Download Print this page

ZyXEL Communications VMG5313-B10A User Manual

Wireless n voip iad with usb

Hide thumbs Also See for VMG5313-B10A:

User manual (398 pages)

,

Quick start manual (2 pages)

Table Of Contents

Table of Contents

Advertisement

Quick Links

Download this manual

VMG5313-B10A,

VMG5313-B30A

Wireless N VDSL2 VoIP IAD with USB

Version 5.00

Edition 2, 03/2014

Quick Start Guide

User's Guide

Default Login Details

LAN IP Address

Login

Password

www.zyxel.com

Default URL

http://192.168.1.1

admin, user

1234, user

http://192.168.1.1

Copyright © 2013 ZyXEL Communications Corporation

Table of Contents

Advertisement

Table of Contents

Need help?

Need help?

Do you have a question about the VMG5313-B10A and is the answer not in the manual?

Questions and answers

Summary of Contents for ZyXEL Communications VMG5313-B10A

Page 1 Wireless N VDSL2 VoIP IAD with USB Version 5.00 Edition 2, 03/2014 Quick Start Guide User’s Guide Default Login Details LAN IP Address http://192.168.1.1 Login admin, user Password 1234, user www.zyxel.com Default URL http://192.168.1.1 Copyright © 2013 ZyXEL Communications Corporation...
Page 2 Every effort has been made to ensure that the information in this manual is accurate. Related Documentation • Quick Start Guide The Quick Start Guide shows how to connect the VMG and get up and running right away. VMG5313-B10A/-B30A Series User’s Guide...
Page 3: Table Of Contents
Traffic Status ............................229 VoIP Status ............................232 xDSL Statistics ............................235 System ..............................237 User Account ............................239 Remote Management ..........................241 TR-069 Client ............................245 SNMP ..............................247 Time Settings ............................249 Logs Setting ............................251 Firmware Upgrade ..........................253 Backup/Restore .............................255 Diagnostic .............................258 Troubleshooting ............................263 VMG5313-B10A/-B30A Series User’s Guide...
Page 4 Contents Overview Appendices ............................271 VMG5313-B10A/-B30A Series User’s Guide...
Page 5: Table Of Contents
2.2.3 Navigation Panel ........................26 Chapter 3 Quick Start............................31 3.1 Overview ............................31 3.2 Quick Start Setup ..........................31 Chapter 4 Tutorials ...............................33 4.1 Overview ............................33 4.2 Setting Up an ADSL PPPoE Connection ..................33 4.3 Setting Up Ethernet WAN .........................36 VMG5313-B10A/-B30A Series User’s Guide...
Page 6 6.5 Technical Reference ..........................80 Chapter 7 Wireless ...............................87 7.1 Overview ............................87 7.1.1 What You Can Do in this Chapter ....................87 7.1.2 What You Need to Know ......................88 7.2 The General Screen .........................88 7.2.1 No Security ..........................90 VMG5313-B10A/-B30A Series User’s Guide...
Page 7 8.8.3 DNS Server Addresses ......................129 8.8.4 LAN TCP/IP ...........................129 Chapter 9 Routing ..............................131 9.1 Overview ............................131 9.2 The Routing Screen ........................131 9.2.1 Add/Edit Static Route ......................132 9.3 The DNS Route Screen ........................133 9.3.1 The DNS Route Add Screen ....................134 VMG5313-B10A/-B30A Series User’s Guide...
Page 8 11.7.3 How NAT Works ........................165 11.7.4 NAT Application ........................166 Chapter 12 Dynamic DNS Setup .........................169 12.1 Overview ............................169 12.1.1 What You Can Do in this Chapter ..................169 12.1.2 What You Need To Know .....................170 12.2 The Dynamic DNS Screen ......................170 VMG5313-B10A/-B30A Series User’s Guide...
Page 9 16.2 The MAC Filter Screen ........................189 Chapter 17 Parental Control ..........................191 17.1 Overview ............................191 17.2 The Parental Control Screen ......................191 17.2.1 Add/Edit a Parental Control Rule ..................192 Chapter 18 Scheduler Rule..........................195 18.1 Overview ............................195 18.2 The Scheduler Rule Screen ......................195 VMG5313-B10A/-B30A Series User’s Guide...
Page 10 21.2 The System Log Screen ........................226 21.3 The Voice Log Screen ........................226 Chapter 22 Traffic Status ............................229 22.1 Overview ............................229 22.1.1 What You Can Do in this Chapter ..................229 22.2 The WAN Status Screen .......................229 22.3 The LAN Status Screen .........................230 VMG5313-B10A/-B30A Series User’s Guide...
Page 11 28.2 The TR-069 Client Screen ......................245 Chapter 29 SNMP ..............................247 29.1 Overview ............................247 29.2 The SNMP Screen ........................247 Chapter 30 Time Settings ............................249 30.1 Overview ............................249 30.2 The Time Screen ..........................249 Chapter 31 Logs Setting .............................251 31.1 Overview ............................251 VMG5313-B10A/-B30A Series User’s Guide...
Page 12 Part III: Appendices ..................271 Appendix A Customer Support ......................274 Appendix B Setting up Your Computer’s IP Address ...............281 Appendix C IP Addresses and Subnetting..................303 Appendix D Pop-up Windows, JavaScripts and Java Permissions ..........311 Appendix E Wireless LANs......................321 VMG5313-B10A/-B30A Series User’s Guide...
Page 13 Table of Contents Appendix F IPv6 ..........................335 Appendix G Services ........................343 Appendix H Legal Information ......................347 Index ..............................351 VMG5313-B10A/-B30A Series User’s Guide...
Page 14 Table of Contents VMG5313-B10A/-B30A Series User’s Guide...
Page 15: User's Guide
User’s Guide...
Page 17: Introducing The Vmg
VDSL is not available. The VMG is also a wireless access point and is compatible with IEEE 802.11b/ g/n wireless standard. • The VMG5313-B10A works over the analog telephone system, POTS (Plain Old Telephone Service). • The VMG5313-B30A works over ISDN (Integrated Services Digital Network) or T-ISDN (UR-2).
Page 18 VMG to its factory default settings. If you backed up an earlier configuration file, you would not have to totally re-configure the VMG. You could simply restore your last configuration. VMG5313-B10A/-B30A Series User’s Guide...
Page 19: Applications For The Vmg
Computers can connect to the VMG’s LAN ports (or wirelessly). Figure 1 VMG’s Internet Access Application WLAN Bridging IPoE PPPoE ADSL / VDSL WLAN Bridging PPPoE IPoE PPPoA IPoA ADSL WLAN Bridging PPPoE IPoE Ethernet VMG5313-B10A/-B30A Series User’s Guide...
Page 20: Vmg's Usb Support
None of the LEDs are on if the VMG is not receiving power. Table 1 LED Descriptions COLOR STATUS DESCRIPTION PWR/SYS Green The VMG is receiving power and ready for use. Blinking The VMG is self-testing. VMG5313-B10A/-B30A Series User’s Guide...
Page 21: The Reset Button
This means that you will lose all configurations that you had previously and the default login names and passwords will be reset (see the cover page). Make sure the PWR/SYS LED is on (not blinking). VMG5313-B10A/-B30A Series User’s Guide...
Page 22: Wireless Access
Once the connection is successfully made, the WiFi LED shines green. To turn off the wireless network, press the Wi-Fi button for one to five seconds. The WiFi LED turns off when the wireless network is off. VMG5313-B10A/-B30A Series User’s Guide...
Page 23: The Web Configurator
If you have changed the password, enter your password and click Login. Figure 4 Password Screen VMG5313-B10A/-B30A Series User’s Guide...
Page 24 After you finished or closed the Quick Start Wizard screen, the Network Map page appears. Figure 6 Network Map Click Status to display the Status screen, where you can view the VMG’s interface and system information. VMG5313-B10A/-B30A Series User’s Guide...
Page 25: Web Configurator Layout
Language: Select the language you prefer. Quick Start: Click this icon to open screens where you can configure the VMG’s time zone Internet access, and wireless settings. Logout: Click this icon to log out of the web configurator. VMG5313-B10A/-B30A Series User’s Guide...
Page 26: Main Window
Use this screen to enable or disable PTM over ADSL, Annex M/Annex J, and DSL PhyR functions. Ethernet WAN Use this screen to convert Ethernet LAN 4 port as WAN port, or restore the WAN port to LAN port. VMG5313-B10A/-B30A Series User’s Guide...
Page 27 Use this screen to allow a static hostname alias for a dynamic IP address. Interface Interface Use this screen to map a port to a PVC or bridge group. Grouping Grouping USB Service File Sharing Use this screen to enable file sharing via the VMG. Security Settings VMG5313-B10A/-B30A Series User’s Guide...
Page 28 • Informational • Debugging Category include: • Account • Attack • Firewall • MAC Filter Traffic Status Use this screen to view the status of all network traffic going through the WAN port of the VMG. VMG5313-B10A/-B30A Series User’s Guide...
Page 29 Use this screen to configure CFM (Connectivity Fault Management) MD (maintenance domain) and MA (maintenance association), perform connectivity tests and view test reports. OAM Ping Use this screen to view information to help you identify problems with the DSL connection. VMG5313-B10A/-B30A Series User’s Guide...
Page 30 Chapter 2 The Web Configurator VMG5313-B10A/-B30A Series User’s Guide...
Page 31: Quick Start
The Quick Start Wizard appears automatically after login. Or you can click the Click Start icon in the top right corner of the web configurator to open the quick start screens. Select the time zone of the VMG’s location and click Next. Figure 9 Time Zone VMG5313-B10A/-B30A Series User’s Guide...
Page 32 Turn the wireless LAN on or off. If you keep it on, record the security settings so you can configure your wireless clients to connect to the VMG. Click Save. Figure 11 Internet Connection Your VMG saves your settings and attempts to connect to the Internet. VMG5313-B10A/-B30A Series User’s Guide...
Page 33: Tutorials
H A PT ER Tutorials 4.1 Overview This chapter shows you how to use the VMG’s various features. • Setting Up an ADSL PPPoE Connection, see page 33 • Setting Up Ethernet WAN on page 36 • Setting Up Multiple Wireless Groups, see page 44 •...
Page 34 Chapter 4 Tutorials ATM PVC Configuration VPI/VCI 36/48 Encapsulation Mode LLC/SNAP-Bridging Service Category UBR without PCR Account Information PPP User Name 1234@DSL-Ex.com PPP Password ABCDEF! PPPoE Service Name MyDSL Static IP Address 192.168.1.32 Others PPPoE Passthrough: Disabled NAT: Enabled IGMP Multicast Proxy: Enabled Apply as Default Gateway: Enabled Select the Active check box.
Page 35 Chapter 4 Tutorials Click Apply to save your settings. VMG5313-B30A User’s Guide...
Page 36: Setting Up Ethernet Wan
Chapter 4 Tutorials You should see a summary of your new DSL connection setup in the Broadband screen as follows. Try to connect to a website to see if you have correctly set up your Internet connection. Be sure to contact your service provider for any information you need to configure the WAN screens.
Page 37 Chapter 4 Tutorials In this example, the Ethernet connection has the following information. General Name MyETHER Type Ethernet Mode Routing Service and PPPoE Encapsulation VMG5313-B30A User’s Guide...
Page 38: Setting Up A Secure Wireless Network
Chapter 4 Tutorials IPv6/IPv4 Mode IPv4 Account Information 802.1p 802.1q PPP User Name 1234@ETHER-Ex.com PPP Password ABCDEF! PPP Connection Trigger Auto Connect PPPoE Passthrough Enabled 1492 IP Address 192.168.1.40 Primary DNS Server 192.168.5.5 Secondary DNS Server 192.168.5.6 Others PPPoE Passthrough: Disabled NAT: Enabled IGMP Multicast Proxy: Enabled Apply as Default Gateway: Enabled...
Page 39: Configuring The Wireless Network Settings
Chapter 4 Tutorials 4.4.1 Configuring the Wireless Network Settings This example uses the following parameters to set up a wireless network. SSID Example Security Mode WPA2-PSK Pre-Shared Key DoNotStealMyWirelessNetwork 802.11 Mode 802.11b/g/n Mixed Click Network Setting > Wireless to open the General screen. Select More Secure as the security level .
Page 40: Using Wps
