Page 1 Dual Band Wireless AC/N VDSL2 VoIP Combo WAN Gigabit IAD Version 5.11 Edition 1, 04/2015 Quick Start Guide User’s Guide Default Login Details LAN IP Address http://192.168.1.1 Login admin, user www.zyxel.com Password 1234, user Copyright © 2015 ZyXEL Communications Corporation...
Page 2 Every effort has been made to ensure that the information in this manual is accurate. Related Documentation • Quick Start Guide The Quick Start Guide shows how to connect the VMG and get up and running right away. VMG3926-B10A User’s Guide...
Page 3: Table Of Contents
Traffic Status ............................221 ARP Table .............................225 Routing Table ............................227 Multicast Status ............................229 xDSL Statistics ............................231 3G Statistics ............................234 System ..............................237 User Account ............................238 Remote Management ..........................241 TR-064 ..............................245 TR-069 Client ............................246 SNMP ..............................249 Time Settings ............................251 E-mail Notification ..........................253 VMG3926-B10A User’s Guide...
Page 4 Contents Overview Log Setting ............................255 Firmware Upgrade ..........................259 Backup Restore .............................263 Diagnostic .............................266 Troubleshooting ............................271 Appendices ............................279 VMG3926-B10A User’s Guide...
Page 5: Table Of Contents
2.2.3 Navigation Panel ........................27 Chapter 3 Quick Start............................31 3.1 Overview ............................31 3.2 Quick Start Setup ..........................31 Chapter 4 Tutorials ...............................33 4.1 Overview ............................33 4.2 Setting Up an ADSL PPPoE Connection ..................33 4.3 Setting Up a Secure Wireless Network .....................36 VMG3926-B10A User’s Guide...
Page 6 6.5.1 Modify 802.1X Settings ......................81 6.6 Technical Reference ..........................82 Chapter 7 Wireless ...............................89 7.1 Overview ............................89 7.1.1 What You Can Do in this Chapter ....................89 7.1.2 What You Need to Know ......................89 7.2 The General Screen .........................90 VMG3926-B10A User’s Guide...
Page 7 8.7 The Wake on LAN Screen ......................130 8.8 The TFTP Server Name Screen .....................131 8.9 Technical Reference ........................131 8.9.1 LANs, WANs and the VMG ....................131 8.9.2 DHCP Setup ..........................132 8.9.3 DNS Server Addresses ......................132 8.9.4 LAN TCP/IP ...........................133 Chapter 9 Routing ..............................135 VMG3926-B10A User’s Guide...
Page 8 11.4.1 Add/Edit Port Triggering Rule .....................166 11.5 The DMZ Screen ...........................167 11.6 The ALG Screen ..........................167 11.7 The Address Mapping Screen .......................168 11.7.1 Add/Edit Address Mapping Rule ..................169 11.8 The Sessions Screen ........................170 11.9 Technical Reference ........................170 VMG3926-B10A User’s Guide...
Page 9 15.1.3 Before You Begin .........................188 15.2 The File Sharing Screen .......................188 15.2.1 The Add New User Screen ....................189 15.3 The Media Server Screen ......................190 Chapter 16 Firewall ..............................193 16.1 Overview ............................193 16.1.1 What You Can Do in this Chapter ..................193 VMG3926-B10A User’s Guide...
Page 10 20.4.1 View Trusted CA Certificate ....................213 20.4.2 Import Trusted CA Certificate ....................214 Chapter 21 Log ..............................217 21.1 Overview ............................217 21.1.1 What You Can Do in this Chapter ..................217 21.1.2 What You Need To Know .....................217 21.2 The System Log Screen ........................218 VMG3926-B10A User’s Guide...
Page 11 26.1 The xDSL Statistics Screen ......................231 Chapter 27 3G Statistics .............................234 27.1 Overview ............................234 27.2 The 3G Statistics Screen .......................234 Chapter 28 System ...............................237 28.1 Overview ............................237 28.2 The System Screen ........................237 Chapter 29 User Account ............................238 VMG3926-B10A User’s Guide...
Page 12 Chapter 35 E-mail Notification ..........................253 35.1 Overview ............................253 35.2 The Email Notification Screen .......................253 35.2.1 Email Notification Edit ......................253 Chapter 36 Log Setting ............................255 36.1 Overview ............................255 36.2 The Log Settings Screen .......................255 36.2.1 Example E-mail Log ......................256 VMG3926-B10A User’s Guide...
Page 13 40.4 Wireless Internet Access .......................275 40.5 USB Device Connection ........................276 40.6 UPnP .............................276 Part III: Appendices ..................279 Appendix A Customer Support ......................281 Appendix B Wireless LANs......................287 Appendix C IPv6 ..........................301 Appendix D Services ........................309 Appendix E Legal Information......................314 Index ..............................321 VMG3926-B10A User’s Guide...
Page 14 Table of Contents VMG3926-B10A User’s Guide...
Page 15: User's Guide
User’s Guide...
Page 17: Introducing The Vmg
VMG to its factory default settings. If you backed up an earlier configuration file, you would not have to totally re-configure the VMG. You could simply restore your last configuration. VMG3926-B10A User’s Guide...
Page 18: Applications For The Vmg
This means that probes from the outside to your network are not allowed, but you can safely browse the Internet and download files. 1.4.2 VMG’s USB Support The USB port of the VMG is used for file-sharing and media server. VMG3926-B10A User’s Guide...
Page 19: Leds (Lights)
USB device (B) connected to the VMG’s USB port (without having to copy them to another computer). Figure 3 USB Media Server Application 1.5 LEDs (Lights) The following graphic displays the labels of the LEDs. VMG3926-B10A User’s Guide...
Page 20 The 5 GHz wireless network is activated. Blinking The VMG is communicating with 5 GHz wireless clients. 5G WLAN/ Orange Blinking The VMG is setting up a WPS connection with a 5 GHz wireless client. The 5 GHz wireless network is not activated. VMG3926-B10A User’s Guide...
Page 21: The Reset Button
It allows them to connect to the Internet without having to rely on inconvenient Ethernet cables. You can configure your wireless network in either the built-in Web Configurator, or using the WPS button. Figure 5 Wireless Access Example VMG3926-B10A User’s Guide...
Page 22: Using The Wi-Fi And Wps Buttons
Once the connection is successfully made, the 2.4G WLAN/WPS or 5G WLAN/WPS LED shines green. To turn off the wireless network, press the Wi-Fi On/Off button for one to five seconds. The 2.4G WLAN/WPS or 5G WLAN/WPS LED turns off when the wireless network is off. VMG3926-B10A User’s Guide...
Page 23: The Web Configurator
If you have changed the password, enter your password and click Login. Figure 6 Password Screen The following screen displays if you have not yet changed your password. Enter a new password, retype it to confirm and click Apply. VMG3926-B10A User’s Guide...
Page 24 Figure 7 Change Password Screen configure basic Internet access, and wireless settings. The Network Map page appears. Figure 8 Network Map Click Status to display the Status screen, where you can view the VMG’s interface and system information. VMG3926-B10A User’s Guide...
Page 25: Web Configurator Layout
As illustrated above, the main screen is divided into these parts: • A - title bar • B - main window • C - navigation panel 2.2.1 Title Bar The title bar provides some icons in the upper right corner. VMG3926-B10A User’s Guide...
Page 26: Main Window
If you click Virtual Device on the System Info screen, a visual graphic appears, showing the connection status of the VMG’s ports. The connected ports are in color and disconnected ports are gray. Figure 10 Virtual Device VMG3926-B10A User’s Guide...
Page 27: Navigation Panel
Use this screen to configure policy routing on the VMG. Use this screen to configure Routing Information Protocol to exchange routing information with other routers. General Use this screen to enable QoS and traffic prioritizing. You can also configure the QoS rules and actions. VMG3926-B10A User’s Guide...
Page 28 (such as parental control) is enforced. Certificates Local Certificates Use this screen to view a summary list of certificates and manage certificates and certification requests. Trusted CA Use this screen to view and manage the list of the trusted CAs. System Monitor VMG3926-B10A User’s Guide...
Page 29 Use this screen to configure up to two mail servers and sender Notification addresses on the VMG. Log Setting Use this screen to change your VMG’s log settings. Firmware Use this screen to upload firmware to your VMG. Upgrade VMG3926-B10A User’s Guide...
Page 30 Use this screen to configure CFM (Connectivity Fault Management) MD (maintenance domain) and MA (maintenance association), perform connectivity tests and view test reports. OAM Ping Use this screen to view information to help you identify problems with the DSL connection. VMG3926-B10A User’s Guide...
Page 31: Quick Start
Select the time zone of your location. Click Next. Figure 11 Quick Start - Welcome Enter your Internet connection information in this screen. The screen and fields to enter may vary depending on your current connection type. Click Next. VMG3926-B10A User’s Guide...
Page 32 Turn the wireless LAN on or off. If you keep it on, record the security settings so you can configure your wireless clients to connect to the VMG. Click Save. Figure 13 Quick Start - Wireless Your VMG saves your settings and attempts to connect to the Internet. VMG3926-B10A User’s Guide...
Page 33: Tutorials
Broadband screens. Click Network Setting > Broadband to open the following screen. Click Add New WAN Interface. In this example, the DSL connection has the following information. General Name MyDSLConnection Type ADSL VMG3926-B10A User’s Guide...
Page 34 Then select DNS as Static and enter the DNS server addresses provided to you, such as 192.168.5.2 (DNS server1)/192.168.5.1 (DNS server2). Leave the rest of the fields to the default settings. Click Apply to save your settings. VMG3926-B10A User’s Guide...
Page 35 Chapter 4 Tutorials VMG3926-B10A User’s Guide...
Page 36: Setting Up A Secure Wireless Network
802.11b/g/n Mixed Click Network Setting > Wireless to open the General screen. Select More Secure as the security level and WPA2-PSK as the security mode. Configure the screen using the provided parameters (see page 36). Click Apply. VMG3926-B10A User’s Guide...
Page 37: Using Wps
This section shows you how to set up a wireless network using WPS. It uses the VMG as the AP and ZyXEL NWD210N as the wireless client which connects to the notebook. Note: The wireless client must be a WPS-aware device (for example, a WPS USB adapter or PCMCIA card). VMG3926-B10A User’s Guide...
Page 38 Both buttons have exactly the same function: you can use one or the other. Note: It doesn’t matter which button is pressed first. You must press the second button within two minutes of pressing the first one. VMG3926-B10A User’s Guide...
Page 39 Launch your wireless client’s configuration utility. Go to the WPS settings and select the PIN method to get a PIN number. Log into VMG’s web configurator and go to the Network Setting > Wireless > WPS screen. Enable the WPS function and click Apply. VMG3926-B10A User’s Guide...
Page 40 This may take up to two minutes. The wireless client is then able to communicate with the VMG securely. The following figure shows you how to set up a wireless network and its security on a VMG and a wireless client by using PIN method. VMG3926-B10A User’s Guide...
Page 41: Without Wps
Use the wireless adapter’s utility installed on the notebook to search for the “Example” SSID. Then enter the “DoNotStealMyWirelessNetwork” pre-shared key to establish an wireless Internet connection. Note: The VMG supports IEEE 802.11b and IEEE 802.11g wireless clients. Make sure that your notebook or computer’s wireless adapter supports one of these standards. VMG3926-B10A User’s Guide...
Page 42: Setting Up Multiple Wireless Groups
