Wireless n vdsl2 4-port gateway with usb (394 pages)
Summary of Contents for ZyXEL Communications VMG4380-B10A
Page 1
VMG4380-B10A / VMG4325- B10A Wireless N VDSL2 4-port Bonding Combo WAN Gateway with HPNA Wireless N VDSL2 4-port Bonding Combo WAN Gateway with Default Login Details LAN IP http://192.168.1.1 Address User Name admin Password 1234 Version 1.00 Edition 1, 9/2012 www.zyxel.com...
Page 2
Internet access. • Support Disc Refer to the included CD for support documents. • ZyXEL Web Site Please refer to www.zyxel.com for additional support documentation and product certifications. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 6
6.2 The Broadband Screen ........................79 6.2.1 Add/Edit Internet Connection ....................81 6.3 The 3G Backup Screen ........................89 6.4 The Advanced Screen ........................93 6.4.1 DSL Bonding ...........................93 6.5 The 8021x Screen ..........................95 6.5.1 Edit 802.1x Settings .........................96 6.6 Technical Reference ..........................97 VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 7
8.3 The Static DHCP Screen .........................138 8.4 The UPnP Screen ...........................140 8.5 Installing UPnP in Windows Example .....................141 8.6 Using UPnP in Windows XP Example ....................143 8.7 The Additional Subnet Screen ......................149 8.8 The STB Vendor ID Screen ......................150 VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 8
11.1.1 What You Can Do in this Chapter ..................179 11.1.2 What You Need To Know .....................179 11.2 The Port Forwarding Screen ......................180 11.2.1 Add/Edit Port Forwarding ....................182 11.3 The Applications Screen .......................183 11.3.1 Add New Application ......................184 11.4 The Port Triggering Screen ......................184 VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 9
14.3 The Media Server Screen ......................208 14.4 The Printer Server Screen ......................209 14.4.1 Before You Begin .........................209 Chapter 15 Firewall .............................. 211 15.1 Overview ............................211 15.1.1 What You Can Do in this Chapter ..................211 VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 10
19.4.2 Import Trusted CA Certificate ....................235 Chapter 20 Log ..............................237 20.1 Overview ............................237 20.1.1 What You Can Do in this Chapter ..................237 20.1.2 What You Need To Know .....................237 20.2 The System Log Screen ........................238 VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 12
Diagnostic ............................278 35.1 Overview ............................278 35.1.1 What You Can Do in this Chapter ..................278 35.2 What You Need to Know .......................278 35.3 Ping & TraceRoute & NsLookup ....................279 35.4 802.1ag ............................280 35.5 OAM Ping Test ..........................281 VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 13
Appendix A Setting up Your Computer’s IP Address ...............291 Appendix B IP Addresses and Subnetting..................313 Appendix C Pop-up Windows, JavaScripts and Java Permissions ..........321 Appendix D Wireless LANs......................331 Appendix E IPv6 ..........................345 Appendix F Services........................353 Appendix G Legal Information ......................357 Index ..............................361 VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 14
Table of Contents VMG4380-B10A / VMG4325-B10A User’s Guide...
ADSL, ADSL2 and ADSL2+ in case VDSL is not available. The Device also provides IEEE 802.11b/g/n wireless networking to extend the range of your existing wired network without additional wiring. The VMG4380-B10A models also include Home Phoneline • VMG4380-B10A has Home Phoneline Networking Alliance (HPNA) capability.
You can also configure IP filtering on the Device for secure Internet access. When the IP filter is on, all incoming traffic from the Internet to your network is blocked by default unless it is initiated from VMG4380-B10A / VMG4325-B10A User’s Guide...
Internet connectivity to other coaxial outlets in the building. The laptop (B) connects wirelessly to the Device. The set-up box (C) connects into a coaxial outlet in another part of the house for access to online videos. Figure 2 HomePNA Application VMG4380-B10A / VMG4325-B10A User’s Guide...
You can also use the Device as a media server. This lets anyone on your network play video, music, and photos from a USB device (B) connected to the Device’s USB port (without having to copy them to another computer). Figure 4 USB Media Server Application VMG4380-B10A / VMG4325-B10A User’s Guide...
The Device has a successful Ethernet connection with a device LAN 1-4 on the Local Area Network (LAN). Blinking The Device is sending or receiving data to/from the LAN. The Device does not have an Ethernet connection with the LAN. VMG4380-B10A / VMG4325-B10A User’s Guide...
This means that you will lose all configurations that you had previously and the password will be reset to “1234”. Make sure the POWER LED is on (not blinking). VMG4380-B10A / VMG4325-B10A User’s Guide...
Once the connection is successfully made, the WLAN/WPS LED shines green. To turn off the wireless network, press the WLAN/WPS button on the front of the Device for one to five seconds. The WLAN/WPS LED turns off when the wireless network is off. VMG4380-B10A / VMG4325-B10A User’s Guide...
2.1.1 Accessing the Web Configurator Make sure your Device hardware is properly connected (refer to the Quick Start Guide). Launch your web browser. If the Device does not automatically re-direct you to the login screen, go to http://192.168.1.1. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 26
Figure 8 Change Password Screen The Quick Start Wizard screen appears. You can configure the Device’s time zone, basic Internet access, and wireless settings. See Chapter 3 on page 33 for more information. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 27
After you finished or closed the Quick Start Wizard screen, the Network Map page appears. Figure 9 Network Map Click Status to display the Status screen, where you can view the Device’s interface and system information. VMG4380-B10A / VMG4325-B10A User’s Guide...
As illustrated above, the main screen is divided into these parts: • A - title bar • B - main window • C - navigation panel 2.2.1 Title Bar The title bar provides some icons in the upper right corner. VMG4380-B10A / VMG4325-B10A User’s Guide...
Use the menu items on the navigation panel to open screens to configure Device features. The following tables describe each menu item. Table 3 Navigation Panel Summary LINK FUNCTION Connection Status This screen shows the network status of the Device and computers/ devices connected to it. Network Setting VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 30
Queue Setup Use this screen to configure QoS queues. Class Setup Use this screen to define a classifier. Policer Setup Use these screens to configure QoS policers. Monitor Use this screen to view QoS packets statistics. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 31
Use this screen to view the ARP table. It displays the IP and MAC address of each DHCP connection. IGMP Group Use this screen to view the status of all IGMP settings on the Device. Status xDSL Statistics Use this screen to view the Device’s xDSL traffic statistics. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 32
Use this screen to configure CFM (Connectivity Fault Management) MD (maintenance domain) and MA (maintenance association), perform connectivity tests and view test reports. OAM Ping Use this screen to view information to help you identify problems with the DSL connection. VMG4380-B10A / VMG4325-B10A User’s Guide...
The Quick Start Wizard appears automatically after login. Or you can click the Click Start icon in the top right corner of the web configurator to open the quick start screens. Select the time zone of the Device’s location and click Next. Figure 12 Time Zone VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 34
Turn the wireless LAN on or off. If you keep it on, record the security settings so you can configure your wireless clients to connect to the Device. Click Save. Figure 14 Internet Connection Your Device saves your settings and attempts to connect to the Internet. VMG4380-B10A / VMG4325-B10A User’s Guide...
Broadband screens. Click Network Setting > Broadband to open the following screen. Click Add New WAN Interface. In this example, the DSL connection has the following information. General Name MyDSLConnection Type ADSL VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 36
Configure this rule as your default Internet connection by selecting the Apply as Default Gateway check box. Then select DNS as Static and enter the DNS server addresses provided to you, such as 192.168.5.2 (DNS server1)/192.168.5.1 (DNS server2). Leave the rest of the fields to the default settings. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 37
Chapter 4 Tutorials Click Apply to save your settings. VMG4380-B10A / VMG4325-B10A User’s Guide...
(Section 4.3.3 on page 43). 4.3.1 Configuring the Wireless Network Settings This example uses the following parameters to set up a wireless network. SSID Example Security Mode WPA-PSK Pre-Shared Key DoNotStealMyWirelessNetwork 802.11 Mode 802.11b/g/n Mixed VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 39
Thomas can now use the WPS feature to establish a wireless connection between his notebook and the Device (see Section 4.3.2 on page 40). He can also use the notebook’s wireless client to search for the Device (see Section 4.3.3 on page 43). VMG4380-B10A / VMG4325-B10A User’s Guide...
Push and hold the WPS button located on the Device’s front panel for more than 5 seconds. Alternatively, you may log into Device’s web configurator and go to the Network Setting > Wireless > WPS screen. Enable the WPS function and click Apply. Then click the Connect button. VMG4380-B10A / VMG4325-B10A User’s Guide...
The following figure shows you an example of how to set up a wireless network and its security by pressing a button on both Device and wireless client. Example WPS Process: PBC Method Wireless Client Device WLAN/ WITHIN 2 MINUTES Press and hold for 5 seconds SECURITY INFO COMMUNICATION VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 42
The Device authenticates the wireless client and sends the proper configuration settings to the wireless client. This may take up to two minutes. The wireless client is then able to communicate with the Device securely. VMG4380-B10A / VMG4325-B10A User’s Guide...
“DoNotStealMyWirelessNetwork” pre-shared key to establish an wireless Internet connection. Note: The Device supports IEEE 802.11b and IEEE 802.11g wireless clients. Make sure that your notebook or computer’s wireless adapter supports one of these standards. VMG4380-B10A / VMG4325-B10A User’s Guide...
Company A will use the following parameters to set up the wireless network groups. COMPANY GUEST SSID Company Guest Security Level More Secure More Secure Basic Security Mode WPA2-PSK WPA2-PSK Static WEP Pre-Shared Key ForCompanyOnly ForVIPOnly Guest12345678 VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 45
Configure the screen using the provided parameters and click Apply. Click Network Setting > Wireless > More AP to open the following screen. Click the Edit icon to configure the second wireless network group. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 46
Chapter 4 Tutorials Configure the screen using the provided parameters and click Apply. In the More AP screen, click the Edit icon to configure the third wireless network group. VMG4380-B10A / VMG4325-B10A User’s Guide...
