYTE) PRIORITY) 000000 000000 >1100 001110 250~1100 001100 001010 001000 010110 010100 010010 010000 011110 <250 011100 011010 011000 100110 100100 100010 100000 101110 101000 110000 111000 VMG1312-Bx0D User’s Guide...
Page 155 CBS bucket is equal to or greater than the size of the packet (in bytes). • After a packet is transmitted, a number of tokens corresponding to the packet size is removed from the CBS bucket. VMG1312-Bx0D User’s Guide...
Page 156 • If the PBS bucket has enough tokens, the VMG checks the CBS bucket. The packet is marked green and can be transmitted if the number of tokens in the CBS bucket is equal to or greater than the size of the packet (in bytes). Otherwise, the packet is marked yellow. VMG1312-Bx0D User’s Guide...
Page 157: Network Address Translation (Nat)
IP address of a host when the packet is in the local network, while the global address refers to the IP address of the host when the same packet is traveling in the WAN side. VMG1312-Bx0D User’s Guide...
Page 158: The Port Forwarding Screen
80 to another (B in the example) and assign a default server IP address of 192.168.1.35 to a third (C in the example). You assign the LAN IP addresses and the ISP assigns the WAN IP address. The NAT network appears as a single host on the Internet. VMG1312-Bx0D User’s Guide...
Page 159 Protocol This shows the IP protocol supported by this virtual server, whether it is TCP, UDP, or TCP/ UDP. Modify Click the Edit icon to edit this rule. Click the Delete icon to delete an existing rule. VMG1312-Bx0D User’s Guide...
Page 160: Add/Edit Port Forwarding
To forward only one port, enter the port number in the Start Port field above and then enter it again in this field. To forward a series of ports, enter the last port number in a series that begins with the port number in the Start Port field above. VMG1312-Bx0D User’s Guide...
Page 161: The Applications Screen
Forwarded WAN Interface This field shows the WAN interface through which the service is forwarded. Server IP This field displays the destination IP address for the service. Address Modify Click the Delete icon to delete the rule. VMG1312-Bx0D User’s Guide...
Page 162: Add New Application
IP address in the forwarding port with another LAN computer's IP address. Trigger port forwarding solves this problem by allowing computers on the LAN to dynamically take turns using the service. The VMG records the IP address of a LAN computer that sends traffic to the VMG1312-Bx0D User’s Guide...
Page 163 A gray bulb signifies that this rule is not active. Service Name This field displays the name of the service used by this rule. WAN Interface This field shows the WAN interface through which the service is forwarded. VMG1312-Bx0D User’s Guide...
Page 164: Add/Edit Port Triggering Rule
The trigger port is a port (or a range of ports) that causes (or triggers) the VMG to record Port the IP address of the LAN computer that sent the traffic to a server on the WAN. Type a port number or the starting port number in a range of port numbers. VMG1312-Bx0D User’s Guide...
Page 165: The Dmz Screen
Note: If you do not assign a Default Server Address, the VMG discards all packets received for ports that are not specified in the NAT Port Forwarding screen. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG1312-Bx0D User’s Guide...
Page 166: The Alg Screen
Ordering your rules is important because the VMG applies the rules in the order that you specify. When a rule matches the current packet, the VMG takes the corresponding action and the remaining rules are ignored. Click Network Setting > NAT > Address Mapping to display the following screen. VMG1312-Bx0D User’s Guide...
Page 167: Add/Edit Address Mapping Rule
11.7.1 Add/Edit Address Mapping Rule To add or edit an address mapping rule, click Add new rule or the rule’s edit icon in the Address Mapping screen to display the screen shown next. VMG1312-Bx0D User’s Guide...
Page 168: The Sessions Screen
Click Cancel to exit this screen without saving. 11.8 The Sessions Screen Use this screen to limit the number of concurrent NAT sessions a client can use. Click Network Setting > NAT > Sessions to display the following screen. VMG1312-Bx0D User’s Guide...
Page 169: Technical Reference
This refers to the host on the WAN. Local This refers to the packet address (source or destination) as the packet travels on the LAN. Global This refers to the packet address (source or destination) as the packet travels on the WAN. VMG1312-Bx0D User’s Guide...
Page 170: What Nat Does
Inside Global Address (ILA) Address (IGA) 192.168.1.11 192.168.1.10 11.9.4 NAT Application The following figure illustrates a possible NAT application, where three inside LANs (logical LANs using IP alias) behind the VMG can communicate with three distinct WAN networks. VMG1312-Bx0D User’s Guide...
Page 171 Let's say you want to assign ports 21-25 to one FTP, Telnet and SMTP server (A in the example), port 80 to another (B in the example) and assign a default server IP address of 192.168.1.35 to a VMG1312-Bx0D User’s Guide...
Page 172 (C in the example). You assign the LAN IP addresses and the ISP assigns the WAN IP address. The NAT network appears as a single host on the Internet. Figure 92 Multiple Servers Behind NAT Example A=192.168.1.33 192.168.1.1 B=192.168.1.34 IP address assigned by ISP C=192.168.1.35 D=192.168.1.36 VMG1312-Bx0D User’s Guide...
Page 173: Dynamic Dns Setup
Enabling the wildcard feature for your host causes *.yourhost.dyndns.org to be aliased to the same IP address as yourhost.dyndns.org. This feature is useful if you want to be able to use, for example, www.yourhost.dyndns.org and still reach your hostname. VMG1312-Bx0D User’s Guide...
Page 174: The Dns Entry Screen
You can manually add or edit the VMG’s DNS name and IP address entry. Click Add New DNS Entry in the DNS Entry screen or the Edit icon next to the entry you want to edit. The screen shown next appears. Figure 94 DNS Entry: Add/Edit VMG1312-Bx0D User’s Guide...
Page 175: The Dynamic Dns Screen
This shows Success if the account is correctly set up with the Dynamic DNS provider Authentication account. Result Last Updated This shows the last time the IP address the Dynamic DNS provider has associated with Time the hostname was updated. VMG1312-Bx0D User’s Guide...