Pre-Shared Key ForCompanyOnly 123456789 guest123 Click Network Setting > Wireless to open the General screen. Use this screen to set up the company’s general wireless network group. Configure the screen using the provided parameters and click Apply. VMG3926-B10A User’s Guide...
Page 43 Chapter 4 Tutorials Click Network Setting > Wireless > Guest/More AP to open the following screen. Click the Edit icon to configure the second wireless network group. Configure the screen using the provided parameters and click Apply. VMG3926-B10A User’s Guide...
Page 44 Chapter 4 Tutorials In the Guest/More AP screen, click the Edit icon to configure the third wireless network group.Configure the screen using the provided parameters and click Apply. VMG3926-B10A User’s Guide...
Page 45: Configuring Static Route For Routing To Another Network
In order to extend your Intranet and control traffic flowing directions, you may connect a router to the VMG’s LAN. The router may be used to separate two department networks. This tutorial shows how to configure a static routing rule for two network routings. VMG3926-B10A User’s Guide...
Page 46 B. This tutorial uses the following example IP settings: Table 4 IP Settings in this Tutorial DEVICE / COMPUTER IP ADDRESS The VMG’s WAN 172.16.1.1 The VMG’s LAN 192.168.1.1 IP Type IPv4 Use Interface VDSL/ppp1.1 192.168.1.34 VMG3926-B10A User’s Guide...
Page 47: Configuring Qos Queue And Class Setup
Now B should be able to receive traffic from A. You may need to additionally configure B’s firewall settings to allow specific traffic to pass through. 4.6 Configuring QoS Queue and Class Setup This section contains tutorials on how you can configure the QoS screen. VMG3926-B10A User’s Guide...
Page 48 Bandwidth to 10,000 kbps (or leave this blank to have the VMG automatically determine this figure). Click Apply. Tutorial: Advanced > QoS Click Queue Setup > Add new Queue to create a new queue. In the screen that opens, check Active and enter or select the following values: • Name: E-mail VMG3926-B10A User’s Guide...
Page 49 • Weight: 8 • Rate Limit: 5,000 (kbps) Tutorial: Advanced > QoS > Queue Setup Click Class Setup > Add new Classifier to create a new class. Check Active and follow the settings as shown in the screen below. VMG3926-B10A User’s Guide...
Page 50 Type the MAC address of your computer - AA:FF:AA:FF:AA:FF. Type the MAC Mask if you know it. To Queue Link this to an item in the Network Setting > QoS > Queue Setup screen, which is the E- Index mail queue created in this example. VMG3926-B10A User’s Guide...
Page 51: Access The Vmg Using Ddns
• IP Address: Enter the WAN IP address that your VMG is currently using. You can find the IP address on the VMG’s Web Configurator Status page. Then you will need to configure the same account and host name on the VMG later. VMG3926-B10A User’s Guide...
Page 52: Configuring Ddns On Your Vmg
Josephine’s computer connects wirelessly to the Internet through the VMG. Thomas decides to use the Security > MAC Filter screen to grant wireless network access to his computer but not to Josephine’s computer. VMG3926-B10A User’s Guide...
Page 53: Access Your Shared Files From A Computer
4.9 Access Your Shared Files From a Computer Here is how to use an FTP program to access a file storage device connected to the VMG’s USB port. Note: This example uses the FileZilla FTP program to browse your shared files. VMG3926-B10A User’s Guide...
Page 54 In FileZilla enter the IP address of the VMG (the default is 192.168.1.1), your account’s user name and password and port 21 and click Quickconnect. A screen asking for password authentication appears. File Sharing via Windows Explorer Once you log in the USB device displays in the folder. VMG3926-B10A User’s Guide...
Page 55: Technical Reference
Technical Reference...
Page 57: Network Map And Status Screens
5.2 The Network Map Screen Use this screen to view the network connection status of the device and its clients. A warning message appears if there is a connection problem. Figure 14 Network Map: Icon View Mode VMG3926-B10A User’s Guide...
Page 58: The Status Screen
VMG to update this screen in Refresh interval. Figure 15 Network Map: List View Mode 5.3 The Status Screen Use this screen to view the status of the VMG. Click Status to open this screen. Figure 16 Status Screen VMG3926-B10A User’s Guide...
Page 59 This displays the type of 802.11 mode the wireless interface is using in the wireless LAN. This displays whether WPS is activated on the wireless interface. Security Firewall This displays the firewall’s current security level. System Status VMG3926-B10A User’s Guide...
Page 60 For the WLAN interface, it displays the maximum transmission rate or N/A with WLAN disabled. For the 3G interface, this field displays Up when a 3G device is installed in a USB slot and N/A when no device is detected in any USB slot. VMG3926-B10A User’s Guide...
Page 61: Broadband
CONNECTION SETTINGS TYPE ADSL/VDSL Routing PPPoE PPP information, IPv4/IPv6 IP over PTM address, routing feature, DNS server, VLAN, QoS, and MTU IPoE IPv4/IPv6 IP address, routing feature, DNS server, VLAN, QoS, and MTU Bridge VLAN and QoS VMG3926-B10A User’s Guide...
Page 62: What You Need To Know
Packet Transfer Mode (PTM) is packet-oriented and supported by the VDSL2 standard. In PTM, packets are encapsulated directly in the High-level Data Link Control (HDLC) frames. It is designed to provide a low-overhead, transparent way of transporting packets over DSL links, as an alternative to ATM. VMG3926-B10A User’s Guide...
Page 63 ISP’s Border Relay router (BR in the figure) to connect to the native IPv6 Internet. The local network can also use IPv4 services. The VMG uses it’s configured IPv4 WAN IP to route IPv4 traffic to the IPv4 Internet. VMG3926-B10A User’s Guide...
Page 64: Before You Begin
ISP (IPv6) IPv6 Internet IPv6 IPv6 IPv4 IPv4 in IPv6 AFTR IPv4 Internet 6.1.3 Before You Begin You need to know your Internet access settings such as encapsulation and WAN IP address. Get this information from your ISP. VMG3926-B10A User’s Guide...
Page 65: The Broadband Screen
This shows whether Multicast Listener Discovery (MLD) is activated or not for this connection. MLD is not available when the connection uses the bridging service. Modify Click the Edit icon to configure the WAN connection. Click the Delete icon to remove the WAN connection. VMG3926-B10A User’s Guide...
Page 66: Add/Edit Internet Connection
The following example screen displays when you select the ADSL/VDSL over ATM connection type, Routing mode, and PPPoE encapsulation. The screen varies when you select other interface type, encapsulation, and IPv6/IPv4 mode. Figure 21 Network Setting > Broadband > Add New WAN Interface/Edit (Routing Mode) VMG3926-B10A User’s Guide...
Page 67 PDU to identify the PDUs. The LCC header can be followed by an IEEE 802.1a SubNetwork Attachment Point (SNAP) header. This is available only when you select IPoA in the Encapsulation field. VMG3926-B10A User’s Guide...
Page 68 Disable PPPoE pass through if you do not need to allow hosts on the LAN to use PPPoE client software on their computers to connect to the ISP. IP Address (This is available only when you select IPv4 Only or IPv6/IPv4 DualStack in the IPv6/IPv4 Mode field.) VMG3926-B10A User’s Guide...
Page 69 Select Use Following Static DNS Address if you want the VMG to use the DNS server addresses you configure manually. DNS Server1 Enter the first DNS server address assigned by the ISP. DNS Server 2 Enter the second DNS server address assigned by the ISP. VMG3926-B10A User’s Guide...
Page 70 It can reduce multicast traffic significantly. Apply as Select this option to have the VMG use the WAN interface of this connection as the system Default default gateway. Gateway IPv6 DNS Configure the IPv6 DNS server in the following section. Server VMG3926-B10A User’s Guide...
Page 71: Bridge Mode
Select Bridge as the encapsulation mode. The screen varies depending on the interface type you select. If you select ADSL/VDSL over PTM as the interface type, the following screen appears. VMG3926-B10A User’s Guide...
Page 72 Type the VLAN ID number (from 0 to 4094) for traffic through this connection. Click OK to save your changes. Cancel Click Cancel to exit this screen without saving. If you select ADSL over ATM as the interface type, the following screen appears. VMG3926-B10A User’s Guide...
Page 73 To transport multiple protocols, the VMG needs separate VCs. There is a binding between a VC and the type of the network protocol carried on the VC. This reduces payload overhead since there is no need to carry protocol information in each Protocol Data Unit (PDU) payload. VMG3926-B10A User’s Guide...
Page 74: The 3G Backup Screen
The VMG automatically uses a wired WAN connection when available. Note: This VMG supports connecting one 3G dongle at a time. Figure 24 Internet Access Application: 3G WAN Use this screen to configure your 3G settings. Click Network Setting > Broadband > 3G Backup. VMG3926-B10A User’s Guide...
Page 75 Select this to have the VMG ping the particular host name or IP address you typed in this field. 3G Connection Settings Card This field displays the manufacturer and model name of your 3G card if you inserted one in description the VMG. Otherwise, it displays N/A. VMG3926-B10A User’s Guide...
Page 76 Maintenance > Email Notification screen. 3G backup Type a title that you want to be in the subject line of the e-mail notifications that the VMG Send Email sends. Title VMG3926-B10A User’s Guide...
Page 77 Select Keep to maintain an existing 3G connection or Drop to disconnect it. connection Actions Enable Email Select this to enable the e-mail notification function. The VMG will e-mail you a notification Notification when there over budget occurs. VMG3926-B10A User’s Guide...
Page 78: The Advanced Screen
17.5 8.832 2048 4.3125 20.5 1972 4.3125 11.5 8.832 2048 4.3125 14.5 2783 4.3125 14.5 2783 4.3125 14.5 17.664 4096 4.3125 14.5 3479 8.625 14.5 Click Network Setting > Broadband > Advanced to display the following screen. VMG3926-B10A User’s Guide...
Page 79 ITU G.992.2 (better known as G.lite) is an ITU standard for ADSL using discrete multitone modulation. G.lite does not strictly require the use of DSL filters, but like all variants of ADSL generally functions better with splitters. VMG3926-B10A User’s Guide...
Page 80: The 802.1X Screen
6.5 The 802.1x Screen You can view and configure the 802.1X authentication settings in the 802.1x screen. Click Network Setting > Broadband > 802.1x to display the following screen. Figure 27 Network Setting > Broadband > 802.1x VMG3926-B10A User’s Guide...
Page 81: Modify 802.1X Settings
6.5.1 Modify 802.1X Settings Use this screen to edit 802.1X authentication settings. Click the Edit icon next to the rule you want to edit. The screen shown next appears. Figure 28 Network Setting > Broadband > 802.1x > Modify VMG3926-B10A User’s Guide...
Page 82: Technical Reference
RFC1483 and sends it through an ATM PVC (Permanent Virtual Circuit) to the Internet Service Provider’s (ISP) DSLAM (digital access multiplexer). Please refer to RFC 2364 for more information on PPPoA. Refer to RFC 1661 for more information on PPP. VMG3926-B10A User’s Guide...
Page 83 Traffic Shaping is an agreement between the carrier and the subscriber to regulate the average rate and fluctuations of data transmission over an ATM network. This agreement helps eliminate congestion, which is important for transmission of real time data such as audio and video connections. VMG3926-B10A User’s Guide...
Page 84 Variable Bit Rate (VBR) traffic class can be grouped into real time (VBR-RT) or non-real time (VBR-nRT) connections. The VBR-RT (real-time Variable Bit Rate) type is used with bursty connections that require closely controlled delay and delay variation. It also provides a fixed amount of bandwidth (a PCR is VMG3926-B10A User’s Guide...
Page 85 Ethernet port has a CFI set to 1, then that frame should not be forwarded as it is to an untagged port. The remaining twelve bits define the VLAN ID, giving a possible maximum VMG3926-B10A User’s Guide...
Page 86 DNS server fields to get the DNS server address from the ISP. IPv6 Addressing The 128-bit IPv6 address is written as eight 16-bit hexadecimal blocks separated by colons (:). This is an example IPv6 address 2001:0db8:1a2b:0015:0000:0000:1a2f:0000. IPv6 addresses can be abbreviated in two ways: VMG3926-B10A User’s Guide...
Page 87 IPv6 prefix length specifies how many most significant bits (start from the left) in the address compose the network address. The prefix length is written as “/x” where x is a number. For example, 2001:db8:1a2b:15::1a2f:0/32 means that the first 32 bits (2001:db8) is the subnet prefix. VMG3926-B10A User’s Guide...
Page 88 Chapter 6 Broadband VMG3926-B10A User’s Guide...
Page 89: Wireless