In the following figure, router R is connected to the Device’s LAN. R connects to two networks, N1 (192.168.1.x/24) and N2 (192.168.10.x/24). If you want to send traffic from computer A (in N1 VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 48
This tutorial uses the following example IP settings: Table 4 IP Settings in this Tutorial DEVICE / COMPUTER IP ADDRESS The Device’s WAN 172.16.1.1 The Device’s LAN 192.168.1.1 IP Type IPv4 Use Interface ADSL/atm0 192.168.1.34 R’s N1 192.168.1.253 VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 49
Gateway IP Address field. Select ADSL/atm0 as the Use Interface. Click OK. Now B should be able to receive traffic from A. You may need to additionally configure B’s firewall settings to allow specific traffic to pass through. VMG4380-B10A / VMG4325-B10A User’s Guide...
Traffic that does not match this class is assigned a priority queue based on the internal QoS mapping table on the Device. QoS Example 10,000 kbps Your computer IP=192.168.1.23 and/or MAC=AA:FF:AA:FF:AA:FF A colleague’s computer Email traffic: Highest priority Other traffic: Automatic classifier VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 51
Click Queue Setup > Add new Queue to create a new queue. In the screen that opens, check Active and enter or select the following values: • Name: E-mail • Interface: WAN • Priority: 1 (High) • Weight: 8 • Rate Limit: 5,000 (kbps) Tutorial: Advanced > QoS > Queue Setup VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 52
Type the MAC address of your computer - AA:FF:AA:FF:AA:FF. Type the MAC Mask if you know it. To Queue Link this to an item in the Network Setting > QoS > Queue Setup screen, which is the E- Index mail queue created in this example. VMG4380-B10A / VMG4325-B10A User’s Guide...
• IP Address: Enter the WAN IP address that your Device is currently using. You can find the IP address on the Device’s Web Configurator Status page. Then you will need to configure the same account and host name on the Device later. VMG4380-B10A / VMG4325-B10A User’s Guide...
Open a web browser on the computer (using the IP address a.b.c.d) that is connected to the Internet. Type http://zyxelrouter.dyndns.org and press [Enter]. The Device’s login page should appear. You can then log into the Device and manage it. VMG4380-B10A / VMG4325-B10A User’s Guide...
Click Security > MAC Filter to open the MAC Filter screen. Select the Enable check box to activate MAC filter function. Select Allow. Then enter the host name and MAC address of Thomas’ computer in this screen. Click Apply. VMG4380-B10A / VMG4325-B10A User’s Guide...
In FileZilla enter the IP address of the Device (the default is 192.168.1.1), your account’s user name and password and port 21 and click Quickconnect. A screen asking for password authentication appears. File Sharing via Windows Explorer Once you log in the USB device displays in the folder. VMG4380-B10A / VMG4325-B10A User’s Guide...
This section shows you how to play the media files on the USB storage device connected to your Device using Windows Media Player. Tutorial: Media Server Setup (Using Windows Media Player) USB Storage Device Computer with Windows Media Player ZyXEL Device VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 58
Open Windows Media Player and click Library > Media Sharing as follows. Tutorial: Media Sharing using Windows Vista Check Find media that others are sharing in the following screen and click OK. Tutorial: Media Sharing using Windows Vista (2) VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 59
Open Windows Media Player. It should automatically detect the Device. Tutorial: Media Sharing using Windows 7 (1) If you cannot see the Device in the left panel as shown above, right-click Other Libraries > Refresh Other Libraries. VMG4380-B10A / VMG4325-B10A User’s Guide...
This section shows you how you can use the Device with a ZyXEL DMA-2500 to play media files stored in the USB storage device in your TV screen. Note: For this tutorial, your DMA-2500 should already be set up with the TV according to the instructions in the DMA-2500 Quick Start Guide. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 61
The screen shows you the list of available media files in the USB storage device. Select the file you want to open and push the Play button in the remote control. Tutorial: Media Sharing using DMA-2500 (2) VMG4380-B10A / VMG4325-B10A User’s Guide...
• Add a New Printer Using Macintosh OS X Add a New Printer Using Windows This example shows how to connect a printer to your Device using the Windows 7 operating system. Some menu items may look different on your operating system. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 63
Click Start > Control Panel > Devices and Printers to open the Devices and Printers screen. Click Add a printer. Tutorial: Printers Folder The Add Printer wizard screen displays. Click Add a network, wireless or Bluetooth printer. Tutorial: Add Printer Wizard: Welcome VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 64
Chapter 4 Tutorials Click The printer that I want isn’t listed. Tutorial: Add Printer Wizard: Welcome VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 65
Macintosh Dock (a place holding a series of icons/ shortcuts at the bottom of the desktop). Proceed to step to continue. If the Print Center icon is not in the Macintosh Dock, proceed to the next step. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 66
Tutorial: Utilities Folder Click the Add icon at the top of the screen. Tutorial: Printer List Folder Set up your printer in the Printer List configuration screen. Select IP Printing from the drop- down list box. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 67
12 Click Add to select a printer model, save and close the Printer List configuration screen. Tutorial: Printer Model 13 The Name LP1 on 192.168.1.1 displays in the Printer List field. The default printer Name displays in bold type. Tutorial: Print Server VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 68
Chapter 4 Tutorials Your Macintosh print server driver setup is complete. You can now use the Device’s print server to print from a Macintosh computer. VMG4380-B10A / VMG4325-B10A User’s Guide...
If you prefer to view the status in a list, click List View in the Viewing Mode selection box. You can configure how often you want the Device to update this screen in Refresh Interval. Figure 15 Network Map: Icon Mode Figure 16 Network Map: List Mode VMG4380-B10A / VMG4325-B10A User’s Guide...
Change icon/name. In List Mode, you can also view the client’s information. 5.3 The Status Screen Use this screen to view the status of the Device. Click Status to open this screen. Figure 17 Status Screen VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 73
(Maintenance > Reboot), or when you reset it. Current This field displays the current date and time in the Device. You can change this in Date/Time Maintenance> Time Setting. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 74
If memory usage does get close to 100%, the Device is probably becoming unstable, and you should restart the device. See Section 34.2 on page 275, or turn off the device (unplug the power) for a few seconds. VMG4380-B10A / VMG4325-B10A User’s Guide...
• Use the Broadband screen to view, remove or add a WAN interface. You can also configure the WAN settings on the Device for Internet access (Section 6.2 on page 79). • Use the 3G Backup screen to configure 3G WAN connection (Section 6.3 on page 89). VMG4380-B10A / VMG4325-B10A User’s Guide...
If your ISP assigns you a static WAN IP address, they should also assign you the subnet mask and DNS server IP address(es). Asynchronous Transfer Mode (ATM) is a WAN networking technology that provides high-speed data transfer. ATM uses fixed-size packets of information called cells. With ATM, a high QoS (Quality of VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 77
IPv6 prefix length specifies how many most significant bits (start from the left) in the address compose the network address. The prefix length is written as “/x” where x is a number. For example, 2001:db8:1a2b:15::1a2f:0/32 means that the first 32 bits (2001:db8) is the subnet prefix. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 78
Transition Router (AFTR in the graphic) to connect to the IPv4 Internet. The local network can also use IPv6 services. The VDSL Router uses it’s configured IPv6 WAN IP to route IPv6 traffic to the IPv6 Internet. VMG4380-B10A / VMG4325-B10A User’s Guide...
Type This shows whether it is an ATM, PTM, or Ethernet connection. Mode This shows whether the connection is in routing or bridge mode. Encapsulation This is the method of encapsulation used by this connection. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 80
This shows whether Multicast Listener Discovery (MLD) is activated or not for this connection. MLD is not available when the connection uses the bridging service. Modify Click the Edit icon to configure the WAN connection. Click the Delete icon to remove the WAN connection. VMG4380-B10A / VMG4325-B10A User’s Guide...
Figure 23 Routing Mode The following table describes the labels in this screen. Table 8 Routing Mode LABEL DESCRIPTION General Active Select this to activate the WAN configuration settings. Name Specify a descriptive name for this connection. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 82
EoA supports ENET ENCAP (IPoE), PPPoE and RFC1483/2684 bridging encapsulation methods. PPPoA (PPP over ATM) allows just one PPPoA connection over a PVC. IPoA (IP over ATM) allows just one RFC 1483 routing connection over a PVC. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 83
This value specifies the time in minutes that elapses before the router automatically disconnects from the PPPoE server. This field is not configurable if you select PPP Auto Connect. PPPoE Service Enter the name of your PPPoE service here. Name VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 84
RA. This option is available only when you choose to get your IPv6 address automatically. Select Static if you have a fixed IPv6 address assigned by your ISP. WAN IPv6 Enter the IPv6 address assigned by your ISP. Address VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 85
Select the IEEE 802.1p priority level (from 0 to 7) to add to traffic through this connection. The greater the number, the higher the priority level. 802.1q Type the VLAN ID number (from 1 to 4094) for traffic through this connection. VMG4380-B10A / VMG4325-B10A User’s Guide...
IP address from ISP’s DHCP server directly. If you select Bridge, you cannot use routing functions, such as QoS, Firewall, DHCP server and NAT on traffic from the selected LAN port(s). VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 87
Enter a service name of the connection. Type Select ADSL over ATM as the interface for which you want to configure here. The Device uses the ADSL technology for data transmission over the DSL port. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 88
Maximum Burst Size (MBS) refers to the maximum number of cells that can be sent at the Size peak rate. Type the MBS, which is less than 65535. This field is available only when you select Non Realtime VBR or Realtime VBR. VMG4380-B10A / VMG4325-B10A User’s Guide...
Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. 6.3 The 3G Backup Screen Use this screen to configure your 3G settings. Click Network Setting > Broadband > 3G Backup. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 90
Note: The actual data rate you obtain varies depending the 3G card you use, the signal strength to the service provider’s base station, and so on. Figure 26 Network Setting > Broadband > 3G Backup VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 91
Use the Select this option If the ISP assigned a fixed IP address. following static IP address IP Address Enter your WAN IP address in this field if you selected Use the following static IP address. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 92
Select Enable and enter a number from 1 to 99 in the percentage fields. If you change the time budget/ value after you configure and enable budget control, the Device resets the statistics. data budget (Mbytes)/data budget (kPackets) VMG4380-B10A / VMG4325-B10A User’s Guide...
The data rate depends on the DSL type, its standard/ profile, and the standard/profile that the DSLAM supports. The table below shows the transmission data rate for single DSL line and DSL bonding. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 94
Select Enable to use PTM over ADSL. Since PTM has less overhead than ATM, some ISPs use PTM over ADSL for better performance. Annex M You can enable Annex M for the Device to use double upstream mode to increase the maximum upstream transfer rate. VMG4380-B10A / VMG4325-B10A User’s Guide...
This shows the certificate used for this authentication. This displays N/A when there is no certificate assigned. Trusted CA This shows the Trusted CA used for this authentication. This displays N/A when there is no Trusted CA assigned. VMG4380-B10A / VMG4325-B10A User’s Guide...
Select the Trusted CA you want to assign to the authentication. You need to import the certificate in the Security > Certificates > Trusted CA screen. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG4380-B10A / VMG4325-B10A User’s Guide...
LAN do not need PPPoE software installed, since the Device does that part of the task. Furthermore, with NAT, all of the LANs’ computers will have access. ATM Traffic Classes These are the basic ATM traffic classes defined by the ATM Forum Traffic Management 4.0 Specification. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 98
VLAN also increases network performance by limiting broadcasts to a smaller and more manageable logical broadcast domain. In traditional switched environments, all broadcast packets go to each and every individual port. With VLAN, all broadcasts are confined to a specific broadcast domain. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 99
IP address of www.zyxel.com is 204.217.0.2. The DNS server is extremely important because without it, you must know the IP address of a computer before you can access The Device can get the DNS server addresses in the following ways. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 100
IPv6 prefix length specifies how many most significant bits (start from the left) in the address compose the network address. The prefix length is written as “/x” where x is a number. For example, 2001:db8:1a2b:15::1a2f:0/32 means that the first 32 bits (2001:db8) is the subnet prefix. VMG4380-B10A / VMG4325-B10A User’s Guide...
• Use the Others screen to configure wireless advanced features, such as the RTS/CTS Threshold (Section 7.8 on page 117). • Use the Channel Status screen to scan wireless LAN channel noises and view the results (Section 7.9 on page 119). VMG4380-B10A / VMG4325-B10A User’s Guide...
Device’s SSID, channel or security settings, you will lose your wireless connection when you press Apply to confirm. You must then change the wireless settings of your computer to match the Device’s new settings. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 103
APs as possible. The channel number which the Device is currently using then displays next to this field. more.../less Click more... to show more information. Click less to hide them. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 104
Or you can select No Security to allow any client to associate this network without any data encryption or authentication. See the following sections for more details about this field. VMG4380-B10A / VMG4325-B10A User’s Guide...
RADIUS server. If your wireless devices support nothing stronger than WEP, use the highest encryption level available. Your Device allows you to configure up to four 64-bit or 128-bit WEP keys but only one key can be enabled at any one time. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 106
Click more... to show more fields in this section. Click less to hide them. WEP Encryption Select 64-bits or 128-bits. This dictates the length of the security key that the network is going to use. VMG4380-B10A / VMG4325-B10A User’s Guide...
This field appears when you choose WPA-PSK2 as the Security Mode. Compatible Check this field to allow wireless devices using WPA-PSK security mode to connect to your Device. The Device supports WPA-PSK and WPA2-PSK simultaneously. VMG4380-B10A / VMG4325-B10A User’s Guide...
The following table describes the labels in this screen. Table 20 Wireless > General: More Secure: WPA(2) LABEL DESCRIPTION Security Level Select More Secure to enable WPA(2)-PSK data encryption. Security Mode Choose WPA or WPA2 from the drop-down list box. Authentication Server VMG4380-B10A / VMG4325-B10A User’s Guide...
This screen allows you to enable and configure multiple Basic Service Sets (BSSs) on the Device. Click Network Setting > Wireless > More AP. The following screen displays. Figure 35 Network Setting > Wireless > More AP VMG4380-B10A / VMG4325-B10A User’s Guide...
Figure 36 More AP: Edit The following table describes the fields in this screen. Table 22 More AP: Edit LABEL DESCRIPTION Wireless Network Setup Wireless You can Enable or Disable the wireless LAN in this field. VMG4380-B10A / VMG4325-B10A User’s Guide...
MAC (Media Access Control) address. The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02. You need to know the MAC addresses of the devices to configure this screen. VMG4380-B10A / VMG4325-B10A User’s Guide...
WPS allows you to quickly set up a wireless network with strong security, without having to configure security settings manually. Set up each WPS connection between two devices. Both devices must support WPS. See Section 7.10.9.3 on page 128 for more information about WPS. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 113
Note: You must also activate WPS on that device within two minutes to have it present its PIN to the Device. Method 3 Use this section to set up a WPS wireless network by entering the PIN of the Device into the client. VMG4380-B10A / VMG4325-B10A User’s Guide...
Note: Note: This works only if the wireless device to which the Device is connected also supports this feature. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG4380-B10A / VMG4325-B10A User’s Guide...
This field is available only when you set operating mode to Access Point. Select Enabled to turn on WDS and enter the peer device’s MAC address manually in the table below. Select Disable to turn off WDS. VMG4380-B10A / VMG4325-B10A User’s Guide...
This shows the SSID of the available wireless device within range. BSSID This shows the MAC address of the available wireless device within range. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG4380-B10A / VMG4325-B10A User’s Guide...
Delivery Traffic Indication Message (DTIM) is the time period after which broadcast and multicast packets are transmitted to mobile clients in the Power Saving mode. A high DTIM value can cause clients to lose connectivity with the network. This value can be set from 1 to 100. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 118
Section 7.10.7 on page 125 for more information. This field is configurable only when you set 802.11 Mode to 802.11b. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG4380-B10A / VMG4325-B10A User’s Guide...
• A bridge is a radio that relays communications between access points and wireless clients, extending a network’s range. Traditionally, a wireless network operates in one of two ways. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 120
Radio Channels In the radio spectrum, there are certain frequency bands allocated for unlicensed, civilian use. For the purposes of wireless networking, these bands are divided into numerous channels. This allows a VMG4380-B10A / VMG4325-B10A User’s Guide...
- but it is not very secure if you use a short key which is very easy to guess - for example, a three-letter word from the dictionary. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 122
Some wireless devices, such as scanners, can detect wireless networks but cannot use wireless networks. These kinds of wireless devices might not have MAC addresses. Hexadecimal characters are 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, A, B, C, D, E, and F. VMG4380-B10A / VMG4325-B10A User’s Guide...
Problems with distance occur when the two radios are too far apart. Problems with interference occur when other radio waves interrupt the data signal. Interference may come from other radio transmissions, such as military or air traffic control communications, or from machines that are VMG4380-B10A / VMG4325-B10A User’s Guide...
BSSs simultaneously. You can then assign varying QoS priorities and/or security modes to different SSIDs. Wireless devices can use different BSSIDs to associate with the same AP. 7.10.6.1 Notes on Multiple BSSs • A maximum of eight BSSs are allowed on one AP simultaneously. VMG4380-B10A / VMG4325-B10A User’s Guide...
7.10.9 WiFi Protected Setup (WPS) Your Device supports WiFi Protected Setup (WPS), which is an easy way to set up a secure wireless network. WPS is an industry standard specification, defined by the WiFi Alliance. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 126
Take the following steps to set up a WPS connection between an access point or wireless router (referred to here as the AP) and a client device using the PIN method. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 127
On a computer connected to the wireless client, try to connect to the Internet. If you can connect, WPS was successful. If you cannot connect, check the list of associated wireless clients in the AP’s configuration utility. If you see the wireless client in the list, WPS was successful. VMG4380-B10A / VMG4325-B10A User’s Guide...
WPA-PSK or WPA2-PSK pre-shared key to the enrollee. Whether WPA-PSK or WPA2-PSK is used depends on the standards supported by the devices. If the registrar is already part of a network, it sends the existing information. If not, it generates the SSID and WPA(2)-PSK randomly. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 129
This section shows how security settings are distributed in an example WPS setup. The following figure shows an example network. In step 1, both AP1 and Client 1 are unconfigured. When WPS is activated on both, they perform the handshake. In this example, AP1 VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 130
(it already has security information for the network). AP1 supplies the existing security information to Client 2. Figure 50 WPS: Example Network Step 2 REGISTRAR EXISTING CONNECTION CLIENT 1 ENROLLEE CLIENT 2 VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 131
(if the device supports this feature). Then, you can enter the key into the non-WPS device and join the network as normal (the non-WPS device must also support WPA-PSK or WPA2-PSK). VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 132
Check the MAC addresses of your wireless clients (usually printed on a label on the bottom of the device). If there is an unknown MAC address you can remove it or reset the AP. VMG4380-B10A / VMG4325-B10A User’s Guide...
• Use the 5th Ethernet Port screen to configure the Ethernet WAN port as a LAN port (Section 8.9 on page 150). • Use the LAN VLAN screen to control the VLAN ID and IEEE 802.1p priority tags of traffic sent out through individual LAN ports (Section 8.10 on page 151). VMG4380-B10A / VMG4325-B10A User’s Guide...