Page 176 Table 70 Network Setting > DNS > > Dynamic DNS (continued) LABEL DESCRIPTION Current Dynamic This shows the IP address your Dynamic DNS provider has currently associated with the hostname. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG1312-Bx0D User’s Guide...
Page 177: Vlan Group
Use these screens to group separate VLAN groups together to be treated as one VLAN group. 13.2 The VLAN Group Screen Click Network Setting > Vlan Group to open the following screen. Figure 97 Network Setting > Vlan Group VMG1312-Bx0D User’s Guide...
Page 178: Add/Edit A Vlan Group
Select Include to add the associated LAN interface to this VLAN group. Select Tx Tagging to tag outgoing traffic from the associated LAN port with the VLAN ID number entered above. Click OK to save your changes. Cancel Click Cancel to exit this screen without saving. VMG1312-Bx0D User’s Guide...
Page 179: Interface Grouping
In the following example, the client that sends packets with the DHCP Vendor ID option set to MSFT 5.0 (meaning it is a Windows 2000 DHCP client) is assigned the IP address 192.168.2.2 and uses the WAN VDSL_PoE/ppp0.1 interface. VMG1312-Bx0D User’s Guide...
Page 180: Interface Group Configuration
Click the Add New Interface Group button in the Interface Grouping screen to open the following screen. Use this screen to create a new interface group. Note: An interface can belong to only one group at a time. VMG1312-Bx0D User’s Guide...
Page 181 Click Add to identify LAN hosts to add to the interface group by criteria such as the type of Add Clients the hardware or firmware. See Section 14.2.2 on page 182 for more information. With the following DHCP Vendor IDs This shows the index number of the rule. VMG1312-Bx0D User’s Guide...
Page 182: Interface Grouping Criteria
Select this and enter the device identity of the matched traffic. Enter the Identity Association Identifier (IAID) of the device, for example, the WAN connection index number. DHCP Option Select this and enter vendor specific information of the matched traffic. VMG1312-Bx0D User’s Guide...
Page 183 Enter the product class of the device. Class VLAN Group Select this and the VLAN group of the matched traffic from the drop-down list box. Click OK to save your changes. Cancel Click Cancel to exit this screen without saving. VMG1312-Bx0D User’s Guide...
Page 184: Usb Service
• Use the Media Server screen to enable or disable the sharing of media files (Section 15.3 on page 187). 15.1.2 What You Need To Know The following terms and concepts may help as you read this chapter. VMG1312-Bx0D User’s Guide...
Page 185: Before You Begin
Use this screen to set up file sharing through the VMG. The VMG’s LAN users can access the shared folder (or share) from the USB device inserted in the VMG. To access this screen, click Network Setting > USB Service > File Sharing. VMG1312-Bx0D User’s Guide...
Page 186: The Add New User Screen
Use this screen to create a user account that can access the secured shares on the USB device. To access this screen, click the Add New User button in the Network Setting > USB Service > File Sharing screen. VMG1312-Bx0D User’s Guide...
Page 187: The Media Server Screen
The media server is enabled by default with the video, photo, and music shares published. To change your VMG’s media server settings, click Network Setting > USB Service > Media Server. The screen appears as shown. VMG1312-Bx0D User’s Guide...
Page 188 Media Library Enter the path clients use to access the media files on a USB storage device connected to Path the VMG. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG1312-Bx0D User’s Guide...
Page 189: Firewall
• Use the Access Control screen to view and configure incoming/outgoing filtering rules (Section 16.4 on page 193). • Use the DoS screen to activate protection against Denial of Service (DoS) attacks (Section 16.5 on page 195). VMG1312-Bx0D User’s Guide...
Page 190: What You Need To Know
Use this screen to set the security level of the firewall on the VMG. Firewall rules are grouped based on the direction of travel of packets to which they apply. Click Security > Firewall to display the General screen. VMG1312-Bx0D User’s Guide...
Page 191: The Protocol Screen
IANA (Internet Assigned Number Authority) website. See Appendix D on page 288 for some examples. Click Security > Firewall > Protocol to display the following screen. Figure 109 Security > Firewall > Protocol VMG1312-Bx0D User’s Guide...
Page 192: Add/Edit A Service
Select Other to be able to enter a protocol number. Protocol This field is displayed if you select Other as the protocol. Number Enter the protocol number of your customized port. Click OK to save your changes. Cancel Click Cancel to exit this screen without saving. VMG1312-Bx0D User’s Guide...
Page 193: The Access Control Screen
Click the Move To icon to change the order of the rule. Enter the number in the # field. 16.4.1 Add/Edit an ACL Rule Click Add new ACL rule or the Edit icon next to an existing ACL rule in the Access Control screen. The following screen displays. VMG1312-Bx0D User’s Guide...
Page 194 Select the service rule that defines your customized port from the drop-down list box. The specific service rule you add in the Security > Firewall > Protocol screen display in this list. If you want to configure a customized service, select Specific Service. VMG1312-Bx0D User’s Guide...
Page 195: The Dos Screen
The following table describes the labels in this screen. Table 84 Security > Firewall > DoS LABEL DESCRIPTION DoS Protection Select Enable to enable protection against DoS attacks. Blocking Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG1312-Bx0D User’s Guide...
Page 196: Mac Filter
17.2 The MAC Filter Screen Use this screen to allow wireless and LAN clients access to the VMG. Click Security > MAC Filter. The screen appears as shown. Figure 114 Security > MAC Filter VMG1312-Bx0D User’s Guide...
Page 197 VMG in these address fields. Enter the MAC addresses in a valid MAC address format, that is, six hexadecimal character pairs, for example, 12:34:56:78:9a:bc. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG1312-Bx0D User’s Guide...
Page 198: Parental Control