However, wireless networking is different from that of most traditional radio communications in that there a number of wireless networking standards available with different methods of data encryption. VMG3926-B10A User’s Guide...
Page 90: The General Screen
Apply to confirm. You must then change the wireless settings of your computer to match the VMG’s new settings. Click Network Setting > Wireless to open the General screen. Figure 30 Network Setting > Wireless > General VMG3926-B10A User’s Guide...
Page 91 Specify the maximum rate for downstream wireless traffic to this WLAN from the WAN in Downstream kilobits per second (Kbps). Bandwidth BSSID This shows the MAC address of the wireless interface on the VMG when wireless LAN is enabled. Security Level VMG3926-B10A User’s Guide...
Page 92: No Security
RADIUS server. If your wireless devices support nothing stronger than WEP, use the highest encryption level available. Your VMG allows you to configure up to four 64-bit or 128-bit WEP keys but only one key can be enabled at any one time. VMG3926-B10A User’s Guide...
Page 93: More Secure (Wpa(2)-Psk)
WPA encryption standard. It offers slightly better security, although the use of PSK makes it less robust than it could be. Click Network Setting > Wireless to display the General screen. Select More Secure as the security level. Then select WPA-PSK or WPA2-PSK from the Security Mode list. VMG3926-B10A User’s Guide...
Page 94: The Guest / More Ap Screen
7.3 The Guest / More AP Screen This screen allows you to enable and configure multiple Basic Service Sets (BSSs) on the VMG. Click Network Setting > Wireless > Guest / More AP. The following screen displays. VMG3926-B10A User’s Guide...
Page 95: Edit Guest / More Ap
Click the Edit icon to configure the SSID profile. 7.3.1 Edit Guest / More AP Use this screen to edit an SSID profile. Click the Edit icon next to an SSID in the Guest / More AP screen. The following screen displays. VMG3926-B10A User’s Guide...
Page 96 Select this check box to allow the VMG to convert wireless multicast traffic into wireless Multicast unicast traffic. Forwarding Guest WLAN Select this to create Guest WLANs for home and external clients. Select the WLAN type in the Access Scenario field. VMG3926-B10A User’s Guide...
Page 97: The Wps Screen
SSID1 to WPA2-PSK or No Security. Click Network Setting > Wireless > WPS. The following screen displays. Select Enable and click Apply to activate the WPS function. Then you can configure the WPS settings in this screen. VMG3926-B10A User’s Guide...
Page 98 Select Enable and click Apply to activate WPS method 3 on the VMG. Release The default WPS status is configured. Configuration Click this button to remove all configured wireless and wireless security settings for WPS connections on the VMG. VMG3926-B10A User’s Guide...
Page 99: The Wmm Screen
VMG "wakes up". The VMG wakes up periodically to check for incoming data. Note: This works only if the wireless device to which the VMG is connected also supports this feature. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG3926-B10A User’s Guide...
Page 100: The Wds Screen
Select Disable to turn off WDS. Remote Bridge You can enter the MAC address of the peer device by clicking the Edit icon under Modify. MAC Address This is the index number of the entry. VMG3926-B10A User’s Guide...
Page 101: Wds Scan
This shows the SSID of the available wireless device within range. BSSID This shows the MAC address of the available wireless device within range. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG3926-B10A User’s Guide...
Page 102: The Others Screen
Delivery Traffic Indication Message (DTIM) is the time period after which broadcast and multicast packets are transmitted to mobile clients in the Power Saving mode. A high DTIM value can cause clients to lose connectivity with the network. This value can be set from 1 to 255. VMG3926-B10A User’s Guide...
Page 103: The Channel Status Screen
Use the Channel Status screen to scan wireless LAN channel noises and view the results. Click Network Setting > Wireless > Channel Status. The screen appears as shown. Click Scan to scan the wireless LAN channels. You can view the results in the Channel Scan Result section. VMG3926-B10A User’s Guide...
Page 104: Technical Reference
• An “infrastructure” type of network has one or more access points and one or more wireless clients. The wireless clients connect to the access points. • An “ad-hoc” type of network is one in which there is no access point. Wireless clients connect to one another in order to exchange information. VMG3926-B10A User’s Guide...
Page 105 When you create a network, you must select a channel to use. Since the available unlicensed spectrum varies from one country to another, the number of available channels also varies. VMG3926-B10A User’s Guide...
Page 106: Additional Wireless Terms
A good way to come up with effective security keys, passwords and so on is to use obscure information that you personally will easily remember, and to enter it in a way that appears random VMG3926-B10A User’s Guide...
Page 107 Some wireless devices, such as scanners, can detect wireless networks but cannot use wireless networks. These kinds of wireless devices might not have MAC addresses. Hexadecimal characters are 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, A, B, C, D, E, and F. VMG3926-B10A User’s Guide...
Page 108: Signal Problems
Problems with absorption occur when physical objects (such as thick walls) are between the two radios, muffling the signal. VMG3926-B10A User’s Guide...
Page 109: Bss
• You must use different keys for different BSSs. If two wireless devices have different BSSIDs (they are in different BSSs), but have the same keys, they may hear each other’s communications (but not communicate with each other). VMG3926-B10A User’s Guide...
Page 110: Preamble Type
WPS allows you to quickly set up a wireless network with strong security, without having to configure security settings manually. Each WPS connection works between two devices. Both devices must support WPS (check each device’s documentation to make sure). VMG3926-B10A User’s Guide...
Page 111 (referred to here as the AP) and a client device using the PIN method. Ensure WPS is enabled on both devices. Access the WPS section of the AP’s configuration interface. See the device’s User’s Guide for how to do this. VMG3926-B10A User’s Guide...
Page 112 If you cannot connect, check the list of associated wireless clients in the AP’s configuration utility. If you see the wireless client in the list, WPS was successful. The following figure shows a WPS-enabled wireless client (installed in a notebook computer) connecting to the WPS-enabled AP via the PIN method. VMG3926-B10A User’s Guide...
Page 113 If the registrar is already part of a network, it sends the existing information. If not, it generates the SSID and WPA(2)-PSK randomly. The following figure shows a WPS-enabled client (installed in a notebook computer) connecting to a WPS-enabled access point. VMG3926-B10A User’s Guide...
Page 114 When WPS is activated on both, they perform the handshake. In this example, AP1 is the registrar, and Client 1 is the enrollee. The registrar randomly generates the security information to set up the network, since it is unconfigured and has no existing information. VMG3926-B10A User’s Guide...
Page 115 In step 3, you add another access point (AP2) to your network. AP2 is out of range of AP1, so you cannot use AP1 for the WPS handshake with the new access point. However, you know that Client 2 supports the registrar function, so you use it to perform the WPS handshake instead. VMG3926-B10A User’s Guide...
Page 116 If this happens, open the access point’s configuration interface and look at the list of associated clients (usually displayed by MAC address). It does not matter if the VMG3926-B10A User’s Guide...
Page 117 Check the MAC addresses of your wireless clients (usually printed on a label on the bottom of the device). If there is an unknown MAC address you can remove it or reset the AP. VMG3926-B10A User’s Guide...
Page 118 Chapter 7 Wireless VMG3926-B10A User’s Guide...
Page 119: Home Networking
• Use the Wake on Lan screen to remotely turn on a device on the network. (Section 8.7 on page 130). • Use the TFTP Server Name screen to identify a TFTP server for configuration file download using DHCP option 66. (Section 8.8 on page 131). VMG3926-B10A User’s Guide...
Page 120: What You Need To Know
UPnP devices and enable exchange of simple product and service descriptions. NAT traversal allows the following: • Dynamic port mapping • Learning public IP addresses VMG3926-B10A User’s Guide...
Page 121: Before You Begin
This will become the IP address of your VMG. Enter the IP subnet mask into the IP Subnet Mask field. Unless instructed otherwise it is best to leave this alone, the configurator will automatically compute a subnet mask based upon the IP address you entered. VMG3926-B10A User’s Guide...
Page 122 IP Address you enter, so do not change this field unless you are instructed to do so. IGMP Snooping Status Select the Enable IGMP Snooping checkbox to allows the VMG to passively learn multicast group. VMG3926-B10A User’s Guide...
Page 123 Select this to manually enter an interface ID for the LAN interface’s global IPv6 address. LAN IPv6 Address Setup Delegate prefix Select this option to automatically obtain an IPv6 network prefix from the service provider from WAN or an uplink router. VMG3926-B10A User’s Guide...
Page 124 IPv4 DNS Server First: The VMG forwards the requests to the IPv4 DNS server first and then the IPv6 DNS server. Then it sends clients the first DNS information it receives. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG3926-B10A User’s Guide...
Page 125: The Static Dhcp Screen
If you click Static DHCP Configuration in the Static DHCP screen or the Edit icon next to a static DHCP entry, the following screen displays. Figure 52 Static DHCP: Static DHCP Configuration/Edit VMG3926-B10A User’s Guide...
Page 126: The Upnp Screen
UPnP. Use the following screen to configure the UPnP settings on your VMG. Click Network Setting > Home Networking > UPnP to display the screen shown next. Figure 53 Network Setting > Home Networking > UPnP VMG3926-B10A User’s Guide...
Page 127: Turning On Upnp In Windows 7 Example
Make sure the computer is connected to a LAN port of the VMG. Turn on your computer and the VMG. Click the start icon, Control Panel and then the Network and Sharing Center. Click Change Advanced Sharing Settings. VMG3926-B10A User’s Guide...
Page 128: The Additional Subnet Screen
Use the Additional Subnet screen to configure IP alias and public static IP. IP alias allows you to partition a physical network into different logical networks over the same Ethernet interface. The VMG supports multiple logical LAN interfaces via its physical Ethernet VMG3926-B10A User’s Guide...
Page 129 Select Enable to enable the VMG to provide public IP addresses by DHCP server. by DHCP Enable ARP Select Enable to enable the ARP (Address Resolution Protocol) proxy. Proxy Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG3926-B10A User’s Guide...
Page 130: The Stb Vendor Id Screen
You need to know the MAC address of the LAN device. It may be on a label on the device or in its documentation. Click Network Setting > Home Networking > Wake on Lan to open this screen. Figure 56 Network Setting > Home Networking > Wake on Lan VMG3926-B10A User’s Guide...
Page 131: The Tftp Server Name Screen
LANs, WANs and the VMG The actual physical connection determines whether the VMG ports are LAN or WAN ports. There are two separate IP networks, one inside the LAN network and the other outside the WAN network as shown next. VMG3926-B10A User’s Guide...
Page 132: Dhcp Setup
DNS servers out of the DHCP setup under all circumstances. If your ISP gives you explicit DNS servers, make sure that you enter their IP addresses in the DHCP Setup screen. VMG3926-B10A User’s Guide...
Page 133: Lan Tcp/Ip
If you belong to a small organization and your Internet access is through an ISP, the ISP can provide you with the Internet addresses for your local networks. On the other hand, if you are part of a much larger organization, you should consult your network administrator for the appropriate IP addresses. VMG3926-B10A User’s Guide...
Page 134 Note: Regardless of your particular situation, do not create an arbitrary IP address; always follow the guidelines above. For more information on address assignment, please refer to RFC 1597, “Address Allocation for Private Internets” and RFC 1466, “Guidelines for Management of IP Address Space”. VMG3926-B10A User’s Guide...
Page 135: Routing