UPnP devices and enable exchange of simple product and service descriptions. NAT traversal allows the following: • Dynamic port mapping • Learning public IP addresses VMG4380-B10A / VMG4325-B10A User’s Guide...
Enter the IP subnet mask into the IP Subnet Mask field. Unless instructed otherwise it is best to leave this alone, the configurator will automatically compute a subnet mask based upon the IP address you entered. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 136
Select Enable to have the Device act as a DHCP server or DHCP relay agent. Select Disable to stop the DHCP server on the Device. Select DHCP Relay to have the Device forward DHCP request to the DHCP server. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 137
Select Enable MLD Snooping to activate MLD Snooping on the Device. This allows the Device to check MLD packets passing through it and learn the multicast group membership. It helps reduce multicast traffic. VMG4380-B10A / VMG4325-B10A User’s Guide...
This table allows you to assign IP addresses on the LAN to specific individual computers based on their MAC Addresses. Every Ethernet device has a unique MAC (Media Access Control) address. The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 139
Select this to activate the connection between the client and the Device. Group Name Select the interface group name for which you want to configure static DHCP settings. Chapter 13 on page 199 for how to create a new interface group. VMG4380-B10A / VMG4325-B10A User’s Guide...
Device by using NAT traversal. UPnP applications automatically reserve a NAT forwarding port in order to communicate with another UPnP enabled device; this eliminates the need to manually configure port forwarding for the UPnP enabled application. VMG4380-B10A / VMG4325-B10A User’s Guide...
Follow the steps below to install the UPnP in Windows Me. Click Start and Control Panel. Double-click Add/Remove Programs. Click on the Windows Setup tab and select Communication in the Components selection box. Click Details. Add/Remove Programs: Windows Setup: Communication VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 142
Follow the steps below to install the UPnP in Windows XP. Click Start and Control Panel. Double-click Network Connections. In the Network Connections window, click Advanced in the main menu and select Optional Networking Components …. Network Connections VMG4380-B10A / VMG4325-B10A User’s Guide...
8.6 Using UPnP in Windows XP Example This section shows you how to use the UPnP feature in Windows XP. You must already have UPnP installed in Windows XP and UPnP activated on the Device. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 144
Click Start and Control Panel. Double-click Network Connections. An icon displays under Internet Gateway. Right-click the icon and select Properties. Network Connections In the Internet Connection Properties window, click Settings to see the port mappings there were automatically created. Internet Connection Properties VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 145
When the UPnP-enabled device is disconnected from your computer, all port mappings will be deleted automatically. Select Show icon in notification area when connected option and click OK. An icon displays in the system tray. System Tray Icon VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 146
Device first. This comes helpful if you do not know the IP address of the Device. Follow the steps below to access the web configurator. Click Start and then Control Panel. Double-click Network Connections. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 147
Network Connections An icon with the description for each UPnP-enabled device displays under Local Network. Right-click on the icon for your Device and select Invoke. The web configurator login screen displays. Network Connections: My Network Places VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 148
Chapter 8 Home Networking Right-click on the icon for your Device and select Properties. A properties window displays with basic information about the Device. Network Connections: My Network Places: Properties: Example VMG4380-B10A / VMG4325-B10A User’s Guide...
Select the checkbox to enable the Public LAN feature. Your ISP must support Public LAN and Static IP. IP Address Enter the public IP address provided by your ISP. IP Subnet Mask Enter the public IP subnet mask provided by your ISP. VMG4380-B10A / VMG4325-B10A User’s Guide...
If you are using DSL connection, you can configure your Ethernet WAN port as an extra LAN port. This fifth Ethernet port is a Gigabit port. Click Network Settings > Home Networking > 5th Ethernet Port to open this screen. VMG4380-B10A / VMG4325-B10A User’s Guide...
Remove - Delete one tag from tagged traffic. If the frame has double tags, this removes the outer tag. This does not affect untagged traffic. • Remark - Change the value of the outer VLAN ID and priority tags. VMG4380-B10A / VMG4325-B10A User’s Guide...
When configured as a server, the Device provides the TCP/IP configuration for the clients. If you turn DHCP service off, you must have another DHCP server on your LAN, or else the computer must be manually configured. VMG4380-B10A / VMG4325-B10A User’s Guide...
192.168.1.0 as the network number; which covers 254 individual addresses, from 192.168.1.1 to 192.168.1.254 (zero and 255 are reserved). In other words, the first three numbers specify the network number while the last number identifies an individual computer on that network. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 154
Note: Regardless of your particular situation, do not create an arbitrary IP address; always follow the guidelines above. For more information on address assignment, please refer to RFC 1597, “Address Allocation for Private Internets” and RFC 1466, “Guidelines for Management of IP Address Space”. VMG4380-B10A / VMG4325-B10A User’s Guide...
• Use the Policy Forwarding screen to configure policy routing on the Device. (Section 9.3 on page 157). • Use the RIP screen to set up RIP settings on the Device. (Section 9.4 on page 159). VMG4380-B10A / VMG4325-B10A User’s Guide...
Click the Edit icon to edit the static route on the Device. Click the Delete icon to remove a static route from the Device. A window displays asking you to confirm that you want to delete the route. VMG4380-B10A / VMG4325-B10A User’s Guide...
Policy forwarding allows the Device to override the default routing behavior and alter the packet forwarding based on the policy defined by the network administrator. Policy-based routing is applied to outgoing packets, prior to the normal routing. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 158
This is the WAN interface through which the traffic is routed. Modify Click the Edit icon to edit this policy. Click the Delete icon to remove a policy from the Device. A window displays asking you to confirm that you want to delete the policy. VMG4380-B10A / VMG4325-B10A User’s Guide...
Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. 9.4 The RIP Screen Routing Information Protocol (RIP, RFC 1058 and RFC 1389) allows a device to exchange routing information with other routers. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 160
Select Active to have the Device advertise its route information and also listen for routing updates from neighboring routers. Enabled Select the check box to activate the settings. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG4380-B10A / VMG4325-B10A User’s Guide...
• The Policer Setup screen lets you add, edit or delete QoS policers (Section 10.5 on page 166). • The Monitor screen lets you view the Device's QoS-related packet statistics (Section 10.7 on page 173). VMG4380-B10A / VMG4325-B10A User’s Guide...
(or queues). Your Device uses the Token Bucket algorithm to allow a certain amount of large bursts while keeping a limit at the average rate. Traffic Rate Traffic Rate Time Time (Before Traffic Shaping) (After Traffic Shaping) VMG4380-B10A / VMG4325-B10A User’s Guide...
Click Network Setting > QoS > General to open the screen as shown next. Use this screen to enable or disable QoS and set the upstream bandwidth. See Section 10.1 on page 161 for more information. Figure 67 Network Settings > QoS > General VMG4380-B10A / VMG4325-B10A User’s Guide...
Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. 10.4 The Queue Setup Screen Click Network Setting > QoS > Queue Setup to open the screen as shown next. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 165
This shows the maximum transmission rate allowed for traffic on this queue. Modify Click the Edit icon to edit the queue. Click the Delete icon to delete an existing queue. Note that subsequent rules move up by one when you take this action. VMG4380-B10A / VMG4325-B10A User’s Guide...
For example, you can configure a classifier to select traffic from the same protocol port (such as Telnet) to form a flow. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 167
This is the name of the queue in which traffic of this classifier is put. Modify Click the Edit icon to edit the classifier. Click the Delete icon to delete an existing classifier. Note that subsequent rules move up by one when you take this action. VMG4380-B10A / VMG4325-B10A User’s Guide...
Chapter 10 Quality of Service (QoS) 10.5.1 Add/Edit QoS Class Click Add new Classifier in the Class Setup screen or the Edit icon next to a classifier to open the following screen. Figure 71 Class Setup: Add/Edit VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 169
For example, if you set the MAC address to 00:13:49:00:00:00 and the mask to ff:ff:ff:00:00:00, a packet with a MAC address of 00:13:49:12:34:56 matches this criteria. Exclude Select this option to exclude the packets that match the specified criteria from this classifier. Others VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 170
If you select Unchange, the Device keep the VLAN ID in the packets. Forward to Select a WAN interface through which traffic of this class will be forwarded out. If you select Interface Unchange, the Device forward traffic of this class according to the default routing table. VMG4380-B10A / VMG4325-B10A User’s Guide...
QoS classes. Modify Click the Edit icon to edit the policer. Click the Delete icon to delete an existing policer. Note that subsequent rules move up by one when you take this action. VMG4380-B10A / VMG4325-B10A User’s Guide...
• Drop: Discard the packets. • DSCP Mark: Change the DSCP mark value of the packets. Enter the DSCP mark value to use. The packets may be dropped if there is congestion on the network. VMG4380-B10A / VMG4325-B10A User’s Guide...
Name This shows the name of the queue. Pass Rate This shows how many packets assigned to this queue are transmitted successfully. Drop Rate This shows how many packets assigned to this queue are dropped. VMG4380-B10A / VMG4325-B10A User’s Guide...
DiffServ defines a new Differentiated Services (DS) field to replace the Type of Service (TOS) field in the IP header. The DS field contains a 2-bit unused field and a 6-bit DSCP field which can define up to 64 service levels. The following figure illustrates the DS field. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 176
The Single Rate Three Color Marker (srTCM, defined in RFC 2697) is a type of traffic policing that identifies packets by comparing them to one user-defined rate, the Committed Information Rate (CIR), and two burst sizes: the Committed Burst Size (CBS) and Excess Burst Size (EBS). VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 177
• If the PBS bucket has enough tokens, the Device checks the CBS bucket. The packet is marked green and can be transmitted if the number of tokens in the CBS bucket is equal to or greater than the size of the packet (in bytes). Otherwise, the packet is marked yellow. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 178
Chapter 10 Quality of Service (QoS) VMG4380-B10A / VMG4325-B10A User’s Guide...