This shows the day(s) and time on which parental control is enabled. Schedule Network This shows whether the network service is configured. If not, None will be shown. Service Website This shows whether the website block is configured. If not, None will be shown. Blocked VMG1312-Bx0D User’s Guide...
Page 199: Add/Edit A Parental Control Profile
Use this screen to configure a restricted access schedule and/or URL filtering settings to block the users on your network from accessing certain web sites. Figure 116 Parental Control Rule: Add/Edit Rule VMG1312-Bx0D User’s Guide...
Page 200 Network If you select Block, the VMG prohibits the users from viewing the Web sites with the URLs Service Setting listed below. If you select Allow, the VMG blocks access to all URLs except ones listed below. VMG1312-Bx0D User’s Guide...
Page 201 Select this to redirect users who access any blocked websites listed above to the ZyXEL blocked site to Family Safety page as shown next. ZyXEL Family Figure 119 ZyXEL Family Safety Page Example Safety page Click OK to save your changes. Cancel Click Cancel to to exit this screen without saving. VMG1312-Bx0D User’s Guide...
Page 202: Scheduler Rule
19.2.1 Add/Edit a Schedule Click the Add New Rule button in the Scheduler Rule screen or click the Edit icon next to a schedule rule to open the following screen. Use this screen to configure a restricted access schedule. VMG1312-Bx0D User’s Guide...
Page 203 Enter the time period of each day, in 24-hour format, during which the rule will be enforced. Range Description Enter a description for this scheduler rule. Click OK to save your changes. Cancel Click Cancel to exit this screen without saving. VMG1312-Bx0D User’s Guide...
Page 204: Certificates
20.3 The Local Certificates Screen Click Security > Certificates to open the Local Certificates screen. This is the VMG’s summary list of certificates and certification requests. Figure 122 Security > Certificates > Local Certificates VMG1312-Bx0D User’s Guide...
Page 205: Create Certificate Request
20.3.1 Create Certificate Request Click Security > Certificates > Local Certificates and then Create Certificate Request to open the following screen. Use this screen to have the VMG generate a certification request. VMG1312-Bx0D User’s Guide...
Page 206 After you click Apply to generate a request, you still need to get the certificate request signed by a Certificate Authority. If you already have, click the request’s Edit icon and then Load_Signed to import the signed certificate into the VMG. VMG1312-Bx0D User’s Guide...
Page 207: Load Signed Certificate
After you create a certificate request and have it signed by a Certificate Authority, in the View Certificate screen click the certificate request’s Load_Signed button to import the signed certificate into the VMG. Note: You must remove any spaces from the certificate’s filename before you can import VMG1312-Bx0D User’s Guide...
Page 208: The Trusted Ca Screen
The VMG accepts any valid certificate signed by a certification authority on this list as being trustworthy; thus you do not need to import any certificate that is signed by one of these certification authorities. Figure 126 Security > Certificates > Trusted CA VMG1312-Bx0D User’s Guide...
Page 209: View Trusted Ca Certificate
20.4.1 View Trusted CA Certificate Click the View icon in the Trusted CA screen to open the following screen. Use this screen to view in-depth information about the certification authority’s certificate. Figure 127 Trusted CA: View VMG1312-Bx0D User’s Guide...
Page 210: Import Trusted Ca Certificate
Type in the location of the certificate you want to upload in this field or click Choose File to Path find it. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG1312-Bx0D User’s Guide...
Page 211: Log
CODE SEVERITY Emergency: The system is unusable. Alert: Action must be taken immediately. Critical: The system condition is critical. Error: There is an error condition on the system. Warning: There is a warning condition on the system. VMG1312-Bx0D User’s Guide...
Page 212: The System Log Screen
This field states the reason for the log. 21.3 The Security Log Screen Use the Security Log screen to see the security-related logs for the categories that you select. Click System Monitor > Log > Security Log to open the following screen. VMG1312-Bx0D User’s Guide...
Page 213 This field displays the severity level of the log that the device is to send to this syslog server. Category This field displays the type of the log. Messages This field states the reason for the log. VMG1312-Bx0D User’s Guide...
Page 214: Traffic Status
22.2 The WAN Status Screen Click System Monitor > Traffic Status to open the WAN screen. The figure in this screen shows the number of bytes received and sent on the VMG. Figure 131 System Monitor > Traffic Status > WAN VMG1312-Bx0D User’s Guide...
Page 215: The Lan Status Screen
Click System Monitor > Traffic Status > LAN to open the following screen. The figure in this screen shows the interface that is currently connected on the VMG. Figure 132 System Monitor > Traffic Status > LAN VMG1312-Bx0D User’s Guide...
Page 216: The Nat Status Screen
This displays what percentage of NAT sessions the VMG can support is currently being used by all connected hosts. You can also see the number of active NAT sessions and the maximum number of NAT sessions the VMG can support. VMG1312-Bx0D User’s Guide...
Page 217: Arp Table
MAC address, swaps the sender and target pairs, and unicasts the answer directly back to the requesting machine. ARP updates the ARP Table for future reference and then sends the packet to the MAC address that replied. VMG1312-Bx0D User’s Guide...
Page 218: Arp Table Screen
This is the learned IPv4 or IPv6 IP address of a device connected to a port. Address MAC Address This is the MAC address of the device with the listed IP address. Device This is the type of interface used by the device. VMG1312-Bx0D User’s Guide...
Page 219: Routing Table
This indicates the destination IPv4 address or IPv6 address and prefix of this route. Gateway This indicates the IPv4 address or IPv6 address of the gateway that helps forward this route’s traffic. Subnet Mask This indicates the destination subnet mask of the IPv4 route. VMG1312-Bx0D User’s Guide...