9.2 The Routing Screen Use this screen to view and configure the static route rules on the VMG. Click Network Setting > Routing > Static Route to open the following screen. Figure 60 Network Setting > Routing > Static Route VMG3926-B10A User’s Guide...
Page 136: Add/Edit Static Route
Route Name Enter a descriptive name for the static route. IP Type Select whether your IP type is IPv4 or IPv6. Destination IP Enter the IPv4 or IPv6 network address of the final destination. Address VMG3926-B10A User’s Guide...
Page 137: The Dns Route Screen
Click the Delete icon to delete the DNS route. 9.3.1 The DNS Route Add Screen You can manually add the VMG’s DNS route entry. Click Add New DNS Route in the Network Setting > Routing > DNS Route screen. The screen shown next appears. VMG3926-B10A User’s Guide...
Page 138: The Policy Route Screen
The following table describes the labels in this screen. Table 41 Network Setting > Routing >Policy Route LABEL DESCRIPTION Add New Policy Click this to create a new policy forwarding rule. Route This is the index number of the entry. VMG3926-B10A User’s Guide...
Page 139: Add/Edit Policy Route
Enter a descriptive name of up to 8 printable English keyboard characters, not including spaces. Source IP Enter the source IP address. Source Subnet Enter the source subnet mask address. Mask Protocol Select the transport layer protocol (TCP or UDP). VMG3926-B10A User’s Guide...
Page 140: Rip
Select Active to have the VMG advertise its route information and also listen for routing updates from neighboring routers. Enabled Select the check box to activate the settings. Apply Click Apply to save your changes back to the VMG. VMG3926-B10A User’s Guide...
Page 141: Quality Of Service (Qos)
• The Shaper Setup screen limits outgoing traffic transmission rate on the selected interface (Section 10.6 on page 151). • The Policer Setup screen to control incoming traffic transmission rate and bursts (Section 10.7 on page 152). VMG3926-B10A User’s Guide...
Page 142: What You Need To Know
(or queues). Your VMG uses the Token Bucket algorithm to allow a certain amount of large bursts while keeping a limit at the average rate. Traffic Rate Traffic Rate Time Time (Before Traffic Shaping) (After Traffic Shaping) VMG3926-B10A User’s Guide...
Page 143: The Quality Of Service General Screen
Click Network Setting > QoS > General to open the screen as shown next. Use this screen to enable or disable QoS and set the upstream bandwidth. See Section 10.1 on page 141 for more information. Figure 67 Network Settings > QoS > General VMG3926-B10A User’s Guide...
Page 144: The Queue Setup Screen
Cancel Click Cancel to restore your previously saved settings. 10.4 The Queue Setup Screen Click Network Setting > QoS > Queue Setup to open the screen as shown next. Use this screen to configure QoS queue assignment. VMG3926-B10A User’s Guide...
Page 145: Adding A Qos Queue
Click the Delete icon to delete an existing queue. Note that subsequent rules move up by one when you take this action. 10.4.1 Adding a QoS Queue Click Add New Queue or the edit icon in the Queue Setup screen to configure a queue. Figure 69 Queue Setup: Add VMG3926-B10A User’s Guide...
Page 146: The Classification Setup Screen
Click Network Setting > QoS > Classification Setup to open the following screen. Figure 70 Network Setting > QoS > Classification Setup VMG3926-B10A User’s Guide...
Page 147: Add/Edit Qos Class
Click the Delete icon to delete an existing classifier. Note that subsequent rules move up by one when you take this action. 10.5.1 Add/Edit QoS Class Click Add New Classification in the Classification Setup screen or the Edit icon next to a classifier to open the following screen. VMG3926-B10A User’s Guide...
Page 148 Select an existing number for where you want to put this classifier to move the classifier to the number you selected after clicking Apply. Select Last to put this rule in the back of the classifier list. VMG3926-B10A User’s Guide...
Page 149 This field is available only when you select IP in the Ether Type field. Select this option and select the protocol (service type) from TCP, UDP, ICMP or IGMP. If you select User defined, enter the protocol (service type) number. VMG3926-B10A User’s Guide...
Page 150 Step4: Class Routing Forward to Select a WAN interface through which traffic of this class will be forwarded out. If you select Interface Unchange, the VMG forward traffic of this class according to the default routing table. VMG3926-B10A User’s Guide...
Page 151: The Qos Shaper Setup Screen
This shows the average rate limit of traffic bursts for this shaper. (kbps) Modify Click the Edit icon to edit the shaper. Click the Delete icon to delete an existing shaper. Note that subsequent rules move up by one when you take this action. VMG3926-B10A User’s Guide...
Page 152: Add/Edit A Qos Shaper
DSCP value for matched traffic. Click Network Setting > QoS > Policer Setup. The screen appears as shown. Figure 74 Network Setting > QoS > Policer Setup VMG3926-B10A User’s Guide...
Page 153: Add/Edit A Qos Policer
10.7.1 Add/Edit a QoS Policer Click Add New Policer in the Policer Setup screen or the Edit icon next to a policer to show the following screen. Figure 75 Policer Setup: Add/Edit VMG3926-B10A User’s Guide...
Page 154: Technical Reference
IEEE 802.1Q Tag The IEEE 802.1Q standard defines an explicit VLAN tag in the MAC header to identify the VLAN membership of a frame across bridges. A VLAN tag includes the 12-bit VLAN ID and 3-bit user VMG3926-B10A User’s Guide...
Page 155 The DSCP value determines the forwarding behavior, the PHB (Per-Hop Behavior), that each packet gets across the DiffServ network. Based on the marking rule, different kinds of traffic can be marked for different kinds of forwarding. Resources can then be allocated according to the DSCP values and the configured policies. VMG3926-B10A User’s Guide...
Page 156 QUEUE PRIORITY TOS (IP IP PACKET DSCP (ETHERNET PRECEDENCE) LENGTH (BYTE) PRIORITY) 000000 000000 >1100 001110 250~1100 001100 001010 001000 010110 010100 010010 010000 011110 <250 011100 011010 011000 100110 100100 100010 100000 101110 101000 110000 111000 VMG3926-B10A User’s Guide...
Page 157 CBS bucket is equal to or greater than the size of the packet (in bytes). • After a packet is transmitted, a number of tokens corresponding to the packet size is removed from the CBS bucket. VMG3926-B10A User’s Guide...
Page 158 • If the PBS bucket has enough tokens, the VMG checks the CBS bucket. The packet is marked green and can be transmitted if the number of tokens in the CBS bucket is equal to or greater than the size of the packet (in bytes). Otherwise, the packet is marked yellow. VMG3926-B10A User’s Guide...
Page 159: Network Address Translation (Nat)
IP address of a host when the packet is in the local network, while the global address refers to the IP address of the host when the same packet is traveling in the WAN side. VMG3926-B10A User’s Guide...
Page 160: The Port Forwarding Screen
80 to another (B in the example) and assign a default server IP address of 192.168.1.35 to a third (C in the example). You assign the LAN IP addresses and the ISP assigns the WAN IP address. The NAT network appears as a single host on the Internet. VMG3926-B10A User’s Guide...
Page 161 Protocol This shows the IP protocol supported by this virtual server, whether it is TCP, UDP, or TCP/ UDP. Modify Click the Edit icon to edit this rule. Click the Delete icon to delete an existing rule. VMG3926-B10A User’s Guide...
Page 162: Add/Edit Port Forwarding
This shows the port number to which you want the VMG to translate the incoming port. For Start Port a range of ports, enter the first number of the range to which you want the incoming ports translated. Translation End This shows the last port of the translated port range. Port VMG3926-B10A User’s Guide...
Page 163: The Applications Screen
This field displays the destination IP address for the service. Address Modify Click the Delete icon to delete the rule. 11.3.1 Add New Application This screen lets you create new NAT application rules. Click Add New Application in the Applications screen to open the following screen. VMG3926-B10A User’s Guide...
Page 164: The Port Triggering Screen
LAN can use the service in the same manner. This way you do not need to configure a new IP address each time you want a different LAN computer to use the application. For example: VMG3926-B10A User’s Guide...
Page 165 IP address of the LAN computer that sent the traffic to a server on the WAN. This is the first port number that identifies a service. Trigger End This is the last port number that identifies a service. Port Trigger Proto. This is the trigger transport layer protocol. VMG3926-B10A User’s Guide...
Page 166: Add/Edit Port Triggering Rule
Type a port number or the starting port number in a range of port numbers. Trigger End Type a port number or the ending port number in a range of port numbers. Port Trigger Protocol Select the transport layer protocol from TCP, UDP, or TCP/UDP. VMG3926-B10A User’s Guide...
Page 167: The Dmz Screen
VMG is behind a SIP ALG. Use this screen to enable and disable the NAT and SIP (VoIP) ALG in the VMG. To access this screen, click Network Setting > NAT > ALG. VMG3926-B10A User’s Guide...
Page 168: The Address Mapping Screen
IP address from your ISP. You can only do this for the Many-to-One mapping type. Global End IP This is the ending Inside Global IP Address (IGA). This field is blank for One-to-One and Many-to-One mapping types. VMG3926-B10A User’s Guide...
Page 169: Add/Edit Address Mapping Rule
SUA (i.e., PAT, port address translation), the VMG's Single User Account feature that previous routers supported only. Many-to-Many: This mode maps multiple local IP addresses to shared global IP addresses. Local Start IP Enter the starting Inside Local IP Address (ILA). VMG3926-B10A User’s Guide...
Page 170: The Sessions Screen
NAT sessions. Apply Click this to save your changes on this screen. Cancel Click this to exit this screen without saving any changes. 11.9 Technical Reference This part contains more information regarding NAT. VMG3926-B10A User’s Guide...
Page 171: Nat Definitions
Many-to-Many Overload mapping), NAT offers the additional benefit of firewall protection. With no servers defined, your VMG filters out all incoming inquiries, thus preventing intruders from probing your network. For more information on IP address translation, refer to RFC 1631, The IP Network Address Translator (NAT). VMG3926-B10A User’s Guide...
Page 172: How Nat Works
Inside Global Address (ILA) Address (IGA) 192.168.1.11 192.168.1.10 11.9.4 NAT Application The following figure illustrates a possible NAT application, where three inside LANs (logical LANs using IP alias) behind the VMG can communicate with three distinct WAN networks. VMG3926-B10A User’s Guide...
Page 173 Let's say you want to assign ports 21-25 to one FTP, Telnet and SMTP server (A in the example), port 80 to another (B in the example) and assign a default server IP address of 192.168.1.35 to a VMG3926-B10A User’s Guide...
Page 174 (C in the example). You assign the LAN IP addresses and the ISP assigns the WAN IP address. The NAT network appears as a single host on the Internet. Figure 91 Multiple Servers Behind NAT Example A=192.168.1.33 192.168.1.1 B=192.168.1.34 IP address assigned by ISP C=192.168.1.35 D=192.168.1.36 VMG3926-B10A User’s Guide...
Page 175: Dynamic Dns Setup
Enabling the wildcard feature for your host causes *.yourhost.dyndns.org to be aliased to the same IP address as yourhost.dyndns.org. This feature is useful if you want to be able to use, for example, www.yourhost.dyndns.org and still reach your hostname. VMG3926-B10A User’s Guide...
Page 176: The Dns Entry Screen
You can manually add or edit the VMG’s DNS name and IP address entry. Click Add New DNS Entry in the DNS Entry screen or the Edit icon next to the entry you want to edit. The screen shown next appears. Figure 93 DNS Entry: Add/Edit VMG3926-B10A User’s Guide...
Page 177: The Dynamic Dns Screen
Current Dynamic This shows the IP address your Dynamic DNS provider has currently associated with the hostname. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG3926-B10A User’s Guide...
Page 178 Chapter 12 Dynamic DNS Setup VMG3926-B10A User’s Guide...
Page 179: Vlan Group
Use these screens to group separate VLAN groups together to be treated as one VLAN group. 13.2 The Vlan Group Screen Click Network Setting > Vlan Group to open the following screen. Figure 96 Network Setting > Vlan Group VMG3926-B10A User’s Guide...
Page 180: Add/Edit A Vlan Group
Note: LAN5 displays if the WAN port was configured as a LAN port in the Home Networking > 5th Ethernet port screen. Apply Click Apply to save your changes back to the VMG. Cancel Click Cancel to exit this screen without saving. VMG3926-B10A User’s Guide...
