Page 1 VMG5313-BXB Series Wireless N VDSL2 IAD with USB Version 5.11 Edition 1, 01/2016 Quick Start Guide User’s Guide Default Login Details LAN IP Address http://192.168.1.1 Login admin, user www.zyxel.com Password 1234, user Copyright © 2016 ZyXEL Communications Corporation...
Page 2: Related Documentation
Related Documentation • Quick Start Guide The Quick Start Guide shows how to connect the VMG and get up and running right away. • More Information Go to support.zyxel.com to find other information on the VMG VMG5313-BXB Series User’s Guide...
Page 3: Table Of Contents
Log ...............................248 Traffic Status ............................251 VoIP Status ............................254 ARP Table .............................256 Routing Table ............................258 Multicast Status ............................260 xDSL Statistics ............................262 3G Statistics ............................265 System ..............................267 User Account ............................268 Remote Management ..........................270 SNMP ..............................273 Time Settings ............................275 VMG5313-BXB Series User’s Guide...
Page 4 Contents Overview E-mail Notification ..........................277 Log Setting ............................279 Firmware Upgrade ..........................282 Backup Restore .............................285 Diagnostic .............................288 Troubleshooting ............................293 Appendices ............................300 VMG5313-BXB Series User’s Guide...
Page 5: Table Of Contents
3.1 Overview ............................31 3.2 Quick Start Setup ..........................31 Chapter 4 Tutorials ...............................33 4.1 Overview ............................33 4.2 Setting Up an ADSL PPPoE Connection ..................33 4.3 Setting Up a Secure Wireless Network .....................36 4.3.1 Configuring the Wireless Network Settings ................36 VMG5313-BXB Series User’s Guide...
Page 6 6.6.1 Modify 802.1X Settings ......................84 6.7 Technical Reference ..........................84 Chapter 7 Wireless ...............................90 7.1 Overview ............................90 7.1.1 What You Can Do in this Chapter ....................90 7.1.2 What You Need to Know ......................90 7.2 The General Screen .........................91 VMG5313-BXB Series User’s Guide...
Page 7 8.7 The Wake on LAN Screen ......................131 8.8 The TFTP Server Name Screen .....................132 8.9 Technical Reference ........................132 8.9.1 LANs, WANs and the VMG ....................132 8.9.2 DHCP Setup ..........................133 8.9.3 DNS Server Addresses ......................133 8.9.4 LAN TCP/IP ...........................134 VMG5313-BXB Series User’s Guide...
Page 8 11.3.1 Add New Application ......................164 11.4 The Port Triggering Screen ......................165 11.4.1 Add/Edit Port Triggering Rule .....................167 11.5 The DMZ Screen ...........................168 11.6 The ALG Screen ..........................168 11.7 The Address Mapping Screen .......................169 11.7.1 Add/Edit Address Mapping Rule ..................170 VMG5313-BXB Series User’s Guide...
Page 9 15.2.1 Interface Group Configuration .....................185 15.2.2 Interface Grouping Criteria ....................187 Chapter 16 USB Service ............................189 16.1 Overview ............................189 16.1.1 What You Can Do in this Chapter ..................189 16.1.2 ().What You Need To Know ....................189 16.1.3 Before You Begin .........................190 VMG5313-BXB Series User’s Guide...
Page 10 21.2 What You Need to Know .......................210 21.3 The Local Certificates Screen .......................210 21.3.1 Create Certificate Request ....................211 21.3.2 Load Signed Certificate ......................213 21.4 The Trusted CA Screen ........................214 21.4.1 View Trusted CA Certificate ....................214 VMG5313-BXB Series User’s Guide...
Page 11 24.1.1 What You Can Do in this Chapter ..................251 24.2 The WAN Status Screen .......................251 24.3 The LAN Status Screen .........................252 24.4 The NAT Status Screen .........................253 Chapter 25 VoIP Status ............................254 25.1 The VoIP Status Screen ........................254 Chapter 26 ARP Table ............................256 VMG5313-BXB Series User’s Guide...
Page 12 32.2.1 The User Account Add/Edit Screen ..................268 Chapter 33 Remote Management........................270 33.1 Overview ............................270 33.2 The MGMT Services Screen ......................270 33.3 The Trust Domain Screen ......................271 33.4 The Add Trust Domain Screen ......................271 Chapter 34 SNMP ..............................273 VMG5313-BXB Series User’s Guide...
Page 13 40.1.1 What You Can Do in this Chapter ..................288 40.2 What You Need to Know .......................288 40.3 Ping & TraceRoute & NsLookup ....................289 40.4 802.1ag ............................289 40.5 OAM Ping ............................290 Chapter 41 Troubleshooting..........................293 41.1 Power, Hardware Connections, and LEDs ..................293 VMG5313-BXB Series User’s Guide...
Page 14 41.5 USB Device Connection ........................298 41.6 UPnP .............................298 Part III: Appendices ..................300 Appendix A Customer Support ......................302 Appendix B Wireless LANs......................308 Appendix C IPv6 ..........................321 Appendix D Services ........................329 Appendix E Legal Information......................333 Index ..............................341 VMG5313-BXB Series User’s Guide...
Page 15: User's Guide
User’s Guide...
Page 17: Introducing The Vmg
VMG to its factory default settings. If you backed up an earlier configuration file, you would not have to totally re-configure the VMG. You could simply restore your last configuration. VMG5313-BXB Series User’s Guide...
Page 18: Applications For The Vmg
This means that probes from the outside to your network are not allowed, but you can safely browse the Internet and download files. 1.4.2 VMG’s USB Support The USB port of the VMG is used for file-sharing and media server. VMG5313-BXB Series User’s Guide...
Page 19: Leds (Lights)
USB device (B) connected to the VMG’s USB port (without having to copy them to another computer). Figure 3 USB Media Server Application 1.5 LEDs (Lights) The following graphic displays the labels of the LEDs. VMG5313-BXB Series User’s Guide...
Page 20 Blinking A telephone connected to the phone port has its receiver off of the hook and there is a voice message in the corresponding SIP account. The phone port does not have a SIP account registered. VMG5313-BXB Series User’s Guide...
Page 21: The Reset Button
WLAN/WPS LED turns green, the wireless network is active. You can also use the WPS On/Off button to quickly set up a secure wireless connection between the VMG and a WPS-compatible client by adding one device at a time. VMG5313-BXB Series User’s Guide...
Page 22 Once the connection is successfully made, the WLAN/WPS LED shines green. To turn off the wireless network, press the Wi-Fi On/Off button for one to five seconds. The WLAN/WPS LED turns off when the wireless network is off. VMG5313-BXB Series User’s Guide...
Page 23: The Web Configurator
If you have changed the password, enter your password and click Login. Figure 6 Password Screen VMG5313-BXB Series User’s Guide...
Page 24 Figure 7 Change Password Screen Configure basic Internet access, and wireless settings. The Network Map page appears. Figure 8 Network Map Click Status to display the Status screen, where you can view the VMG’s interface and system information. VMG5313-BXB Series User’s Guide...
Page 25: Web Configurator Layout
As illustrated above, the main screen is divided into these parts: • A - title bar • B - main window • C - navigation panel 2.2.1 Title Bar The title bar provides some icons in the upper right corner. VMG5313-BXB Series User’s Guide...
Page 26: Navigation Panel
Use this screen to set up Wireless Distribution System (WDS) links to other access points. Others Use this screen to configure advanced wireless settings. Channel Status Use this screen to scan wireless LAN channel noises and view the results. VMG5313-BXB Series User’s Guide...
Page 27 Use this screen to map a port to a PVC or bridge group. Grouping USB Service File Sharing Use this screen to enable file sharing via the VMG. Media Server Use this screen to use the VMG as a media server. VMG5313-BXB Series User’s Guide...
Page 28 Use this screen to configure speed dial for SIP phone numbers that you call often. Call History Call History Use this screen to view a call history list. Call Summary Use this screen to view the summary of received, dialed and missed calls. System Monitor VMG5313-BXB Series User’s Guide...
Page 29 Use this screen to change your VMG’s time and date. Email Use this screen to configure up to two mail servers and sender Notification addresses on the VMG. Log Setting Use this screen to change your VMG’s log settings. VMG5313-BXB Series User’s Guide...
Page 30 Use this screen to configure CFM (Connectivity Fault Management) MD (maintenance domain) and MA (maintenance association), perform connectivity tests and view test reports. OAM Ping Use this screen to view information to help you identify problems with the DSL connection. VMG5313-BXB Series User’s Guide...
Page 31: Quick Start
Click Next. Figure 10 Quick Start - Welcome Enter your Internet connection information in this screen. The screen and fields to enter may vary depending on your current connection type. Click Next. VMG5313-BXB Series User’s Guide...
Page 32 Turn the wireless LAN on or off. If you keep it on, record the security settings so you can configure your wireless clients to connect to the VMG. Click Save. Figure 12 Quick Start - Wireless Your VMG saves your settings and attempts to connect to the Internet. VMG5313-BXB Series User’s Guide...
Page 33: Tutorials
Broadband screens. Click Network Setting > Broadband to open the following screen. Click Add New WAN Interface. In this example, the DSL connection has the following information. General Name MyDSLConnection Type ADSL VMG5313-BXB Series User’s Guide...
Page 34 Then select DNS as Static and enter the DNS server addresses provided to you, such as 192.168.5.2 (DNS server1)/192.168.5.1 (DNS server2). Leave the rest of the fields to the default settings. Click Apply to save your settings. VMG5313-BXB Series User’s Guide...
Page 35 Chapter 4 Tutorials VMG5313-BXB Series User’s Guide...
Page 36: Setting Up A Secure Wireless Network
802.11b/g/n Mixed Click Network Setting > Wireless to open the General screen. Select More Secure as the security level and WPA2-PSK as the security mode. Configure the screen using the provided parameters (see page 36). Click Apply. VMG5313-BXB Series User’s Guide...
Page 37: Using Wps
This section shows you how to set up a wireless network using WPS. It uses the VMG as the AP and ZyXEL NWD210N as the wireless client which connects to the notebook. Note: The wireless client must be a WPS-aware device (for example, a WPS USB adapter or PCMCIA card). VMG5313-BXB Series User’s Guide...
Page 38 Both buttons have exactly the same function: you can use one or the other. Note: It doesn’t matter which button is pressed first. You must press the second button within two minutes of pressing the first one. VMG5313-BXB Series User’s Guide...
Page 39 Launch your wireless client’s configuration utility. Go to the WPS settings and select the PIN method to get a PIN number. Log into VMG’s web configurator and go to the Network Setting > Wireless > WPS screen. Enable the WPS function and click Apply. VMG5313-BXB Series User’s Guide...
Page 40 This may take up to two minutes. The wireless client is then able to communicate with the VMG securely. The following figure shows you how to set up a wireless network and its security on a VMG and a wireless client by using PIN method. VMG5313-BXB Series User’s Guide...
Page 41: Without Wps
“DoNotStealMyWirelessNetwork” pre-shared key to establish an wireless Internet connection. Note: The VMG supports IEEE 802.11b and IEEE 802.11g wireless clients. Make sure that your notebook or computer’s wireless adapter supports one of these standards. VMG5313-BXB Series User’s Guide...
Page 42: Setting Up Multiple Wireless Groups