Page 220 LAN interface where x can be 0~3 to represent LAN1 to LAN4 respectively. ptm0 indicates a DSL WAN interface using IPoE, IPoA or in bridge mode. ethx indicates an Ethernet WAN interface using IPoE or in bridge mode. ppp0 indicates a WAN interface using PPPoE or PPPoA. VMG1312-Bx0D User’s Guide...
Page 221: Multicast Status
25.3 The MLD Status Screen Use this screen to look at the current list of multicast groups the VMG has joined and which ports have joined it. To open this screen, click System Monitor > Multicast Status > MLD Status. VMG1312-Bx0D User’s Guide...
Page 222 Source List This is the list of IP addresses that are allowed or not allowed to receive the multicast group’s traffic depending on the filter mode. Member This is the list of members in the multicast group. VMG1312-Bx0D User’s Guide...
Page 223: Xdsl Statistics
This displays the type of traffic the DSL port is sending and receiving. Inactive displays if the DSL port is not currently sending or receiving traffic. Link Uptime This displays how long the port has been running (or connected) since the last time it was started. VMG1312-Bx0D User’s Guide...
Page 224 This is the number of Severely Errored Seconds meaning the number of seconds containing 30% or more errored blocks or at least one defect. This is a subset of ES. VMG1312-Bx0D User’s Guide...
Page 225 Table 106 Status > xDSL Statistics (continued) LABEL DESCRIPTION This is the number of UnAvailable Seconds. This is the number of Loss Of Signal seconds. This is the number of Loss Of Frame seconds. This is the number of Loss of Margin seconds. VMG1312-Bx0D User’s Guide...
Page 226: Statistics
GPRS - General Packet Radio Service, 2.5G EDGE - Enhanced Data rates for GSM Evolution, 2.75G WCDMA - Wideband Code Division Multiple Access, 3G HSDPA - High-Speed Downlink Packet Access, 3.5G HSUPA - High-Speed Uplink Packet Access, 3.75G HSPA - HSDPA+HSUPA, 3.75G VMG1312-Bx0D User’s Guide...
Page 227 The International Mobile Subscriber Identity or IMSI is a unique identification number associated with all cellular networks. This number is provisioned in the SIM card. VID/PID This field displays the USB Vendor ID and Product ID of the 3G card. VMG1312-Bx0D User’s Guide...
Page 228: System
Type a hostname for your VMG. Enter a descriptive name of up to 16 alphanumeric characters, not including spaces, underscores, and dashes. Domain Name Type a Domain name for your host VMG. Apply Click Apply to save your changes. Cancel Click Cancel to abandon this screen without saving. VMG1312-Bx0D User’s Guide...
Page 229: User Account
Click the Delete icon to remove the entry. 29.2.1 The User Account Add and Edit Screens Click Add New Account or the Edit icon of an existing account in the Maintenance > User Account to open the following screen. VMG1312-Bx0D User’s Guide...
Page 230 Retry Times. Group Specify whether this user will have Administrator or User privleges. Click OK to save your changes. Cancel Click Cancel to exit this screen without saving. VMG1312-Bx0D User’s Guide...
Page 231: Remote Management
Select Multi_WAN and then select one or more WAN connections to have the VMG activate the remote management service when the selected WAN connections are up. service This is the service you may use to access the VMG. VMG1312-Bx0D User’s Guide...
Page 232: The Trust Domain Screen
Use this screen to configure a public IP address which is allowed to access the VMG. Click the Add Trust Domain button in the Maintenance > Remote MGMT > Turst Domain screen to open the following screen. VMG1312-Bx0D User’s Guide...
Page 233 Enter a public IPv4 IP address which is allowed to access the service on the VMG from the WAN. Click OK to save your changes back to the VMG. Cancel Click Cancel to exit this screen without saving. VMG1312-Bx0D User’s Guide...
Page 234: Snmp
Examples of variables include such as number of packets received, node port status etc. A Management Information Base (MIB) is a collection of managed objects. SNMP allows a manager and agents to communicate for the purpose of accessing these objects. VMG1312-Bx0D User’s Guide...
Page 235 Enter the SNMP system contact. Trap Destination Type the IP address of the station to send your SNMP traps to. Apply Click this to save your changes back to the VMG. Cancel Click this to restore your previously saved settings. VMG1312-Bx0D User’s Guide...
Page 236: Time Settings
32.2 The Time Screen To change your VMG’s time and date, click Maintenance > Time. The screen appears as shown. Use this screen to configure the VMG’s time based on your local time zone. Figure 148 Maintenance > Time VMG1312-Bx0D User’s Guide...
Page 237 October. The time you select depends on your time zone. In Germany for instance, you would select 2 in the Time field because Germany's time zone is one hour ahead of GMT or UTC (GMT+1). VMG1312-Bx0D User’s Guide...
Page 238 Chapter 32 Time Settings Table 115 Maintenance > Time (continued) LABEL DESCRIPTION Apply Click Apply to save your changes. Cancel Click Cancel to return to the previous configuration. VMG1312-Bx0D User’s Guide...
Page 239: E-Mail Notification
Remove Click this button to delete the selected entry(ies). 33.2.1 E-mail Notification Edit Click the Add button in the E-mail Notification screen. Use this screen to configure the required information for sending e-mail via a mail server. VMG1312-Bx0D User’s Guide...
Page 240 Select STARTTLS to upgrade a plain text connection to a secure connection using SSL/TLS. Click this button to save your changes and return to the previous screen. Cancel Click this button to exit this screen without saving. VMG1312-Bx0D User’s Guide...
Page 241: Logs Setting
You can configure where the VMG sends logs and which logs and/or immediate alerts the VMG records in the Logs Setting screen. 34.2 The Logs Setting Screen To change your VMG’s log settings, click Maintenance > Logs Setting. The screen appears as shown. Figure 151 Maintenance > Logs Setting VMG1312-Bx0D User’s Guide...
Page 242: Example E-Mail Log
• You may edit the subject title. • The date format here is Day-Month-Year. • The date format here is Month-Day-Year. The time format is Hour-Minute-Second. • "End of Log" message shows that a complete log has been sent. VMG1312-Bx0D User’s Guide...
Page 243 |<1,02> 127|Apr 7 00 |From:192.168.1.131 To:192.168.1.255 |match |forward | 10:05:17 |UDP src port:00520 dest port:00520 |<1,02> 128|Apr 7 00 |From:192.168.1.1 To:192.168.1.255 |match |forward | 10:05:30 |UDP src port:00520 dest port:00520 |<1,02> End of Firewall Log VMG1312-Bx0D User’s Guide...