Page 181: Interface Group
In the following example, the client that sends packets with the DHCP Vendor ID option set to MSFT 5.0 (meaning it is a Windows 2000 DHCP client) is assigned the IP address 192.168.2.2 and uses the WAN VDSL_PoE/ppp0.1 interface. VMG3926-B10A User’s Guide...
Page 182: Interface Group Configuration
Click the Add New Interface Group button in the Interface Group screen to open the following screen. Use this screen to create a new interface group. Note: An interface can belong to only one group at a time. VMG3926-B10A User’s Guide...
Page 183 With the following DHCP Vendor IDs This shows the index number of the rule. Filter Criteria This shows the filtering criteria. The LAN interface on which the matched traffic is received will belong to this group automatically. VMG3926-B10A User’s Guide...
Page 184: Interface Grouping Criteria
DHCP option 60. DHCP option 60 option DHCP Option Select this and enter the device identity of the matched traffic. IAID Enter the Identity Association Identifier (IAID) of the device, for example, the WAN connection index number. VMG3926-B10A User’s Guide...
Page 185 Enter the model name of the device. Name Serial Enter the serial number of the device. Number Apply Click Apply to save your changes back to the VMG. Cancel Click Cancel to exit this screen without saving. VMG3926-B10A User’s Guide...
Page 186 Chapter 14 Interface Group VMG3926-B10A User’s Guide...
Page 187: Usb Service
• Use the Media Server screen to enable or disable the sharing of media files (Section 15.3 on page 190). 15.1.2 What You Need To Know The following terms and concepts may help as you read this chapter. VMG3926-B10A User’s Guide...
Page 188: Before You Begin
Use this screen to set up file sharing through the VMG. The VMG’s LAN users can access the shared folder (or share) from the USB device inserted in the VMG. To access this screen, click Network Setting > USB Service > File Sharing. VMG3926-B10A User’s Guide...
Page 189: The Add New User Screen
Use this screen to create a user account that can access the secured shares on the USB device. To access this screen, click the Add New User button in the Network Setting > USB Service > File Sharing screen. VMG3926-B10A User’s Guide...
Page 190: The Media Server Screen
The media server is enabled by default with the video, photo, and music shares published. To change your VMG’s media server settings, click Network Setting > USB Service > Media Server. The screen appears as shown. VMG3926-B10A User’s Guide...
Page 191 Media Library Enter the path clients use to access the media files on a USB storage device connected to Path the VMG. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG3926-B10A User’s Guide...
Page 192 Chapter 15 USB Service VMG3926-B10A User’s Guide...
Page 193: Firewall
• Use the Access Control screen to view and configure incoming/outgoing filtering rules (Section 16.4 on page 197). • Use the DoS screen to activate protection against Denial of Service (DoS) attacks (.Section 16.5 on page 199). VMG3926-B10A User’s Guide...
Page 194: What You Need To Know
Use this screen to set the security level of the firewall on the VMG. Firewall rules are grouped based on the direction of travel of packets to which they apply. Click Security > Firewall to display the General screen. VMG3926-B10A User’s Guide...
Page 195: The Protocol Screen
IANA (Internet Assigned Number Authority) website. See Appendix D on page 309 for some examples. Click Security > Firewall > Protocol to display the following screen. Figure 108 Security > Firewall > Protocol VMG3926-B10A User’s Guide...
Page 196: Add/Edit A Service
Use this screen to add a customized service rule that you can use in the firewall’s ACL rule configuration. Click Add new service entry or the edit icon next to an existing service rule in the Service screen to display the following screen. Figure 109 Service: Add/Edit VMG3926-B10A User’s Guide...
Page 197: The Access Control Screen
This is the index number of the entry. Name This displays the name of the rule. Src IP This displays the source IP addresses to which this rule applies. Please note that a blank source address is equivalent to Any. VMG3926-B10A User’s Guide...
Page 198: Add/Edit An Acl Rule
Enter a descriptive name of up to 16 alphanumeric characters, not including spaces, underscores, and dashes. You must enter the filter name to add an ACL rule. This field is read-only if you are editing the ACL rule. Order Select the order of the ACL rule. VMG3926-B10A User’s Guide...
Page 199: The Dos Screen
DoS (Denial of Service) attacks can flood your Internet connection with invalid packets and connection requests, using so much bandwidth and so many resources that Internet access becomes unavailable. Use the DoS screen to activate protection against DoS attacks. Click Security > Firewall > DoS to display the following screen. VMG3926-B10A User’s Guide...
Page 200 DoS Protection Select Enable to enable protection against DoS attacks. Blocking Deny Ping Select Enable to block ping request packets. Response Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG3926-B10A User’s Guide...
Page 201: Mac Filter
17.2 The MAC Filter Screen Use this screen to allow wireless and LAN clients access to the VMG. Click Security > MAC Filter. The screen appears as shown. Figure 113 Security > MAC Filter VMG3926-B10A User’s Guide...
Page 202 VMG in these address fields. Enter the MAC addresses in a valid MAC address format, that is, six hexadecimal character pairs, for example, 12:34:56:78:9a:bc. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG3926-B10A User’s Guide...
Page 203: Parental Control
This shows the day(s) and time on which parental control is enabled. Schedule Network This shows whether the network service is configured. If not, None will be shown. Service Website Block This shows whether the website block is configured. If not, None will be shown. VMG3926-B10A User’s Guide...
Page 204: Add/Edit A Parental Control Profile
Use this screen to configure a restricted access schedule and/or URL filtering settings to block the users on your network from accessing certain web sites. Figure 115 Parental Control Rule: Add/Edit Rule VMG3926-B10A User’s Guide...
Page 205 (No access). Click the + sign above the time bar to add a new time bar. Up to three are allowed. Authorized Select this to allow access for the times defined above. access No access Select this to deny access for the times defined above. VMG3926-B10A User’s Guide...
Page 206 Click Add to show a screen to enter the URL of web site or URL keyword to which the VMG URL Keyword blocks access. Click Delete to remove it. Apply Click this button to save your settings back to the VMG. Cancel Click Cancel to restore your previously saved settings. VMG3926-B10A User’s Guide...
Page 207: Scheduler Rule
19.2.1 Add/Edit a Schedule Click the Add New Rule button in the Scheduler Rule screen or click the Edit icon next to a schedule rule to open the following screen. Use this screen to configure a restricted access schedule. VMG3926-B10A User’s Guide...
Page 208 Enter the time period of each day, in 24-hour format, during which the rule will be enforced. Range Description Enter a description for this scheduler rule. Click OK to save your changes. Cancel Click Cancel to exit this screen without saving. VMG3926-B10A User’s Guide...
Page 209: Certificates
20.3 The Local Certificates Screen Click Security > Certificates to open the Local Certificates screen. This is the VMG’s summary list of certificates and certification requests. Figure 120 Security > Certificates > Local Certificates VMG3926-B10A User’s Guide...
Page 210: Create Certificate Request
20.3.1 Create Certificate Request Click Security > Certificates > Local Certificates and then Create Certificate Request to open the following screen. Use this screen to have the VMG generate a certification request. VMG3926-B10A User’s Guide...
Page 211 After you click Apply, the following screen displays to notify you that you need to get the certificate request signed by a Certificate Authority. If you already have, click Load_Signed to import the signed certificate into the VMG. Otherwise click Back to return to the Local Certificates screen. VMG3926-B10A User’s Guide...
Page 212: Load Signed Certificate
After you create a certificate request and have it signed by a Certificate Authority, in the Local Certificates screen click the certificate request’s Load Signed icon to import the signed certificate into the VMG. Note: You must remove any spaces from the certificate’s filename before you can import Figure 123 Load Signed Certificate VMG3926-B10A User’s Guide...
Page 213: The Trusted Ca Screen
20.4.1 View Trusted CA Certificate Click the View icon in the Trusted CA screen to open the following screen. Use this screen to view in-depth information about the certification authority’s certificate. VMG3926-B10A User’s Guide...
Page 214: Import Trusted Ca Certificate
Click Back to return to the previous screen. 20.4.2 Import Trusted CA Certificate Click the Import Certificate button in the Trusted CA screen to open the following screen. The VMG trusts any valid certificate signed by any of the imported trusted CA certificates. VMG3926-B10A User’s Guide...
Page 215 Type in the location of the certificate you want to upload in this field or click Choose File to Path find it. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG3926-B10A User’s Guide...
Page 216 Chapter 20 Certificates VMG3926-B10A User’s Guide...
Page 217: Log
CODE SEVERITY Emergency: The system is unusable. Alert: Action must be taken immediately. Critical: The system condition is critical. Error: There is an error condition on the system. Warning: There is a warning condition on the system. VMG3926-B10A User’s Guide...
Page 218: The System Log Screen
This field states the reason for the log. 21.3 The Security Log Screen Use the Security Log screen to see the security-related logs for the categories that you select. Click System Monitor > Log > Security Log to open the following screen. VMG3926-B10A User’s Guide...
Page 219 This field displays the severity level of the log that the device is to send to this syslog server. Category This field displays the type of the log. Messages This field states the reason for the log. VMG3926-B10A User’s Guide...
Page 220 Chapter 21 Log VMG3926-B10A User’s Guide...
Page 221: Traffic Status
Packets Sent Data This indicates the number of transmitted packets on this interface. Error This indicates the number of frames with errors transmitted on this interface. Drop This indicates the number of outgoing packets dropped on this interface. VMG3926-B10A User’s Guide...
Page 222: The Lan Status Screen
This shows the LAN or WLAN interface. Bytes Sent This indicates the number of bytes transmitted on this interface. Bytes Received This indicates the number of bytes received on this interface. Interface This shows the LAN or WLAN interfaces. VMG3926-B10A User’s Guide...
Page 223: The Nat Status Screen
This displays what percentage of NAT sessions the VMG can support is currently being used by all connected hosts. You can also see the number of active NAT sessions and the maximum number of NAT sessions the VMG can support. VMG3926-B10A User’s Guide...
Page 224 Chapter 22 Traffic Status VMG3926-B10A User’s Guide...
Page 225: Arp Table
MAC address that replied. 23.2 ARP Table Screen Use the ARP table to view IP-to-MAC address mapping(s). To open this screen, click System Monitor > ARP Table. Figure 132 System Monitor > ARP Table VMG3926-B10A User’s Guide...
Page 226 This is the MAC address of the device with the listed IP address. Device This is the type of interface used by the device. You can click on the device type to go to its configuration screen. VMG3926-B10A User’s Guide...
Page 227: Routing Table
This indicates the destination IPv4 address or IPv6 address and prefix of this route. Gateway This indicates the IPv4 address or IPv6 address of the gateway that helps forward this route’s traffic. Subnet Mask This indicates the destination subnet mask of the IPv4 route. VMG3926-B10A User’s Guide...
Page 228 This indicates the name of the interface through which the route is forwarded. brx indicates a LAN interface where x can be 0~3 to represent LAN1 to LAN4 respectively. ptm0 indicates a WAN interface using IPoE or in bridge mode. ppp0 indicates a WAN interface using PPPoE. VMG3926-B10A User’s Guide...
Page 229: Multicast Status
25.3 The MLD Status Screen Use this screen to look at the current list of multicast groups the VMG has joined and which ports have joined it. To open this screen, click System Monitor > Multicast Status > MLD Status. VMG3926-B10A User’s Guide...