Pre-Shared Key ForCompanyOnly 123456789 guest123 Click Network Setting > Wireless to open the General screen. Use this screen to set up the company’s general wireless network group. Configure the screen using the provided parameters and click Apply. VMG5313-BXB Series User’s Guide...
Page 43 Chapter 4 Tutorials Click Network Setting > Wireless > Guest/More AP to open the following screen. Click the Edit icon to configure the second wireless network group. Configure the screen using the provided parameters and click Apply. VMG5313-BXB Series User’s Guide...
Page 44 Chapter 4 Tutorials In the Guest/More AP screen, click the Edit icon to configure the third wireless network group.Configure the screen using the provided parameters and click Apply. VMG5313-BXB Series User’s Guide...
Page 45: Configuring Static Route For Routing To Another Network
In order to extend your Intranet and control traffic flowing directions, you may connect a router to the VMG’s LAN. The router may be used to separate two department networks. This tutorial shows how to configure a static routing rule for two network routings. VMG5313-BXB Series User’s Guide...
Page 46 B. This tutorial uses the following example IP settings: Table 4 IP Settings in this Tutorial DEVICE / COMPUTER IP ADDRESS The VMG’s WAN 172.16.1.1 The VMG’s LAN 192.168.1.1 IP Type IPv4 Use Interface VDSL/ppp1.1 192.168.1.34 VMG5313-BXB Series User’s Guide...
Page 47: Configuring Qos Queue And Class Setup
Now B should be able to receive traffic from A. You may need to additionally configure B’s firewall settings to allow specific traffic to pass through. 4.6 Configuring QoS Queue and Class Setup This section contains tutorials on how you can configure the QoS screen. VMG5313-BXB Series User’s Guide...
Page 48 Click Apply. Tutorial: Advanced > QoS Click Queue Setup > Add new Queue to create a new queue. In the screen that opens, check Active and enter or select the following values: • Name: E-mail VMG5313-BXB Series User’s Guide...
Page 49 • Rate Limit: 5,000 (kbps) Tutorial: Advanced > QoS > Queue Setup Click Class Setup > Add new Classifier to create a new class. Check Active and follow the settings as shown in the screen below. VMG5313-BXB Series User’s Guide...
Page 50 Type the MAC address of your computer - AA:FF:AA:FF:AA:FF. Type the MAC Mask if you know it. To Queue Link this to an item in the Network Setting > QoS > Queue Setup screen, which is the E- Index mail queue created in this example. VMG5313-BXB Series User’s Guide...
Page 51: Access The Vmg Using Ddns
• IP Address: Enter the WAN IP address that your VMG is currently using. You can find the IP address on the VMG’s Web Configurator Status page. Then you will need to configure the same account and host name on the VMG later. VMG5313-BXB Series User’s Guide...
Page 52: Configuring Ddns On Your Vmg
Josephine’s computer connects wirelessly to the Internet through the VMG. Thomas decides to use the Security > MAC Filter screen to grant wireless network access to his computer but not to Josephine’s computer. VMG5313-BXB Series User’s Guide...
Page 53: Access Your Shared Files From A Computer
4.9 Access Your Shared Files From a Computer Here is how to use an FTP program to access a file storage device connected to the VMG’s USB port. Note: This example uses the FileZilla FTP program to browse your shared files. VMG5313-BXB Series User’s Guide...
Page 54 In FileZilla enter the IP address of the VMG (the default is 192.168.1.1), your account’s user name and password and port 21 and click Quickconnect. A screen asking for password authentication appears. File Sharing via Windows Explorer Once you log in the USB device displays in the folder. VMG5313-BXB Series User’s Guide...
Page 55: Technical Reference
Technical Reference...
Page 57: Network Map And Status Screens
5.2 The Network Map Screen Use this screen to view the network connection status of the device and its clients. A warning message appears if there is a connection problem. Figure 13 Network Map: Icon View Mode VMG5313-BXB Series User’s Guide...
Page 58: The Status Screen
VMG to update this screen in Refresh interval. Figure 14 Network Map: List View Mode 5.3 The Status Screen Use this screen to view the status of the VMG. Click Status to open this screen. VMG5313-BXB Series User’s Guide...
Page 59 This field displays the current subnet mask in the WAN. MAC Address This shows the WAN Ethernet adapter MAC (Media Access Control) Address of your VMG. Primary DNS This field displays the first DNS server address assigned by the ISP. server VMG5313-BXB Series User’s Guide...
Page 60 If memory usage does get close to 100%, the VMG is probably becoming unstable, and you should restart the device. See Section 39.2 on page 285, or turn off the device (unplug the power) for a few seconds. VMG5313-BXB Series User’s Guide...
Page 61 This column displays the service provider name and SIP number for each SIP account. Provider This field displays the account number and service domain of the SIP account. You can change these in the VoIP > SIP screens. VMG5313-BXB Series User’s Guide...
Page 62: Broadband
• Use the Ethernet WAN screen to enable the fourth Ethernet LAN port to be an Ethernet WAN port (Section 6.5 on page 82). • Use the 802.1x screen to view and configure the IEEE 802.1X settings on the VMG (Section 6.6 on page 83). VMG5313-BXB Series User’s Guide...
Page 63: What You Need To Know
Asynchronous Transfer Mode (ATM) is a WAN networking technology that provides high-speed data transfer. ATM uses fixed-size packets of information called cells. With ATM, a high QoS (Quality of Service) can be guaranteed. ATM uses a connection-oriented model and establishes a virtual circuit (VC) between Finding Out More VMG5313-BXB Series User’s Guide...
Page 64: Ipv6 Introduction
16-bit blocks and written in hexadecimal notation. Hexadecimal uses four bits for each character (1 ~ 10, A ~ F). Each block’s 16 bits are then represented by four hexadecimal characters. For example, FFFF:FFFF:FFFF:FFFF:FC00:0000:0000:0000. VMG5313-BXB Series User’s Guide...
Page 65: Ipv6 Rapid Deployment
Transition Router (AFTR in the graphic) to connect to the IPv4 Internet. The local network can also use IPv6 services. The VMG uses it’s configured IPv6 WAN IP to route IPv6 traffic to the IPv6 Internet. VMG5313-BXB Series User’s Guide...
Page 66: Before You Begin
This shows whether the connection is in routing or bridge mode. Encapsulation This is the method of encapsulation used by this connection. 802.1p This indicates the 802.1p priority level assigned to traffic sent through this connection. This displays N/A when there is no priority level assigned. VMG5313-BXB Series User’s Guide...
Page 67 This shows whether Multicast Listener Discovery (MLD) is activated or not for this connection. MLD is not available when the connection uses the bridging service. Modify Click the Edit icon to configure the WAN connection. Click the Delete icon to remove the WAN connection. VMG5313-BXB Series User’s Guide...
Page 68: Add/Edit Internet Connection
The following example screen displays when you select the ADSL/VDSL over ATM connection type, Routing mode, and PPPoE encapsulation. The screen varies when you select other interface type, encapsulation, and IPv6/IPv4 mode. Figure 20 Network Setting > Broadband > Add New WAN Interface/Edit (Routing Mode) VMG5313-BXB Series User’s Guide...
Page 69 PDU to identify the PDUs. The LCC header can be followed by an IEEE 802.1a SubNetwork Attachment Point (SNAP) header. This is available only when you select IPoA in the Encapsulation field. VMG5313-BXB Series User’s Guide...
Page 70 Disable PPPoE pass through if you do not need to allow hosts on the LAN to use PPPoE client software on their computers to connect to the ISP. IP Address (This is available only when you select IPv4 Only or IPv6/IPv4 DualStack in the IPv6/IPv4 Mode field.) VMG5313-BXB Series User’s Guide...
Page 71 Select Use Following Static DNS Address if you want the VMG to use the DNS server addresses you configure manually. DNS Server1 Enter the first DNS server address assigned by the ISP. DNS Server 2 Enter the second DNS server address assigned by the ISP. VMG5313-BXB Series User’s Guide...
Page 72 It can reduce multicast traffic significantly. Apply as Select this option to have the VMG use the WAN interface of this connection as the system Default default gateway. Gateway IPv6 DNS Configure the IPv6 DNS server in the following section. Server VMG5313-BXB Series User’s Guide...
Page 73: Bridge Mode
Select Bridge as the encapsulation mode. The screen varies depending on the interface type you select. If you select ADSL/VDSL over PTM as the interface type, the following screen appears. VMG5313-BXB Series User’s Guide...
Page 74 Type the VLAN ID number (from 0 to 4094) for traffic through this connection. Click OK to save your changes. Cancel Click Cancel to exit this screen without saving. If you select ADSL over ATM as the interface type, the following screen appears. VMG5313-BXB Series User’s Guide...
Page 75 To transport multiple protocols, the VMG needs separate VCs. There is a binding between a VC and the type of the network protocol carried on the VC. This reduces payload overhead since there is no need to carry protocol information in each Protocol Data Unit (PDU) payload. VMG5313-BXB Series User’s Guide...
Page 76: The 3G Backup Screen
The VMG automatically uses a wired WAN connection when available. Note: This VMG supports connecting one 3G dongle at a time. Figure 23 Internet Access Application: 3G WAN Use this screen to configure your 3G settings. Click Network Setting > Broadband > 3G Backup. VMG5313-BXB Series User’s Guide...
Page 77 Select this to have the VMG ping the particular host name or IP address you typed in this field. 3G Connection Settings Card This field displays the manufacturer and model name of your 3G card if you inserted one in description the VMG. Otherwise, it displays N/A. VMG5313-BXB Series User’s Guide...
Page 78 Maintenance > Email Notification screen. 3G backup Type a title that you want to be in the subject line of the e-mail notifications that the VMG Send Email sends. Title VMG5313-BXB Series User’s Guide...
Page 79 Select Keep to maintain an existing 3G connection or Drop to disconnect it. connection Actions Enable Email Select this to enable the e-mail notification function. The VMG will e-mail you a notification Notification when there over budget occurs. VMG5313-BXB Series User’s Guide...
Page 80: The Advanced Screen
8.832 2048 4.3125 20.5 1972 4.3125 11.5 8.832 2048 4.3125 14.5 2783 4.3125 14.5 2783 4.3125 14.5 17.664 4096 4.3125 14.5 3479 8.625 14.5 Click Network Setting > Broadband > Advanced to display the following screen. VMG5313-BXB Series User’s Guide...
Page 81 ITU G.992.1 (better known as G.dmt) is an ITU standard for ADSL using discrete multitone modulation. G.dmt full-rate ADSL expands the usable bandwidth of existing copper telephone lines, delivering high-speed data communications at rates up to 8 Mbit/s downstream and 1.3 Mbit/s upstream. VMG5313-BXB Series User’s Guide...
Page 82: The Ethernet Wan Screen
You can enable the fourth Ethernet LAN port to be an Ethernet WAN port in the Ethernet WAN screen. Click Network Setting > Broadband > Ethernet WAN to display the following screen. Figure 26 Network Setting > Broadband > Ethernet WAN VMG5313-BXB Series User’s Guide...
Page 83: The 802.1X Screen
This shows the certificate used for this authentication. This displays N/A when there is no certificate assigned. Trusted CA This shows the Trusted CA used for this authentication. This displays N/A when there is no Trusted CA assigned. Modify Click this icon to edit an item. VMG5313-BXB Series User’s Guide...
Page 84: Modify 802.1X Settings
Encapsulation Be sure to use the encapsulation method required by your ISP. The VMG can work in bridge mode or routing mode. When the VMG is in routing mode, it supports the following methods. VMG5313-BXB Series User’s Guide...
Page 85: Ip Over Ethernet
ATM virtual circuit (VC-based multiplexing). Please refer to RFC 1483 for more detailed information. Multiplexing There are two conventions to identify what protocols the virtual circuit (VC) is carrying. Be sure to use the multiplexing method required by your ISP. VC-based Multiplexing VMG5313-BXB Series User’s Guide...
Page 86: Traffic Shaping
If the PCR, SCR or MBS is set to the default of "0", the system will assign a maximum value that correlates to your upstream line rate. The following figure illustrates the relationship between PCR, SCR and MBS. Figure 29 Example of Traffic Shaping VMG5313-BXB Series User’s Guide...