Page 244: Firmware Upgrade
Upgrade Firmware Current This is the present Firmware version and the date created. Firmware Version File Path Type in the location of the file you wasnt to upload in this field or click Choose File to find VMG1312-Bx0D User’s Guide...
Page 245 After two minutes, log in again and check your new firmware version in the Status screen. If the upload was not successful, the following screen will appear. Click OK to go back to the Firmware Upgrade screen. Figure 156 Error Message VMG1312-Bx0D User’s Guide...
Page 246: Chapter 36 Backup/Restore
The backup configuration file will be useful in case you need to return to your previous settings. Click Backup to save the VMG’s current configuration to your computer. VMG1312-Bx0D User’s Guide...
Page 247 If the upload was not successful, the following screen will appear. Click OK to go back to the Configuration screen. Figure 159 Configuration Upload Error Reset to Factory Defaults Click the Reset button to clear all user-entered configuration information and return the VMG to its factory defaults. The following warning screen appears. VMG1312-Bx0D User’s Guide...
Page 248: The Reboot Screen
System restart allows you to reboot the VMG remotely without turning the power off. You may need to do this if the VMG hangs, for example. Click Maintenance > Reboot. Click Reboot to have the VMG reboot. This does not affect the VMG's configuration. Figure 162 Maintenance > Reboot VMG1312-Bx0D User’s Guide...
Page 249: Chapter 37 Diagnostic
If an MEP port does not respond to the source MEP, this may indicate a fault. Administrators can take further action to check and resume services from the fault according to the line connectivity status report. VMG1312-Bx0D User’s Guide...
Page 250: Ping & Traceroute & Nslookup
Click this button to perform a DNS lookup on the IP address of a computer you enter. 37.4 802.1ag Click Maintenance > Diagnostic > 8.2.1ag to open the following screen. Use this screen to perform CFM actions. Figure 164 Maintenance > Diagnostic > 802.1ag VMG1312-Bx0D User’s Guide...
Page 251: Oam Ping
• Virtual Channel (VC) Logical connections between ATM devices • Virtual Path (VP) A bundle of virtual channels • Virtual Circuits A series of virtual paths between circuit end points Figure 165 Virtual Circuit Topology VMG1312-Bx0D User’s Guide...
Page 252 Press this to perform an OAM F4 segment loopback test. F4 end-end Press this to perform an OAM F4 end-to-end loopback test. F5 segment Press this to perform an OAM F5 segment loopback test. F5 end-end Press this to perform an OAM F5 end-to-end loopback test. VMG1312-Bx0D User’s Guide...
Page 253: Chapter 38 Troubleshooting
Make sure you understand the normal behavior of the LED. See Section 1.6 on page Check the hardware connections. Inspect your cables for damage. Contact the vendor to replace any damaged cables. Turn the VMG off and on. VMG1312-Bx0D User’s Guide...
Page 254: Vmg Access And Login
Make sure your Internet browser does not block pop-up windows and has JavaScripts and Java enabled. If it is possible to log in from another interface, check the service control settings for HTTP and HTTPS (Maintenance > Remote MGMT). VMG1312-Bx0D User’s Guide...
Page 255 I cannot use FTP to upload / download the configuration file. / I cannot use FTP to upload new firmware. See the troubleshooting suggestions for I cannot see or access the Login screen in the web configurator. Ignore the suggestions about your browser. VMG1312-Bx0D User’s Guide...
Page 256: Internet Access
ADSL and VDSL connections cannot work at the same time. You can only use one type of DSL connection, either ADSL or VDSL connection at one time. I cannot connect to the Internet using an Ethernet connection. Make sure you have the Ethernet WAN port connected to a Modem or Router. VMG1312-Bx0D User’s Guide...
Page 257: Wireless Internet Access
38.4 Wireless Internet Access What factors may cause intermittent or unstabled wireless connection? How can I solve this problem? The following factors may cause interference: • Obstacles: walls, ceilings, furniture, and so on. • Building Materials: metal doors, aluminum studs. VMG1312-Bx0D User’s Guide...
Page 258: Usb Device Connection
Re-connect your USB device to the VMG. 38.6 UPnP When using UPnP and the VMG reboots, my computer cannot detect UPnP and refresh My Network Places > Local Network. VMG1312-Bx0D User’s Guide...
Page 259 Chapter 38 Troubleshooting Disconnect the Ethernet cable from the VMG’s LAN port or from your computer. Re-connect the Ethernet cable. The Local Area Connection icon for UPnP disappears in the screen. Restart your computer. VMG1312-Bx0D User’s Guide...
Page 260: Part Iii Appendices
Appendices Appendices contain general information. Some information may not apply to your device.
Page 261: Appendix A Customer Support
• Brief description of the problem and the steps you took to solve it. Corporate Headquarters (Worldwide) Taiwan • ZyXEL Communications Corporation • http://www.zyxel.com Asia China • ZyXEL Communications (Shanghai) Corp. ZyXEL Communications (Beijing) Corp. ZyXEL Communications (Tianjin) Corp. • http://www.zyxel.cn India • ZyXEL Technology India Pvt Ltd • http://www.zyxel.in Kazakhstan •...
Page 262 • ZyXEL Singapore Pte Ltd. • http://www.zyxel.com.sg Taiwan • ZyXEL Communications Corporation • http://www.zyxel.com/tw/zh/ Thailand • ZyXEL Thailand Co., Ltd • http://www.zyxel.co.th Vietnam • ZyXEL Communications Corporation-Vietnam Office • http://www.zyxel.com/vn/vi Europe Austria • ZyXEL Deutschland GmbH • http://www.zyxel.de Belarus • ZyXEL BY • http://www.zyxel.by...
Page 263 Appendix A Customer Support Belgium • ZyXEL Communications B.V. • http://www.zyxel.com/be/nl/ • http://www.zyxel.com/be/fr/ Bulgaria • ZyXEL България • http://www.zyxel.com/bg/bg/ Czech Republic • ZyXEL Communications Czech s.r.o • http://www.zyxel.cz Denmark • ZyXEL Communications A/S • http://www.zyxel.dk Estonia • ZyXEL Estonia • http://www.zyxel.com/ee/et/ Finland •...
Page 264 • ZyXEL Communications Poland • http://www.zyxel.pl Romania • ZyXEL Romania • http://www.zyxel.com/ro/ro Russia • ZyXEL Russia • http://www.zyxel.ru Slovakia • ZyXEL Communications Czech s.r.o. organizacna zlozka • http://www.zyxel.sk Spain • ZyXEL Communications ES Ltd • http://www.zyxel.es Sweden • ZyXEL Communications • http://www.zyxel.se Switzerland •...