Page 230 Source List This is the list of IP addresses that are allowed or not allowed to receive the multicast group’s traffic depending on the filter mode. Member This is the list of members in the multicast group. VMG3926-B10A User’s Guide...
Page 231: Xdsl Statistics
Select the time interval for refreshing statistics. Line Select which DSL line’s statistics you want to display. xDSL Training This displays the current state of setting up the DSL connection. Status Mode This displays the ITU standard used for this connection. VMG3926-B10A User’s Guide...
Page 232 These are the statistics for the traffic direction coming into the port from the service provider. Upstream These are the statistics for the traffic direction going out from the port to the service provider. This is the number of Far End Corrected blocks. This is the number of Cyclic Redundancy Checks. VMG3926-B10A User’s Guide...
Page 233 30% or more errored blocks or at least one defect. This is a subset of ES. This is the number of UnAvailable Seconds. This is the number of Loss Of Signal seconds. This is the number of Loss Of Frame seconds. This is the number of Loss of Margin seconds. VMG3926-B10A User’s Guide...
Page 234: Statistics
WCDMA - Wideband Code Division Multiple Access, 3G HSDPA - High-Speed Downlink Packet Access, 3.5G HSUPA - High-Speed Uplink Packet Access, 3.75G HSPA - HSDPA+HSUPA, 3.75G Service This field displays the name of the service provider. Provider VMG3926-B10A User’s Guide...
Page 235 The International Mobile Subscriber Identity or IMSI is a unique identification number associated with all cellular networks. This number is provisioned in the SIM card. VID/PID This field displays the USB Vendor ID and Product ID of the 3G card. VMG3926-B10A User’s Guide...
Page 236 Chapter 27 3G Statistics VMG3926-B10A User’s Guide...
Page 237: System
Type a hostname for your VMG. Enter a descriptive name of up to 16 alphanumeric characters, not including spaces, underscores, and dashes. Domain Name Type a Domain name for your host VMG. Apply Click Apply to save your changes. Cancel Click Cancel to abandon this screen without saving. VMG3926-B10A User’s Guide...
Page 238: User Account
Click the Delete icon to remove the entry. 29.2.1 The User Account Add/Edit Screen Click Add New Account or the Edit icon of an existing account in the Maintenance > User Account to open the following screen. VMG3926-B10A User’s Guide...
Page 239 Retry Times. Group Specify whether this user will have Administrator or User privleges. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG3926-B10A User’s Guide...
Page 240 Chapter 29 User Account VMG3926-B10A User’s Guide...
Page 241: Remote Management
Select the Enable check box for the corresponding services that you want to allow access to the VMG from all WAN connections. Port You may change the server port number for a service if needed, however you must use the same port number in order to use that service for remote management. VMG3926-B10A User’s Guide...
Page 242: The Trust Domain Screen
Use this screen to configure a public IP address which is allowed to access the VMG. Click the Add Trust Domain button in the Maintenance > Remote MGMT > Turst Domain screen to open the following screen. Figure 143 Maintenance > Remote MGMT > Trust Domain > Add Trust Domain VMG3926-B10A User’s Guide...
Page 243 Enter a public IPv4 IP address which is allowed to access the service on the VMG from the WAN. Click OK to save your changes back to the VMG. Cancel Click Cancel to restore your previously saved settings. VMG3926-B10A User’s Guide...
Page 244 Chapter 30 Remote Management VMG3926-B10A User’s Guide...
Page 245: Chapter 31 Tr-064
The following table describes the fields in this screen. Table 114 Maintenance > TR-064 LABEL DESCRIPTION State Select Enable to activate management via TR-064 on the LAN. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG3926-B10A User’s Guide...
Page 246: Client
Select Enable for the VMG to send periodic inform via TR-069 on the WAN. Otherwise, select Disable. Inform Interval Enter the time interval (in seconds) at which the VMG sends information to the auto- configuration server. ACS URL Enter the URL or IP address of the auto-configuration server. VMG3926-B10A User’s Guide...
Page 247 You can choose a local certificate used by TR-069 client. The local certificate should be used by TR-069 imported in the Security > Certificates > Local Certificates screen. client Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG3926-B10A User’s Guide...
Page 248 Chapter 32 TR-069 Client VMG3926-B10A User’s Guide...
Page 249: Snmp
Examples of variables include such as number of packets received, node port status etc. A Management Information Base (MIB) is a collection of managed objects. SNMP allows a manager and agents to communicate for the purpose of accessing these objects. VMG3926-B10A User’s Guide...
Page 250 Enter the SNMP system contact. Trap Destination Type the IP address of the station to send your SNMP traps to. Apply Click this to save your changes back to the VMG. Cancel Click this to restore your previously saved settings. VMG3926-B10A User’s Guide...
Page 251: Time Settings
Each time you reload this page, the VMG synchronizes the time with the time server. Current Date This field displays the date of your VMG. Each time you reload this page, the VMG synchronizes the date with the time server. VMG3926-B10A User’s Guide...
Page 252 In Germany for instance, you would select 2 in the Hour field because Germany's time zone is one hour ahead of GMT or UTC (GMT+1). Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG3926-B10A User’s Guide...
Page 253: E-Mail Notification
Delete Click this button to delete the selected entry(ies). 35.2.1 Email Notification Edit Click the Add button in the Email Notification screen. Use this screen to configure the required information for sending e-mail via a mail server. VMG3926-B10A User’s Guide...
Page 254 If you activate SSL/TLS authentication, the e-mail address must be able to be authenticated by the mail server as well. Click this button to save your changes and return to the previous screen. Cancel Click this button to begin configuring this screen afresh. VMG3926-B10A User’s Guide...
Page 255: Log Setting
The following table describes the fields in this screen. Table 120 Maintenance > Logs Setting LABEL DESCRIPTION Syslog Setting Syslog Logging The VMG sends a log to an external syslog server. Select Enable to enable syslog logging. VMG3926-B10A User’s Guide...
Page 256: Example E-Mail Log
• You may edit the subject title. • The date format here is Day-Month-Year. • The date format here is Month-Day-Year. The time format is Hour-Minute-Second. • "End of Log" message shows that a complete log has been sent. VMG3926-B10A User’s Guide...
Page 257 |<1,02> 127|Apr 7 00 |From:192.168.1.131 To:192.168.1.255 |match |forward | 10:05:17 |UDP src port:00520 dest port:00520 |<1,02> 128|Apr 7 00 |From:192.168.1.1 To:192.168.1.255 |match |forward | 10:05:30 |UDP src port:00520 dest port:00520 |<1,02> End of Firewall Log VMG3926-B10A User’s Guide...
Page 258 Chapter 36 Log Setting VMG3926-B10A User’s Guide...
Page 259: Firmware Upgrade
Do NOT turn off the VMG while firmware upload is in progress! Figure 153 Maintenance > Firmware Upgrade The following table describes the labels in this screen. After you see the firmware updating screen, wait two minutes before logging into the VMG again. VMG3926-B10A User’s Guide...
Page 260 After two minutes, log in again and check your new firmware version in the Status screen. If the upload was not successful, the following screen will appear. Click OK to go back to the Firmware Upgrade screen. VMG3926-B10A User’s Guide...
Page 261 Chapter 37 Firmware Upgrade Figure 156 Error Message VMG3926-B10A User’s Guide...
Page 262 Chapter 37 Firmware Upgrade VMG3926-B10A User’s Guide...
Page 263: Backup Restore
The backup configuration file will be useful in case you need to return to your previous settings. Click Backup to save the VMG’s current configuration to your computer. VMG3926-B10A User’s Guide...
Page 264 If the upload was not successful, the following screen will appear. Click OK to go back to the Configuration screen. Figure 159 Configuration Upload Error Reset to Factory Defaults Click the Reset button to clear all user-entered configuration information and return the VMG to its factory defaults. The following warning screen appears. VMG3926-B10A User’s Guide...
Page 265: The Rom-D Screen
System restart allows you to reboot the VMG remotely without turning the power off. You may need to do this if the VMG hangs, for example. Click Maintenance > Reboot. Click Reboot to have the VMG reboot. This does not affect the VMG's configuration. Figure 163 Maintenance > Reboot VMG3926-B10A User’s Guide...
Page 266: Diagnostic
If an MEP port does not respond to the source MEP, this may indicate a fault. Administrators can take further action to check and resume services from the fault according to the line connectivity status report. VMG3926-B10A User’s Guide...
Page 267: Ping & Traceroute & Nslookup
Click this button to perform a DNS lookup on the IP address of a computer you enter. 39.4 802.1ag Click Maintenance > Diagnostic > 8.2.1ag to open the following screen. Use this screen to perform CFM actions. VMG3926-B10A User’s Guide...
Page 268: Oam Ping
OAM (Operation, Administration and Maintenance) F4 or F5 loopback test on a PVC. The VMG sends an OAM F4 or F5 packet to the DSLAM or ATM switch and then returns it to the VMG. The test result then displays in the text box. VMG3926-B10A User’s Guide...
Page 269 ATM device. End-to-end loopback tests allow you to verify integrity of an end-to-end PVC. Note: The DSLAM to which the VMG is connected must also support ATM F4 and/or F5 to use this test. Note: This screen is available only when you configure an ATM layer-2 interface. VMG3926-B10A User’s Guide...
Page 270 Press this to perform an OAM F4 segment loopback test. F4 end-end Press this to perform an OAM F4 end-to-end loopback test. F5 segment Press this to perform an OAM F5 segment loopback test. F5 end-end Press this to perform an OAM F5 end-to-end loopback test. VMG3926-B10A User’s Guide...
Page 271: Troubleshooting
Make sure you understand the normal behavior of the LED. See Section 1.5 on page Check the hardware connections. Inspect your cables for damage. Contact the vendor to replace any damaged cables. Turn the VMG off and on. VMG3926-B10A User’s Guide...
Page 272: Vmg Access And Login
Make sure your Internet browser does not block pop-up windows and has JavaScripts and Java enabled. If it is possible to log in from another interface, check the service control settings for HTTP and HTTPS (Maintenance > Remote MGMT). VMG3926-B10A User’s Guide...
Page 273 I cannot use FTP to upload / download the configuration file. / I cannot use FTP to upload new firmware. See the troubleshooting suggestions for I cannot see or access the Login screen in the web configurator. Ignore the suggestions about your browser. VMG3926-B10A User’s Guide...
Page 274: Internet Access
ADSL or VDSL connection at one time. I cannot connect to the Internet using an Ethernet connection. The DSL connection has priority. If the DSL connection is up, then the Ethernet connection will be down. VMG3926-B10A User’s Guide...
Page 275: Wireless Internet Access
If the problem continues, contact your vendor. 40.4 Wireless Internet Access What factors may cause intermittent or unstabled wireless connection? How can I solve this problem? The following factors may cause interference: • Obstacles: walls, ceilings, furniture, and so on. VMG3926-B10A User’s Guide...
Page 276: Usb Device Connection
Re-connect your USB device to the VMG. 40.6 UPnP When using UPnP and the VMG reboots, my computer cannot detect UPnP and refresh My Network Places > Local Network. VMG3926-B10A User’s Guide...
Page 277 Chapter 40 Troubleshooting Disconnect the Ethernet cable from the VMG’s LAN port or from your computer. Re-connect the Ethernet cable. The Local Area Connection icon for UPnP disappears in the screen. Restart your computer. VMG3926-B10A User’s Guide...
Page 278 Chapter 40 Troubleshooting VMG3926-B10A User’s Guide...
Page 279: Appendices
Appendices Appendices contain general information. Some information may not apply to your device.
Page 281: Appendix A Customer Support
• Brief description of the problem and the steps you took to solve it. Corporate Headquarters (Worldwide) Taiwan • ZyXEL Communications Corporation • http://www.zyxel.com Asia China • ZyXEL Communications (Shanghai) Corp. ZyXEL Communications (Beijing) Corp. ZyXEL Communications (Tianjin) Corp. • http://www.zyxel.cn India • ZyXEL Technology India Pvt Ltd • http://www.zyxel.in Kazakhstan •...