Chapter 4 Tutorials Go to the Wireless > Others screen and select 802.11b/g/n Mixed in the 802.11 Mode field. Click Apply. Thomas can now use the WPS feature to establish a wireless connection between his notebook and the VMG (see Section 4.4.2 on page 40).
Page 41 Chapter 4 Tutorials Push and hold the WPS button located on the VMG’s front panel for more than 5 seconds. Alternatively, you may log into VMG’s web configurator and go to the Network Setting > Wireless > WPS screen. Enable the WPS function and click Apply. Then click the Connect button. Note: Your VMG has a WPS button located on its front panel as well as a WPS button in its configuration utility.
Page 42 Chapter 4 Tutorials The following figure shows you an example of how to set up a wireless network and its security by pressing a button on both VMG and wireless client. Example WPS Process: PBC Method Wireless Client Device WLAN/ WITHIN 2 MINUTES Press and hold for 5 seconds...
Page 43 Chapter 4 Tutorials Enter the PIN number of the wireless client and click the Register button. Activate WPS function on the wireless client utility screen within two minutes. The VMG authenticates the wireless client and sends the proper configuration settings to the wireless client.
Page 44: Without Wps
Chapter 4 Tutorials 4.4.3 Without WPS Use the wireless adapter’s utility installed on the notebook to search for the “Example” SSID. Then enter the “DoNotStealMyWirelessNetwork” pre-shared key to establish an wireless Internet connection. Note: The VMG supports IEEE 802.11b and IEEE 802.11g wireless clients. Make sure that your notebook or computer’s wireless adapter supports one of these standards.
Page 45 Chapter 4 Tutorials Click Network Setting > Wireless to open the General screen. Use this screen to set up the company’s general wireless network group. Configure the screen using the provided parameters and click Apply. Click Network Setting > Wireless > More AP to open the following screen. Click the Edit icon to configure the second wireless network group.
Page 46 Chapter 4 Tutorials Configure the screen using the provided parameters and click Apply. VMG5313-B30A User’s Guide...
Page 47 Chapter 4 Tutorials In the More AP screen, click the Edit icon to configure the third wireless network group.Configure the screen using the provided parameters and click Apply. Check the status of VIP and Guest in the More AP screen. The yellow bulbs signify that the SSIDs are active and ready for wireless access.
Page 48: Configuring Static Route For Routing To Another Network
Chapter 4 Tutorials 4.6 Configuring Static Route for Routing to Another Network In order to extend your Intranet and control traffic flowing directions, you may connect a router to the VMG’s LAN. The router may be used to separate two department networks. This tutorial shows how to configure a static routing rule for two network routings.
Page 49 Chapter 4 Tutorials This tutorial uses the following example IP settings: Table 4 IP Settings in this Tutorial DEVICE / COMPUTER IP ADDRESS The VMG’s WAN 172.16.1.1 The VMG’s LAN 192.168.1.1 IP Type IPv4 Use Interface ADSL/atm0 192.168.1.34 R’s N1 192.168.1.253 R’s N2 192.168.10.2...
Page 50 Chapter 4 Tutorials Click OK. Now B should be able to receive traffic from A. You may need to additionally configure B’s firewall settings to allow specific traffic to pass through. VMG5313-B30A User’s Guide...
Page 51: Configuring Qos Queue And Class Setup
Chapter 4 Tutorials 4.7 Configuring QoS Queue and Class Setup This section contains tutorials on how you can configure the QoS screen. Let’s say you are a team leader of a small sales branch office. You want to prioritize e-mail traffic because your task includes sending urgent updates to clients at least twice every hour.
Page 52 Chapter 4 Tutorials Click Network Setting > QoS > General and select Enable. Set your WAN Managed Upstream Bandwidth to 10,000 kbps (or leave this blank to have the VMG automatically determine this figure). Click Apply. Tutorial: Advanced > QoS Click Queue Setup >...
Page 53 Chapter 4 Tutorials Click Class Setup > Add new Classifier to create a new class. Check Active and follow the settings as shown in the screen below. Tutorial: Advanced > QoS > Class Setup Class Name Give a class name to this traffic, such as E-mail in this example. From This is the interface from which the traffic will be coming from.
Page 54: Access The Vmg Using Ddns
Chapter 4 Tutorials This maps e-mail traffic coming from port 25 to the highest priority, which you have created in the previous screen (see the IP Protocol field). This also maps your computer’s IP address and MAC address to the E-mail queue (see the Source fields). Verify that the queue setup works by checking Network Setting >...
Page 55: Configuring Ddns On Your Vmg
Chapter 4 Tutorials 4.8.2 Configuring DDNS on Your VMG Configure the following settings in the Network Setting > DNS > Dynamic DNS screen. • Select Enable Dynamic DNS. • Select www.DynDNS.com as the service provider. • Type zyxelrouter.dyndns.org in the Host Name field. •...
Page 56: Configuring The Mac Address Filter
Chapter 4 Tutorials 4.9 Configuring the MAC Address Filter Thomas noticed that his daughter Josephine spends too much time surfing the web and downloading media files. He decided to prevent Josephine from accessing the Internet so that she can concentrate on preparing for her final exams. Josephine’s computer connects wirelessly to the Internet through the VMG.
Page 57: Access Your Shared Files From A Computer
Chapter 4 Tutorials Thomas can also grant access to the computers of other members of his family and friends. However, Josephine and others not listed in this screen will no longer be able to access the Internet through the VMG. 4.10 Access Your Shared Files From a Computer Here is how to use an FTP program to access a file storage device connected to the VMG’s USB port.
Page 58 Chapter 4 Tutorials VMG5313-B30A User’s Guide...
Page 59: Technical Reference
Technical Reference...
Page 61: Network Map And Status Screens
5.2 The Network Map Screen Use this screen to view the network connection status of the device and its clients. A warning message appears if there is a connection problem. Figure 12 Network Map: Icon View Mode VMG5313-B10A/-B30A Series User’s Guide...
Page 62: The Status Screen
Device to update this screen in Refresh interval. Figure 13 Network Map: List View Mode 5.3 The Status Screen Use this screen to view the status of the VMG. Click Status to open this screen. Figure 14 Status Screen VMG5313-B10A/-B30A Series User’s Guide...
Page 63 (Maintenance > Reboot), or when you reset it. Current Date/ This field displays the current date and time in the VMG. You can change this in Time Maintenance> Time Setting. System Resource VMG5313-B10A/-B30A Series User’s Guide...
Page 64 If the SIP account is not registered with the SIP server, the Account Status field displays Not Registered. Click Register to have the VMG attempt to register the SIP account with the SIP server. The button is grayed out if the SIP account is disabled. VMG5313-B10A/-B30A Series User’s Guide...
Page 65 This column displays the service provider name and SIP number for each SIP account. This field displays the account number and service domain of the SIP account. You can change these in the VoIP > SIP screens. VMG5313-B10A/-B30A Series User’s Guide...
Page 66 Chapter 5 Network Map and Status Screens VMG5313-B10A/-B30A Series User’s Guide...
Page 67: Broadband
CONNECTION SETTINGS TYPE ADSL/VDSL Routing PPPoE PPP information, IPv4/IPv6 IP over PTM address, routing feature, DNS server, VLAN, QoS, and MTU IPoE IPv4/IPv6 IP address, routing feature, DNS server, VLAN, QoS, and MTU Bridge VLAN and QoS VMG5313-B10A/-B30A Series User’s Guide...
Page 68: What You Need To Know
IPv6 address size to 128 bits (from the 32-bit IPv4 address) allows up to 3.4 x 10 addresses. The VMG can use IPv4/IPv6 dual stack to connect to IPv4 and IPv6 networks, and supports IPv6 rapid deployment (6RD). VMG5313-B10A/-B30A Series User’s Guide...
Page 69 ISP’s Border Relay router (BR in the figure) to connect to the native IPv6 Internet. The local network can also use IPv4 services. The VMG uses it’s configured IPv4 WAN IP to route IPv4 traffic to the IPv4 Internet. VMG5313-B10A/-B30A Series User’s Guide...
Page 70: Before You Begin
IPv6 Internet IPv6 IPv4 IPv6 IPv4 in IPv6 AFTR IPv4 Internet 6.1.3 Before You Begin You need to know your Internet access settings such as encapsulation and WAN IP address. Get this information from your ISP. VMG5313-B10A/-B30A Series User’s Guide...
Page 71: The Broadband Screen
This shows whether Multicast Listener Discovery (MLD) is activated or not for this connection. MLD is not available when the connection uses the bridging service. Modify Click the Edit icon to configure the WAN connection. Click the Delete icon to remove the WAN connection. VMG5313-B10A/-B30A Series User’s Guide...
Page 72: Add/Edit Internet Connection
The valid range for the VPI is 0 to 255. Enter the VPI assigned to you. The valid range for the VCI is 32 to 65535 (0 to 31 is reserved for local management of ATM traffic). Enter the VCI assigned to you. VMG5313-B10A/-B30A Series User’s Guide...
Page 73 A static IP address is a fixed IP that your ISP gives you. A dynamic IP address is not fixed; Address the ISP assigns you a different one each time you connect to the Internet. Select this if you Automatically have a dynamic IP address. VMG5313-B10A/-B30A Series User’s Guide...
Page 74 DHCP Option 51 (IP Address Lease Time): Use this option if you want the VMG to request a lease time for the IP address. The DHCP server uses this option to specify the lease time it will offer. VMG5313-B10A/-B30A Series User’s Guide...
Page 75 Next Hop Enter the IP address of the next-hop gateway. The gateway is a router or switch on the same segment as your VMG's interface(s). The gateway helps forward packets to their destinations. VMG5313-B10A/-B30A Series User’s Guide...
Page 76 Click the Add new WAN Interface in the Network Setting > Broadband screen or the Edit icon next to the connection you want to configure. Select Bridge as the encapsulation mode. The screen varies depending on the interface type you select. VMG5313-B10A/-B30A Series User’s Guide...
Page 77 Click Cancel to exit this screen without saving. If you select ADSL over ATM as the interface type, the following screen appears. Figure 21 Network Setting > Broadband > Add New WAN Interface/Edit (ADSL over ATM-Bridge Mode) VMG5313-B10A/-B30A Series User’s Guide...
Page 78 Select Realtime VBR (real-time Variable Bit Rate) for applications with bursty connections that require closely controlled delay and delay variation. Rate Limit Enter the rate limit for the connection. This is the maximum transmission rate allowed for traffic on this connection. VMG5313-B10A/-B30A Series User’s Guide...
Page 79: The Advanced Screen
WAN to a LAN port for Ethernet Internet access. You can have both DSL and Ethernet connections working at the same time. Click Network Setting > Broadband > Ethernet WAN to display the following screen. Figure 23 Network Setting > Broadband > Ethernet WAN VMG5313-B10A/-B30A Series User’s Guide...
Page 80: Technical Reference
This enables the service provider to easily create and offer new IP services for individuals. Operationally, PPPoE saves significant effort for both you and the ISP or carrier, as it requires no specific configuration of the broadband modem at the customer site. VMG5313-B10A/-B30A Series User’s Guide...
Page 81 (up to the MBS) can be sent at the PCR again. If the PCR, SCR or MBS is set to the default of "0", the system will assign a maximum value that correlates to your upstream line rate. VMG5313-B10A/-B30A Series User’s Guide...
Page 82 The Unspecified Bit Rate (UBR) ATM traffic class is for bursty data transfers. However, UBR doesn't guarantee any bandwidth and only delivers traffic when the network has spare bandwidth. An example application is background file transfer. VMG5313-B10A/-B30A Series User’s Guide...
Page 83 4096 possible VIDs, a VID of 0 is used to identify priority frames and value 4095 (FFF) is reserved, so the maximum possible VLAN configurations are 4,094. TPID User Priority VLAN ID 2 Bytes 3 Bits 1 Bit 12 Bits VMG5313-B10A/-B30A Series User’s Guide...
Page 84 IPv6 Prefix and Prefix Length Similar to an IPv4 subnet mask, IPv6 uses an address prefix to represent the network address. An IPv6 prefix length specifies how many most significant bits (start from the left) in the address VMG5313-B10A/-B30A Series User’s Guide...