WAN side. In the simplest form, NAT changes the source IP address in a packet received from a subscriber (the inside local address) to another (the inside global address) before forwarding the packet to the VMG4380-B10A / VMG4325-B10A User’s Guide...
Let's say you want to assign ports 21-25 to one FTP, Telnet and SMTP server (A in the example), port 80 to another (B in the example) and assign a default server IP address of 192.168.1.35 to a VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 181
This is the last external port number that identifies a service. Translation This is the first internal port number that identifies a service. Start Port Translation End This is the last internal port number that identifies a service. Port VMG4380-B10A / VMG4325-B10A User’s Guide...
To forward only one port, enter the port number again in the End Port field. To forward a series of ports, enter the start port number here and the end port number in the End Port field. VMG4380-B10A / VMG4325-B10A User’s Guide...
WAN Interface This field shows the WAN interface through which the service is forwarded. Server IP This field displays the destination IP address for the service. Address Modify Click the Delete icon to delete the rule. VMG4380-B10A / VMG4325-B10A User’s Guide...
LAN can use the service in the same manner. This way you do not need to configure a new IP address each time you want a different LAN computer to use the application. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 185
IP address of the LAN computer that sent the traffic to a server on the WAN. This is the first port number that identifies a service. Trigger End This is the last port number that identifies a service. Port Trigger Proto. This is the trigger transport layer protocol. VMG4380-B10A / VMG4325-B10A User’s Guide...
Type a port number or the starting port number in a range of port numbers. Trigger End Type a port number or the ending port number in a range of port numbers. Port Trigger Protocol Select the transport layer protocol from TCP, UDP, or TCP/UDP. VMG4380-B10A / VMG4325-B10A User’s Guide...
Note: If you do not assign a Default Server Address, the Device discards all packets received for ports that are not specified in the NAT Port Forwarding screen. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG4380-B10A / VMG4325-B10A User’s Guide...
When a rule matches the current packet, the Device takes the corresponding action and the remaining rules are ignored. Click Network Setting > NAT > Address Mapping to display the following screen. Figure 85 Network Setting > NAT > Address Mapping VMG4380-B10A / VMG4325-B10A User’s Guide...
11.7.1 Add/Edit Address Mapping Rule To add or edit an address mapping rule, click Add new rule or the rule’s edit icon in the Address Mapping screen to display the screen shown next. Figure 86 Address Mapping: Add/Edit VMG4380-B10A / VMG4325-B10A User’s Guide...
IP address of a host when the packet is in the local network, while the global address refers to the IP address of the host when the same packet is traveling in the WAN side. VMG4380-B10A / VMG4325-B10A User’s Guide...
With no servers defined, your Device filters out all incoming inquiries, thus preventing intruders from probing your network. For more information on IP address translation, refer to RFC 1631, The IP Network Address Translator (NAT). VMG4380-B10A / VMG4325-B10A User’s Guide...
NAT Table Inside Local Inside Global IP Address IP Address 192.168.1.10 IGA 1 192.168.1.13 192.168.1.11 IGA 2 192.168.1.12 IGA 3 192.168.1.13 IGA 4 192.168.1.12 192.168.1.10 IGA1 Inside Local Inside Global Address (ILA) Address (IGA) 192.168.1.11 192.168.1.10 VMG4380-B10A / VMG4325-B10A User’s Guide...
SMTP (Simple Mail Transfer Protocol) DNS (Domain Name System) Finger HTTP (Hyper Text Transfer protocol or WWW, Web) POP3 (Post Office Protocol) NNTP (Network News Transport Protocol) SNMP (Simple Network Management Protocol) SNMP trap PPTP (Point-to-Point Tunneling Protocol) 1723 VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 194
(C in the example). You assign the LAN IP addresses and the ISP assigns the WAN IP address. The NAT network appears as a single host on the Internet. Figure 89 Multiple Servers Behind NAT Example A=192.168.1.33 192.168.1.1 B=192.168.1.34 IP address assigned by ISP C=192.168.1.35 D=192.168.1.36 VMG4380-B10A / VMG4325-B10A User’s Guide...
• Use the DNS Entry screen to view, configure, or remove DNS routes (Section 12.2 on page 196). • Use the Dynamic DNS screen to enable DDNS and configure the DDNS settings on the Device (Section 12.3 on page 197). VMG4380-B10A / VMG4325-B10A User’s Guide...
This indicates the host name or domain name. IP Address This indicates the IP address assigned to this computer. Modify Click the Edit icon to edit the rule. Click the Delete icon to delete an existing rule. VMG4380-B10A / VMG4325-B10A User’s Guide...
12.3 The Dynamic DNS Screen Use this screen to change your Device’s DDNS. Click Network Setting > DNS > Dynamic DNS. The screen appears as shown. Figure 92 Network Setting > DNS > Dynamic DNS VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 198
If you select TZO in the Service Provider field, enter the password you used to register for this service. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG4380-B10A / VMG4325-B10A User’s Guide...
If you set the Device to assign IP addresses based on the client’s DHCP Vendor ID option information, you must enable DHCP server and configure LAN TCP/IP settings for both the default and user-defined groups. See Chapter 8 on page for more information. VMG4380-B10A / VMG4325-B10A User’s Guide...
Click this button to create a new group. 13.2.1 Interface Group Configuration Click the Add New Interface Group button in the Interface Group screen to open the following screen. Use this screen to create a new interface group. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 201
Filter Criteria This shows the filtering criteria. The LAN interface on which the matched traffic is received will belong to this group automatically. WildCard This shows if wildcard on DHCP option 60 is enabled. Support VMG4380-B10A / VMG4325-B10A User’s Guide...
DHCP option 60. DHCP option 60 option DHCP Option Select this and enter the device identity of the matched traffic. IAID Enter the Identity Association Identifier (IAID) of the device, for example, the WAN connection index number. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 203
Enter the model name of the device. Name Serial Enter the serial number of the device. Number Apply Click Apply to save your changes back to the Device. Cancel Click Cancel to exit this screen without saving. VMG4380-B10A / VMG4325-B10A User’s Guide...
Device supports File Allocation Table (FAT) and FAT32. Common Internet File System The Device uses Common Internet File System (CIFS) protocol for its file sharing functions. CIFS compatible computers can access the USB file storage devices connected to the Device. CIFS VMG4380-B10A / VMG4325-B10A User’s Guide...
• Microsoft Windows 95, Windows 98 SE (Second Edition), Windows Me, Windows NT 4.0, Windows 2000, Windows XP or Macintosh OS X. 14.2 The File Sharing Screen You can share files on a USB memory stick or hard drive connected to your Device with users on your network. VMG4380-B10A / VMG4325-B10A User’s Guide...
Use this screen to set up file sharing using the Device. To access this screen, click Network Setting > USB Service > File Sharing. Figure 98 Network Setting > USB Service > File Sharing VMG4380-B10A / VMG4325-B10A User’s Guide...
To change your Device’s media server settings, click Network Setting > USB Service > Media Server. The screen appears as shown. Figure 99 Network Setting > USB Service > Media Server VMG4380-B10A / VMG4325-B10A User’s Guide...
Note: Your printer’s installation instructions may ask that you connect the printer to your computer. Connect your printer to the Device instead. Use this screen to enable or disable sharing of a USB printer via your Device. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 210
Printer Name Enter the name of the printer. Make and Enter the manufacturer and model number of the printer. model Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG4380-B10A / VMG4325-B10A User’s Guide...
• Use the Access Control screen to view and configure incoming/outgoing filtering rules (Section 15.4 on page 215). • Use the DoS screen to activate protection against Denial of Service (DoS) attacks (Section 15.5 on page 218). VMG4380-B10A / VMG4325-B10A User’s Guide...
Stateful Packet Inspection (SPI) tracks each connection crossing the firewall and makes sure it is valid. Filtering decisions are based not only on rules but also context. For example, traffic from the WAN may only be allowed to cross the firewall in response to a request from the LAN. VMG4380-B10A / VMG4325-B10A User’s Guide...
You can configure customized services and port numbers in the Service screen. For a comprehensive list of port numbers and services, visit the IANA (Internet Assigned Number Authority) website. See Appendix F on page 353 for some examples. VMG4380-B10A / VMG4325-B10A User’s Guide...
Use this screen to add a customized service rule that you can use in the firewall’s ACL rule configuration. Click Add new service entry or the edit icon next to an existing service rule in the Service screen to display the following screen. Figure 105 Service: Add/Edit VMG4380-B10A / VMG4325-B10A User’s Guide...
15.4 The Access Control Screen Click Security > Firewall > Access Control to display the following screen. This screen displays a list of the configured incoming or outgoing filtering rules. Figure 106 Security > Firewall > Access Control VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 216
Click the Delete icon to delete an existing rule. Note that subsequent rules move up by one when you take this action. Click the Move To icon to change the order of the rule. Enter the number in the # field. VMG4380-B10A / VMG4325-B10A User’s Guide...
Select the destination device to which the ACL rule applies. If you select Specific IP Destination Address, enter the destiniation IP address in the field below. Device Destination IP Enter the destination IP address. Address VMG4380-B10A / VMG4325-B10A User’s Guide...
Internet access becomes unavailable. Use the DoS screen to activate protection against DoS attacks. Click Security > Firewall > DoS to display the following screen. Figure 108 Security > Firewall > DoS VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 219
Select Enable to enable protection against DoS attacks. Blocking Deny Ping Select Enable to block ping request packets. Response Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG4380-B10A / VMG4325-B10A User’s Guide...
16.2 The MAC Filter Screen Use this screen to allow wireless and LAN clients access to the Device. Click Security > MAC Filter. The screen appears as shown. Figure 109 Security > MAC Filter VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 222
Device in these address fields. Enter the MAC addresses in a valid MAC address format, that is, six hexadecimal character pairs, for example, 12:34:56:78:9a:bc. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG4380-B10A / VMG4325-B10A User’s Guide...