Page 87: Atm Traffic Classes
When properly configured, VLAN prevents one subscriber from accessing the network resources of another on the same LAN, thus a user will not see the printers and hard disks of another user in the same building. VMG5313-BXB Series User’s Guide...
Page 88: Dns Server Address Assignment
DNS Server Address Assignment Use Domain Name System (DNS) to map a domain name to its corresponding IP address and vice versa, for instance, the IP address of www.zyxel.com is 204.217.0.2. The DNS server is extremely VMG5313-BXB Series User’s Guide...
Page 89 IPv6 prefix length specifies how many most significant bits (start from the left) in the address compose the network address. The prefix length is written as “/x” where x is a number. For example, 2001:db8:1a2b:15::1a2f:0/32 means that the first 32 bits (2001:db8) is the subnet prefix. VMG5313-BXB Series User’s Guide...
Page 90: Wireless
However, wireless networking is different from that of most traditional radio communications in that there a number of wireless networking standards available with different methods of data encryption. VMG5313-BXB Series User’s Guide...
Page 91: The General Screen
Apply to confirm. You must then change the wireless settings of your computer to match the VMG’s new settings. Click Network Setting > Wireless to open the General screen. Figure 30 Network Setting > Wireless > General VMG5313-BXB Series User’s Guide...
Page 92 Specify the maximum rate for downstream wireless traffic to this WLAN from the WAN in Downstream kilobits per second (Kbps). Bandwidth BSSID This shows the MAC address of the wireless interface on the VMG when wireless LAN is enabled. Security Level VMG5313-BXB Series User’s Guide...
Page 93: No Security
RADIUS server. If your wireless devices support nothing stronger than WEP, use the highest encryption level available. Your VMG allows you to configure up to four 64-bit or 128-bit WEP keys but only one key can be enabled at any one time. VMG5313-BXB Series User’s Guide...
Page 94: More Secure (Wpa(2)-Psk)
WPA encryption standard. It offers slightly better security, although the use of PSK makes it less robust than it could be. Click Network Setting > Wireless to display the General screen. Select More Secure as the security level. Then select WPA-PSK or WPA2-PSK from the Security Mode list. VMG5313-BXB Series User’s Guide...
Page 95: The Guest/More Ap Screen
7.3 The Guest/More AP Screen This screen allows you to enable and configure multiple Basic Service Sets (BSSs) on the VMG. Click Network Setting > Wireless > Guest/More AP. The following screen displays. VMG5313-BXB Series User’s Guide...
Page 96: Edit Guest/More Ap
Click the Edit icon to configure the SSID profile. 7.3.1 Edit Guest/More AP Use this screen to edit an SSID profile. Click the Edit icon next to an SSID in the Guest/More AP screen. The following screen displays. VMG5313-BXB Series User’s Guide...
Page 97 Select this check box to allow the VMG to convert wireless multicast traffic into wireless Multicast unicast traffic. Forwarding Guest WLAN Select this to create Guest WLANs for home and external clients. Select the WLAN type in the Access Scenario field. VMG5313-BXB Series User’s Guide...
Page 98: Mac Authentication
MAC addresses of the devices to configure this screen. Use this screen to view your VMG’s MAC filter settings and add new MAC filter rules. Click Network Setting > Wireless > MAC Authentication. The screen appears as shown. Figure 36 Wireless > MAC Authentication VMG5313-BXB Series User’s Guide...
Page 99: The Wps Screen
SSID1 to WPA2-PSK or No Security. Click Network Setting > Wireless > WPS. The following screen displays. Select Enable and click Apply to activate the WPS function. Then you can configure the WPS settings in this screen. VMG5313-BXB Series User’s Guide...
Page 100 Select Enable and click Apply to activate WPS method 3 on the VMG. Release The default WPS status is configured. Configuration Click this button to remove all configured wireless and wireless security settings for WPS connections on the VMG. VMG5313-BXB Series User’s Guide...
Page 101: The Wmm Screen
VMG "wakes up". The VMG wakes up periodically to check for incoming data. Note: This works only if the wireless device to which the VMG is connected also supports this feature. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG5313-BXB Series User’s Guide...
Page 102: The Wds Screen
Select Disable to turn off WDS. Remote Bridge You can enter the MAC address of the peer device by clicking the Edit icon under Modify. MAC Address This is the index number of the entry. VMG5313-BXB Series User’s Guide...
Page 103: Wds Scan
This shows the SSID of the available wireless device within range. BSSID This shows the MAC address of the available wireless device within range. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG5313-BXB Series User’s Guide...
Page 104: The Others Screen
Delivery Traffic Indication Message (DTIM) is the time period after which broadcast and multicast packets are transmitted to mobile clients in the Power Saving mode. A high DTIM value can cause clients to lose connectivity with the network. This value can be set from 1 to 255. VMG5313-BXB Series User’s Guide...
Page 105: The Channel Status Screen
Use the Channel Status screen to scan wireless LAN channel noises and view the results. Click Network Setting > Wireless > Channel Status. The screen appears as shown. Click Scan to scan the wireless LAN channels. You can view the results in the Channel Scan Result section. VMG5313-BXB Series User’s Guide...
Page 106: Technical Reference
• An “infrastructure” type of network has one or more access points and one or more wireless clients. The wireless clients connect to the access points. • An “ad-hoc” type of network is one in which there is no access point. Wireless clients connect to one another in order to exchange information. VMG5313-BXB Series User’s Guide...
Page 107 When you create a network, you must select a channel to use. Since the available unlicensed spectrum varies from one country to another, the number of available channels also varies. VMG5313-BXB Series User’s Guide...
Page 108: Additional Wireless Terms
A good way to come up with effective security keys, passwords and so on is to use obscure information that you personally will easily remember, and to enter it in a way that appears random VMG5313-BXB Series User’s Guide...
Page 109: Mac Address Filter
Some wireless devices, such as scanners, can detect wireless networks but cannot use wireless networks. These kinds of wireless devices might not have MAC addresses. Hexadecimal characters are 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, A, B, C, D, E, and F. VMG5313-BXB Series User’s Guide...
Page 110: Signal Problems
Problems with absorption occur when physical objects (such as thick walls) are between the two radios, muffling the signal. VMG5313-BXB Series User’s Guide...
Page 111: Bss
• You must use different keys for different BSSs. If two wireless devices have different BSSIDs (they are in different BSSs), but have the same keys, they may hear each other’s communications (but not communicate with each other). VMG5313-BXB Series User’s Guide...
Page 112: Preamble Type
WPS allows you to quickly set up a wireless network with strong security, without having to configure security settings manually. Each WPS connection works between two devices. Both devices must support WPS (check each device’s documentation to make sure). VMG5313-BXB Series User’s Guide...
Page 113: Push Button Configuration
(referred to here as the AP) and a client device using the PIN method. Ensure WPS is enabled on both devices. Access the WPS section of the AP’s configuration interface. See the device’s User’s Guide for how to do this. VMG5313-BXB Series User’s Guide...
Page 114 If you cannot connect, check the list of associated wireless clients in the AP’s configuration utility. If you see the wireless client in the list, WPS was successful. The following figure shows a WPS-enabled wireless client (installed in a notebook computer) connecting to the WPS-enabled AP via the PIN method. VMG5313-BXB Series User’s Guide...
Page 115 If the registrar is already part of a network, it sends the existing information. If not, it generates the SSID and WPA(2)-PSK randomly. The following figure shows a WPS-enabled client (installed in a notebook computer) connecting to a WPS-enabled access point. VMG5313-BXB Series User’s Guide...
Page 116 When WPS is activated on both, they perform the handshake. In this example, AP1 is the registrar, and Client 1 is the enrollee. The registrar randomly generates the security information to set up the network, since it is unconfigured and has no existing information. VMG5313-BXB Series User’s Guide...
Page 117 In step 3, you add another access point (AP2) to your network. AP2 is out of range of AP1, so you cannot use AP1 for the WPS handshake with the new access point. However, you know that Client 2 supports the registrar function, so you use it to perform the WPS handshake instead. VMG5313-BXB Series User’s Guide...
Page 118 If this happens, open the access point’s configuration interface and look at the list of associated clients (usually displayed by MAC address). It does not matter if the VMG5313-BXB Series User’s Guide...
Page 119 Check the MAC addresses of your wireless clients (usually printed on a label on the bottom of the device). If there is an unknown MAC address you can remove it or reset the AP. VMG5313-BXB Series User’s Guide...
Page 120: Home Networking
• Use the Wake on Lan screen to remotely turn on a device on the network. (Section 8.7 on page 131). • Use the TFTP Server Name screen to identify a TFTP server for configuration file download using DHCP option 66. (Section 8.8 on page 132). VMG5313-BXB Series User’s Guide...
Page 121: What You Need To Know
UPnP devices and enable exchange of simple product and service descriptions. NAT traversal allows the following: • Dynamic port mapping • Learning public IP addresses VMG5313-BXB Series User’s Guide...
Page 122: Before You Begin
Enter the IP subnet mask into the IP Subnet Mask field. Unless instructed otherwise it is best to leave this alone, the configurator will automatically compute a subnet mask based upon the IP address you entered. VMG5313-BXB Series User’s Guide...
Page 123 IP Address you enter, so do not change this field unless you are instructed to do so. IGMP Snooping Status Select the Enable IGMP Snooping checkbox to allows the VMG to passively learn multicast group. VMG5313-BXB Series User’s Guide...
Page 124 Select this to manually enter an interface ID for the LAN interface’s global IPv6 address. LAN IPv6 Address Setup Delegate prefix Select this option to automatically obtain an IPv6 network prefix from the service provider from WAN or an uplink router. VMG5313-BXB Series User’s Guide...
Page 125 IPv4 DNS Server First: The VMG forwards the requests to the IPv4 DNS server first and then the IPv6 DNS server. Then it sends clients the first DNS information it receives. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG5313-BXB Series User’s Guide...
Page 126: The Static Dhcp Screen
If you click Static DHCP Configuration in the Static DHCP screen or the Edit icon next to a static DHCP entry, the following screen displays. Figure 53 Static DHCP: Static DHCP Configuration/Edit VMG5313-BXB Series User’s Guide...
Page 127: The Upnp Screen
UPnP. Use the following screen to configure the UPnP settings on your VMG. Click Network Setting > Home Networking > UPnP to display the screen shown next. Figure 54 Network Setting > Home Networking > UPnP VMG5313-BXB Series User’s Guide...
Page 128: Turning On Upnp In Windows 7 Example
Make sure the computer is connected to a LAN port of the VMG. Turn on your computer and the VMG. Click the start icon, Control Panel and then the Network and Sharing Center. Click Change Advanced Sharing Settings. VMG5313-BXB Series User’s Guide...
Page 129: The Additional Subnet Screen
Use the Additional Subnet screen to configure IP alias and public static IP. IP alias allows you to partition a physical network into different logical networks over the same Ethernet interface. The VMG supports multiple logical LAN interfaces via its physical Ethernet VMG5313-BXB Series User’s Guide...
Page 130 Select Enable to enable the VMG to provide public IP addresses by DHCP server. by DHCP Enable ARP Select Enable to enable the ARP (Address Resolution Protocol) proxy. Proxy Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG5313-BXB Series User’s Guide...