Page 85 Chapter 6 Broadband compose the network address. The prefix length is written as “/x” where x is a number. For example, 2001:db8:1a2b:15::1a2f:0/32 means that the first 32 bits (2001:db8) is the subnet prefix. VMG5313-B10A/-B30A Series User’s Guide...
Page 86 Chapter 6 Broadband VMG5313-B10A/-B30A Series User’s Guide...
Page 87: Wireless
• Use the Others screen to configure wireless advanced features, such as the RTS/CTS Threshold (Section 7.6 on page 97). • Use the Channel Status screen to scan wireless LAN channel noises and view the results (Section 7.7 on page 99). VMG5313-B10A/-B30A Series User’s Guide...
Page 88: What You Need To Know
Apply to confirm. You must then change the wireless settings of your computer to match the VMG’s new settings. Click Network Setting > Wireless to open the General screen. Figure 25 Network Setting > Wireless > General VMG5313-B10A/-B30A Series User’s Guide...
Page 89 Or you can select No Security to allow any client to associate this network without any data encryption or authentication. See the following sections for more details about this field. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG5313-B10A/-B30A Series User’s Guide...
Page 90: No Security
RADIUS server. If your wireless devices support nothing stronger than WEP, use the highest encryption level available. Your VMG allows you to configure up to four 64-bit or 128-bit WEP keys but only one key can be enabled at any one time. VMG5313-B10A/-B30A Series User’s Guide...
Page 91 Click more... to show more fields in this section. Click less to hide them. WEP Encryption Select 64-bits or 128-bits. This dictates the length of the security key that the network is going to use. VMG5313-B10A/-B30A Series User’s Guide...
Page 92: More Secure (Wpa(2)-Psk)
WPA-PSK This field appears when you choose WPA-PSK2 as the Security Mode. Compatible Check this field to allow wireless devices using WPA-PSK security mode to connect to your VMG. The VMG supports WPA-PSK and WPA2-PSK simultaneously. VMG5313-B10A/-B30A Series User’s Guide...
Page 93: The Guest/More Ap Screen
If Home Guest displays, clients can connect to each other directly. If External Guest displays, clients are blocked from connecting to each other directly. N/A displays if guest WLAN is disabled. Modify Click the Edit icon to configure the SSID profile. VMG5313-B10A/-B30A Series User’s Guide...
Page 94: Edit Guest / More Ap
Select this to create Guest WLANs for home and external clients. Select the WLAN type in the Access Scenario field. Access If you select Home Guest, clients can connect to each other directly. Scenario If you select External Guest, clients are blocked from connecting to each other directly. VMG5313-B10A/-B30A Series User’s Guide...
Page 95: The Wps Screen
Note: The VMG applies the security settings of the SSID1 profile (see Section 7.2 on page 88). If you want to use the WPS feature, make sure you have set the security mode of SSID1 to WPA2-PSK or No Security. VMG5313-B10A/-B30A Series User’s Guide...
Page 96 The PIN is not necessary when you use WPS push-button method. Click the Generate New PIN Number button to have the VMG create a new PIN. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG5313-B10A/-B30A Series User’s Guide...
Page 97: The Wmm Screen
Use this screen to configure advanced wireless settings. Click Network Setting > Wireless > Others. The screen appears as shown. Section 7.8.2 on page 101 for detailed definitions of the terms listed in this screen. Figure 33 Network Setting > Wireless > Others VMG5313-B10A/-B30A Series User’s Guide...
Page 98 Section 7.8.7 on page 105 for more information. This field is configurable only when you set 802.11 Mode to 802.11b. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG5313-B10A/-B30A Series User’s Guide...
Page 99: The Channel Status Screen
• A bridge is a radio that relays communications between access points and wireless clients, extending a network’s range. Traditionally, a wireless network operates in one of two ways. VMG5313-B10A/-B30A Series User’s Guide...
Page 100 Radio Channels In the radio spectrum, there are certain frequency bands allocated for unlicensed, civilian use. For the purposes of wireless networking, these bands are divided into numerous channels. This allows a VMG5313-B10A/-B30A Series User’s Guide...
Page 101: Additional Wireless Terms
- but it is not very secure if you use a short key which is very easy to guess - for example, a three-letter word from the dictionary. VMG5313-B10A/-B30A Series User’s Guide...
Page 102 Some wireless devices, such as scanners, can detect wireless networks but cannot use wireless networks. These kinds of wireless devices might not have MAC addresses. Hexadecimal characters are 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, A, B, C, D, E, and F. VMG5313-B10A/-B30A Series User’s Guide...
Page 103: Signal Problems
Problems with distance occur when the two radios are too far apart. Problems with interference occur when other radio waves interrupt the data signal. Interference may come from other radio transmissions, such as military or air traffic control communications, or from machines that are VMG5313-B10A/-B30A Series User’s Guide...
Page 104: Bss
BSSs simultaneously. You can then assign varying QoS priorities and/or security modes to different SSIDs. Wireless devices can use different BSSIDs to associate with the same AP. 7.8.6.1 Notes on Multiple BSSs • A maximum of eight BSSs are allowed on one AP simultaneously. VMG5313-B10A/-B30A Series User’s Guide...
Page 105: Preamble Type
Take the following steps to set up WPS using the button. Ensure that the two devices you want to set up are within wireless range of one another. VMG5313-B10A/-B30A Series User’s Guide...
Page 106 On a computer connected to the wireless client, try to connect to the Internet. If you can connect, WPS was successful. If you cannot connect, check the list of associated wireless clients in the AP’s configuration utility. If you see the wireless client in the list, WPS was successful. VMG5313-B10A/-B30A Series User’s Guide...
Page 107 WPA-PSK or WPA2-PSK pre-shared key to the enrollee. Whether WPA-PSK or WPA2-PSK is used depends on the standards supported by the devices. If the registrar is already part of a network, it sends the existing information. If not, it generates the SSID and WPA(2)-PSK randomly. VMG5313-B10A/-B30A Series User’s Guide...
Page 108 This section shows how security settings are distributed in an example WPS setup. The following figure shows an example network. In step 1, both AP1 and Client 1 are unconfigured. When WPS is activated on both, they perform the handshake. In this example, AP1 VMG5313-B10A/-B30A Series User’s Guide...
Page 109 (it already has security information for the network). AP1 supplies the existing security information to Client 2. Figure 40 WPS: Example Network Step 2 REGISTRAR EXISTING CONNECTION CLIENT 1 ENROLLEE CLIENT 2 VMG5313-B10A/-B30A Series User’s Guide...
Page 110 (if the device supports this feature). Then, you can enter the key into the non-WPS device and join the network as normal (the non-WPS device must also support WPA-PSK or WPA2-PSK). VMG5313-B10A/-B30A Series User’s Guide...
Page 111 Check the MAC addresses of your wireless clients (usually printed on a label on the bottom of the device). If there is an unknown MAC address you can remove it or reset the AP. VMG5313-B10A/-B30A Series User’s Guide...
Page 112 Chapter 7 Wireless VMG5313-B10A/-B30A Series User’s Guide...
Page 113: Home Networking
(Section 8.4 on page 120). • Use the STB Vendor ID screen to have the VMG automatically create static DHCP entries for Set Top Box (STB) devices when they request IP addresses (Section 8.7 on page 127) VMG5313-B10A/-B30A Series User’s Guide...
Page 114: What You Need To Know
UPnP devices and enable exchange of simple product and service descriptions. NAT traversal allows the following: • Dynamic port mapping • Learning public IP addresses VMG5313-B10A/-B30A Series User’s Guide...
Page 115: Before You Begin
Enter the IP subnet mask into the IP Subnet Mask field. Unless instructed otherwise it is best to leave this alone, the configurator will automatically compute a subnet mask based upon the IP address you entered. VMG5313-B10A/-B30A Series User’s Guide...
Page 116 Select Enable to have the VMG record DHCP IP addresses with the MAC addresses the IP for the same addresses are assigned to. The VMG assigns the same IP address to the same MAC address host when the host requests an IP address again through DHCP. VMG5313-B10A/-B30A Series User’s Guide...
Page 117 Select Standard Mode to have the VMG forward IPv6 multicast packets to a port that joins the IPv6 multicast group and broadcast unknown IPv6 multicast packets from the WAN to all LAN ports. Select Blocking Mode to have the VMG block all unknown IPv6 multicast packets from the WAN. VMG5313-B10A/-B30A Series User’s Guide...
Page 118: The Static Dhcp Screen
This table allows you to assign IP addresses on the LAN to specific individual computers based on their MAC Addresses. Every Ethernet device has a unique MAC (Media Access Control) address. The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02. VMG5313-B10A/-B30A Series User’s Guide...
Page 119 If you select Manual Input, enter the IP address that you want to assign to the computer on your LAN with the MAC address that you will also specify. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG5313-B10A/-B30A Series User’s Guide...
Page 120: The Upnp Screen
Click Cancel to exit this screen without saving. 8.5 Installing UPnP in Windows Example This section shows how to install UPnP in Windows Me and Windows XP. Installing UPnP in Windows Me Follow the steps below to install the UPnP in Windows Me. VMG5313-B10A/-B30A Series User’s Guide...
Page 121 Chapter 8 Home Networking Click Start and Control Panel. Double-click Add/Remove Programs. Click on the Windows Setup tab and select Communication in the Components selection box. Click Details. Add/Remove Programs: Windows Setup: Communication VMG5313-B10A/-B30A Series User’s Guide...
Page 122 Follow the steps below to install the UPnP in Windows XP. Click Start and Control Panel. Double-click Network Connections. In the Network Connections window, click Advanced in the main menu and select Optional Networking Components …. Network Connections VMG5313-B10A/-B30A Series User’s Guide...
Page 123: Using Upnp In Windows Xp Example
Next. 8.6 Using UPnP in Windows XP Example This section shows you how to use the UPnP feature in Windows XP. You must already have UPnP installed in Windows XP and UPnP activated on the VMG. VMG5313-B10A/-B30A Series User’s Guide...
Page 124 Click Start and Control Panel. Double-click Network Connections. An icon displays under Internet Gateway. Right-click the icon and select Properties. Network Connections In the Internet Connection Properties window, click Settings to see the port mappings there were automatically created. Internet Connection Properties VMG5313-B10A/-B30A Series User’s Guide...
Page 125 When the UPnP-enabled device is disconnected from your computer, all port mappings will be deleted automatically. Select Show icon in notification area when connected option and click OK. An icon displays in the system tray. System Tray Icon VMG5313-B10A/-B30A Series User’s Guide...
Page 126 VMG first. This comes helpful if you do not know the IP address of the VMG. Follow the steps below to access the web configurator. Click Start and then Control Panel. Double-click Network Connections. VMG5313-B10A/-B30A Series User’s Guide...
Page 127: The Stb Vendor Id Screen
8.7 The STB Vendor ID Screen Set Top Box (STB) devices with dynamic IP addresses sometimes don’t renew their IP addresses before the lease time expires. This could lead to IP address conflicts if the STB continues to use an VMG5313-B10A/-B30A Series User’s Guide...
Page 128: Technical Reference
The actual physical connection determines whether the VMG ports are LAN or WAN ports. There are two separate IP networks, one inside the LAN network and the other outside the WAN network as shown next. Figure 47 LAN and WAN IP Addresses VMG5313-B10A/-B30A Series User’s Guide...
Page 129: Dhcp Setup
If the ISP did not explicitly give you an IP network number, then most likely you have a single user account and the ISP will assign you a dynamic IP address when the connection is established. If this is the case, it is recommended that you select a network number from 192.168.0.0 to VMG5313-B10A/-B30A Series User’s Guide...