Page 265 Appendix A Customer Support • http://www.zyxel.ch/ Turkey • ZyXEL Turkey A.S. • http://www.zyxel.com.tr • ZyXEL Communications UK Ltd. • http://www.zyxel.co.uk Ukraine • ZyXEL Ukraine • http://www.ua.zyxel.com Latin America Argentina • ZyXEL Communication Corporation • http://www.zyxel.com/ec/es/ Brazil • ZyXEL Communications Brasil Ltda.
Page 266 Appendix A Customer Support North America • ZyXEL Communications, Inc. - North America Headquarters • http://www.zyxel.com/us/en/ Oceania Australia • ZyXEL Communications Corporation • http://www.zyxel.com/au/en/ Africa South Africa • Nology (Pty) Ltd. • http://www.zyxel.co.za VMG1312-Bx0D User’s Guide...
Page 267: Appendix B Wireless Lans
Intra-BSS traffic is traffic between wireless clients in the BSS. When Intra-BSS is enabled, wireless client A and B can access the wired network and communicate with each other. When Intra-BSS is disabled, wireless client A and B can still access the wired network but cannot communicate with each other. VMG1312-Bx0D User’s Guide...
Page 268 An ESSID (ESS IDentification) uniquely identifies each ESS. All access points and their associated wireless clients within the same ESS must have the same ESSID in order to communicate. VMG1312-Bx0D User’s Guide...
Page 269 (AP) or wireless gateway, but out-of-range of each other, so they cannot "hear" each other, that is they do not know if the channel is currently being used. Therefore, they are considered hidden from each other. VMG1312-Bx0D User’s Guide...
Page 270 If the Fragmentation Threshold value is smaller than the RTS/CTS value (see previously) you set then the RTS (Request To Send)/CTS (Clear to Send) handshake will never occur as data frames will be fragmented before they reach RTS/CTS size. VMG1312-Bx0D User’s Guide...
Page 271 It is supported by Windows XP and a number of network devices. Some advantages of IEEE 802.1x are: • User based identification that allows for roaming. VMG1312-Bx0D User’s Guide...
Page 272 In order to ensure network security, the access point and the RADIUS server use a shared secret key, which is a password, they both know. The key is not sent over the network. In addition to the VMG1312-Bx0D User’s Guide...
Page 273 Client authentication is then done by sending username and password through the secure connection, thus client identity is protected. For client authentication, EAP-TTLS supports EAP methods and legacy authentication methods such as PAP, CHAP, MS-CHAP and MS-CHAP v2. VMG1312-Bx0D User’s Guide...
Page 274 Key differences between WPA or WPA2 and WEP are improved data encryption and user authentication. If both an AP and the wireless clients support WPA2 and you have an external RADIUS server, use WPA2 for stronger data encryption. If you don't have an external RADIUS server, you should use VMG1312-Bx0D User’s Guide...
Page 275 RADIUS database. WPA2 reduces the number of key exchange messages from six to four (CCMP 4-way handshake) and shortens the time required to connect to a network. Other WPA2 authentication features that are different from WPA include key caching and VMG1312-Bx0D User’s Guide...
Page 276 The RADIUS server distributes the PMK to the AP. The AP then sets up a key hierarchy and management system, using the PMK to dynamically generate unique data encryption keys. The keys are used to encrypt every data packet that is wirelessly communicated between the AP and the wireless clients. VMG1312-Bx0D User’s Guide...
Page 277 The AP and wireless clients use the TKIP or AES encryption process, the PMK and information exchanged in a handshake to create temporal encryption keys. They use these keys to encrypt data exchanged between them. Figure 172 WPA(2)-PSK Authentication VMG1312-Bx0D User’s Guide...
Page 278: Security Parameters Summary
Antenna gain, measured in dB (decibel), is the increase in coverage within the RF beam width. Higher antenna gain improves the range of the signal for better communications. For an indoor site, each 1 dB increase in antenna gain results in a range increase of approximately VMG1312-Bx0D User’s Guide...
Page 279 For a single AP application, place omni-directional antennas as close to the center of the coverage area as possible. For directional antennas, point the antenna in the direction of the desired coverage area. VMG1312-Bx0D User’s Guide...
Page 280: Appendix C Ipv6
“private IP address” in IPv4. You can have the same link-local address on multiple interfaces on a device. A link-local unicast address has a predefined prefix of fe80::/10. The link-local unicast address format is as follows. Table 128 Link-local Unicast Address Format 1111 1110 10 Interface ID 10 bits 54 bits 64 bits VMG1312-Bx0D User’s Guide...
Page 281 All DHCP severs on a local site. FF05:0:0:0:0:0:1:3 The following table describes the multicast addresses which are reserved and can not be assigned to a multicast group. Table 130 Reserved Multicast Address MULTICAST ADDRESS FF00:0:0:0:0:0:0:0 FF01:0:0:0:0:0:0:0 FF02:0:0:0:0:0:0:0 FF03:0:0:0:0:0:0:0 FF04:0:0:0:0:0:0:0 FF05:0:0:0:0:0:0:0 FF06:0:0:0:0:0:0:0 FF07:0:0:0:0:0:0:0 VMG1312-Bx0D User’s Guide...
Page 282 DHCPv6 server uses T1 and T2 to control the time at which the client contacts with the server to extend the lifetimes on any addresses in the IA_NA before the lifetimes expire. After T1, the client sends the server (S1) (from which the addresses in the IA_NA were obtained) a Renew message. If VMG1312-Bx0D User’s Guide...
Page 283 • Neighbor solicitation: A request from a host to determine a neighbor’s link-layer address (MAC address) and detect if the neighbor is still reachable. A neighbor being “reachable” means it responds to a neighbor solicitation message (from the host) with a neighbor advertisement message. VMG1312-Bx0D User’s Guide...
Page 284 Done message to the router or switch. The router or switch then sends a group-specific query to the port on which the Done message is received to determine if other devices connected to this port should remain in the group. VMG1312-Bx0D User’s Guide...