A yellow bulb signifies that this rule is active. A gray bulb signifies that this rule is not active. PCP Name This shows the name of the rule. Home Network This shows the MAC address of the LAN user’s computer to which this rule applies. User (MAC) VMG4380-B10A / VMG4325-B10A User’s Guide...
Use this screen to configure a restricted access schedule and/or URL filtering settings to block the users on your network from accessing certain web sites. Figure 111 Parental Control Rule: Add/Edit VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 225
Click Add to show a screen to enter the URL of web site or URL keyword to which the Device URL Keyword blocks access. Click Delete to remove it. Apply Click this button to save your settings back to the Device. Cancel Click Cancel to restore your previously saved settings. VMG4380-B10A / VMG4325-B10A User’s Guide...
This shows the description of this rule. Modify Click the Edit icon to edit the schedule. Click the Delete icon to delete a scheduler rule. Note: You cannot delete a scheduler rule once it is applied to a certain feature. VMG4380-B10A / VMG4325-B10A User’s Guide...
Enter the time period of each day, in 24-hour format, during which parental control will be Range enforced. Description Enter a description for this scheduler rule. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG4380-B10A / VMG4325-B10A User’s Guide...
You can use the Device to generate certification requests that contain identifying information and public keys and then send the certification requests to a certification authority. VMG4380-B10A / VMG4325-B10A User’s Guide...
For a certification request, click Load Signed to import the signed certificate. Click the Remove icon to delete the certificate (or certification request). You cannot delete a certificate that one or more features is configured to use. VMG4380-B10A / VMG4325-B10A User’s Guide...
After you click Apply, the following screen displays to notify you that you need to get the certificate request signed by a Certificate Authority. If you already have, click Load_Signed to import the signed certificate into the Device. Otherwise click Back to return to the Local Certificates screen. VMG4380-B10A / VMG4325-B10A User’s Guide...
Certificates screen click the certificate request’s Load Signed icon to import the signed certificate into the Device. Note: You must remove any spaces from the certificate’s filename before you can import Figure 117 Load Signed Certificate VMG4380-B10A / VMG4325-B10A User’s Guide...
Click the View icon to open a screen with an in-depth list of information about the certificate (or certification request). Click the Remove button to delete the certificate (or certification request). You cannot delete a certificate that one or more features is configured to use. VMG4380-B10A / VMG4325-B10A User’s Guide...
CA will be displayed in the Network Setting > Broadband > 802.1x: Authentication Edit screen. Certificate Copy and paste the certificate into the text box to store it on the Device. Click OK to save your changes. Cancel Click Cancel to exit this screen without saving. VMG4380-B10A / VMG4325-B10A User’s Guide...
Emergency: The system is unusable. Alert: Action must be taken immediately. Critical: The system condition is critical. Error: There is an error condition on the system. Warning: There is a warning condition on the system. VMG4380-B10A / VMG4325-B10A User’s Guide...
Level This field displays the severity level of the logs that the device is to send to this syslog server. Messages This field states the reason for the log. VMG4380-B10A / VMG4325-B10A User’s Guide...
Level This field displays the severity level of the logs that the device is to send to this syslog server. Messages This field states the reason for the log. VMG4380-B10A / VMG4325-B10A User’s Guide...
Click System Monitor > Traffic Status to open the WAN screen. The figure in this screen shows the number of bytes received and sent on the Device. Figure 123 System Monitor > Traffic Status > WAN VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 242
This indicates the number of received packets on this interface. Error This indicates the number of frames with errors received on this interface. Drop This indicates the number of received packets dropped on this interface. VMG4380-B10A / VMG4325-B10A User’s Guide...
This indicates the number of received packets on this interface. Error This indicates the number of frames with errors received on this interface. Drop This indicates the number of received packets dropped on this interface. VMG4380-B10A / VMG4325-B10A User’s Guide...
The following table describes the labels in this screen. Table 97 System Monitor > ARP Table LABEL DESCRIPTION This is the ARP table entry number. IP Address This is the learned IP address of a device connected to a port. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 246
This is the MAC address of the device with the listed IP address. Device This is the type of interface used by the device. You can click on the device type to go to its configuration screen. VMG4380-B10A / VMG4325-B10A User’s Guide...
M-Modified (redirect): The route is modified from a routing daemon or redirect. Metric The metric represents the "cost of transmission". A router determines the best route for transmission by choosing a path with the lowest "cost". The smaller the number, the lower the "cost". VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 248
This indicates the name of the interface through which the route is forwarded. br0 indicates the LAN interface. ptm0 indicates the WAN interface using IPoE or in bridge mode. ppp0 indicates the WAN interface using PPPoE. VMG4380-B10A / VMG4325-B10A User’s Guide...
EXCLUDE means that the IP addresses in the Source List are not allowed to receive the multicast group’s traffic but other IP addresses can. Source List This is the list of IP addresses that are allowed or not allowed to receive the multicast group’s traffic depending on the filter mode. VMG4380-B10A / VMG4325-B10A User’s Guide...
HAPTER xDSL Statistics 25.1 The xDSL Statistics Screen Use this screen to view detailed DSL statistics. Click System Monitor > xDSL Statistics to open the following screen. Figure 128 System Monitor > xDSL Statistics VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 252
Attainable Net These are the highest theoretically possible transfer rates at which the port could send and Data Rate receive payload data without transport layer protocol headers and traffic. xDSL Counters VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 253
30% or more errored blocks or at least one defect. This is a subset of ES. This is the number of UnAvailable Seconds. This is the number of Loss Of Signal seconds. This is the number of Loss Of Frame seconds. This is the number of Loss of Margin seconds. VMG4380-B10A / VMG4325-B10A User’s Guide...
(*) for each character you type. After you change the password, use the new password to access the Device. Retype to Type the new password again for confirmation. confirm Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG4380-B10A / VMG4325-B10A User’s Guide...
27.2 The Remote MGMT Screen Use this screen to configure through which interface(s) users can use which service(s) to manage the Device. Click Maintenance > Remote MGMT to open the following screen. Figure 130 Maintenance > Remote MGMT VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 258
Select a certificate the HTTPS server (the Device) uses to authenticate itself to the HTTPS Certificate client. You must have certificates already configured in the Certificates screen. Apply Click Apply to save your changes back to the Device. Cancel Click Cancel to restore your previously saved settings. VMG4380-B10A / VMG4325-B10A User’s Guide...
ACS and specify the ACS IP address or domain name and username and password. Click Maintenance > TR-069 Client to open the following screen. Use this screen to configure your Device to be managed by an ACS. Figure 131 Maintenance > TR-069 Client VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 260
You can choose a local certificate used by TR-069 client. The local certificate should be used by TR-069 imported in the Security > Certificates > Local Certificates screen. client Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG4380-B10A / VMG4325-B10A User’s Guide...
The following table describes the fields in this screen. Table 104 Maintenance > TR-064 LABEL DESCRIPTION State Select Enable to activate management via TR-064 on the LAN. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG4380-B10A / VMG4325-B10A User’s Guide...
To change your Device’s time and date, click Maintenance > Time. The screen appears as shown. Use this screen to configure the Device’s time based on your local time zone. Figure 133 Maintenance > Time Setting VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 264
October. The time you select in the o'clock field depends on your time zone. In Germany for instance, you would select 2 in the Hour field because Germany's time zone is one hour ahead of GMT or UTC (GMT+1). VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 265
Chapter 30 Time Settings Table 105 Maintenance > Time Setting (continued) LABEL DESCRIPTION Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG4380-B10A / VMG4325-B10A User’s Guide...
This field displays the password of the sender’s mail account. Email Address This field displays the e-mail address that you want to be in the from/sender line of the e- mail that the Device sends. Remove Click this button to delete the selected entry(ies). VMG4380-B10A / VMG4325-B10A User’s Guide...
If you activate SSL/TLS authentication, the e-mail address must be able to be authenticated by the mail server as well. Apply Click this button to save your changes and return to the previous screen. Cancel Click this button to begin configuring this screen afresh. VMG4380-B10A / VMG4325-B10A User’s Guide...
You can configure where the Device sends logs and which logs and/or immediate alerts the Device records in the Logs Setting screen. 32.2 The Log Settings Screen To change your Device’s log settings, click Maintenance > Logs Setting. The screen appears as shown. Figure 136 Maintenance > Logs Setting VMG4380-B10A / VMG4325-B10A User’s Guide...
• You may edit the subject title. • The date format here is Day-Month-Year. • The date format here is Month-Day-Year. The time format is Hour-Minute-Second. VMG4380-B10A / VMG4325-B10A User’s Guide...
Click this to find the .bin file you want to upload. Remember that you must decompress compressed (.zip) files before you can upload them. Upload Click this to begin the upload process. This process may take up to two minutes. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 274
After two minutes, log in again and check your new firmware version in the Status screen. If the upload was not successful, the following screen will appear. Click OK to go back to the Firmware Upgrade screen. Figure 141 Error Message VMG4380-B10A / VMG4325-B10A User’s Guide...
The backup configuration file will be useful in case you need to return to your previous settings. Click Backup to save the Device’s current configuration to your computer. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 276
IP address. If the upload was not successful, the following screen will appear. Click OK to go back to the Configuration screen. Figure 144 Configuration Upload Error VMG4380-B10A / VMG4325-B10A User’s Guide...
System restart allows you to reboot the Device remotely without turning the power off. You may need to do this if the Device hangs, for example. Click Maintenance > Reboot. Click Reboot to have the Device reboot. This does not affect the Device's configuration. Figure 147 Maintenance > Reboot VMG4380-B10A / VMG4325-B10A User’s Guide...