Page 130 Note: Regardless of your particular situation, do not create an arbitrary IP address; always follow the guidelines above. For more information on address assignment, please refer to RFC 1597, “Address Allocation for Private Internets” and RFC 1466, “Guidelines for Management of IP Address Space”. VMG5313-B10A/-B30A Series User’s Guide...
Page 131: Routing
Use this screen to view and configure the static route rules on the VMG. Click Network Setting > Routing > Static Route to open the following screen. Figure 49 Network Setting > Routing > Static Route VMG5313-B10A/-B30A Series User’s Guide...
Page 132: Add/Edit Static Route
Route Name Enter a descriptive name for the static route. IP Type Select whether your IP type is IPv4 or IPv6. Destination IP Enter the IPv4 or IPv6 network address of the final destination. Address VMG5313-B10A/-B30A Series User’s Guide...
Page 133: The Dns Route Screen
WAN Interface This is the WAN connection through which the VMG forwards DNS requests for this domain name. Modify Click the Edit icon to modify the DNS route. Click the Delete icon to delete the DNS route. VMG5313-B10A/-B30A Series User’s Guide...
Page 134: The Dns Route Add Screen
The Policy Route screen let you view and configure routing policies on the VMG. Click Network Setting > Routing > Policy Route to open the following screen. Figure 53 Network Setting > Routing > Policy Route VMG5313-B10A/-B30A Series User’s Guide...
Page 135: Add/Edit Policy Route
Table 34 Policy Route: Add/Edit (Sheet 1 of 2) LABEL DESCRIPTION Active Click the checkbox to activate this Policy route. Route Name Enter a descriptive name of up to 8 printable English keyboard characters, not including spaces. Source IP Enter the source IP address. VMG5313-B10A/-B30A Series User’s Guide...
Page 136: Rip
Select Passive to have the VMG update the routing table based on the RIP packets received from neighbors but not advertise its route information to other routers in this interface. Select Active to have the VMG advertise its route information and also listen for routing updates from neighboring routers. VMG5313-B10A/-B30A Series User’s Guide...
Page 137 Chapter 9 Routing Table 35 RIP LABEL DESCRIPTION Enable Select the check box to activate the settings. Apply Click Apply to save your changes back to the VMG. VMG5313-B10A/-B30A Series User’s Guide...
Page 138 Chapter 9 Routing VMG5313-B10A/-B30A Series User’s Guide...
Page 139: Quality Of Service (Qos)
QoS versus Cos QoS is used to prioritize source-to-destination traffic flows. All packets in the same flow are given the same priority. CoS (class of service) is a way of managing traffic in a network by grouping VMG5313-B10A/-B30A Series User’s Guide...
Page 140 Time (Before Traffic Policing) (After Traffic Policing) The VMG supports three incoming traffic metering algorithms: Token Bucket Filter (TBF), Single Rate Two Color Maker (srTCM), and Two Rate Two Color Marker (trTCM). You can specify actions VMG5313-B10A/-B30A Series User’s Guide...
Page 141: The Quality Of Service General Screen
You can also set this number lower than the interfaces’ actual transmission speed. This will cause the VMG to not use some of the interfaces’ available bandwidth. If you leave this field blank, the VMG automatically sets this number to be 95% of the WAN interfaces’ actual upstream transmission speed. VMG5313-B10A/-B30A Series User’s Guide...
Page 142: The Queue Screen
This shows the maximum transmission rate allowed for traffic on this queue. Modify Click the Edit icon to edit the queue. Click the Delete icon to delete an existing queue. Note that subsequent rules move up by one when you take this action. VMG5313-B10A/-B30A Series User’s Guide...
Page 143: Adding A Qos Queue
For example, you can configure a classifier to select traffic from the same protocol port (such as Telnet) to form a flow. VMG5313-B10A/-B30A Series User’s Guide...
Page 144 This is the name of the queue in which traffic of this classifier is put. Modify Click the Edit icon to edit the classifier. Click the Delete icon to delete an existing classifier. Note that subsequent rules move up by one when you take this action. VMG5313-B10A/-B30A Series User’s Guide...
Page 145: Add/Edit Qos Class
Chapter 10 Quality of Service (QoS) 10.5.1 Add/Edit QoS Class Click Add new Classifier in the Classification screen or the Edit icon next to a classifier to open the following screen. Figure 60 Add new classification VMG5313-B10A/-B30A Series User’s Guide...
Page 146 For example, if you set the MAC address to 00:13:49:00:00:00 and the mask to ff:ff:ff:00:00:00, a packet with a MAC address of 00:13:49:12:34:56 matches this criteria. Exclude Select this option to exclude the packets that match the specified criteria from this classifier. Others VMG5313-B10A/-B30A Series User’s Guide...
Page 147 Unchange, the VMG forward traffic of this class according to the default routing table. To Queue Select a queue that applies to this class. You should have configured a queue in the Queue Setup screen already. VMG5313-B10A/-B30A Series User’s Guide...
Page 148: The Qos Shaper Screen
Modify Select this to edit an existing shaper. 10.6.1 Add New Shaper Click Add new Shaper in the Shaper screen to show the following screen. Figure 62 Network Setting > QoS >Shaper>Add New Shaper (Newly added) VMG5313-B10A/-B30A Series User’s Guide...
Page 149: Technical Reference
DiffServ-compliant network devices along the route based on the application types and traffic flow. Packets are marked with DiffServ Code Points (DSCPs) indicating the level of service desired. This allows the intermediary DiffServ-compliant network VMG5313-B10A/-B30A Series User’s Guide...
Page 150 Table 44 Internal Layer2 and Layer3 QoS Mapping LAYER 2 LAYER 3 PRIORITY IEEE 802.1P USER QUEUE PRIORITY TOS (IP IP PACKET DSCP (ETHERNET PRECEDENCE) LENGTH (BYTE) PRIORITY) 000000 000000 >1100 001110 250~1100 001100 001010 001000 VMG5313-B10A/-B30A Series User’s Guide...
Page 151 • Holds it in the queue until enough tokens are available in the bucket. In traffic policing: • Drops it. • Transmits it but adds a DSCP mark. The VMG may drop these marked packets if the network is overloaded. VMG5313-B10A/-B30A Series User’s Guide...
Page 152 The trTCM is based on the token bucket filter and has two token buckets (Committed Burst Size (CBS) and Peak Burst Size (PBS)). Tokens are generated and added into the two buckets at the CIR and PIR respectively. VMG5313-B10A/-B30A Series User’s Guide...
Page 153 • If the PBS bucket has enough tokens, the VMG checks the CBS bucket. The packet is marked green and can be transmitted if the number of tokens in the CBS bucket is equal to or greater than the size of the packet (in bytes). Otherwise, the packet is marked yellow. VMG5313-B10A/-B30A Series User’s Guide...
Page 154 Chapter 10 Quality of Service (QoS) VMG5313-B10A/-B30A Series User’s Guide...
Page 155: Network Address Translation (Nat)
(the inside local address) to another (the inside global address) before forwarding the packet to the WAN side. When the response comes back, NAT translates the destination address (the inside global address) back to the inside local address before forwarding it to the original inside host. VMG5313-B10A/-B30A Series User’s Guide...
Page 156: The Port Forwarding Screen
Let's say you want to assign ports 21-25 to one FTP, Telnet and SMTP server (A in the example), port 80 to another (B in the example) and assign a default server IP address of 192.168.1.35 to a VMG5313-B10A/-B30A Series User’s Guide...
Page 157 This shows the IP protocol supported by this virtual server, whether it is TCP, UDP, or TCP/ UDP. Modify Click the Edit icon to edit this rule. Click the Delete icon to delete an existing rule. VMG5313-B10A/-B30A Series User’s Guide...
Page 158: Add/Edit Port Forwarding
Enter the inside IP address of the virtual server here. Address Protocol Select the protocol supported by this virtual server. Choices are TCP, UDP, or TCP/UDP. Click OK to save your changes. Cancel Click Cancel to exit this screen without saving. VMG5313-B10A/-B30A Series User’s Guide...
Page 159: The Port Triggering Screen
UDP (User Datagram Protocol) or two hours with TCP/IP (Transfer Control Protocol/Internet Protocol). Click Network Setting > NAT > Port Triggering to open the following screen. Use this screen to view your VMG’s trigger port settings. Figure 67 Network Setting > NAT > Port Triggering VMG5313-B10A/-B30A Series User’s Guide...
Page 160: Add/Edit Port Triggering Rule
11.3.1 Add/Edit Port Triggering Rule This screen lets you create new port triggering rules. Click Add new rule in the Port Triggering screen or click a rule’s Edit icon to open the following screen. Figure 68 Port Triggering: Add/Edit VMG5313-B10A/-B30A Series User’s Guide...
Page 161: The Dmz Screen
Note: If you do not assign a Default Server Address, the VMG discards all packets received for ports that are not specified in the NAT Port Forwarding screen. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG5313-B10A/-B30A Series User’s Guide...
Page 162: The Alg Screen
11.6 The Sessions Screen Use this screen to limit the number of concurrent NAT sessions a client can use. Click Network Setting > NAT > Sessions to display the following screen. Figure 71 Network Setting > NAT > Sessions VMG5313-B10A/-B30A Series User’s Guide...
Page 163: Technical Reference
IP address of a host when the packet is in the local network, while the global address refers to the IP address of the host when the same packet is traveling in the WAN side. VMG5313-B10A/-B30A Series User’s Guide...
Page 164: What Nat Does
With no servers defined, your VMG filters out all incoming inquiries, thus preventing intruders from probing your network. For more information on IP address translation, refer to RFC 1631, The IP Network Address Translator (NAT). VMG5313-B10A/-B30A Series User’s Guide...
Page 165: How Nat Works
NAT Table Inside Local Inside Global IP Address IP Address 192.168.1.10 IGA 1 192.168.1.13 192.168.1.11 IGA 2 192.168.1.12 IGA 3 192.168.1.13 IGA 4 192.168.1.12 192.168.1.10 IGA1 Inside Local Inside Global Address (ILA) Address (IGA) 192.168.1.11 192.168.1.10 VMG5313-B10A/-B30A Series User’s Guide...
Page 166: Nat Application
SMTP (Simple Mail Transfer Protocol) DNS (Domain Name System) Finger HTTP (Hyper Text Transfer protocol or WWW, Web) POP3 (Post Office Protocol) NNTP (Network News Transport Protocol) SNMP (Simple Network Management Protocol) SNMP trap PPTP (Point-to-Point Tunneling Protocol) 1723 VMG5313-B10A/-B30A Series User’s Guide...
Page 167 (C in the example). You assign the LAN IP addresses and the ISP assigns the WAN IP address. The NAT network appears as a single host on the Internet. Figure 74 Multiple Servers Behind NAT Example A=192.168.1.33 192.168.1.1 B=192.168.1.34 IP address assigned by ISP C=192.168.1.35 D=192.168.1.36 VMG5313-B10A/-B30A Series User’s Guide...
Page 168 Chapter 11 Network Address Translation (NAT) VMG5313-B10A/-B30A Series User’s Guide...
Page 169: Dynamic Dns Setup
The Dynamic DNS service provider will give you a password or key. 12.1.1 What You Can Do in this Chapter • Use the Dynamic DNS screen to enable DDNS and configure the DDNS settings on the VMG (Section on page 170). VMG5313-B10A/-B30A Series User’s Guide...
Page 170: What You Need To Know
URL address instead of a fixed or dynamic IP address. IP Address Update Policy Use WAN IP Click this option to use WAN IP address as the IP address update policy. Address VMG5313-B10A/-B30A Series User’s Guide...
Page 171 Use Specified Click this option to use a specified IP addres as the IP address update policy. IP Address Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG5313-B10A/-B30A Series User’s Guide...
Page 172 Chapter 12 Dynamic DNS Setup VMG5313-B10A/-B30A Series User’s Guide...
Page 173: Interface Grouping
If you set the VMG to assign IP addresses based on the client’s DHCP Vendor ID option information, you must enable DHCP server and configure LAN TCP/IP settings for both the default and user-defined groups. See Chapter 8 on page for more information. VMG5313-B10A/-B30A Series User’s Guide...
Page 174: Interface Group Configuration
Click the Delete icon to remove the group. 13.2.1 Interface Group Configuration Click the Add New Interface Group button in the Interface Group screen to open the following screen. Use this screen to create a new interface group. VMG5313-B10A/-B30A Series User’s Guide...
Page 175 This shows if wildcard on DHCP option 60 is enabled. Support Remove Click the Remove icon to delete this rule from the VMG. Apply Click Apply to save your changes back to the VMG. Cancel Click Cancel to exit this screen without saving. VMG5313-B10A/-B30A Series User’s Guide...