Page 131: The Stb Vendor Id Screen
You need to know the MAC address of the LAN device. It may be on a label on the device or in its documentation. Click Network Setting > Home Networking > Wake on Lan to open this screen. Figure 57 Network Setting > Home Networking > Wake on Lan VMG5313-BXB Series User’s Guide...
Page 132: The Tftp Server Name Screen
LANs, WANs and the VMG The actual physical connection determines whether the VMG ports are LAN or WAN ports. There are two separate IP networks, one inside the LAN network and the other outside the WAN network as shown next. VMG5313-BXB Series User’s Guide...
Page 133: Dhcp Setup
DNS servers out of the DHCP setup under all circumstances. If your ISP gives you explicit DNS servers, make sure that you enter their IP addresses in the DHCP Setup screen. VMG5313-BXB Series User’s Guide...
Page 134: Lan Tcp/Ip
If you belong to a small organization and your Internet access is through an ISP, the ISP can provide you with the Internet addresses for your local networks. On the other hand, if you are part of a much larger organization, you should consult your network administrator for the appropriate IP addresses. VMG5313-BXB Series User’s Guide...
Page 135 Note: Regardless of your particular situation, do not create an arbitrary IP address; always follow the guidelines above. For more information on address assignment, please refer to RFC 1597, “Address Allocation for Private Internets” and RFC 1466, “Guidelines for Management of IP Address Space”. VMG5313-BXB Series User’s Guide...
Page 136: Routing
Use this screen to view and configure the static route rules on the VMG. Click Network Setting > Routing > Static Route to open the following screen. Figure 61 Network Setting > Routing > Static Route VMG5313-BXB Series User’s Guide...
Page 137: Add/Edit Static Route
Route Name Enter a descriptive name for the static route. IP Type Select whether your IP type is IPv4 or IPv6. Destination IP Enter the IPv4 or IPv6 network address of the final destination. Address VMG5313-BXB Series User’s Guide...
Page 138: The Dns Route Screen
Click the Delete icon to delete the DNS route. 9.3.1 The DNS Route Add Screen You can manually add the VMG’s DNS route entry. Click Add New DNS Route in the Network Setting > Routing > DNS Route screen. The screen shown next appears. VMG5313-BXB Series User’s Guide...
Page 139: The Policy Route Screen
The following table describes the labels in this screen. Table 43 Network Setting > Routing >Policy Route LABEL DESCRIPTION Add New Policy Click this to create a new policy forwarding rule. Route This is the index number of the entry. VMG5313-BXB Series User’s Guide...
Page 140: Add/Edit Policy Route
Enter a descriptive name of up to 8 printable English keyboard characters, not including spaces. Source IP Enter the source IP address. Source Subnet Enter the source subnet mask address. Mask Protocol Select the transport layer protocol (TCP or UDP). VMG5313-BXB Series User’s Guide...
Page 141: Rip
Select Active to have the VMG advertise its route information and also listen for routing updates from neighboring routers. Enabled Select the check box to activate the settings. Apply Click Apply to save your changes back to the VMG. VMG5313-BXB Series User’s Guide...
Page 142: Quality Of Service (Qos)
• The Shaper Setup screen limits outgoing traffic transmission rate on the selected interface (Section 10.6 on page 152). • The Policer Setup screen to control incoming traffic transmission rate and bursts (Section 10.7 on page 153). VMG5313-BXB Series User’s Guide...
Page 143: What You Need To Know
(or queues). Your VMG uses the Token Bucket algorithm to allow a certain amount of large bursts while keeping a limit at the average rate. Traffic Rate Traffic Rate Time Time (Before Traffic Shaping) (After Traffic Shaping) VMG5313-BXB Series User’s Guide...
Page 144: The Quality Of Service General Screen
Click Network Setting > QoS > General to open the screen as shown next. Use this screen to enable or disable QoS and set the upstream bandwidth. See Section 10.1 on page 142 for more information. Figure 68 Network Settings > QoS > General VMG5313-BXB Series User’s Guide...
Page 145: The Queue Setup Screen
Click Cancel to restore your previously saved settings. 10.4 The Queue Setup Screen Click Network Setting > QoS > Queue Setup to open the screen as shown next. Use this screen to configure QoS queue assignment. VMG5313-BXB Series User’s Guide...
Page 146: Adding A Qos Queue
Click the Delete icon to delete an existing queue. Note that subsequent rules move up by one when you take this action. 10.4.1 Adding a QoS Queue Click Add New Queue or the edit icon in the Queue Setup screen to configure a queue. Figure 70 Queue Setup: Add VMG5313-BXB Series User’s Guide...
Page 147: The Classification Setup Screen
Click Network Setting > QoS > Classification Setup to open the following screen. Figure 71 Network Setting > QoS > Classification Setup VMG5313-BXB Series User’s Guide...
Page 148: Add/Edit Qos Class
Click the Delete icon to delete an existing classifier. Note that subsequent rules move up by one when you take this action. 10.5.1 Add/Edit QoS Class Click Add New Classification in the Classification Setup screen or the Edit icon next to a classifier to open the following screen. VMG5313-BXB Series User’s Guide...
Page 149 Select an existing number for where you want to put this classifier to move the classifier to the number you selected after clicking Apply. Select Last to put this rule in the back of the classifier list. VMG5313-BXB Series User’s Guide...
Page 150 This field is available only when you select IP in the Ether Type field. Select this option and select the protocol (service type) from TCP, UDP, ICMP or IGMP. If you select User defined, enter the protocol (service type) number. VMG5313-BXB Series User’s Guide...
Page 151 Step4: Class Routing Forward to Select a WAN interface through which traffic of this class will be forwarded out. If you select Interface Unchange, the VMG forward traffic of this class according to the default routing table. VMG5313-BXB Series User’s Guide...
Page 152: The Qos Shaper Setup Screen
This shows the average rate limit of traffic bursts for this shaper. (kbps) Modify Click the Edit icon to edit the shaper. Click the Delete icon to delete an existing shaper. Note that subsequent rules move up by one when you take this action. VMG5313-BXB Series User’s Guide...
Page 153: Add/Edit A Qos Shaper
DSCP value for matched traffic. Click Network Setting > QoS > Policer Setup. The screen appears as shown. Figure 75 Network Setting > QoS > Policer Setup VMG5313-BXB Series User’s Guide...
Page 154: Add/Edit A Qos Policer
10.7.1 Add/Edit a QoS Policer Click Add New Policer in the Policer Setup screen or the Edit icon next to a policer to show the following screen. Figure 76 Policer Setup: Add/Edit VMG5313-BXB Series User’s Guide...
Page 155: Technical Reference
IEEE 802.1Q Tag The IEEE 802.1Q standard defines an explicit VLAN tag in the MAC header to identify the VLAN membership of a frame across bridges. A VLAN tag includes the 12-bit VLAN ID and 3-bit user VMG5313-BXB Series User’s Guide...
Page 156 DiffServ network. Based on the marking rule, different kinds of traffic can be marked for different kinds of forwarding. Resources can then be allocated according to the DSCP values and the configured policies. VMG5313-BXB Series User’s Guide...
Page 157: Automatic Priority Queue Assignment
PRIORITY TOS (IP IP PACKET DSCP (ETHERNET PRECEDENCE) LENGTH (BYTE) PRIORITY) 000000 000000 >1100 001110 250~1100 001100 001010 001000 010110 010100 010010 010000 011110 <250 011100 011010 011000 100110 100100 100010 100000 101110 101000 110000 111000 VMG5313-BXB Series User’s Guide...
Page 158: Token Bucket
CBS bucket is equal to or greater than the size of the packet (in bytes). • After a packet is transmitted, a number of tokens corresponding to the packet size is removed from the CBS bucket. VMG5313-BXB Series User’s Guide...
Page 159 • If the PBS bucket has enough tokens, the VMG checks the CBS bucket. The packet is marked green and can be transmitted if the number of tokens in the CBS bucket is equal to or greater than the size of the packet (in bytes). Otherwise, the packet is marked yellow. VMG5313-BXB Series User’s Guide...
Page 160: Network Address Translation (Nat)
IP address of a host when the packet is in the local network, while the global address refers to the IP address of the host when the same packet is traveling in the WAN side. VMG5313-BXB Series User’s Guide...
Page 161: The Port Forwarding Screen
80 to another (B in the example) and assign a default server IP address of 192.168.1.35 to a third (C in the example). You assign the LAN IP addresses and the ISP assigns the WAN IP address. The NAT network appears as a single host on the Internet. VMG5313-BXB Series User’s Guide...
Page 162 This shows the IP protocol supported by this virtual server, whether it is TCP, UDP, or TCP/ UDP. Modify Click the Edit icon to edit this rule. Click the Delete icon to delete an existing rule. VMG5313-BXB Series User’s Guide...
Page 163: Add/Edit Port Forwarding
This shows the port number to which you want the VMG to translate the incoming port. For Start Port a range of ports, enter the first number of the range to which you want the incoming ports translated. Translation End This shows the last port of the translated port range. Port VMG5313-BXB Series User’s Guide...
Page 164: The Applications Screen
Address Modify Click the Delete icon to delete the rule. 11.3.1 Add New Application This screen lets you create new NAT application rules. Click Add New Application in the Applications screen to open the following screen. VMG5313-BXB Series User’s Guide...
Page 165: The Port Triggering Screen
LAN can use the service in the same manner. This way you do not need to configure a new IP address each time you want a different LAN computer to use the application. For example: VMG5313-BXB Series User’s Guide...
Page 166 IP address of the LAN computer that sent the traffic to a server on the WAN. This is the first port number that identifies a service. Trigger End This is the last port number that identifies a service. Port Trigger Proto. This is the trigger transport layer protocol. VMG5313-BXB Series User’s Guide...
Page 167: Add/Edit Port Triggering Rule
Type a port number or the starting port number in a range of port numbers. Trigger End Type a port number or the ending port number in a range of port numbers. Port Trigger Protocol Select the transport layer protocol from TCP, UDP, or TCP/UDP. VMG5313-BXB Series User’s Guide...
Page 168: The Dmz Screen
VMG is behind a SIP ALG. Use this screen to enable and disable the NAT and SIP (VoIP) ALG in the VMG. To access this screen, click Network Setting > NAT > ALG. VMG5313-BXB Series User’s Guide...
Page 169: The Address Mapping Screen
IP address from your ISP. You can only do this for the Many-to-One mapping type. Global End IP This is the ending Inside Global IP Address (IGA). This field is blank for One-to-One and Many-to-One mapping types. VMG5313-BXB Series User’s Guide...
Page 170: Add/Edit Address Mapping Rule
SUA (i.e., PAT, port address translation), the VMG's Single User Account feature that previous routers supported only. Many-to-Many: This mode maps multiple local IP addresses to shared global IP addresses. Local Start IP Enter the starting Inside Local IP Address (ILA). VMG5313-BXB Series User’s Guide...
Page 171: The Sessions Screen
NAT sessions. Apply Click this to save your changes on this screen. Cancel Click this to exit this screen without saving any changes. 11.9 Technical Reference This part contains more information regarding NAT. VMG5313-BXB Series User’s Guide...
Page 172: Nat Definitions
With no servers defined, your VMG filters out all incoming inquiries, thus preventing intruders from probing your network. For more information on IP address translation, refer to RFC 1631, The IP Network Address Translator (NAT). VMG5313-BXB Series User’s Guide...
Page 173: How Nat Works
Address (ILA) Address (IGA) 192.168.1.11 192.168.1.10 11.9.4 NAT Application The following figure illustrates a possible NAT application, where three inside LANs (logical LANs using IP alias) behind the VMG can communicate with three distinct WAN networks. VMG5313-BXB Series User’s Guide...
Page 174 Let's say you want to assign ports 21-25 to one FTP, Telnet and SMTP server (A in the example), port 80 to another (B in the example) and assign a default server IP address of 192.168.1.35 to a VMG5313-BXB Series User’s Guide...