Page 285 Install Dibbler and select the DHCPv6 client option on your computer. After the installation is complete, select Start > All Programs > Dibbler-DHCPv6 > Client Install as service. Select Start > Control Panel > Administrative Tools > Services. Double click Dibbler - a DHCPv6 client. VMG1312-Bx0D User’s Guide...
Page 286 Windows 7 supports IPv6 by default. DHCPv6 is also enabled when you enable IPv6 on a Windows 7 computer. To enable IPv6 in Windows 7: Select Control Panel > Network and Sharing Center > Local Area Connection. Select the Internet Protocol Version 6 (TCP/IPv6) checkbox to enable it. Click OK to save the change. VMG1312-Bx0D User’s Guide...
Page 287 IPv4 Address... : 172.16.100.61 Subnet Mask ... : 255.255.255.0 Default Gateway ..: fe80::213:49ff:feaa:7125%11 172.16.100.254 VMG1312-Bx0D User’s Guide...
Page 288: Appendix D Services
• If the Protocol is TCP, UDP, or TCP/UDP, this is the IP port number. • If the Protocol is USER, this is the IP protocol number. • Description: This is a brief explanation of the applications that use this service or the situations in which this service is used. VMG1312-Bx0D User’s Guide...
Page 289 Microsoft Networks’ messenger service uses this protocol. NetBIOS TCP/UDP The Network Basic Input/Output System is used for communication between computers in a LAN. TCP/UDP TCP/UDP TCP/UDP NEW-ICQ 5190 An Internet chat program. NEWS A protocol for news groups. VMG1312-Bx0D User’s Guide...
Page 290 UNIX systems and network servers. SSDP 1900 The Simple Service Discovery Protocol supports Universal Plug-and-Play (UPnP). TCP/UDP Secure Shell Remote Login Program. STRM WORKS 1558 Stream Works Protocol. VMG1312-Bx0D User’s Guide...
Page 291 Internet and in UNIX environments. It operates over TCP/IP networks. Its primary function is to allow users to log into remote host systems. VDOLIVE 7000 A videoconferencing solution. The UDP port number is specified in the application. user- defined VMG1312-Bx0D User’s Guide...
Page 292: Appendix E Legal Information
The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation. All rights reserved.
Page 293: European Union
ZyXEL tímto prohlašuje, že tento zařízení je ve shodě se základními požadavky a dalšími příslušnými ustanoveními (Czech) směrnice 1999/5/EC. Dansk (Danish) Undertegnede ZyXEL erklærer herved, at følgende udstyr udstyr overholder de væsentlige krav og øvrige relevante krav i direktiv 1999/5/EF. VMG1312-Bx0D User’s Guide...
Page 294 The requirements for any country may evolve. ZyXEL recommends that you check with the local authorities for the latest status of their national regulations for both the 2.4GHz and 5GHz wireless LANs. The following countries have restrictions and/or requirements in addition to those given in the table labeled “Overview of Regulatory Requirements for Wireless LANs”:. Belgium VMG1312-Bx0D User’s Guide...
Page 295: Safety Warnings
Do not remove the plug and connect it to a power outlet by itself; always attach the plug to the power adaptor first before connecting it to a power outlet. • Do not allow anything to rest on the power adaptor or cord and do NOT place the product where anyone can walk on the power adaptor or cord. VMG1312-Bx0D User’s Guide...
Page 296 Symbolen innebär att enligt lokal lagstiftning ska produkten och/eller dess batteri kastas separat från hushållsavfallet. När den här produkten når slutet av sin livslängd ska du ta den till en återvinningsstation. Vid tiden för kasseringen bidrar du till en bättre miljö och mänsklig hälsa genom att göra dig av med den på ett återvinningsställe. VMG1312-Bx0D User’s Guide...
Page 297 Appendix E Legal Information Environmental Product Declaration VMG1312-Bx0D User’s Guide...
Page 298: Zyxel Limited Warranty
To obtain the services of this warranty, contact your vendor. You may also refer to the warranty policy for the region in which you bought the device at http://www.zyxel.com/web/support_warranty_info.php. Registration Register your product online to receive e-mail notices of firmware upgrades and information at www.zyxel.com for global products, or at www.us.zyxel.com for North American products. VMG1312-Bx0D User’s Guide...
Page 299 This product contains in part some free software distributed under GPL license terms and/or GPL like licenses. Open source licenses are provided with the firmware package. You can download the latest firmware at www.zyxel.com. To obtain the source code covered under those Licenses, please contact support@zyxel.com.tw to get it. VMG1312-Bx0D User’s Guide...
Page 300: Index
Basic Service Set, See BSS channel, wireless LAN Basic Service Set, see BSS client list blinking LEDs configuration Broadband backup broadcast firewalls reset 108, 267 example restoring static route 81, 133, 135, 174 Connectivity Check Messages, see CCMs contact information VMG1312-Bx0D User’s Guide...
Page 301 101, 105, 270 DS field 158, 171 DS, dee differentiated services DSCP dynamic DNS wildcard Dynamic Host Configuration Protocol, see DHCP General wireless LAN screen dynamic WEP key exchange DYNDNS wildcard hidden node HTTP EAP Authentication ECHO VMG1312-Bx0D User’s Guide...
Page 302 Maintenance End Point, see MEP ping Management Information Base (MIB) prefix 61, 86, 280 prefix delegation managing the device prefix length good habits 61, 86, 280 unspecified address Maximum Burst Size (MBS) iTunes server MBSSID media server activation iTunes server VMG1312-Bx0D User’s Guide...
Page 303 275, 277 passwords restoring configuration RFC 1058. See RIP. Peak Cell Rate (PCR) RFC 1389. See RIP. Per-Hop Behavior, see PHB RFC 1483 RFC 3164 PIN, WPS example router features Ping of Death Routing Information Protocol. See RIP VMG1312-Bx0D User’s Guide...
Page 304 Two Rate Three Color Marker, see trTCM srTCM SSID activation MBSSID static route 132, 138, 239 unicast configuration 81, 133, 135, 174 Universal Plug and Play, see UPnP example upgrading firmware static VLAN UPnP status cautions firmware version NAT traversal VMG1312-Bx0D User’s Guide...
Page 305 WPA2-PSK wireless client WPA supplicants application example wireless LAN WPA-PSK 87, 103 107, 275 authentication application example 105, 106 109, 111 example example channel limitations encryption example example fragmentation threshold 101, 105 push button 19, 109 limitations VMG1312-Bx0D User’s Guide...
Page 306 Index ZyXEL Family Safety page VMG1312-Bx0D User’s Guide...