Page 176: Interface Grouping Criteria
Select this option and enter the Vendor Class Identifier (Option 60) of the matched traffic, such as the type of the hardware or firmware. Apply Click Apply to save your changes back to the VMG. Cancel Click Cancel to exit this screen without saving. VMG5313-B10A/-B30A Series User’s Guide...
Page 177: Usb Service
(Section 14.1.3 on page 178). • Use the Printer Server screen to enable the print server (Section on page 179). 14.1.2 What You Need To Know The following terms and concepts may help as you read this chapter. VMG5313-B10A/-B30A Series User’s Guide...
Page 178: Before You Begin
USB hard drive that comes with an external power supply, make sure it is connected to an appropriate power source that is on. Note: If your USB device cannot be detected by the VMG, see the troubleshooting for suggestions. VMG5313-B10A/-B30A Series User’s Guide...
Page 179: The File Sharing Screen
Table 58 Network Setting > USB Service > File Sharing LABEL DESCRIPTION Enable Select Enable button to activate file sharing through the VMG. Disable Select Disable button to deactivate file sharing through the VMG. Host Name Enter a host name for the file sharing interface. VMG5313-B10A/-B30A Series User’s Guide...
Page 180 Chapter 14 USB Service VMG5313-B10A/-B30A Series User’s Guide...
Page 181: Firewall
• Use the Access Control screen to view and configure incoming/outgoing filtering rules (Section 15.4 on page 185). • Use the DoS screen to activate protection against Denial of Service (DoS) attacks (.Section 15.5 on page 187). VMG5313-B10A/-B30A Series User’s Guide...
Page 182: What You Need To Know
Stateful Packet Inspection (SPI) tracks each connection crossing the firewall and makes sure it is valid. Filtering decisions are based not only on rules but also context. For example, traffic from the WAN may only be allowed to cross the firewall in response to a request from the LAN. VMG5313-B10A/-B30A Series User’s Guide...
Page 183: The Firewall Screen
IANA (Internet Assigned Number Authority) website. See Appendix G on page 343 for some examples. Click Security > Firewall > Protocol to display the following screen. Figure 84 Security > Firewall > Protocol VMG5313-B10A/-B30A Series User’s Guide...
Page 184: Add/Edit New Protocol Entry
Choose the IP protocol (TCP, UDP, ICMP, or Other) that defines your customized port from the drop-down list box. Select Other to be able to enter a protocol number. Protocol This field is displayed if you select Other as the protocol. Number Enter the protocol number of your customized port. VMG5313-B10A/-B30A Series User’s Guide...
Page 185: The Access Control Screen
Click the Delete icon to delete an existing rule. Note that subsequent rules move up by one when you take this action. Click the Move To icon to change the order of the rule. Enter the number in the # field. VMG5313-B10A/-B30A Series User’s Guide...
Page 186: Add/Edit An Acl Rule
Select Select the destination device to which the ACL rule applies. If you select Specific IP Destination Address, enter the destiniation IP address in the field below. Device Destination IP Enter the destination IP address. Address VMG5313-B10A/-B30A Series User’s Guide...
Page 187: The Dos Screen
Internet access becomes unavailable. Use the DoS screen to activate protection against DoS attacks. Click Security > Firewall > DoS to display the following screen. Figure 88 Security > Firewall > DoS VMG5313-B10A/-B30A Series User’s Guide...
Page 188 DoS Protection Select Enable to enable protection against DoS attacks. Blocking Deny Ping Select Enable to block ping request packets. Response Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG5313-B10A/-B30A Series User’s Guide...
Page 189: Mac Filter
16.2 The MAC Filter Screen Use this screen to allow wireless and LAN clients access to the VMG. Click Security > MAC Filter. The screen appears as shown. Figure 89 Security > MAC Filter VMG5313-B10A/-B30A Series User’s Guide...
Page 190 VMG in these address fields. Enter the MAC addresses in a valid MAC address format, that is, six hexadecimal character pairs, for example, 12:34:56:78:9a:bc. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG5313-B10A/-B30A Series User’s Guide...
Page 191: Parental Control
This shows whether the website block is configured. If not, None will be shown. Blocked Modify Click the Edit icon to go to the screen where you can edit the rule. Click the Delete icon to delete an existing rule. VMG5313-B10A/-B30A Series User’s Guide...
Page 192: Add/Edit A Parental Control Rule
LAN users. Internet Access Schedule Select check boxes for the days that you want the VMG to perform parental control. Time Drag the time bar to define the time that the LAN user is allowed access. VMG5313-B10A/-B30A Series User’s Guide...
Page 193 Click Add to show a screen to enter the URL of web site or URL keyword to which the VMG URL Keyword blocks access. Click Delete to remove it. Apply Click this button to save your settings back to the VMG. Cancel Click Cancel to restore your previously saved settings. VMG5313-B10A/-B30A Series User’s Guide...
Page 194 Chapter 17 Parental Control VMG5313-B10A/-B30A Series User’s Guide...
Page 195: Scheduler Rule
This shows the description of this rule. Modify Click the Edit icon to edit the schedule. Click the Delete icon to delete a scheduler rule. Note: You cannot delete a scheduler rule once it is applied to a certain feature. VMG5313-B10A/-B30A Series User’s Guide...
Page 196: Add/Edit A Schedule
Enter the time period of each day, in 24-hour format, during which the rule will be enforced. Range Description Enter a description for this scheduler rule. Click OK to save your changes. Cancel Click Cancel to exit this screen without saving. VMG5313-B10A/-B30A Series User’s Guide...
Page 197: Certificates
19.3 The Local Certificates Screen Click Security > Certificates to open the Local Certificates screen. This is the VMG’s summary list of certificates and certification requests. Figure 94 Security > Certificates > Local Certificates VMG5313-B10A/-B30A Series User’s Guide...
Page 198: Create Certificate Request
19.3.1 Create Certificate Request Click Security > Certificates > Local Certificates and then Create Certificate Request to open the following screen. Use this screen to have the VMG generate a certification request. Figure 95 Create Certificate Request VMG5313-B10A/-B30A Series User’s Guide...
Page 199: Load Signed Certificate
19.3.2 Load Signed Certificate After you create a certificate request and have it signed by a Certificate Authority, in the Local Certificates screen click the certificate request’s Load Signed icon to import the signed certificate into the VMG. VMG5313-B10A/-B30A Series User’s Guide...
Page 200 This is the name of the signed certificate. Name Certificate Copy and paste the signed certificate into the text box to store it on the VMG. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG5313-B10A/-B30A Series User’s Guide...
Page 201: Voice
Internet Protocol). SIP stands for Session Initiation Protocol. SIP is a signalling standard that lets one network device (like a computer or the VMG) send messages to another. In VoIP, these messages are about phone VMG5313-B10A/-B30A Series User’s Guide...
Page 202: Before You Begin
Use this screen to view SIP account information. You can also enable and disable each SIP account. To access this screen, click VoIP > SIP > SIP Account. Figure 98 VoIP > SIP > SIP Account VMG5313-B10A/-B30A Series User’s Guide...
Page 203: The Sip Account Add/Edit Screen
Use this screen to configure a SIP account and map it to a phone port. To access this screen, click the Add new account button or click the Edit icon of an entry in the VoIP > SIP > SIP Account screen. VMG5313-B10A/-B30A Series User’s Guide...
Page 204 95 printable ASCII characters. Password Enter the user name for registering this SIP account, exactly as it was given to you. You can use up to 95 printable ASCII Extended set characters. VMG5313-B10A/-B30A Series User’s Guide...
Page 205 Reject Timer not answer it. Active Select this if you want the VMG to forward all incoming calls to the specified phone Unconditional number. Forward Specify the phone number in the To Number field on the right. VMG5313-B10A/-B30A Series User’s Guide...
Page 206: The Sip Service Provider Screen
This shows the IP address or domain name of the SIP register server. Address SIP Service This shows the SIP service domain name. Domain Modify Click the Edit icon to configure the SIP service provider. Click the Delete icon to delete this SIP service provider from the VMG. VMG5313-B10A/-B30A Series User’s Guide...
Page 207: The Sip Service Provider Add/Edit Screen
DESCRIPTION SIP Service Provider Selection Service Select the SIP service provider profile you want to use for the SIP account you configure in Provider this screen. If you change this field, the screen automatically refreshes. Selection VMG5313-B10A/-B30A Series User’s Guide...
Page 208 NAT router in front of the VMG to keep it from re-translating the IP address (since this is already handled by the outbound proxy server). ServerPort Enter the SIP outbound proxy server’s listening port, if your VoIP service provider gave you one. Otherwise, keep the default value. RTP Port Range VMG5313-B10A/-B30A Series User’s Guide...
Page 209 This field is the shortest expiration time that the VMG accepts. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG5313-B10A/-B30A Series User’s Guide...
Page 210: The Phone Device Screen
SIP numbers that contain letters. Once you have configured a speed dial rule, you can use a shortcut (the speed dial number, #01 for example) on your phone's keypad to call the phone number. Figure 103 VoIP > Call Rule VMG5313-B10A/-B30A Series User’s Guide...
Page 211: Technical Reference
SIP URI (Uniform Resource Identifier). A SIP account's URI identifies the SIP account in a way similar to the way an e-mail address identifies an e-mail account. The format of a SIP identity is SIP-Number@SIP-Service-Domain. VMG5313-B10A/-B30A Series User’s Guide...
Page 212 SIP phone. One device can act as both a SIP client and a SIP server. SIP User Agent A SIP user agent can make and receive VoIP telephone calls. This means that SIP can be used for peer-to-peer communications even though it is a client-server protocol. In the following figure, VMG5313-B10A/-B30A Series User’s Guide...
Page 213 Redirect servers do not initiate SIP requests. In the following example, you want to use client device A to call someone who is using client device Client device A sends a call invitation for C to the SIP redirect server (B). VMG5313-B10A/-B30A Series User’s Guide...
Page 214 SIP Call Progression The following figure displays the basic steps in the setup and tear down of a SIP call. A calls B. Table 79 SIP Call Progression 1. INVITE 2. Ringing 3. OK VMG5313-B10A/-B30A Series User’s Guide...
Page 215 The response to the request goes to all the proxy servers through which the request passed, in reverse sequence. Once the session is set up, session traffic is sent between the UAs directly, bypassing all the proxy servers in between. VMG5313-B10A/-B30A Series User’s Guide...
Page 216 Proxy 2 sends a SIP INVITE request to User Agent 2. User Agent 2 sends a response back to Proxy 2 indicating that the phone is ringing. The response is relayed back to User Agent 1 via Proxy 1. VMG5313-B10A/-B30A Series User’s Guide...
Page 217 Enable Message Waiting Indication (MWI) enables your phone to give you a message–waiting (beeping) dial tone when you have a voice message(s). Your VoIP service provider must have a messaging system that sends message waiting status SIP packets as defined in RFC 3842. VMG5313-B10A/-B30A Series User’s Guide...
Page 218 Press a number from 1301~1308 followed by the “#” key to delete the tone of your choice. Press 14 followed by the “#” key if you wish to clear all your custom tones. VMG5313-B10A/-B30A Series User’s Guide...
Page 219: Quality Of Service (Qos)
Supplementary services such as call hold, call waiting, and call transfer. are generally available from your VoIP service provider. The VMG supports the following services: The VMG does not support DiffServ at the time of writing. VMG5313-B10A/-B30A Series User’s Guide...
Page 220 Switch back to the call (if there is no second call). Flash Drop the call presently on hold or reject an incoming call which is waiting for answer. Flash Disconnect the current phone connection and answer the incoming call or resume with caller presently on hold. VMG5313-B10A/-B30A Series User’s Guide...