If an MEP port does not respond to the source MEP, this may indicate a fault. Administrators can take further action to check and resume services from the fault according to the line connectivity status report. VMG4380-B10A / VMG4325-B10A User’s Guide...
Click this button to perform the traceroute function. This determines the path a packet takes to the specified computer. Nslookup Click this button to perform a DNS lookup on the IP address of a computer you enter. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 280
Click this button to have the selected MEP send the LBM (Loop Back Message) to a specified remote end point. Send Linktrace Click this button to have the selected MEP send the LTMs (Link Trace Messages) to a specified remote end point. VMG4380-B10A / VMG4325-B10A User’s Guide...
ATM device. End-to-end loopback tests allow you to verify integrity of an end-to-end PVC. Note: The DSLAM to which the Device is connected must also support ATM F4 and/or F5 to use this test. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 282
F4 end-end Press this to perform an OAM F4 end-to-end loopback test. F5 segment Press this to perform an OAM F5 segment loopback test. F5 end-end Press this to perform an OAM F5 end-to-end loopback test. VMG4380-B10A / VMG4325-B10A User’s Guide...
Make sure you understand the normal behavior of the LED. See Section 1.5 on page Check the hardware connections. Inspect your cables for damage. Contact the vendor to replace any damaged cables. Turn the Device off and on. VMG4380-B10A / VMG4325-B10A User’s Guide...
Make sure your Internet browser does not block pop-up windows and has JavaScripts and Java enabled. See Appendix C on page 321. If it is possible to log in from another interface, check the service control settings for HTTP and HTTPS (Maintenance > Remote MGMT). VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 285
I cannot use FTP to upload / download the configuration file. / I cannot use FTP to upload new firmware. See the troubleshooting suggestions for I cannot see or access the Login screen in the web configurator. Ignore the suggestions about your browser. VMG4380-B10A / VMG4325-B10A User’s Guide...
I cannot access the Internet anymore. I had access to the Internet (with the Device), but my Internet connection is not available anymore. Your session with the Device may have expired. Try logging into the Device again. VMG4380-B10A / VMG4325-B10A User’s Guide...
An SSID is a name that uniquely identifies a wireless network. The AP and all the clients within a wireless network must use the same SSID. What wireless security modes does my Device support? Wireless security is vital to your network. It protects communications between wireless stations, access points and the wired network. VMG4380-B10A / VMG4325-B10A User’s Guide...
Network Places > Local Network. Disconnect the Ethernet cable from the Device’s LAN port or from your computer. Re-connect the Ethernet cable. The Local Area Connection icon for UPnP disappears in the screen. Restart your computer. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 289
Chapter 36 Troubleshooting I cannot open special applications such as white board, file transfer and video when I use the MSN messenger. Wait more than three minutes. Restart the applications. VMG4380-B10A / VMG4325-B10A User’s Guide...
IP addresses that place them in the same subnet as the Device’s LAN port. Windows 95/98/Me Click Start, Settings, Control Panel and double-click the Network icon to open the Network window. Figure 152 WIndows 95/98/Me: Network: Configuration VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 292
Restart your computer so the changes you made take effect. Configuring In the Network window Configuration tab, select your network adapter's TCP/IP entry and click Properties Click the IP Address tab. • If your IP address is dynamic, select Obtain an IP address automatically. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 293
• If you know your DNS information, select Enable DNS and type the information in the fields below (you may not need to fill them all in). Figure 154 Windows 95/98/Me: TCP/IP Properties: DNS Configuration VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 294
Select your network adapter. You should see your computer's IP address, subnet mask and default gateway. Windows 2000/NT/XP The following example figures use the default Windows XP GUI theme. Click start (Start in Windows 2000/NT), Settings, Control Panel. Figure 155 Windows XP: Start Menu VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 295
In the Control Panel, double-click Network Connections (Network and Dial-up Connections in Windows 2000/NT). Figure 156 Windows XP: Control Panel Right-click Local Area Connection and then click Properties. Figure 157 Windows XP: Control Panel: Network Connections: Properties VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 296
• If you have a dynamic IP address click Obtain an IP address automatically. • If you have a static IP address click Use the following IP Address and fill in the IP address, Subnet mask, and Default gateway fields. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 297
(the number of transmission hops), clear the Automatic metric check box and type a metric in Metric. • Click Add. • Repeat the previous three steps for each default gateway you want to add. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 298
• Click Obtain DNS server address automatically if you do not know your DNS server IP address(es). • If you know your DNS server IP address(es), click Use the following DNS server addresses, and type them in the Preferred DNS server and Alternate DNS server fields. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 299
In the Command Prompt window, type "ipconfig" and then press [ENTER]. You can also open Network Connections, right-click a network connection, click Status and then click the Support tab. Windows Vista This section shows screens from Windows Vista Enterprise Version 6.0. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 300
Click the Start icon, Control Panel. Figure 162 Windows Vista: Start Menu In the Control Panel, double-click Network and Internet. Figure 163 Windows Vista: Control Panel Click Network and Sharing Center. Figure 164 Windows Vista: Network And Internet VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 301
Right-click Local Area Connection and then click Properties. Note: During this procedure, click Continue whenever Windows displays a screen saying that it needs your permission to continue. Figure 166 Windows Vista: Network and Sharing Center VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 302
• If you have a dynamic IP address click Obtain an IP address automatically. • If you have a static IP address click Use the following IP address and fill in the IP address, Subnet mask, and Default gateway fields. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 303
(the number of transmission hops), clear the Automatic metric check box and type a metric in Metric. • Click Add. • Repeat the previous three steps for each default gateway you want to add. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 304
• Click Obtain DNS server address automatically if you do not know your DNS server IP address(es). • If you know your DNS server IP address(es), click Use the following DNS server addresses, and type them in the Preferred DNS server and Alternate DNS server fields. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 305
Click Start, All Programs, Accessories and then Command Prompt. In the Command Prompt window, type "ipconfig" and then press [ENTER]. You can also open Network Connections, right-click a network connection, click Status and then click the Support tab. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 306
Appendix A Setting up Your Computer’s IP Address Macintosh OS 8/9 Click the Apple menu, Control Panel and double-click TCP/IP to open the TCP/IP Control Panel. Figure 171 Macintosh OS 8/9: Apple Menu VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 307
Macintosh OS X Click the Apple menu, and click System Preferences to open the System Preferences window. Figure 173 Macintosh OS X: Apple Menu Click Network in the icon bar. • Select Automatic from the Location list. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 308
• Type the IP address of your Device in the Router address box. Click Apply Now and close the window. Turn on your Device and restart your computer (if prompted). Verifying Settings Check your TCP/IP properties in the Network window. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 309
Follow the steps below to configure your computer IP address using the KDE. Click the Red Hat button (located on the bottom left corner), select System Setting and click Network. Figure 175 Red Hat 9.0: KDE: Network Configuration: Devices VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 310
If you know your DNS server IP address(es), click the DNS tab in the Network Configuration screen. Enter the DNS server information in the fields provided. Figure 177 Red Hat 9.0: KDE: Network Configuration: DNS Click the Devices tab. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 311
The following example shows an example where the static IP address is 192.168.1.10 and the subnet mask is 255.255.255.0. Figure 180 Red Hat 9.0: Static IP Address Setting in ifconfig-eth0 DEVICE=eth0 ONBOOT=yes BOOTPROTO=static IPADDR=192.168.1.10 NETMASK=255.255.255.0 USERCTL=no PEERDNS=yes TYPE=Ethernet VMG4380-B10A / VMG4325-B10A User’s Guide...
192.168.1.1). Each of these four parts is known as an octet. An octet is an eight-digit binary number (for example 11000000, which is 192 in decimal notation). Therefore, each octet has a possible range of 00000000 to 11111111 in binary, or 0 to 255 in decimal. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 314
00000010 By convention, subnet masks always consist of a continuous sequence of ones beginning from the leftmost bit of the mask, followed by a continuous sequence of zeros, for a total number of 32 bits. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 315
This is usually specified by writing a “/” followed by the number of bits in the mask after the address. For example, 192.1.1.0 /25 is equivalent to saying 192.1.1.0 with subnet mask 255.255.255.128. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 316
You can “borrow” one of the host ID bits to divide the network 192.168.1.0 into two separate sub- networks. The subnet mask is now 25 bits (255.255.255.128 or /25). The “borrowed” host ID bit can have a value of either 0 or 1, allowing two subnets; 192.168.1.0 /25 and 192.168.1.128 /25. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 317
Table 118 Subnet 1 LAST OCTET BIT IP/SUBNET MASK NETWORK NUMBER VALUE IP Address (Decimal) 192.168.1. IP Address (Binary) 11000000.10101000.00000001. 00000000 Subnet Mask (Binary) 11111111.11111111.11111111. 11000000 VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 318
Similarly, use a 27-bit mask to create eight subnets (000, 001, 010, 011, 100, 101, 110 and 111). The following table shows IP address last octet values for each subnet. Table 122 Eight Subnets SUBNET LAST BROADCAST SUBNET FIRST ADDRESS ADDRESS ADDRESS ADDRESS VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 320
Regardless of your particular situation, do not create an arbitrary IP address; always follow the guidelines above. For more information on address assignment, please refer to RFC 1597, Address Allocation for Private Internets and RFC 1466, Guidelines for Management of IP Address Space. VMG4380-B10A / VMG4325-B10A User’s Guide...