Page 175 (C in the example). You assign the LAN IP addresses and the ISP assigns the WAN IP address. The NAT network appears as a single host on the Internet. Figure 92 Multiple Servers Behind NAT Example A=192.168.1.33 192.168.1.1 B=192.168.1.34 IP address assigned by ISP C=192.168.1.35 D=192.168.1.36 VMG5313-BXB Series User’s Guide...
Page 176: Dynamic Dns Setup
Enabling the wildcard feature for your host causes *.yourhost.dyndns.org to be aliased to the same IP address as yourhost.dyndns.org. This feature is useful if you want to be able to use, for example, www.yourhost.dyndns.org and still reach your hostname. VMG5313-BXB Series User’s Guide...
Page 177: The Dns Entry Screen
You can manually add or edit the VMG’s DNS name and IP address entry. Click Add New DNS Entry in the DNS Entry screen or the Edit icon next to the entry you want to edit. The screen shown next appears. Figure 94 DNS Entry: Add/Edit VMG5313-BXB Series User’s Guide...
Page 178: The Dynamic Dns Screen
Current Dynamic This shows the IP address your Dynamic DNS provider has currently associated with the hostname. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG5313-BXB Series User’s Guide...
Page 179: Igmp/Mld
13.2 The IGMP/MLD Screen Use this screen to configure multicast groups the VMG has joined and which ports have joined it. To open this screen, click Network Setting > IGMP/MLD. VMG5313-BXB Series User’s Guide...
Page 180 IGMP or MLD join report frames are dropped by the interface. Maximum Enter a number to limit the number of multicast data sources (1-24) a multicast group is Multicast Data allowed to have. Sources Note: The setting only works for IGMPv3 and MLDv2. VMG5313-BXB Series User’s Guide...
Page 181 Select this to have the VMG add a host to a multicast group immediately once the VMG Join Immediate receives an IGMP or MLD join message. (IPTV) Apply Click Apply to save your changes back to the VMG. Cancel Click Cancel to exit this screen without saving. VMG5313-BXB Series User’s Guide...
Page 182: Vlan Group
Use these screens to group separate VLAN groups together to be treated as one VLAN group. 14.2 The Vlan Group Screen Click Network Setting > Vlan Group to open the following screen. Figure 98 Network Setting > Vlan Group VMG5313-BXB Series User’s Guide...
Page 183: Add/Edit A Vlan Group
Note: LAN5 displays if the WAN port was configured as a LAN port in the Home Networking > 5th Ethernet port screen. Apply Click Apply to save your changes back to the VMG. Cancel Click Cancel to exit this screen without saving. VMG5313-BXB Series User’s Guide...
Page 184: Interface Grouping
In the following example, the client that sends packets with the DHCP Vendor ID option set to MSFT 5.0 (meaning it is a Windows 2000 DHCP client) is assigned the IP address 192.168.2.2 and uses the WAN VDSL_PoE/ppp0.1 interface. VMG5313-BXB Series User’s Guide...
Page 185: Interface Group Configuration
Click the Add New Interface Group button in the Interface Grouping screen to open the following screen. Use this screen to create a new interface group. Note: An interface can belong to only one group at a time. VMG5313-BXB Series User’s Guide...
Page 186 This shows the filtering criteria. The LAN interface on which the matched traffic is received will belong to this group automatically. WildCard This shows if wildcard on DHCP option 60 is enabled. Support Remove Click the Remove icon to delete this rule from the VMG. VMG5313-BXB Series User’s Guide...
Page 187: Interface Grouping Criteria
DHCP option 60. DHCP option 60 option DHCP Option Select this and enter the device identity of the matched traffic. IAID Enter the Identity Association Identifier (IAID) of the device, for example, the WAN connection index number. VMG5313-BXB Series User’s Guide...
Page 188 Enter the model name of the device. Name Serial Enter the serial number of the device. Number Apply Click Apply to save your changes back to the VMG. Cancel Click Cancel to exit this screen without saving. VMG5313-BXB Series User’s Guide...
Page 189: Usb Service
• Use the Media Server screen to enable or disable the sharing of media files (Section 16.3 on page 192). 16.1.2 What You Need To Know The following terms and concepts may help as you read this chapter. VMG5313-BXB Series User’s Guide...
Page 190: Before You Begin
Use this screen to set up file sharing through the VMG. The VMG’s LAN users can access the shared folder (or share) from the USB device inserted in the VMG. To access this screen, click Network Setting > USB Service > File Sharing. VMG5313-BXB Series User’s Guide...
Page 191: The Add New User Screen
Use this screen to create a user account that can access the secured shares on the USB device. To access this screen, click the Add New User button in the Network Setting > USB Service > File Sharing screen. VMG5313-BXB Series User’s Guide...
Page 192: The Media Server Screen
The media server is enabled by default with the video, photo, and music shares published. To change your VMG’s media server settings, click Network Setting > USB Service > Media Server. The screen appears as shown. VMG5313-BXB Series User’s Guide...
Page 193 Enter the path clients use to access the media files on a USB storage device connected to Path the VMG. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG5313-BXB Series User’s Guide...
Page 194: Firewall
• Use the Access Control screen to view and configure incoming/outgoing filtering rules (Section 17.4 on page 198). • Use the DoS screen to activate protection against Denial of Service (DoS) attacks (.Section 17.5 on page 200). VMG5313-BXB Series User’s Guide...
Page 195: What You Need To Know
Use this screen to set the security level of the firewall on the VMG. Firewall rules are grouped based on the direction of travel of packets to which they apply. Click Security > Firewall to display the General screen. VMG5313-BXB Series User’s Guide...
Page 196: The Protocol Screen
IANA (Internet Assigned Number Authority) website. See Appendix D on page 329 for some examples. Click Security > Firewall > Protocol to display the following screen. Figure 110 Security > Firewall > Protocol VMG5313-BXB Series User’s Guide...
Page 197: Add/Edit A Service
Use this screen to add a customized service rule that you can use in the firewall’s ACL rule configuration. Click Add new service entry or the edit icon next to an existing service rule in the Service screen to display the following screen. Figure 111 Service: Add/Edit VMG5313-BXB Series User’s Guide...
Page 198: The Access Control Screen
This is the index number of the entry. Name This displays the name of the rule. Src IP This displays the source IP addresses to which this rule applies. Please note that a blank source address is equivalent to Any. VMG5313-BXB Series User’s Guide...
Page 199: Add/Edit An Acl Rule
Enter a descriptive name of up to 16 alphanumeric characters, not including spaces, underscores, and dashes. You must enter the filter name to add an ACL rule. This field is read-only if you are editing the ACL rule. Order Select the order of the ACL rule. VMG5313-BXB Series User’s Guide...
Page 200: The Dos Screen
Internet access becomes unavailable. Use the DoS screen to activate protection against DoS attacks. Click Security > Firewall > DoS to display the following screen. VMG5313-BXB Series User’s Guide...
Page 201 DoS Protection Select Enable to enable protection against DoS attacks. Blocking Deny Ping Select Enable to block ping request packets. Response Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG5313-BXB Series User’s Guide...
Page 202: Mac Filter
18.2 The MAC Filter Screen Use this screen to allow wireless and LAN clients access to the VMG. Click Security > MAC Filter. The screen appears as shown. Figure 115 Security > MAC Filter VMG5313-BXB Series User’s Guide...
Page 203 VMG in these address fields. Enter the MAC addresses in a valid MAC address format, that is, six hexadecimal character pairs, for example, 12:34:56:78:9a:bc. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG5313-BXB Series User’s Guide...
Page 204: Parental Control
This shows the day(s) and time on which parental control is enabled. Schedule Network This shows whether the network service is configured. If not, None will be shown. Service Website Block This shows whether the website block is configured. If not, None will be shown. VMG5313-BXB Series User’s Guide...
Page 205: Add/Edit A Parental Control Profile
Use this screen to configure a restricted access schedule and/or URL filtering settings to block the users on your network from accessing certain web sites. Figure 117 Parental Control Rule: Add/Edit Rule VMG5313-BXB Series User’s Guide...
Page 206 (No access). Click the + sign above the time bar to add a new time bar. Up to three are allowed. Authorized Select this to allow access for the times defined above. access No access Select this to deny access for the times defined above. VMG5313-BXB Series User’s Guide...
Page 207 Click Add to show a screen to enter the URL of web site or URL keyword to which the VMG URL Keyword blocks access. Click Delete to remove it. Apply Click this button to save your settings back to the VMG. Cancel Click Cancel to restore your previously saved settings. VMG5313-BXB Series User’s Guide...
Page 208: Scheduler Rule
20.2.1 Add/Edit a Schedule Click the Add New Rule button in the Scheduler Rule screen or click the Edit icon next to a schedule rule to open the following screen. Use this screen to configure a restricted access schedule. VMG5313-BXB Series User’s Guide...
Page 209 Enter the time period of each day, in 24-hour format, during which the rule will be enforced. Range Description Enter a description for this scheduler rule. Click OK to save your changes. Cancel Click Cancel to exit this screen without saving. VMG5313-BXB Series User’s Guide...
Page 210: Certificates
21.3 The Local Certificates Screen Click Security > Certificates to open the Local Certificates screen. This is the VMG’s summary list of certificates and certification requests. Figure 122 Security > Certificates > Local Certificates VMG5313-BXB Series User’s Guide...
Page 211: Create Certificate Request
21.3.1 Create Certificate Request Click Security > Certificates > Local Certificates and then Create Certificate Request to open the following screen. Use this screen to have the VMG generate a certification request. VMG5313-BXB Series User’s Guide...
Page 212 After you click Apply, the following screen displays to notify you that you need to get the certificate request signed by a Certificate Authority. If you already have, click Load_Signed to import the signed certificate into the VMG. Otherwise click Back to return to the Local Certificates screen. VMG5313-BXB Series User’s Guide...
Page 213: Load Signed Certificate
Certificates screen click the certificate request’s Load Signed icon to import the signed certificate into the VMG. Note: You must remove any spaces from the certificate’s filename before you can import Figure 125 Load Signed Certificate VMG5313-BXB Series User’s Guide...
Page 214: The Trusted Ca Screen
21.4.1 View Trusted CA Certificate Click the View icon in the Trusted CA screen to open the following screen. Use this screen to view in-depth information about the certification authority’s certificate. VMG5313-BXB Series User’s Guide...
Page 215: Import Trusted Ca Certificate
Click Back to return to the previous screen. 21.4.2 Import Trusted CA Certificate Click the Import Certificate button in the Trusted CA screen to open the following screen. The VMG trusts any valid certificate signed by any of the imported trusted CA certificates. VMG5313-BXB Series User’s Guide...
Page 216 Type in the location of the certificate you want to upload in this field or click Choose File to Path find it. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG5313-BXB Series User’s Guide...
Page 217: Voice
You don’t necessarily need to use all these screens to set up your account. In fact, if your service provider did not supply information on a particular field in a screen, it is usually best to leave it at its default setting. VMG5313-BXB Series User’s Guide...
Page 218: What You Need To Know About Voip
The VMG uses a SIP account to make outgoing VoIP calls and check if an incoming call’s destination number matches your SIP account’s SIP number. In order to make or receive a VoIP call, you need VMG5313-BXB Series User’s Guide...
Page 219: The Sip Account Add/Edit Screen
Note: Click more to see all the fields in the screen. You don’t necessarily need to use all these fields to set up your account. Click less to see and configure only the fields needed for this feature. VMG5313-BXB Series User’s Guide...