Page 282 • ZyXEL Singapore Pte Ltd. • http://www.zyxel.com.sg Taiwan • ZyXEL Communications Corporation • http://www.zyxel.com Thailand • ZyXEL Thailand Co., Ltd • http://www.zyxel.co.th Vietnam • ZyXEL Communications Corporation-Vietnam Office • http://www.zyxel.com/vn/vi Europe Austria • ZyXEL Deutschland GmbH • http://www.zyxel.de VMG3926-B10A User’s Guide...
Page 283 • ZyXEL BY • http://www.zyxel.by Belgium • ZyXEL Communications B.V. • http://www.zyxel.com/be/nl/ Bulgaria • ZyXEL България • http://www.zyxel.com/bg/bg/ Czech • ZyXEL Communications Czech s.r.o • http://www.zyxel.cz Denmark • ZyXEL Communications A/S • http://www.zyxel.dk Estonia • ZyXEL Estonia • http://www.zyxel.com/ee/et/ Finland •...
Page 284 • ZyXEL Communications Poland • http://www.zyxel.pl Romania • ZyXEL Romania • http://www.zyxel.com/ro/ro Russia • ZyXEL Russia • http://www.zyxel.ru Slovakia • ZyXEL Communications Czech s.r.o. organizacna zlozka • http://www.zyxel.sk Spain • ZyXEL Spain • http://www.zyxel.es Sweden • ZyXEL Communications • http://www.zyxel.se Switzerland •...
Page 285 • http://www.zyxel.com/ec/es/ Ecuador • ZyXEL Communication Corporation • http://www.zyxel.com/ec/es/ Middle East Egypt • ZyXEL Communication Corporation • http://www.zyxel.com/homepage.shtml Middle East • ZyXEL Communication Corporation • http://www.zyxel.com/homepage.shtml North America • ZyXEL Communications, Inc. - North America Headquarters • http://www.us.zyxel.com/ VMG3926-B10A User’s Guide...
Page 286 Appendix A Customer Support Oceania Australia • ZyXEL Communications Corporation • http://www.zyxel.com/au/en/ Africa South Africa • Nology (Pty) Ltd. • http://www.zyxel.co.za VMG3926-B10A User’s Guide...
Page 287: Appendix B Wireless Lans
Intra-BSS traffic is traffic between wireless clients in the BSS. When Intra-BSS is enabled, wireless client A and B can access the wired network and communicate with each other. When Intra-BSS is disabled, wireless client A and B can still access the wired network but cannot communicate with each other. VMG3926-B10A User’s Guide...
Page 288 An ESSID (ESS IDentification) uniquely identifies each ESS. All access points and their associated wireless clients within the same ESS must have the same ESSID in order to communicate. VMG3926-B10A User’s Guide...
Page 289 (AP) or wireless gateway, but out-of-range of each other, so they cannot "hear" each other, that is they do not know if the channel is currently being used. Therefore, they are considered hidden from each other. VMG3926-B10A User’s Guide...
Page 290 If the Fragmentation Threshold value is smaller than the RTS/CTS value (see previously) you set then the RTS (Request To Send)/CTS (Clear to Send) handshake will never occur as data frames will be fragmented before they reach RTS/CTS size. VMG3926-B10A User’s Guide...
Page 291 It is supported by Windows XP and a number of network devices. Some advantages of IEEE 802.1x are: • User based identification that allows for roaming. VMG3926-B10A User’s Guide...
Page 292 In order to ensure network security, the access point and the RADIUS server use a shared secret key, which is a password, they both know. The key is not sent over the network. In addition to the VMG3926-B10A User’s Guide...
Page 293 Client authentication is then done by sending username and password through the secure connection, thus client identity is protected. For client authentication, EAP-TTLS supports EAP methods and legacy authentication methods such as PAP, CHAP, MS-CHAP and MS-CHAP v2. VMG3926-B10A User’s Guide...
Page 294 Key differences between WPA or WPA2 and WEP are improved data encryption and user authentication. If both an AP and the wireless clients support WPA2 and you have an external RADIUS server, use WPA2 for stronger data encryption. If you don't have an external RADIUS server, you should use VMG3926-B10A User’s Guide...
Page 295 RADIUS database. WPA2 reduces the number of key exchange messages from six to four (CCMP 4-way handshake) and shortens the time required to connect to a network. Other WPA2 authentication features that are different from WPA include key caching and VMG3926-B10A User’s Guide...
Page 296 The RADIUS server distributes the PMK to the AP. The AP then sets up a key hierarchy and management system, using the PMK to dynamically generate unique data encryption keys. The keys are used to encrypt every data packet that is wirelessly communicated between the AP and the wireless clients. VMG3926-B10A User’s Guide...
Page 297 The AP and wireless clients use the TKIP or AES encryption process, the PMK and information exchanged in a handshake to create temporal encryption keys. They use these keys to encrypt data exchanged between them. Figure 173 WPA(2)-PSK Authentication VMG3926-B10A User’s Guide...
Page 298: Security Parameters Summary
Antenna gain, measured in dB (decibel), is the increase in coverage within the RF beam width. Higher antenna gain improves the range of the signal for better communications. For an indoor site, each 1 dB increase in antenna gain results in a range increase of approximately VMG3926-B10A User’s Guide...
Page 299 For a single AP application, place omni-directional antennas as close to the center of the coverage area as possible. For directional antennas, point the antenna in the direction of the desired coverage area. VMG3926-B10A User’s Guide...
Page 300 Appendix B Wireless LANs VMG3926-B10A User’s Guide...
Page 301: Appendix C Ipv6
“private IP address” in IPv4. You can have the same link-local address on multiple interfaces on a device. A link-local unicast address has a predefined prefix of fe80::/10. The link-local unicast address format is as follows. Table 130 Link-local Unicast Address Format 1111 1110 10 Interface ID 10 bits 54 bits 64 bits VMG3926-B10A User’s Guide...
Page 302 All DHCP severs on a local site. FF05:0:0:0:0:0:1:3 The following table describes the multicast addresses which are reserved and can not be assigned to a multicast group. Table 132 Reserved Multicast Address MULTICAST ADDRESS FF00:0:0:0:0:0:0:0 FF01:0:0:0:0:0:0:0 FF02:0:0:0:0:0:0:0 FF03:0:0:0:0:0:0:0 FF04:0:0:0:0:0:0:0 FF05:0:0:0:0:0:0:0 FF06:0:0:0:0:0:0:0 FF07:0:0:0:0:0:0:0 VMG3926-B10A User’s Guide...
Page 303 DHCPv6 server uses T1 and T2 to control the time at which the client contacts with the server to extend the lifetimes on any addresses in the IA_NA before the lifetimes expire. After T1, the client sends the server (S1) (from which the addresses in the IA_NA were obtained) a Renew message. If VMG3926-B10A User’s Guide...
Page 304 • Neighbor solicitation: A request from a host to determine a neighbor’s link-layer address (MAC address) and detect if the neighbor is still reachable. A neighbor being “reachable” means it responds to a neighbor solicitation message (from the host) with a neighbor advertisement message. VMG3926-B10A User’s Guide...
Page 305 Done message to the router or switch. The router or switch then sends a group-specific query to the port on which the Done message is received to determine if other devices connected to this port should remain in the group. VMG3926-B10A User’s Guide...
Page 306 Install Dibbler and select the DHCPv6 client option on your computer. After the installation is complete, select Start > All Programs > Dibbler-DHCPv6 > Client Install as service. Select Start > Control Panel > Administrative Tools > Services. Double click Dibbler - a DHCPv6 client. VMG3926-B10A User’s Guide...
Page 307 Windows 7 supports IPv6 by default. DHCPv6 is also enabled when you enable IPv6 on a Windows 7 computer. To enable IPv6 in Windows 7: Select Control Panel > Network and Sharing Center > Local Area Connection. Select the Internet Protocol Version 6 (TCP/IPv6) checkbox to enable it. Click OK to save the change. VMG3926-B10A User’s Guide...
Page 308 IPv4 Address... : 172.16.100.61 Subnet Mask ... : 255.255.255.0 Default Gateway ..: fe80::213:49ff:feaa:7125%11 172.16.100.254 VMG3926-B10A User’s Guide...
Page 309: Appendix D Services
• If the Protocol is TCP, UDP, or TCP/UDP, this is the IP port number. • If the Protocol is USER, this is the IP protocol number. • Description: This is a brief explanation of the applications that use this service or the situations in which this service is used. VMG3926-B10A User’s Guide...
Page 310 Microsoft Networks’ messenger service uses this protocol. NetBIOS TCP/UDP The Network Basic Input/Output System is used for communication between computers in a LAN. TCP/UDP TCP/UDP TCP/UDP NEW-ICQ 5190 An Internet chat program. NEWS A protocol for news groups. VMG3926-B10A User’s Guide...
Page 311 UNIX systems and network servers. SSDP 1900 The Simple Service Discovery Protocol supports Universal Plug-and-Play (UPnP). TCP/UDP Secure Shell Remote Login Program. STRM WORKS 1558 Stream Works Protocol. VMG3926-B10A User’s Guide...
Page 312 Internet and in UNIX environments. It operates over TCP/IP networks. Its primary function is to allow users to log into remote host systems. VDOLIVE 7000 A videoconferencing solution. The UDP port number is specified in the application. user- defined VMG3926-B10A User’s Guide...
Page 313 Appendix D Services VMG3926-B10A User’s Guide...
Page 314: Appendix E Legal Information
The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation. All rights reserved.
Page 315 Hrvatski ZyXEL ovime izjavljuje da je radijska oprema tipa u skladu s Direktivom 1999/5/EC. (Croatian) Íslenska Hér með lýsir, ZyXEL því yfir að þessi búnaður er í samræmi við grunnkröfur og önnur viðeigandi ákvæði tilskipunar (Icelandic) 1999/5/EC. VMG3926-B10A User’s Guide...
Page 316 Italia. Se non viene installato all 'interno del proprio fondo, l'utilizzo di prodotti Wireless LAN richiede una “Autorizzazione Generale”. Consultare http://www.sviluppoeconomico.gov.it/ per maggiori dettagli. Latvia The outdoor usage of the 2.4 GHz band requires an authorization from the Electronic Communications Office. Please check http:// www.esd.lv for more details. VMG3926-B10A User’s Guide...
Page 317: Safety Warnings
FOR COUNTRY CODE SELECTION USAGE (WLAN DEVICES) Note: The country code selection is for non-US model only and is not available to all US model. Per FCC regulation, all Wi-Fi product marketed in US must fixed to US operation channels only. VMG3926-B10A User’s Guide...
Page 318 Lo smaltimento abusivo del prodotto da parte del detentore comporta l’applicazione delle sanzioni amministrative previste dalla normativa vigente." VMG3926-B10A User’s Guide...
Page 319 Appendix E Legal Information Environmental Product Declaration VMG3926-B10A User’s Guide...
Page 320 You can download the latest firmware at www.zyxel.com. If you cannot find it there, contact your vendor or ZyXEL Technical Support at support@zyxel.com.tw. To obtain the source code covered under those Licenses, please contact your vendor or ZyXEL Technical Support at support@zyxel.com.tw. VMG3926-B10A User’s Guide...
Page 321: Index
CCMs link trace test Auto Configuration Server, see ACS loopback test channel backup interference configuration channel, wireless LAN Basic Service Set, See BSS CHAP Basic Service Set, see BSS client list blinking LEDs compatibility, WDS Broadband configuration VMG3926-B10A User’s Guide...
Page 322 DNS server address assignment Ping of Death Domain Name SYN attack Domain Name System, see DNS firmware Domain Name System. See DNS. version forwarding ports DS field fragmentation threshold 102, 106, 290 DS, dee differentiated services 160, 173 VMG3926-B10A User’s Guide...
Page 323 Internet Protocol version 6, see IPv6 IP address 120, 133 ping private IP Address Assignment IP alias NAT applications IPv6 MAC address 63, 301 addressing filter 63, 86, 301 EUI-64 Mac filter global address Maintenance Association, see MA interface ID VMG3926-B10A User’s Guide...
Page 324 141, 155 port forwarding marking port number setup services tagging SIP ALG versus CoS activation Quality of Service, see QoS NAT example Network Address Translation, see NAT Network Map network map NNTP RADIUS message types VMG3926-B10A User’s Guide...
Page 325 81, 136, 137, 176 wireless LAN Simple Network Management Protocol, see SNMP time Single Rate Three Color Marker, see srTCM SIP ALG activation SMTP SNMP 173, 249, 250 Tag Control Information See TCI agents Tag Protocol Identifier See TPID VMG3926-B10A User’s Guide...
Page 326 102, 106 security Virtual Local Area Network See VLAN SSID VLAN activation Introduction status number of possible VIDs 100, 110 priority frame compatibility static example VLAN ID VLAN Identifier See VID VLAN tag WPA-PSK 110, 113 example VMG3926-B10A User’s Guide...
Page 327 RADIUS application example WPA2 user authentication vs WPA2-PSK wireless client supplicant with RADIUS application example WPA2-Pre-Shared Key WPA2-PSK application example WPA-PSK 108, 295 application example 110, 113 example limitations example push button 22, 111 VMG3926-B10A User’s Guide...