In Internet Explorer, select Tools, Pop-up Blocker and then select Turn Off Pop-up Blocker. Figure 187 Pop-up Blocker You can also check if pop-up blocking is disabled in the Pop-up Blocker section in the Privacy tab. In Internet Explorer, select Tools, Internet Options, Privacy. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 322
Click Apply to save this setting. Enable Pop-up Blockers with Exceptions Alternatively, if you only want to allow pop-up windows from your device, see the following steps. In Internet Explorer, select Tools, Internet Options and then the Privacy tab. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 323
Select Settings…to open the Pop-up Blocker Settings screen. Figure 189 Internet Options: Privacy Type the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.167.1. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 324
Figure 190 Pop-up Blocker Settings Click Close to return to the Privacy screen. Click Apply to save this setting. JavaScripts If pages of the web configurator do not display properly in Internet Explorer, check that JavaScripts are allowed. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 325
Figure 191 Internet Options: Security Click the Custom Level... button. Scroll down to Scripting. Under Active scripting make sure that Enable is selected (the default). Under Scripting of Java applets make sure that Enable is selected (the default). VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 326
Java Permissions From Internet Explorer, click Tools, Internet Options and then the Security tab. Click the Custom Level... button. Scroll down to Microsoft VM. Under Java permissions make sure that a safety level is selected. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 327
Click OK to close the window. Figure 193 Security Settings - Java JAVA (Sun) From Internet Explorer, click Tools, Internet Options and then the Advanced tab. Make sure that Use Java 2 for <applet> under Java (Sun) is selected. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 328
Mozilla Firefox 2.0 screens are used here. Screens for other versions may vary. You can enable Java, Javascripts and pop-ups in one screen. Click Tools, then click Options in the screen that appears. Figure 195 Mozilla Firefox: Tools > Options VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 329
Appendix C Pop-up Windows, JavaScripts and Java Permissions Click Content.to show the screen below. Select the check boxes as shown in the following screen. Figure 196 Mozilla Firefox Content Security VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 330
Appendix C Pop-up Windows, JavaScripts and Java Permissions VMG4380-B10A / VMG4325-B10A User’s Guide...
(AP). Intra-BSS traffic is traffic between wireless clients in the BSS. When Intra-BSS is enabled, wireless client A and B can access the wired network and communicate with each other. When Intra-BSS is VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 332
APs is called a Distribution System (DS). This type of wireless LAN topology is called an Infrastructure WLAN. The Access Points not only provide communication with the wired network but also mediate wireless network traffic in the immediate neighborhood. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 333
A hidden node occurs when two stations are within range of the same access point, but are not within range of each other. The following figure illustrates a hidden node. Both stations (STA) are within range of the access point (AP) or wireless gateway, but out-of-range of each other, so they VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 334
AP will fragment the packet into smaller data frames. A large Fragmentation Threshold is recommended for networks not prone to interference while you should set a smaller threshold for busy networks or networks that are prone to interference. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 335
IEEE802.1x EAP with RADIUS Server Authentication Wi-Fi Protected Access (WPA) WPA2 Most Secure Note: You must enable the same wireless security settings on the Device and on all wireless clients that you want to associate with it. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 336
Sent by a RADIUS server requesting more information in order to allow access. The access point sends a proper response from the user and then sends another Access-Request message. The following types of RADIUS messages are exchanged between the access point and the RADIUS server for user accounting: VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 337
This makes user identity vulnerable to passive attacks. A digital certificate is an electronic ID card that authenticates the sender’s identity. However, to implement EAP-TLS, you need a Certificate Authority (CA) to handle certificates, which imposes a management overhead. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 339
The encryption mechanisms used for WPA(2) and WPA(2)-PSK are the same. The only difference between the two is that WPA(2)-PSK uses a simple common password, instead of user-specific credentials. The common-password approach makes WPA(2)-PSK susceptible to brute-force VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 340
The RADIUS server then checks the user's identification against its database and grants or denies network access accordingly. A 256-bit Pairwise Master Key (PMK) is derived from the authentication process by the RADIUS server and the client. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 341
The AP and wireless clients use the TKIP or AES encryption process, the PMK and information exchanged in a handshake to create temporal encryption keys. They use these keys to encrypt data exchanged between them. Figure 202 WPA(2)-PSK Authentication VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 342
Antenna gain, measured in dB (decibel), is the increase in coverage within the RF beam width. Higher antenna gain improves the range of the signal for better communications. For an indoor site, each 1 dB increase in antenna gain results in a range increase of approximately VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 343
For a single AP application, place omni-directional antennas as close to the center of the coverage area as possible. For directional antennas, point the antenna in the direction of the desired coverage area. VMG4380-B10A / VMG4325-B10A User’s Guide...
A link-local unicast address has a predefined prefix of fe80::/10. The link-local unicast address format is as follows. Table 129 Link-local Unicast Address Format 1111 1110 10 Interface ID 10 bits 54 bits 64 bits VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 346
FF05:0:0:0:0:0:1:3 The following table describes the multicast addresses which are reserved and can not be assigned to a multicast group. Table 131 Reserved Multicast Address MULTICAST ADDRESS FF00:0:0:0:0:0:0:0 FF01:0:0:0:0:0:0:0 FF02:0:0:0:0:0:0:0 FF03:0:0:0:0:0:0:0 FF04:0:0:0:0:0:0:0 FF05:0:0:0:0:0:0:0 FF06:0:0:0:0:0:0:0 FF07:0:0:0:0:0:0:0 VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 347
DHCPv6 server uses T1 and T2 to control the time at which the client contacts with the server to extend the lifetimes on any addresses in the IA_NA before the lifetimes expire. After T1, the client sends the server (S1) (from which the addresses in the IA_NA were obtained) a Renew message. If VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 348
• Neighbor solicitation: A request from a host to determine a neighbor’s link-layer address (MAC address) and detect if the neighbor is still reachable. A neighbor being “reachable” means it responds to a neighbor solicitation message (from the host) with a neighbor advertisement message. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 349
Done message to the router or switch. The router or switch then sends a group-specific query to the port on which the Done message is received to determine if other devices connected to this port should remain in the group. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 350
Install Dibbler and select the DHCPv6 client option on your computer. After the installation is complete, select Start > All Programs > Dibbler-DHCPv6 > Client Install as service. Select Start > Control Panel > Administrative Tools > Services. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 351
To enable IPv6 in Windows 7: Select Control Panel > Network and Sharing Center > Local Area Connection. Select the Internet Protocol Version 6 (TCP/IPv6) checkbox to enable it. Click OK to save the change. VMG4380-B10A / VMG4325-B10A User’s Guide...
• If the Protocol is USER, this is the IP protocol number. • Description: This is a brief explanation of the applications that use this service or the situations in which this service is used. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 354
This is another popular Internet chat program. MSN Messenger 1863 Microsoft Networks’ messenger service uses this protocol. NetBIOS TCP/UDP The Network Basic Input/Output System is used for communication between TCP/UDP computers in a LAN. TCP/UDP TCP/UDP VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 355
SMTPS This is a more secure version of SMTP that runs over SSL. SNMP TCP/UDP Simple Network Management Program. SNMP-TRAPS TCP/UDP Traps for use with the SNMP (RFC:1215). VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 356
UNIX environments. It operates over TCP/ IP networks. Its primary function is to allow users to log into remote host systems. VDOLIVE 7000 A videoconferencing solution. The UDP port number is specified in the application. user- defined VMG4380-B10A / VMG4325-B10A User’s Guide...
ZyXEL Communications Corporation. Published by MitraStar Communications Corporation. All rights reserved.
Page 358
MitraStar warrants to the original end user (purchaser) that this product is free from any defects in materials or workmanship for a period of up to two years from the date of purchase. During the VMG4380-B10A / VMG4325-B10A User’s Guide...
• Do not use the device outside, and make sure all the connections are indoors. There is a remote risk of electric shock from lightning. • Do NOT obstruct the device ventilation slots, as insufficient airflow may harm your device. • Use only No. 26 AWG (American Wire Gauge) or larger telecommunication line cord. VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 360
Your product is marked with this symbol, which is known as the WEEE mark. WEEE stands for Waste Electronics and Electrical Equipment. It means that used electrical and electronic products should not be mixed with general waste. Used electrical and electronic equipment should be treated separately. VMG4380-B10A / VMG4325-B10A User’s Guide...
Auto Configuration Server, see ACS loopback test channel backup interference configuration channel, wireless LAN Basic Service Set, See BSS client list Basic Service Set, see BSS compatibility, WDS blinking LEDs configuration Broadband backup broadcast firewalls reset 124, 331 VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 362
DS field version DS, dee differentiated services forwarding ports DSCP fragmentation threshold 117, 121, 334 dynamic DNS wildcard 180, 193 Dynamic Host Configuration Protocol, see DHCP dynamic WEP key exchange DYNDNS wildcard General wireless LAN screen VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 363
134, 153 ping private IP Address Assignment IP alias NAT applications IPv6 77, 345 addressing 77, 100, 345 MAC address 112, 139 EUI-64 filter 111, 122 global address MAC authentication interface ID link-local address Mac filter VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 364
NAT example Network Address Translation see NAT 161, 174 marking Network Address Translation, see NAT setup Network Map tagging network map versus CoS NNTP Quality of Service, see QoS Pairwise Master Key (PMK) 339, 341 RADIUS VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 365
Tag Protocol Identifier See TPID firewalls static route 96, 157, 197 Single Rate Three Color Marker, see srTCM thresholds SIP ALG data fragment 117, 121 activation RTS/CTS 117, 121 SMTP time SNMP TPID SNMP trap TR-064 TR-069 VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 366
23, 126 wireless security Wireless tutorial status wizard setup Wide Area Network, see WAN Internet warranty WLAN note interference 115, 125 security parameters compatibility 123, 339 example key caching web configurator pre-authentication login user authentication VMG4380-B10A / VMG4325-B10A User’s Guide...
Page 367
RADIUS application example WPA2 user authentication vs WPA2-PSK wireless client supplicant with RADIUS application example WPA2-Pre-Shared Key WPA2-PSK application example WPA-PSK 123, 339 application example 125, 128 example limitations example push button 23, 126 VMG4380-B10A / VMG4325-B10A User’s Guide...
Need help?
Do you have a question about the VMG4380-B10A and is the answer not in the manual?
Questions and answers