Page 221 When you hear the dial tone, dial “*98#” followed by the number to which you want to transfer the call. After you hear the ring signal or the second party answers it, hang up the phone. VMG5313-B10A/-B30A Series User’s Guide...
Page 222 (directory) number. If there is a second call to your telephone number, you will hear a call waiting tone. Press the flash key to put the first call on hold and answer the second call. VMG5313-B10A/-B30A Series User’s Guide...
Page 223 (the sound a caller hears before you pick up the phone) and on hold tones (the sound someone hears when you put their call on hold). #### Internal Call Call the phone(s) connected to the VMG. VMG5313-B10A/-B30A Series User’s Guide...
Page 224 Chapter 20 Voice Table 84 Phone Functions Summary ACTION FUNCTION DESCRIPTION One Shot Caller Display Call Activate or deactivate caller ID for the next call only. One Shot Caller Hidden Call VMG5313-B10A/-B30A Series User’s Guide...
Page 225: Log
Alert: Action must be taken immediately. Critical: The system condition is critical. Error: There is an error condition on the system. Warning: There is a warning condition on the system. Notice: There is a normal but significant condition on the system. VMG5313-B10A/-B30A Series User’s Guide...
Page 226: The System Log Screen
Use the Voice Log screen to see the voice-related logs for the categories that you select. Click System Monitor > Log > Voice Log to open the following screen. Figure 110 System Monitor > Log > Voice Log VMG5313-B10A/-B30A Series User’s Guide...
Page 227 Level This field displays the severity level of the logs that the device is to send to this syslog server. Messages This field states the reason for the log. VMG5313-B10A/-B30A Series User’s Guide...
Page 228 Chapter 21 Log VMG5313-B10A/-B30A Series User’s Guide...
Page 229: Traffic Status
Data This indicates the number of transmitted packets on this interface. Error This indicates the number of frames with errors transmitted on this interface. Drop This indicates the number of outgoing packets dropped on this interface. VMG5313-B10A/-B30A Series User’s Guide...
Page 230: The Lan Status Screen
This indicates the number of transmitted packets on this interface. Error This indicates the number of frames with errors transmitted on this interface. Drop This indicates the number of outgoing packets dropped on this interface. Received (Packets) VMG5313-B10A/-B30A Series User’s Guide...
Page 231 Data This indicates the number of received packets on this interface. Error This indicates the number of frames with errors received on this interface. Drop This indicates the number of received packets dropped on this interface. VMG5313-B10A/-B30A Series User’s Guide...
Page 232: Voip Status
This field displays the last number the SIP account called. The field is blank if the SIP Number account has never dialed a number. Phone Status Phone This field displays the name of a phone port on the VMG. VMG5313-B10A/-B30A Series User’s Guide...
Page 233 Outgoing This field displays the SIP number that you use to make calls on this phone port. Number Incoming This field displays the SIP number that you use to receive calls on this phone port. Number VMG5313-B10A/-B30A Series User’s Guide...
Page 234 Chapter 23 VoIP Status VMG5313-B10A/-B30A Series User’s Guide...
Page 235: Xdsl Statistics
Table 91 Status > xDSL Statistics LABEL DESCRIPTION Refresh Interval Select the time interval for refreshing statistics. Line Select which DSL line’s statistics you want to display. xDSL Training This displays the current state of setting up the DSL connection. Status VMG5313-B10A/-B30A Series User’s Guide...
Page 236 These are the statistics for the traffic direction coming into the port from the service provider. Upstream These are the statistics for the traffic direction going out from the port to the service provider. This is the number of Far End Corrected blocks. VMG5313-B10A/-B30A Series User’s Guide...
Page 237: System
A value of "0" means a management session never times out, no matter how long it has been left idle (not recommended). Apply Click Apply to save your changes. Cancel Click Cancel to abandon this screen without saving. VMG5313-B10A/-B30A Series User’s Guide...
Page 238 Chapter 25 System VMG5313-B10A/-B30A Series User’s Guide...
Page 239: User Account
(*) for each character you type. After you change the password, use the new password to access the VMG. Retype to Type the new password again for confirmation. confirm Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG5313-B10A/-B30A Series User’s Guide...
Page 240 Chapter 26 User Account VMG5313-B10A/-B30A Series User’s Guide...
Page 241: Remote Management
You may change the server port number for a service if needed, however you must use the same port number in order to use that service for remote management. Apply Click Apply to save your changes back to the VMG. Cancel Click Cancel to restore your previously saved settings. VMG5313-B10A/-B30A Series User’s Guide...
Page 242: The Trust Domain Screen
Use this screen to configure a public IP address which is allowed to access the VMG. Click the Add Trust Domain button in the Maintenance > Remote MGMT > Turst Domain screen to open the following screen. Figure 119 Maintenance > Remote MGMT > Trust Domain > Add Trust Domain VMG5313-B10A/-B30A Series User’s Guide...
Page 243 Enter a public IPv4 IP address which is allowed to access the service on the VMG from the WAN. IPv4 Mask Enter a IPv4 subnet mask number (1~32) for the trusted domain. Apply Click Apply to save your changes back to the VMG. Cancel Click Cancel to restore your previously saved settings. VMG5313-B10A/-B30A Series User’s Guide...
Page 244 Chapter 27 Remote Management VMG5313-B10A/-B30A Series User’s Guide...
Page 245: Client
Enter the URL or IP address of the auto-configuration server. ACS User Name Enter the TR-069 user name for authentication with the auto-configuration server. ACS Password Enter the TR-069 password for authentication with the auto-configuration server. VMG5313-B10A/-B30A Series User’s Guide...
Page 246 You can choose a local certificate used by TR-069 client. The local certificate should be used by TR-069 imported in the Security > Certificates > Local Certificates screen. client Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG5313-B10A/-B30A Series User’s Guide...
Page 247: Snmp
Examples of variables include such as number of packets received, node port status etc. A Management Information Base (MIB) is a collection of managed objects. SNMP allows a manager and agents to communicate for the purpose of accessing these objects. VMG5313-B10A/-B30A Series User’s Guide...
Page 248 Enter the SNMP system contact. Trap Destination Type the IP address of the station to send your SNMP traps to. Apply Click this to save your changes back to the VMG. Cancel Click this to restore your previously saved settings. VMG5313-B10A/-B30A Series User’s Guide...
Page 249: Time Settings
Check with your ISP/network administrator if you are unsure of this information. Time Zone Time zone Choose the time zone of your location. This will set the time difference between your time zone and Greenwich Mean Time (GMT). VMG5313-B10A/-B30A Series User’s Guide...
Page 250 In Germany for instance, you would select 2 in the Hour field because Germany's time zone is one hour ahead of GMT or UTC (GMT+1). Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG5313-B10A/-B30A Series User’s Guide...
Page 251: Logs Setting
31.2.1 Example E-mail Log An "End of Log" message displays for each mail in which a complete log has been sent. The following is an example of a log sent by e-mail. • You may edit the subject title. VMG5313-B10A/-B30A Series User’s Guide...
Page 252 |<1,02> 127|Apr 7 00 |From:192.168.1.131 To:192.168.1.255 |match |forward | 10:05:17 |UDP src port:00520 dest port:00520 |<1,02> 128|Apr 7 00 |From:192.168.1.1 To:192.168.1.255 |match |forward | 10:05:30 |UDP src port:00520 dest port:00520 |<1,02> End of Firewall Log VMG5313-B10A/-B30A Series User’s Guide...
Page 253: Firmware Upgrade
Click this to find the .bin file you want to upload. Remember that you must decompress compressed (.zip) files before you can upload them. Upload Click this to begin the upload process. This process may take up to two minutes. VMG5313-B10A/-B30A Series User’s Guide...
Page 254 After two minutes, log in again and check your new firmware version in the Status screen. If the upload was not successful, the following screen will appear. Click OK to go back to the Firmware Upgrade screen. Figure 129 Error Message VMG5313-B10A/-B30A Series User’s Guide...
Page 255: Backup/Restore
The backup configuration file will be useful in case you need to return to your previous settings. Click Backup to save the VMG’s current configuration to your computer. VMG5313-B10A/-B30A Series User’s Guide...
Page 256 IP address. If the upload was not successful, the following screen will appear. Click OK to go back to the Configuration screen. Figure 132 Configuration Upload Error VMG5313-B10A/-B30A Series User’s Guide...
Page 257: The Reboot Screen
System restart allows you to reboot the VMG remotely without turning the power off. You may need to do this if the VMG hangs, for example. Click Maintenance > Reboot. Click Reboot to have the VMG reboot. This does not affect the VMG's configuration. Figure 135 Maintenance > Reboot VMG5313-B10A/-B30A Series User’s Guide...
Page 258: Diagnostic
If an MEP port does not respond to the source MEP, this may indicate a fault. Administrators can take further action to check and resume services from the fault according to the line connectivity status report. VMG5313-B10A/-B30A Series User’s Guide...
Page 259: Ping & Traceroute & Nslookup
Click this button to perform a DNS lookup on the IP address of a computer you enter. 34.4 802.1ag Click Maintenance > Diagnostic > 8.2.1ag to open the following screen. Use this screen to perform CFM actions. Figure 137 Maintenance > Diagnostic > 802.1ag VMG5313-B10A/-B30A Series User’s Guide...
Page 260: Oam Ping
• Virtual Channel (VC) Logical connections between ATM devices • Virtual Path (VP) A bundle of virtual channels • Virtual Circuits A series of virtual paths between circuit end points Figure 138 Virtual Circuit Topology VMG5313-B10A/-B30A Series User’s Guide...
Page 261 F4 end-end Press this to perform an OAM F4 end-to-end loopback test. F5 segment Press this to perform an OAM F5 segment loopback test. F5 end-end Press this to perform an OAM F5 end-to-end loopback test. VMG5313-B10A/-B30A Series User’s Guide...
Page 262 Chapter 34 Diagnostic VMG5313-B10A/-B30A Series User’s Guide...
Page 263: Troubleshooting
Make sure you understand the normal behavior of the LED. See Section 1.6 on page Check the hardware connections. Inspect your cables for damage. Contact the vendor to replace any damaged cables. Turn the VMG off and on. VMG5313-B10A/-B30A Series User’s Guide...
Page 264: Vmg Access And Login
Make sure your Internet browser does not block pop-up windows and has JavaScripts and Java enabled. See Appendix D on page 311. If it is possible to log in from another interface, check the service control settings for HTTP and HTTPS (Maintenance > Remote MGMT). VMG5313-B10A/-B30A Series User’s Guide...
Page 265 I cannot use FTP to upload / download the configuration file. / I cannot use FTP to upload new firmware. See the troubleshooting suggestions for I cannot see or access the Login screen in the web configurator. Ignore the suggestions about your browser. VMG5313-B10A/-B30A Series User’s Guide...
Page 266: Internet Access
ADSL and VDSL connections cannot work at the same time. You can only use one type of DSL connection, either ADSL or VDSL connection at one time. I cannot connect to the Internet using a Ethernet connection. Make sure you have the Ethernet WAN port connected to a MODEM or Router. VMG5313-B10A/-B30A Series User’s Guide...
Page 267: Wireless Internet Access
• Place the AP where there are minimum obstacles (such as walls and ceilings) between the AP and the wireless client. • Reduce the number of wireless clients connecting to the same AP simultaneously, or add additional APs if necessary. VMG5313-B10A/-B30A Series User’s Guide...
Page 268: Usb Device Connection
Network Places > Local Network. Disconnect the Ethernet cable from the VMG’s LAN port or from your computer. Re-connect the Ethernet cable. The Local Area Connection icon for UPnP disappears in the screen. Restart your computer. VMG5313-B10A/-B30A Series User’s Guide...