This manual is also suitable for:

Vmg3925-b10a

ZyXEL Communications VMG3926-B10A User Manual

Contents Overview

Table of Contents

User's Guide

PART I User's Guide

Chapter 1 Introducing the VMG

Chapter 2 The Web Configurator

Chapter 3 Quick Start

Chapter 4 Tutorials

Technical Reference

Part II: Technical Reference

Chapter 5 Network Map and Status Screens

Chapter 6 Broadband

Chapter 7 Wireless

Chapter 8 Home Networking

Chapter 9

Routing

Chapter 10 Quality of Service (Qos)

Chapter 11 Network Address Translation (NAT)

Chapter 12 Dynamic DNS Setup

Chapter 13 Vlan Group

Chapter 14 Interface Group

Chapter 15 USB Service

Chapter 16 Firewall

Chapter 17 MAC Filter

Chapter 18 Parental Control

Chapter 19 Scheduler Rule

Chapter 20 Certificates

Chapter 21 Log

Chapter 22 Traffic Status

Chapter 23 ARP Table

Chapter 24 Routing Table

Chapter 25 Multicast Status

Chapter 26 Xdsl Statistics

Chapter 27 3G Statistics

Chapter 28 System

Chapter 29 User Account

Chapter 30 Remote Management

Chapter 31 TR-064

Chapter 32 Client

Chapter 33 SNMP

Chapter 34 Time Settings

Chapter 35 E-Mail Notification

Chapter 36 Log Setting

Chapter 37 Firmware Upgrade

Quick Links

Need help?

Questions and answers

Subscribe to Our Youtube Channel

Related Manuals for ZyXEL Communications VMG3926-B10A

Summary of Contents for ZyXEL Communications VMG3926-B10A