ZyXEL Communications VMG1312-Bx0D User Manual

Contents Overview

Table of Contents

User's Guide

PART I User's Guide

Chapter 1 Introducing the VMG

Chapter 2 The Web Configurator

Chapter 3 Quick Start

Chapter 4 Tutorials

Technical Reference

Part II: Technical Reference

Chapter 5 Network Map and Status Screens

Chapter 6 Broadband

Chapter 7 Wireless

Chapter 8 Home Networking

Chapter 9 Routing

Chapter 10 Quality of Service (Qos)

Chapter 11 Network Address Translation (NAT)

Chapter 12 Dynamic DNS Setup

Chapter 13 VLAN Group

Chapter 14 Interface Grouping

Chapter 15 USB Service

Chapter 16 Firewall

Chapter 17 MAC Filter

Chapter 18 Parental Control

Chapter 19 Scheduler Rule

Chapter 20 Certificates

Chapter 21 Log

Chapter 22 Traffic Status

Chapter 23 ARP Table

Chapter 24 Routing Table

Chapter 25 Multicast Status

Chapter 26 Xdsl Statistics

Chapter 27 3G Statistics

Chapter 28 System

Chapter 29 User Account

Chapter 30 Remote Management

Chapter 31 SNMP

Chapter 32 Time Settings

Chapter 33 E-Mail Notification

Chapter 34 Logs Setting

Chapter 35 Firmware Upgrade

Chapter 36 Backup/Restore

Chapter 37 Diagnostic

Chapter 38 Troubleshooting

PART III Appendices

Appendix A Customer Support

Appendix B Wireless Lans

Quick Links

Related Manuals for ZyXEL Communications VMG1312-Bx0D

Summary of Contents for ZyXEL Communications VMG1312-Bx0D