Page 269 Chapter 35 Troubleshooting I cannot open special applications such as white board, file transfer and video when I use the MSN messenger. Wait more than three minutes. Restart the applications. VMG5313-B10A/-B30A Series User’s Guide...
Page 270 Chapter 35 Troubleshooting VMG5313-B10A/-B30A Series User’s Guide...
Page 271: Part Iii Appendices
Appendices Appendices contain general information. Some information may not apply to your device.
Page 273 Part III Appendices VMG5313-B30A User’s Guide...
Page 274: Appendix A Customer Support
• Brief description of the problem and the steps you took to solve it. Corporate Headquarters (Worldwide) Taiwan • ZyXEL Communications Corporation • http://www.zyxel.com Asia China • ZyXEL Communications (Shanghai) Corp. ZyXEL Communications (Beijing) Corp. ZyXEL Communications (Tianjin) Corp. • http://www.zyxel.cn India • ZyXEL Technology India Pvt Ltd • http://www.zyxel.in Kazakhstan •...
Page 275 • ZyXEL Singapore Pte Ltd. • http://www.zyxel.com.sg Taiwan • ZyXEL Communications Corporation • http://www.zyxel.com Thailand • ZyXEL Thailand Co., Ltd • http://www.zyxel.co.th Vietnam • ZyXEL Communications Corporation-Vietnam Office • http://www.zyxel.com/vn/vi Europe Austria • ZyXEL Deutschland GmbH • http://www.zyxel.de Belarus • ZyXEL BY • http://www.zyxel.by...
Page 276 Appendix A Customer Support Belgium • ZyXEL Communications B.V. • http://www.zyxel.com/be/nl/ Bulgaria • ZyXEL България • http://www.zyxel.com/bg/bg/ Czech • ZyXEL Communications Czech s.r.o • http://www.zyxel.cz Denmark • ZyXEL Communications A/S • http://www.zyxel.dk Estonia • ZyXEL Estonia • http://www.zyxel.com/ee/et/ Finland • ZyXEL Communications •...
Page 277 • ZyXEL Communications Poland • http://www.zyxel.pl Romania • ZyXEL Romania • http://www.zyxel.com/ro/ro Russia • ZyXEL Russia • http://www.zyxel.ru Slovakia • ZyXEL Communications Czech s.r.o. organizacna zlozka • http://www.zyxel.sk Spain • ZyXEL Spain • http://www.zyxel.es Sweden • ZyXEL Communications • http://www.zyxel.se Switzerland •...
Page 278 Ecuador • ZyXEL Communication Corporation • http://www.zyxel.com/ec/es/ Middle East Egypt • ZyXEL Communication Corporation • http://www.zyxel.com/homepage.shtml Middle East • ZyXEL Communication Corporation • http://www.zyxel.com/homepage.shtml North America • ZyXEL Communications, Inc. - North America Headquarters • http://www.us.zyxel.com/ VMG5313-B10A/-B30A Series User’s Guide...
Page 279 Appendix A Customer Support Oceania Australia • ZyXEL Communications Corporation • http://www.zyxel.com/au/en/ Africa South Africa • Nology (Pty) Ltd. • http://www.zyxel.co.za VMG5313-B10A/-B30A Series User’s Guide...
Page 280 Appendix A Customer Support VMG5313-B10A/-B30A Series User’s Guide...
Page 281: Appendix B Setting Up Your Computer's Ip Address
IP addresses that place them in the same subnet as the VMG’s LAN port. Windows 95/98/Me Click Start, Settings, Control Panel and double-click the Network icon to open the Network window. Figure 140 WIndows 95/98/Me: Network: Configuration VMG5313-B10A/-B30A Series User’s Guide...
Page 282 Restart your computer so the changes you made take effect. Configuring In the Network window Configuration tab, select your network adapter's TCP/IP entry and click Properties Click the IP Address tab. • If your IP address is dynamic, select Obtain an IP address automatically. VMG5313-B10A/-B30A Series User’s Guide...
Page 283 • If you do not know your DNS information, select Disable DNS. • If you know your DNS information, select Enable DNS and type the information in the fields below (you may not need to fill them all in). Figure 142 Windows 95/98/Me: TCP/IP Properties: DNS Configuration VMG5313-B10A/-B30A Series User’s Guide...
Page 284 Select your network adapter. You should see your computer's IP address, subnet mask and default gateway. Windows 2000/NT/XP The following example figures use the default Windows XP GUI theme. Click start (Start in Windows 2000/NT), Settings, Control Panel. Figure 143 Windows XP: Start Menu VMG5313-B10A/-B30A Series User’s Guide...
Page 285 In the Control Panel, double-click Network Connections (Network and Dial-up Connections in Windows 2000/NT). Figure 144 Windows XP: Control Panel Right-click Local Area Connection and then click Properties. Figure 145 Windows XP: Control Panel: Network Connections: Properties VMG5313-B10A/-B30A Series User’s Guide...
Page 286 • If you have a dynamic IP address click Obtain an IP address automatically. • If you have a static IP address click Use the following IP Address and fill in the IP address, Subnet mask, and Default gateway fields. VMG5313-B10A/-B30A Series User’s Guide...
Page 287 (the number of transmission hops), clear the Automatic metric check box and type a metric in Metric. • Click Add. • Repeat the previous three steps for each default gateway you want to add. VMG5313-B10A/-B30A Series User’s Guide...
Page 288 • Click Obtain DNS server address automatically if you do not know your DNS server IP address(es). • If you know your DNS server IP address(es), click Use the following DNS server addresses, and type them in the Preferred DNS server and Alternate DNS server fields. VMG5313-B10A/-B30A Series User’s Guide...
Page 289 In the Command Prompt window, type "ipconfig" and then press [ENTER]. You can also open Network Connections, right-click a network connection, click Status and then click the Support tab. Windows Vista This section shows screens from Windows Vista Enterprise Version 6.0. VMG5313-B10A/-B30A Series User’s Guide...
Page 290 Click the Start icon, Control Panel. Figure 150 Windows Vista: Start Menu In the Control Panel, double-click Network and Internet. Figure 151 Windows Vista: Control Panel Click Network and Sharing Center. Figure 152 Windows Vista: Network And Internet VMG5313-B10A/-B30A Series User’s Guide...
Page 291 Figure 153 Windows Vista: Network and Sharing Center Right-click Local Area Connection and then click Properties. Note: During this procedure, click Continue whenever Windows displays a screen saying that it needs your permission to continue. Figure 154 Windows Vista: Network and Sharing Center VMG5313-B10A/-B30A Series User’s Guide...
Page 292 • If you have a dynamic IP address click Obtain an IP address automatically. • If you have a static IP address click Use the following IP address and fill in the IP address, Subnet mask, and Default gateway fields. VMG5313-B10A/-B30A Series User’s Guide...
Page 293 (the number of transmission hops), clear the Automatic metric check box and type a metric in Metric. • Click Add. • Repeat the previous three steps for each default gateway you want to add. VMG5313-B10A/-B30A Series User’s Guide...
Page 294 • Click Obtain DNS server address automatically if you do not know your DNS server IP address(es). • If you know your DNS server IP address(es), click Use the following DNS server addresses, and type them in the Preferred DNS server and Alternate DNS server fields. VMG5313-B10A/-B30A Series User’s Guide...
Page 295 Click Start, All Programs, Accessories and then Command Prompt. In the Command Prompt window, type "ipconfig" and then press [ENTER]. You can also open Network Connections, right-click a network connection, click Status and then click the Support tab. VMG5313-B10A/-B30A Series User’s Guide...
Page 296 Appendix B Setting up Your Computer’s IP Address Macintosh OS 8/9 Click the Apple menu, Control Panel and double-click TCP/IP to open the TCP/IP Control Panel. Figure 159 Macintosh OS 8/9: Apple Menu VMG5313-B10A/-B30A Series User’s Guide...
Page 297 Macintosh OS X Click the Apple menu, and click System Preferences to open the System Preferences window. Figure 161 Macintosh OS X: Apple Menu Click Network in the icon bar. • Select Automatic from the Location list. VMG5313-B10A/-B30A Series User’s Guide...
Page 298 • Type the IP address of your VMG in the Router address box. Click Apply Now and close the window. Turn on your VMG and restart your computer (if prompted). Verifying Settings Check your TCP/IP properties in the Network window. VMG5313-B10A/-B30A Series User’s Guide...
Page 299 Follow the steps below to configure your computer IP address using the KDE. Click the Red Hat button (located on the bottom left corner), select System Setting and click Network. Figure 163 Red Hat 9.0: KDE: Network Configuration: Devices VMG5313-B10A/-B30A Series User’s Guide...
Page 300 If you know your DNS server IP address(es), click the DNS tab in the Network Configuration screen. Enter the DNS server information in the fields provided. Figure 165 Red Hat 9.0: KDE: Network Configuration: DNS Click the Devices tab. VMG5313-B10A/-B30A Series User’s Guide...
Page 301 The following example shows an example where the static IP address is 192.168.1.10 and the subnet mask is 255.255.255.0. Figure 168 Red Hat 9.0: Static IP Address Setting in ifconfig-eth0 DEVICE=eth0 ONBOOT=yes BOOTPROTO=static IPADDR=192.168.1.10 NETMASK=255.255.255.0 USERCTL=no PEERDNS=yes TYPE=Ethernet VMG5313-B10A/-B30A Series User’s Guide...
Page 302 Bcast:172.23.19.255 Mask:255.255.255.0 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:717 errors:0 dropped:0 overruns:0 frame:0 TX packets:13 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:100 RX bytes:730412 (713.2 Kb) TX bytes:1570 (1.5 Kb) Interrupt:10 Base address:0x1000 [root@localhost]# VMG5313-B10A/-B30A Series User’s Guide...
Page 303: Appendix C Ip Addresses And Subnetting
192.168.1.1). Each of these four parts is known as an octet. An octet is an eight-digit binary number (for example 11000000, which is 192 in decimal notation). Therefore, each octet has a possible range of 00000000 to 11111111 in binary, or 0 to 255 in decimal. VMG5313-B10A/-B30A Series User’s Guide...
Page 304 Host ID 00000010 By convention, subnet masks always consist of a continuous sequence of ones beginning from the leftmost bit of the mask, followed by a continuous sequence of zeros, for a total number of 32 bits. VMG5313-B10A/-B30A Series User’s Guide...
Page 305 This is usually specified by writing a “/” followed by the number of bits in the mask after the address. For example, 192.1.1.0 /25 is equivalent to saying 192.1.1.0 with subnet mask 255.255.255.128. VMG5313-B10A/-B30A Series User’s Guide...
Page 306 You can “borrow” one of the host ID bits to divide the network 192.168.1.0 into two separate sub- networks. The subnet mask is now 25 bits (255.255.255.128 or /25). The “borrowed” host ID bit can have a value of either 0 or 1, allowing two subnets; 192.168.1.0 /25 and 192.168.1.128 /25. VMG5313-B10A/-B30A Series User’s Guide...
Page 307 Table 110 Subnet 1 LAST OCTET BIT IP/SUBNET MASK NETWORK NUMBER VALUE IP Address (Decimal) 192.168.1. IP Address (Binary) 11000000.10101000.00000001. 00000000 Subnet Mask (Binary) 11111111.11111111.11111111. 11000000 VMG5313-B10A/-B30A Series User’s Guide...
Page 308 Similarly, use a 27-bit mask to create eight subnets (000, 001, 010, 011, 100, 101, 110 and 111). The following table shows IP address last octet values for each subnet. Table 114 Eight Subnets SUBNET LAST BROADCAST SUBNET FIRST ADDRESS ADDRESS ADDRESS ADDRESS VMG5313-B10A/-B30A Series User’s Guide...
Page 309 255.255.224.0 (/19) 8190 255.255.240.0 (/20) 4094 255.255.248.0 (/21) 2046 255.255.252.0 (/22) 1022 255.255.254.0 (/23) 255.255.255.0 (/24) 255.255.255.128 (/25) 255.255.255.192 (/26) 1024 255.255.255.224 (/27) 2048 255.255.255.240 (/28) 4096 255.255.255.248 (/29) 8192 255.255.255.252 (/30) 16384 255.255.255.254 (/31) 32768 VMG5313-B10A/-B30A Series User’s Guide...
Page 310 Regardless of your particular situation, do not create an arbitrary IP address; always follow the guidelines above. For more information on address assignment, please refer to RFC 1597, Address Allocation for Private Internets and RFC 1466, Guidelines for Management of IP Address Space. VMG5313-B10A/-B30A Series User’s Guide...
Page 311: Appendix D Pop-Up Windows, Javascripts And Java Permissions
In Internet Explorer, select Tools, Pop-up Blocker and then select Turn Off Pop-up Blocker. Figure 175 Pop-up Blocker You can also check if pop-up blocking is disabled in the Pop-up Blocker section in the Privacy tab. In Internet Explorer, select Tools, Internet Options, Privacy. VMG5313-B10A/-B30A Series User’s Guide...
Page 312 Click Apply to save this setting. Enable Pop-up Blockers with Exceptions Alternatively, if you only want to allow pop-up windows from your device, see the following steps. In Internet Explorer, select Tools, Internet Options and then the Privacy tab. VMG5313-B10A/-B30A Series User’s Guide...