Page 220 You can use up to 95 printable ASCII Extended set characters. more/less Click more to display and edit more information for the SIP account. Click less to display and configure the basic SIP account settings. VMG5313-BXB Series User’s Guide...
Page 221 Call Waiting Specify a time of seconds that the VMG waits before rejecting the second call if Reject Timer you do not answer it. VMG5313-BXB Series User’s Guide...
Page 222 Notification to left blank, notifications will not be sent via e-mail. Email Missed Call Type a title that you want to be in the subject line of the e-mail notifications that Email Title the VMG sends. VMG5313-BXB Series User’s Guide...
Page 223: The Sip Service Provider Screen
This is the index number of the entry. SIP Service This shows the name of the SIP service provider. Provider Name SIP Server This shows the IP address or domain name of the SIP server. Address VMG5313-BXB Series User’s Guide...
Page 224: The Sip Service Provider Add/Edit Screen
Note: Click more to see all the fields in the screen. You don’t necessarily need to use all these fields to set up your account. Click less to see and configure only the fields needed for this feature. VMG5313-BXB Series User’s Guide...
Page 225 Select this to enable the SIP service provider. Provider SIP Service Enter the name of your SIP service provider. Provider Name SIP Local Port Enter the VMG’s listening port number, if your VoIP service provider gave you one. Otherwise, keep the default value. VMG5313-BXB Series User’s Guide...
Page 226 LAN or WAN connection is up. If you select Multi_WAN, you also need to select two or more pre-configured WAN interfaces. The VoIP service is activated only when one of the selected WAN connections is Outbound Proxy VMG5313-BXB Series User’s Guide...
Page 227 Select the transport layer protocol UDP or TCP (usually UDP) used for SIP. Ignore Direct IP Select Enable to have the connected CPE devices accept SIP requests only from the SIP proxy/register server specified above. SIP requests sent from other IP addresses will be ignored. VMG5313-BXB Series User’s Guide...
Page 228 Enter the key combinations that you can enter to transfer a call to another phone. Unconditional Enter the key combinations that you can enter to forward all incoming calls to the phone Call Forward number you specified in the SIP > SIP Account screen. Enable VMG5313-BXB Series User’s Guide...
Page 229 Dialing Interval Selection Dialing Interval Enter the number of seconds the VMG should wait after you stop dialing numbers before it Selection makes the phone call. The value depends on how quickly you dial phone numbers. DNS SRV VMG5313-BXB Series User’s Guide...
Page 230: Dial Plan Rules
• Calls with a number followed by the exclamation mark “!” will be dropped. • Calls with a number followed by the termination character “@” will be made immediately. Any digit (0~9, *, #) after the @ character will be ignored. VMG5313-BXB Series User’s Guide...
Page 231: The Phone Device Screen
Click this to set every field in this screen to its last-saved value. 22.6 The Region Screen Use this screen to maintain settings that depend on which region of the world the VMG is in. To access this screen, click VoIP > Region. Figure 134 VoIP > Region VMG5313-BXB Series User’s Guide...
Page 232: The Call Rule Screen
Enter the SIP number you want the VMG to call when you dial the speed-dial number. Description Enter a name to identify the party you call when you dial the speed-dial number. You can use up to 127 printable ASCII characters. VMG5313-BXB Series User’s Guide...
Page 233: The Call History Screen
The VMG logs calls from or to your SIP numbers. This screen allows you to view the summary of received, dialed and missed calls. Click VoIP > Call History > Call Summary. The following screen displays. VMG5313-BXB Series User’s Guide...
Page 234: Technical Reference
SIP Identities A SIP account uses an identity (sometimes referred to as a SIP address). A complete SIP identity is called a SIP URI (Uniform Resource Identifier). A SIP account's URI identifies the SIP account in a VMG5313-BXB Series User’s Guide...
Page 235: Sip Number
When you use SIP to make a VoIP call, it originates at a client and terminates at a server. A SIP client could be a computer or a SIP phone. One device can act as both a SIP client and a SIP server. VMG5313-BXB Series User’s Guide...
Page 236: Sip User Agent
IP address back to the device that sent the request. Then the client device that originally sent the request can send requests to the IP address that it received back from the redirect server. Redirect servers do not initiate SIP requests. VMG5313-BXB Series User’s Guide...
Page 237: Sip Register Server
When you make a VoIP call using SIP, the RTP (Real time Transport Protocol) is used to handle voice data transfer. See RFC 1889 for details on RTP. Pulse Code Modulation Pulse Code Modulation (PCM) measures analog signal amplitudes at regular time intervals and converts them into bits. VMG5313-BXB Series User’s Guide...
Page 238: Sip Call Progression
The following figure shows the SIP and session traffic flow between the user agents (UA 1 and UA 2) and the proxy servers (this example shows two proxy servers, PROXY 1 and PROXY 2). VMG5313-BXB Series User’s Guide...
Page 239 User Agent 1 via Proxy 1. User Agent 2 sends an OK response to Proxy 2 after the call is answered. This is also relayed back to User Agent 1 via Proxy 1. VMG5313-BXB Series User’s Guide...
Page 240: Voice Coding
Enable Message Waiting Indication (MWI) enables your phone to give you a message–waiting (beeping) dial tone when you have a voice message(s). Your VoIP service provider must have a messaging system that sends message waiting status SIP packets as defined in RFC 3842. VMG5313-BXB Series User’s Guide...
Page 241: Recording Custom Tones
Press a number from 1301~1308 followed by the “#” key to delete the tone of your choice. Press 14 followed by the “#” key if you wish to clear all your custom tones. VMG5313-BXB Series User’s Guide...
Page 242: Quality Of Service (Qos)
Supplementary services such as call hold, call waiting, and call transfer. are generally available from your VoIP service provider. The VMG supports the following services: The VMG does not support DiffServ at the time of writing. VMG5313-BXB Series User’s Guide...
Page 243: The Flash Key
Switch back to the call (if there is no second call). Flash Drop the call presently on hold or reject an incoming call which is waiting for answer. Flash Disconnect the current phone connection and answer the incoming call or resume with caller presently on hold. VMG5313-BXB Series User’s Guide...
Page 244: European Call Hold
When you hear the dial tone, dial “*98#” followed by the number to which you want to transfer the call. After you hear the ring signal or the second party answers it, hang up the phone. VMG5313-BXB Series User’s Guide...
Page 245: Usa Type Supplementary Services
(directory) number. If there is a second call to your telephone number, you will hear a call waiting tone. Press the flash key to put the first call on hold and answer the second call. VMG5313-BXB Series User’s Guide...
Page 246: Usa Call Transfer
(the sound a caller hears before you pick up the phone) and on hold tones (the sound someone hears when you put their call on hold). #### Internal Call Call the phone(s) connected to the VMG. VMG5313-BXB Series User’s Guide...
Page 247 Chapter 22 Voice Table 113 Phone Functions Summary ACTION FUNCTION DESCRIPTION One Shot Caller Display Call Activate or deactivate caller ID for the next call only. One Shot Caller Hidden Call VMG5313-BXB Series User’s Guide...
Page 248: Log
SEVERITY Emergency: The system is unusable. Alert: Action must be taken immediately. Critical: The system condition is critical. Error: There is an error condition on the system. Warning: There is a warning condition on the system. VMG5313-BXB Series User’s Guide...
Page 249: The System Log Screen
This field states the reason for the log. 23.3 The Security Log Screen Use the Security Log screen to see the security-related logs for the categories that you select. Click System Monitor > Log > Security Log to open the following screen. VMG5313-BXB Series User’s Guide...
Page 250 This field displays the severity level of the log that the device is to send to this syslog server. Category This field displays the type of the log. Messages This field states the reason for the log. VMG5313-BXB Series User’s Guide...
Page 251: Traffic Status
Data This indicates the number of transmitted packets on this interface. Error This indicates the number of frames with errors transmitted on this interface. Drop This indicates the number of outgoing packets dropped on this interface. VMG5313-BXB Series User’s Guide...
Page 252: The Lan Status Screen
This shows the LAN or WLAN interface. Bytes Sent This indicates the number of bytes transmitted on this interface. Bytes Received This indicates the number of bytes received on this interface. Interface This shows the LAN or WLAN interfaces. VMG5313-BXB Series User’s Guide...
Page 253: The Nat Status Screen
This displays what percentage of NAT sessions the VMG can support is currently being used by all connected hosts. You can also see the number of active NAT sessions and the maximum number of NAT sessions the VMG can support. VMG5313-BXB Series User’s Guide...
Page 254: Voip Status
This field displays the account number and service domain of the SIP account. You can change these in the VoIP > SIP screens. Message This field indicates whether or not there are any messages waiting for the SIP account. Waiting VMG5313-BXB Series User’s Guide...
Page 255 Outgoing This field displays the SIP number that you use to make calls on this phone port. Number Incoming This field displays the SIP number that you use to receive calls on this phone port. Number VMG5313-BXB Series User’s Guide...
Page 256: Arp Table
MAC address that replied. 26.2 ARP Table Screen Use the ARP table to view IP-to-MAC address mapping(s). To open this screen, click System Monitor > ARP Table. Figure 149 System Monitor > ARP Table VMG5313-BXB Series User’s Guide...
Page 257 This is the MAC address of the device with the listed IP address. Device This is the type of interface used by the device. You can click on the device type to go to its configuration screen. VMG5313-BXB Series User’s Guide...
Page 258: Routing Table
This indicates the destination IPv4 address or IPv6 address and prefix of this route. Gateway This indicates the IPv4 address or IPv6 address of the gateway that helps forward this route’s traffic. Subnet Mask This indicates the destination subnet mask of the IPv4 route. VMG5313-BXB Series User’s Guide...
Page 259 This indicates the name of the interface through which the route is forwarded. brx indicates a LAN interface where x can be 0~3 to represent LAN1 to LAN4 respectively. ptm0 indicates a WAN interface using IPoE or in bridge mode. ppp0 indicates a WAN interface using PPPoE. VMG5313-BXB Series User’s Guide...
Page 260: Multicast Status
28.3 The MLD Status Screen Use this screen to look at the current list of multicast groups the VMG has joined and which ports have joined it. To open this screen, click System Monitor > Multicast Status > MLD Status. VMG5313-BXB Series User’s Guide...
Page 261 Source List This is the list of IP addresses that are allowed or not allowed to receive the multicast group’s traffic depending on the filter mode. Member This is the list of members in the multicast group. VMG5313-BXB Series User’s Guide...
Page 262: Xdsl Statistics
Select the time interval for refreshing statistics. Line Select which DSL line’s statistics you want to display. xDSL Training This displays the current state of setting up the DSL connection. Status Mode This displays the ITU standard used for this connection. VMG5313-BXB Series User’s Guide...
Page 263 Upstream These are the statistics for the traffic direction going out from the port to the service provider. This is the number of Far End Corrected blocks. This is the number of Cyclic Redundancy Checks. VMG5313-BXB Series User’s Guide...
Page 264 30% or more errored blocks or at least one defect. This is a subset of ES. This is the number of UnAvailable Seconds. This is the number of Loss Of Signal seconds. This is the number of Loss Of Frame seconds. This is the number of Loss of Margin seconds. VMG5313-BXB Series User’s Guide...
Page 265: Statistics
WCDMA - Wideband Code Division Multiple Access, 3G HSDPA - High-Speed Downlink Packet Access, 3.5G HSUPA - High-Speed Uplink Packet Access, 3.75G HSPA - HSDPA+HSUPA, 3.75G Service This field displays the name of the service provider. Provider VMG5313-BXB Series User’s Guide...
Page 266 The International Mobile Subscriber Identity or IMSI is a unique identification number associated with all cellular networks. This number is provisioned in the SIM card. VID/PID This field displays the USB Vendor ID and Product ID of the 3G card. VMG5313-BXB Series User’s Guide...
Page 267: System
Type a hostname for your VMG. Enter a descriptive name of up to 16 alphanumeric characters, not including spaces, underscores, and dashes. Domain Name Type a Domain name for your host VMG. Apply Click Apply to save your changes. Cancel Click Cancel to abandon this screen without saving. VMG5313-BXB Series User’s Guide...
Page 268: User Account
Click the Delete icon to remove the entry. 32.2.1 The User Account Add/Edit Screen Click Add New Account or the Edit icon of an existing account in the Maintenance > User Account to open the following screen. VMG5313-BXB Series User’s Guide...
Page 269 Retry Times. Group Specify whether this user will have Administrator or User privleges. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG5313-BXB Series User’s Guide...
Page 270: Remote Management
VMG from all WAN connections. Port You may change the server port number for a service if needed, however you must use the same port number in order to use that service for remote management. VMG5313-BXB Series User’s Guide...
Page 271: The Trust Domain Screen
Use this screen to configure a public IP address which is allowed to access the VMG. Click the Add Trust Domain button in the Maintenance > Remote Management > Turst Domain screen to open the following screen. Figure 160 Maintenance > Remote Management > Trust Domain > Add Trust Domain VMG5313-BXB Series User’s Guide...
Page 272 Enter a public IPv4 IP address which is allowed to access the service on the VMG from the WAN. Click OK to save your changes back to the VMG. Cancel Click Cancel to restore your previously saved settings. VMG5313-BXB Series User’s Guide...
Page 273: Snmp
Examples of variables include such as number of packets received, node port status etc. A Management Information Base (MIB) is a collection of managed objects. SNMP allows a manager and agents to communicate for the purpose of accessing these objects. VMG5313-BXB Series User’s Guide...
Page 274 Enter the SNMP system contact. Trap Destination Type the IP address of the station to send your SNMP traps to. Apply Click this to save your changes back to the VMG. Cancel Click this to restore your previously saved settings. VMG5313-BXB Series User’s Guide...
Page 275: Time Settings
Each time you reload this page, the VMG synchronizes the time with the time server. Current Date This field displays the date of your VMG. Each time you reload this page, the VMG synchronizes the date with the time server. VMG5313-BXB Series User’s Guide...
Page 276 In Germany for instance, you would select 2 in the Hour field because Germany's time zone is one hour ahead of GMT or UTC (GMT+1). Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG5313-BXB Series User’s Guide...
Page 277: E-Mail Notification
Click this button to delete the selected entry(ies). 36.2.1 Email Notification Edit Click the Add button in the Email Notification screen. Use this screen to configure the required information for sending e-mail via a mail server. VMG5313-BXB Series User’s Guide...
Page 278 If you activate SSL/TLS authentication, the e-mail address must be able to be authenticated by the mail server as well. Click this button to save your changes and return to the previous screen. Cancel Click this button to begin configuring this screen afresh. VMG5313-BXB Series User’s Guide...
Page 279: Log Setting
The following table describes the fields in this screen. Table 137 Maintenance > Logs Setting LABEL DESCRIPTION Syslog Setting Syslog Logging The VMG sends a log to an external syslog server. Select Enable to enable syslog logging. VMG5313-BXB Series User’s Guide...
Page 280: Example E-Mail Log
• You may edit the subject title. • The date format here is Day-Month-Year. • The date format here is Month-Day-Year. The time format is Hour-Minute-Second. • "End of Log" message shows that a complete log has been sent. VMG5313-BXB Series User’s Guide...
Page 281 |<1,02> 127|Apr 7 00 |From:192.168.1.131 To:192.168.1.255 |match |forward | 10:05:17 |UDP src port:00520 dest port:00520 |<1,02> 128|Apr 7 00 |From:192.168.1.1 To:192.168.1.255 |match |forward | 10:05:30 |UDP src port:00520 dest port:00520 |<1,02> End of Firewall Log VMG5313-BXB Series User’s Guide...
Page 282: Firmware Upgrade
Do NOT turn off the VMG while firmware upload is in progress! Figure 168 Maintenance > Firmware Upgrade The following table describes the labels in this screen. After you see the firmware updating screen, wait two minutes before logging into the VMG again. VMG5313-BXB Series User’s Guide...
Page 283 After two minutes, log in again and check your new firmware version in the Status screen. If the upload was not successful, the following screen will appear. Click OK to go back to the Firmware Upgrade screen. VMG5313-BXB Series User’s Guide...
Page 284 Chapter 38 Firmware Upgrade Figure 171 Error Message VMG5313-BXB Series User’s Guide...
Page 285: Backup Restore
The backup configuration file will be useful in case you need to return to your previous settings. Click Backup to save the VMG’s current configuration to your computer. VMG5313-BXB Series User’s Guide...
Page 286: Restore Configuration
If the upload was not successful, the following screen will appear. Click OK to go back to the Configuration screen. Figure 174 Configuration Upload Error Reset to Factory Defaults Click the Reset button to clear all user-entered configuration information and return the VMG to its factory defaults. The following warning screen appears. VMG5313-BXB Series User’s Guide...
Page 287: The Reboot Screen
System restart allows you to reboot the VMG remotely without turning the power off. You may need to do this if the VMG hangs, for example. Click Maintenance > Reboot. Click Reboot to have the VMG reboot. This does not affect the VMG's configuration. Figure 177 Maintenance > Reboot VMG5313-BXB Series User’s Guide...
Page 288: Diagnostic
If an MEP port does not respond to the source MEP, this may indicate a fault. Administrators can take further action to check and resume services from the fault according to the line connectivity status report. VMG5313-BXB Series User’s Guide...
Page 289: Ping & Traceroute & Nslookup
Click this button to perform a DNS lookup on the IP address of a computer you enter. 40.4 802.1ag Click Maintenance > Diagnostic > 8.2.1ag to open the following screen. Use this screen to perform CFM actions. VMG5313-BXB Series User’s Guide...
Page 290: Oam Ping
OAM (Operation, Administration and Maintenance) F4 or F5 loopback test on a PVC. The VMG sends an OAM F4 or F5 packet to the DSLAM or ATM switch and then returns it to the VMG. The test result then displays in the text box. VMG5313-BXB Series User’s Guide...
Page 291 ATM device. End-to-end loopback tests allow you to verify integrity of an end-to-end PVC. Note: The DSLAM to which the VMG is connected must also support ATM F4 and/or F5 to use this test. Note: This screen is available only when you configure an ATM layer-2 interface. VMG5313-BXB Series User’s Guide...
Page 292 F4 end-end Press this to perform an OAM F4 end-to-end loopback test. F5 segment Press this to perform an OAM F5 segment loopback test. F5 end-end Press this to perform an OAM F5 end-to-end loopback test. VMG5313-BXB Series User’s Guide...
Page 293: Troubleshooting
Make sure you understand the normal behavior of the LED. See Section 1.5 on page Check the hardware connections. Inspect your cables for damage. Contact the vendor to replace any damaged cables. Turn the VMG off and on. VMG5313-BXB Series User’s Guide...
Page 294: Vmg Access And Login
Make sure your Internet browser does not block pop-up windows and has JavaScripts and Java enabled. If it is possible to log in from another interface, check the service control settings for HTTP and HTTPS (Maintenance > Remote MGMT). VMG5313-BXB Series User’s Guide...
Page 295 I cannot use FTP to upload / download the configuration file. / I cannot use FTP to upload new firmware. See the troubleshooting suggestions for I cannot see or access the Login screen in the web configurator. Ignore the suggestions about your browser. VMG5313-BXB Series User’s Guide...
Page 296: Internet Access
ADSL or VDSL connection at one time. I cannot connect to the Internet using an Ethernet connection. The DSL connection has priority. If the DSL connection is up, then the Ethernet connection will be down. VMG5313-BXB Series User’s Guide...
Page 297: Wireless Internet Access
If the problem continues, contact your vendor. 41.4 Wireless Internet Access What factors may cause intermittent or unstabled wireless connection? How can I solve this problem? The following factors may cause interference: • Obstacles: walls, ceilings, furniture, and so on. VMG5313-BXB Series User’s Guide...
Page 298: Usb Device Connection
Re-connect your USB device to the VMG. 41.6 UPnP When using UPnP and the VMG reboots, my computer cannot detect UPnP and refresh My Network Places > Local Network. VMG5313-BXB Series User’s Guide...
Page 299 Chapter 41 Troubleshooting Disconnect the Ethernet cable from the VMG’s LAN port or from your computer. Re-connect the Ethernet cable. The Local Area Connection icon for UPnP disappears in the screen. Restart your computer. VMG5313-BXB Series User’s Guide...
Page 300: Appendices
Appendices Appendices contain general information. Some information may not apply to your device.
Page 302: Appendix A Customer Support
• Brief description of the problem and the steps you took to solve it. Corporate Headquarters (Worldwide) Taiwan • ZyXEL Communications Corporation • http://www.zyxel.com Asia China • ZyXEL Communications (Shanghai) Corp. ZyXEL Communications (Beijing) Corp. ZyXEL Communications (Tianjin) Corp. • http://www.zyxel.cn India • ZyXEL Technology India Pvt Ltd • http://www.zyxel.in Kazakhstan •...
Page 303 • ZyXEL Singapore Pte Ltd. • http://www.zyxel.com.sg Taiwan • ZyXEL Communications Corporation • http://www.zyxel.com/tw/zh/ Thailand • ZyXEL Thailand Co., Ltd • http://www.zyxel.co.th Vietnam • ZyXEL Communications Corporation-Vietnam Office • http://www.zyxel.com/vn/vi Europe Austria • ZyXEL Deutschland GmbH • http://www.zyxel.de VMG5313-BXB Series User’s Guide...
Page 304 • http://www.zyxel.by Belgium • ZyXEL Communications B.V. • http://www.zyxel.com/be/nl/ • http://www.zyxel.com/be/fr/ Bulgaria • ZyXEL България • http://www.zyxel.com/bg/bg/ Czech Republic • ZyXEL Communications Czech s.r.o • http://www.zyxel.cz Denmark • ZyXEL Communications A/S • http://www.zyxel.dk Estonia • ZyXEL Estonia • http://www.zyxel.com/ee/et/ Finland •...
Page 305 • http://www.zyxel.pl Romania • ZyXEL Romania • http://www.zyxel.com/ro/ro Russia • ZyXEL Russia • http://www.zyxel.ru Slovakia • ZyXEL Communications Czech s.r.o. organizacna zlozka • http://www.zyxel.sk Spain • ZyXEL Communications ES Ltd • http://www.zyxel.es Sweden • ZyXEL Communications VMG5313-BXB Series User’s Guide...
Page 306 Appendix A Customer Support • http://www.zyxel.se Switzerland • Studerus AG • http://www.zyxel.ch/ Turkey • ZyXEL Turkey A.S. • http://www.zyxel.com.tr • ZyXEL Communications UK Ltd. • http://www.zyxel.co.uk Ukraine • ZyXEL Ukraine • http://www.ua.zyxel.com Latin America Argentina • ZyXEL Communication Corporation • http://www.zyxel.com/ec/es/ Brazil •...
Page 307 Appendix A Customer Support • http://www.zyxel.com/me/en/ North America • ZyXEL Communications, Inc. - North America Headquarters • http://www.zyxel.com/us/en/ Oceania Australia • ZyXEL Communications Corporation • http://www.zyxel.com/au/en/ Africa South Africa • Nology (Pty) Ltd. • http://www.zyxel.co.za VMG5313-BXB Series User’s Guide...
Page 308: Appendix B Wireless Lans
Intra-BSS traffic is traffic between wireless clients in the BSS. When Intra-BSS is enabled, wireless client A and B can access the wired network and communicate with each other. When Intra-BSS is disabled, wireless client A and B can still access the wired network but cannot communicate with each other. VMG5313-BXB Series User’s Guide...
Page 309 An ESSID (ESS IDentification) uniquely identifies each ESS. All access points and their associated wireless clients within the same ESS must have the same ESSID in order to communicate. VMG5313-BXB Series User’s Guide...