Page 313 Select Settings…to open the Pop-up Blocker Settings screen. Figure 177 Internet Options: Privacy Type the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.167.1. VMG5313-B10A/-B30A Series User’s Guide...
Page 314 Figure 178 Pop-up Blocker Settings Click Close to return to the Privacy screen. Click Apply to save this setting. JavaScripts If pages of the web configurator do not display properly in Internet Explorer, check that JavaScripts are allowed. VMG5313-B10A/-B30A Series User’s Guide...
Page 315 Figure 179 Internet Options: Security Click the Custom Level... button. Scroll down to Scripting. Under Active scripting make sure that Enable is selected (the default). Under Scripting of Java applets make sure that Enable is selected (the default). VMG5313-B10A/-B30A Series User’s Guide...
Page 316 Figure 180 Security Settings - Java Scripting Java Permissions From Internet Explorer, click Tools, Internet Options and then the Security tab. Click the Custom Level... button. Scroll down to Microsoft VM. Under Java permissions make sure that a safety level is selected. VMG5313-B10A/-B30A Series User’s Guide...
Page 317 Click OK to close the window. Figure 181 Security Settings - Java JAVA (Sun) From Internet Explorer, click Tools, Internet Options and then the Advanced tab. Make sure that Use Java 2 for <applet> under Java (Sun) is selected. VMG5313-B10A/-B30A Series User’s Guide...
Page 318 Mozilla Firefox 2.0 screens are used here. Screens for other versions may vary. You can enable Java, Javascripts and pop-ups in one screen. Click Tools, then click Options in the screen that appears. Figure 183 Mozilla Firefox: Tools > Options VMG5313-B10A/-B30A Series User’s Guide...
Page 319 Appendix D Pop-up Windows, JavaScripts and Java Permissions Click Content.to show the screen below. Select the check boxes as shown in the following screen. Figure 184 Mozilla Firefox Content Security VMG5313-B10A/-B30A Series User’s Guide...
Page 320 Appendix D Pop-up Windows, JavaScripts and Java Permissions VMG5313-B10A/-B30A Series User’s Guide...
Page 321: Appendix E Wireless Lans
(AP). Intra-BSS traffic is traffic between wireless clients in the BSS. When Intra-BSS is enabled, wireless client A and B can access the wired network and communicate with each other. When Intra-BSS is VMG5313-B10A/-B30A Series User’s Guide...
Page 322 APs is called a Distribution System (DS). This type of wireless LAN topology is called an Infrastructure WLAN. The Access Points not only provide communication with the wired network but also mediate wireless network traffic in the immediate neighborhood. VMG5313-B10A/-B30A Series User’s Guide...
Page 323 A hidden node occurs when two stations are within range of the same access point, but are not within range of each other. The following figure illustrates a hidden node. Both stations (STA) are within range of the access point (AP) or wireless gateway, but out-of-range of each other, so they VMG5313-B10A/-B30A Series User’s Guide...
Page 324 AP will fragment the packet into smaller data frames. A large Fragmentation Threshold is recommended for networks not prone to interference while you should set a smaller threshold for busy networks or networks that are prone to interference. VMG5313-B10A/-B30A Series User’s Guide...
Page 325 IEEE802.1x EAP with RADIUS Server Authentication Wi-Fi Protected Access (WPA) WPA2 Most Secure Note: You must enable the same wireless security settings on the VMG and on all wireless clients that you want to associate with it. VMG5313-B10A/-B30A Series User’s Guide...
Page 326 Sent by a RADIUS server requesting more information in order to allow access. The access point sends a proper response from the user and then sends another Access-Request message. The following types of RADIUS messages are exchanged between the access point and the RADIUS server for user accounting: VMG5313-B10A/-B30A Series User’s Guide...
Page 327 This makes user identity vulnerable to passive attacks. A digital certificate is an electronic ID card that authenticates the sender’s identity. However, to implement EAP-TLS, you need a Certificate Authority (CA) to handle certificates, which imposes a management overhead. VMG5313-B10A/-B30A Series User’s Guide...
Page 328 Table 119 Comparison of EAP Authentication Types EAP-MD5 EAP-TLS EAP-TTLS PEAP LEAP Mutual Authentication Certificate – Client Optional Optional Certificate – Server Dynamic Key Exchange Credential Integrity None Strong Strong Strong Moderate Deployment Difficulty Easy Hard Moderate Moderate Moderate Client Identity Protection VMG5313-B10A/-B30A Series User’s Guide...
Page 329 The encryption mechanisms used for WPA(2) and WPA(2)-PSK are the same. The only difference between the two is that WPA(2)-PSK uses a simple common password, instead of user-specific credentials. The common-password approach makes WPA(2)-PSK susceptible to brute-force VMG5313-B10A/-B30A Series User’s Guide...
Page 330 The RADIUS server then checks the user's identification against its database and grants or denies network access accordingly. A 256-bit Pairwise Master Key (PMK) is derived from the authentication process by the RADIUS server and the client. VMG5313-B10A/-B30A Series User’s Guide...
Page 331 The AP and wireless clients use the TKIP or AES encryption process, the PMK and information exchanged in a handshake to create temporal encryption keys. They use these keys to encrypt data exchanged between them. Figure 190 WPA(2)-PSK Authentication VMG5313-B10A/-B30A Series User’s Guide...
Page 332 Antenna gain, measured in dB (decibel), is the increase in coverage within the RF beam width. Higher antenna gain improves the range of the signal for better communications. For an indoor site, each 1 dB increase in antenna gain results in a range increase of approximately VMG5313-B10A/-B30A Series User’s Guide...
Page 333 For a single AP application, place omni-directional antennas as close to the center of the coverage area as possible. For directional antennas, point the antenna in the direction of the desired coverage area. VMG5313-B10A/-B30A Series User’s Guide...
Page 334 Appendix E Wireless LANs VMG5313-B10A/-B30A Series User’s Guide...
Page 335: Appendix F Ipv6
A link-local unicast address has a predefined prefix of fe80::/10. The link-local unicast address format is as follows. Table 121 Link-local Unicast Address Format 1111 1110 10 Interface ID 10 bits 54 bits 64 bits VMG5313-B10A/-B30A Series User’s Guide...
Page 336 All DHCP severs on a local site. FF05:0:0:0:0:0:1:3 The following table describes the multicast addresses which are reserved and can not be assigned to a multicast group. Table 123 Reserved Multicast Address MULTICAST ADDRESS FF00:0:0:0:0:0:0:0 FF01:0:0:0:0:0:0:0 FF02:0:0:0:0:0:0:0 FF03:0:0:0:0:0:0:0 FF04:0:0:0:0:0:0:0 FF05:0:0:0:0:0:0:0 FF06:0:0:0:0:0:0:0 FF07:0:0:0:0:0:0:0 VMG5313-B10A/-B30A Series User’s Guide...
Page 337 DHCPv6 server uses T1 and T2 to control the time at which the client contacts with the server to extend the lifetimes on any addresses in the IA_NA before the lifetimes expire. After T1, the client sends the server (S1) (from which the addresses in the IA_NA were obtained) a Renew message. If VMG5313-B10A/-B30A Series User’s Guide...
Page 338 • Neighbor solicitation: A request from a host to determine a neighbor’s link-layer address (MAC address) and detect if the neighbor is still reachable. A neighbor being “reachable” means it responds to a neighbor solicitation message (from the host) with a neighbor advertisement message. VMG5313-B10A/-B30A Series User’s Guide...
Page 339 Done message to the router or switch. The router or switch then sends a group-specific query to the port on which the Done message is received to determine if other devices connected to this port should remain in the group. VMG5313-B10A/-B30A Series User’s Guide...
Page 340 Install Dibbler and select the DHCPv6 client option on your computer. After the installation is complete, select Start > All Programs > Dibbler-DHCPv6 > Client Install as service. Select Start > Control Panel > Administrative Tools > Services. VMG5313-B10A/-B30A Series User’s Guide...
Page 341 To enable IPv6 in Windows 7: Select Control Panel > Network and Sharing Center > Local Area Connection. Select the Internet Protocol Version 6 (TCP/IPv6) checkbox to enable it. Click OK to save the change. VMG5313-B10A/-B30A Series User’s Guide...
Page 342 IPv4 Address... : 172.16.100.61 Subnet Mask ... : 255.255.255.0 Default Gateway ..: fe80::213:49ff:feaa:7125%11 172.16.100.254 VMG5313-B10A/-B30A Series User’s Guide...
Page 343: Appendix G Services
• If the Protocol is TCP, UDP, or TCP/UDP, this is the IP port number. • If the Protocol is USER, this is the IP protocol number. • Description: This is a brief explanation of the applications that use this service or the situations in which this service is used. VMG5313-B10A/-B30A Series User’s Guide...
Page 344 This is another popular Internet chat program. MSN Messenger 1863 Microsoft Networks’ messenger service uses this protocol. NetBIOS TCP/UDP The Network Basic Input/Output System is used for communication between TCP/UDP computers in a LAN. TCP/UDP TCP/UDP VMG5313-B10A/-B30A Series User’s Guide...
Page 345 Internet. SMTP enables you to move messages from one e-mail server to another. SMTPS This is a more secure version of SMTP that runs over SSL. SNMP TCP/UDP Simple Network Management Program. SNMP-TRAPS TCP/UDP Traps for use with the SNMP (RFC:1215). VMG5313-B10A/-B30A Series User’s Guide...
Page 346 UNIX environments. It operates over TCP/ IP networks. Its primary function is to allow users to log into remote host systems. VDOLIVE 7000 A videoconferencing solution. The UDP port number is specified in the application. user- defined VMG5313-B10A/-B30A Series User’s Guide...
Page 347: Appendix H Legal Information
ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation. All rights reserved.
Page 348: Open Source Licenses
• Do NOT use the device if the power adaptor or cord is damaged as it might cause electrocution. • If the power adaptor or cord is damaged, remove it from the device and the power source. VMG5313-B10A/-B30A Series User’s Guide...
Page 349 Your product is marked with this symbol, which is known as the WEEE mark. WEEE stands for Waste Electronics and Electrical Equipment. It means that used electrical and electronic products should not be mixed with general waste. Used electrical and electronic equipment should be treated separately. VMG5313-B10A/-B30A Series User’s Guide...
Page 350 Appendix H Legal Information VMG5313-B10A/-B30A Series User’s Guide...
Page 351: Index
Basic Service Set, See BSS Basic Service Set, see BSS blinking LEDs Broadband broadcast channel interference 104, 321 example channel, wireless LAN BYE request Class of Service Class of Service, see CoS client list client-server protocol comfort noise generation VMG5313-B10A/-B30A Series User’s Guide...
Page 352 DDoS Domain Name LAND attack Domain Name System, see DNS Ping of Death Domain Name System. See DNS. SYN attack firmware DS field 150, 219 version DS, dee differentiated services flash key VMG5313-B10A/-B30A Series User’s Guide...
Page 353 Inside Local Address, see ILA interface group limitations Internet wireless LAN wizard setup Internet access link trace wizard setup Link Trace Message, see LTM Internet Protocol version 6 Link Trace Response, see LTR Internet Protocol version 6, see IPv6 VMG5313-B10A/-B30A Series User’s Guide...
Page 354 Per-Hop Behavior, see PHB VC-based 150, 219 multiprotocol encapsulation phone book speed dial phone functions PIN, WPS example 155, 157, 163, 164, 310 Ping of Death applications Point-to-Point Tunneling Protocol IP alias POP3 example port forwarding global ports VMG5313-B10A/-B30A Series User’s Guide...
Page 355 TR-069 register server Remote Procedure Calls, see RPCs servers reset service domain 21, 257 restart user agent restoring configuration SIP ALG RFC 1058. See RIP. activation RFC 1389. See RIP. SMTP VMG5313-B10A/-B30A Series User’s Guide...
Page 356 SYN attack NAT traversal syslog USA type call service mode protocol USB features severity levels system firmware version passwords 23, 24 reset status Virtual Circuit (VC) Virtual Local Area Network See VLAN wireless LAN time VLAN VMG5313-B10A/-B30A Series User’s Guide...
Page 357 101, 102 105, 107 example example channel limitations encryption example example fragmentation threshold 98, 101 push button 22, 105 limitations MAC address filter MBSSID preamble 98, 101 RADIUS server RTS/CTS threshold 98, 101 security SSID VMG5313-B10A/-B30A Series User’s Guide...
Page 358 Index VMG5313-B10A/-B30A Series User’s Guide...

This manual is also suitable for:

Vmg5313-b30a