Page 310 (AP) or wireless gateway, but out-of-range of each other, so they cannot "hear" each other, that is they do not know if the channel is currently being used. Therefore, they are considered hidden from each other. VMG5313-BXB Series User’s Guide...
Page 311: Fragmentation Threshold
If the Fragmentation Threshold value is smaller than the RTS/CTS value (see previously) you set then the RTS (Request To Send)/CTS (Clear to Send) handshake will never occur as data frames will be fragmented before they reach RTS/CTS size. VMG5313-BXB Series User’s Guide...
Page 312 It is supported by Windows XP and a number of network devices. Some advantages of IEEE 802.1x are: • User based identification that allows for roaming. VMG5313-BXB Series User’s Guide...
Page 313: Types Of Radius Messages
In order to ensure network security, the access point and the RADIUS server use a shared secret key, which is a password, they both know. The key is not sent over the network. In addition to the VMG5313-BXB Series User’s Guide...
Page 314: Types Of Eap Authentication
Client authentication is then done by sending username and password through the secure connection, thus client identity is protected. For client authentication, EAP-TTLS supports EAP methods and legacy authentication methods such as PAP, CHAP, MS-CHAP and MS-CHAP v2. VMG5313-BXB Series User’s Guide...
Page 315: Dynamic Wep Key Exchange
Key differences between WPA or WPA2 and WEP are improved data encryption and user authentication. If both an AP and the wireless clients support WPA2 and you have an external RADIUS server, use WPA2 for stronger data encryption. If you don't have an external RADIUS server, you should use VMG5313-BXB Series User’s Guide...
Page 316 RADIUS database. WPA2 reduces the number of key exchange messages from six to four (CCMP 4-way handshake) and shortens the time required to connect to a network. Other WPA2 authentication features that are different from WPA include key caching and VMG5313-BXB Series User’s Guide...
Page 317: Wireless Client Wpa Supplicants
The RADIUS server distributes the PMK to the AP. The AP then sets up a key hierarchy and management system, using the PMK to dynamically generate unique data encryption keys. The keys are used to encrypt every data packet that is wirelessly communicated between the AP and the wireless clients. VMG5313-BXB Series User’s Guide...
Page 318 The AP and wireless clients use the TKIP or AES encryption process, the PMK and information exchanged in a handshake to create temporal encryption keys. They use these keys to encrypt data exchanged between them. Figure 187 WPA(2)-PSK Authentication VMG5313-BXB Series User’s Guide...
Page 319: Security Parameters Summary
Antenna gain, measured in dB (decibel), is the increase in coverage within the RF beam width. Higher antenna gain improves the range of the signal for better communications. For an indoor site, each 1 dB increase in antenna gain results in a range increase of approximately VMG5313-BXB Series User’s Guide...
Page 320: Types Of Antennas For Wlan
For a single AP application, place omni-directional antennas as close to the center of the coverage area as possible. For directional antennas, point the antenna in the direction of the desired coverage area. VMG5313-BXB Series User’s Guide...
Page 321: Appendix C Ipv6
A link-local unicast address has a predefined prefix of fe80::/10. The link-local unicast address format is as follows. Table 147 Link-local Unicast Address Format 1111 1110 10 Interface ID 10 bits 54 bits 64 bits VMG5313-BXB Series User’s Guide...
Page 322: Global Address
All DHCP severs on a local site. FF05:0:0:0:0:0:1:3 The following table describes the multicast addresses which are reserved and can not be assigned to a multicast group. Table 149 Reserved Multicast Address MULTICAST ADDRESS FF00:0:0:0:0:0:0:0 FF01:0:0:0:0:0:0:0 FF02:0:0:0:0:0:0:0 FF03:0:0:0:0:0:0:0 FF04:0:0:0:0:0:0:0 FF05:0:0:0:0:0:0:0 FF06:0:0:0:0:0:0:0 FF07:0:0:0:0:0:0:0 VMG5313-BXB Series User’s Guide...
Page 323: Subnet Masking
DHCPv6 server uses T1 and T2 to control the time at which the client contacts with the server to extend the lifetimes on any addresses in the IA_NA before the lifetimes expire. After T1, the client sends the server (S1) (from which the addresses in the IA_NA were obtained) a Renew message. If VMG5313-BXB Series User’s Guide...
Page 324: Dhcp Relay Agent
• Neighbor solicitation: A request from a host to determine a neighbor’s link-layer address (MAC address) and detect if the neighbor is still reachable. A neighbor being “reachable” means it responds to a neighbor solicitation message (from the host) with a neighbor advertisement message. VMG5313-BXB Series User’s Guide...
Page 325: Ipv6 Cache
Done message to the router or switch. The router or switch then sends a group-specific query to the port on which the Done message is received to determine if other devices connected to this port should remain in the group. VMG5313-BXB Series User’s Guide...
Page 326 Install Dibbler and select the DHCPv6 client option on your computer. After the installation is complete, select Start > All Programs > Dibbler-DHCPv6 > Client Install as service. Select Start > Control Panel > Administrative Tools > Services. Double click Dibbler - a DHCPv6 client. VMG5313-BXB Series User’s Guide...
Page 327 To enable IPv6 in Windows 7: Select Control Panel > Network and Sharing Center > Local Area Connection. Select the Internet Protocol Version 6 (TCP/IPv6) checkbox to enable it. Click OK to save the change. VMG5313-BXB Series User’s Guide...
Page 328 IPv4 Address... : 172.16.100.61 Subnet Mask ... : 255.255.255.0 Default Gateway ..: fe80::213:49ff:feaa:7125%11 172.16.100.254 VMG5313-BXB Series User’s Guide...
Page 329: Appendix D Services
• If the Protocol is TCP, UDP, or TCP/UDP, this is the IP port number. • If the Protocol is USER, this is the IP protocol number. • Description: This is a brief explanation of the applications that use this service or the situations in which this service is used. VMG5313-BXB Series User’s Guide...
Page 330 Microsoft Networks’ messenger service uses this protocol. NetBIOS TCP/UDP The Network Basic Input/Output System is used for communication between computers in a LAN. TCP/UDP TCP/UDP TCP/UDP NEW-ICQ 5190 An Internet chat program. NEWS A protocol for news groups. VMG5313-BXB Series User’s Guide...
Page 331 UNIX systems and network servers. SSDP 1900 The Simple Service Discovery Protocol supports Universal Plug-and-Play (UPnP). TCP/UDP Secure Shell Remote Login Program. STRM WORKS 1558 Stream Works Protocol. VMG5313-BXB Series User’s Guide...
Page 332 Internet and in UNIX environments. It operates over TCP/IP networks. Its primary function is to allow users to log into remote host systems. VDOLIVE 7000 A videoconferencing solution. The UDP port number is specified in the application. user- defined VMG5313-BXB Series User’s Guide...
Page 333: Appendix E Legal Information
The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation. All rights reserved.
Page 334: Industry Canada Radiation Exposure Statement
ZyXEL tímto prohlašuje, že tento zařízení je ve shodě se základními požadavky a dalšími příslušnými ustanoveními (Czech) směrnice 1999/5/EC. Dansk (Danish) Undertegnede ZyXEL erklærer herved, at følgende udstyr udstyr overholder de væsentlige krav og øvrige relevante krav i direktiv 1999/5/EF. VMG5313-BXB Series User’s Guide...
Page 335: National Restrictions
The requirements for any country may evolve. ZyXEL recommends that you check with the local authorities for the latest status of their national regulations for both the 2.4GHz and 5GHz wireless LANs. The following countries have restrictions and/or requirements in addition to those given in the table labeled “Overview of Regulatory Requirements for Wireless LANs”:. Belgium VMG5313-BXB Series User’s Guide...
Page 336: Safety Warnings
Always disconnect all cables from this device before servicing or disassembling. • Do not remove the plug and connect it to a power outlet by itself; always attach the plug to the power adaptor first before connecting it to a power outlet. VMG5313-BXB Series User’s Guide...
Page 337 återvinningsstation. Vid tiden för kasseringen bidrar du till en bättre miljö och mänsklig hälsa genom att göra dig av med den på ett återvinningsställe. VMG5313-BXB Series User’s Guide...
Page 338 Appendix E Legal Information Environmental Product Declaration VMG5313-BXB Series User’s Guide...
Page 339: Zyxel Limited Warranty
To obtain the services of this warranty, contact your vendor. You may also refer to the warranty policy for the region in which you bought the device at http://www.zyxel.com/web/support_warranty_info.php. Registration Register your product online to receive e-mail notices of firmware upgrades and information at www.zyxel.com for global products, or at www.us.zyxel.com for North American products. VMG5313-BXB Series User’s Guide...
Page 340 This product contains in part some free software distributed under GPL license terms and/or GPL like licenses. Open source licenses are provided with the firmware package. You can download the latest firmware at www.zyxel.com. To obtain the source code covered under those Licenses, please contact support@zyxel.com.tw to get it. VMG5313-BXB Series User’s Guide...
Page 341: Index
CHAP Certification Authority MSCHAP Certification Authority. see CA certifications viewing CCMs backup link trace test configuration loopback test Basic Service Set, See BSS Basic Service Set, see BSS blinking LEDs Broadband channel broadcast interference VMG5313-BXB Series User’s Guide...
Page 342 Europe type call service mode DUID Extended Service Set IDentification 92, 97 Extended Service Set, See ESS differentiated services Differentiated Services, see DiffServ DiffServ marking rule DiffServ (Differentiated Services) Fast Leave code points file sharing marking rule filters VMG5313-BXB Series User’s Guide...
Page 343 64, 89, 321 prefix delegation prefix length 64, 89, 321 unspecified address iTunes server ITU-T IBSS ICMPv6 IEEE 802.11g IEEE 802.1Q key combinations IGMP keypad multicast group list 179, 260 version IGMP Fast Leave IGMPv2 IGMPv3 VMG5313-BXB Series User’s Guide...
Page 344 Maintenance Association, see MA Network Address Translation, see NAT Maintenance Domain, see MD Network Map Maintenance End Point, see MEP network map Management Information Base (MIB) NNTP managing the device non-proxy calls good habits Maximum Burst Size (MBS) MBSSID VMG5313-BXB Series User’s Guide...
Page 345 270, 271 push button, WPS Service Set 92, 97 Services Session Initiation Protocol, see SIP setup firewalls 142, 156, 242 static route 84, 137, 138, 177 marking silence suppression setup Simple Network Management Protocol, see SNMP tagging VMG5313-BXB Series User’s Guide...
Page 346 136, 141, 277 configuration 84, 137, 138, 177 example static VLAN status unicast firmware version Uniform Resource Identifier Universal Plug and Play, see UPnP upgrading firmware wireless LAN UPnP status indicators cautions subnet mask 121, 134 VMG5313-BXB Series User’s Guide...
Page 347 102, 112 compatibility 110, 315 key caching example pre-authentication web configurator user authentication login vs WPA-PSK passwords 23, 24 wireless client supplicant with RADIUS application example WEP Encryption 94, 95 WPA2 WEP encryption user authentication WEP key VMG5313-BXB Series User’s Guide...
Page 348 Index vs WPA2-PSK wireless client supplicant with RADIUS application example WPA2-Pre-Shared Key WPA2-PSK application example WPA-PSK 110, 316 application example 112, 115 example limitations example push button 21, 113 VMG5313-BXB Series User’s Guide...

ZyXEL Communications VMG5313-BXB SERIES User Manual

Contents Overview

Table of Contents

User's Guide

Part I: User's Guide

Chapter 1 Introducing the VMG

Chapter 2 The Web Configurator

Chapter 3 Quick Start

Chapter 4 Tutorials

Technical Reference

Part II: Technical Reference

Chapter 5 Network Map and Status Screens

Chapter 6 Broadband

Chapter 7 Wireless

Chapter 8 Home Networking

Chapter 9 Routing

Chapter 10 Quality of Service (Qos)

Chapter 11 Network Address Translation (NAT)

Chapter 12 Dynamic DNS Setup

Chapter 13 IGMP/MLD

Chapter 14 Vlan Group

Chapter 15 Interface Grouping

Chapter 16 USB Service

Chapter 17 Firewall

Chapter 18 MAC Filter

Chapter 19 Parental Control

Chapter 20 Scheduler Rule

Chapter 21 Certificates

Chapter 22 Voice

Chapter 23 Log

Chapter 24 Traffic Status

Quick Links

Related Manuals for ZyXEL Communications VMG5313-BXB SERIES

Summary of Contents for ZyXEL Communications VMG5313-BXB SERIES