Page 1 VMG1312-B Series Wireless N VDSL2 4-port Gateway with USB Version 1.00 Edition 2, 08/2015 Quick Start Guide User’s Guide Default Login Details LAN IP Address http://192.168.1.1 Login supervisor, admin, zyuser www.zyxel.com Password zyad1234, 1234, 1234 Copyright © 2015 ZyXEL Communications Corporation...
Page 2 Every effort has been made to ensure that the information in this manual is accurate. Related Documentation • Quick Start Guide The Quick Start Guide shows how to connect the Device and get up and running right away. VMG1312-B Series User’s Guide...
Page 3: Table Of Contents
Log ...............................243 Traffic Status ............................247 ARP Table .............................251 Routing Table ............................253 IGMP/MLD Status ..........................255 xDSL Statistics ............................257 3G Statistics ............................261 User Account ............................263 Remote Management ..........................265 TR-069 Client ............................269 TR-064 ..............................271 SNMP ..............................273 Time Settings ............................275 VMG1312-B Series User’s Guide...
Page 4 Contents Overview E-mail Notification ..........................277 Log Setting ............................279 Firmware Upgrade ..........................283 Configuration ............................287 Diagnostic .............................290 Troubleshooting ............................295 Appendices ............................303 VMG1312-B Series User’s Guide...
Page 5: Table Of Contents
2.2.3 Navigation Panel ........................26 Chapter 3 Quick Start............................31 3.1 Overview ............................31 3.2 Quick Start Setup ..........................31 Chapter 4 Tutorials ...............................33 4.1 Overview ............................33 4.2 Setting Up an ADSL PPPoE Connection ..................33 4.3 Setting Up a Secure Wireless Network .....................36 VMG1312-B Series User’s Guide...
Page 6 6.5 The 802.1x Screen ..........................87 6.5.1 Modify 802.1X Settings ......................88 6.6 The Ethernet WAN Screen ........................88 6.7 Technical Reference ..........................89 Chapter 7 Wireless ...............................95 7.1 Overview ............................95 7.1.1 What You Can Do in this Chapter ....................95 VMG1312-B Series User’s Guide...
Page 7 8.6 The STB Vendor ID Screen ......................138 8.6.1 The Add/Edit STB Vendor ID Screen ..................138 8.7 The TFTP Server Name Screen .....................139 8.8 Technical Reference ........................140 8.8.1 LANs, WANs and the Device ....................140 8.8.2 DHCP Setup ..........................140 8.8.3 DNS Server Addresses ......................140 VMG1312-B Series User’s Guide...
Page 8 11.3.1 Add New Application ......................174 11.4 The Port Triggering Screen ......................175 11.4.1 Add/Edit Port Triggering Rule .....................176 11.5 The DMZ Screen ...........................177 11.6 The ALG Screen ..........................178 11.7 The Address Mapping Screen .......................179 11.7.1 Add/Edit Address Mapping Rule ..................180 VMG1312-B Series User’s Guide...
Page 9 15.2.1 Interface Group Configuration .....................198 15.2.2 Interface Grouping Criteria ....................200 Chapter 16 USB Service ............................203 16.1 Overview ............................203 16.1.1 What You Can Do in this Chapter ..................203 16.1.2 What You Need To Know .....................203 16.1.3 Before You Begin .........................205 VMG1312-B Series User’s Guide...
Page 10 19.1 Overview ............................225 19.2 The MAC Filter Screen ........................225 Chapter 20 Parental Control ..........................227 20.1 Overview ............................227 20.2 The Parental Control Screen ......................227 20.2.1 Add/Edit a Parental Control Profile ..................228 Chapter 21 Scheduler Rule..........................233 21.1 Overview ............................233 VMG1312-B Series User’s Guide...
Page 11 Chapter 25 ARP Table ............................251 25.1 Overview ............................251 25.1.1 How ARP Works ........................251 25.2 ARP Table Screen .........................252 Chapter 26 Routing Table ............................253 26.1 Overview ............................253 26.2 The Routing Table Screen ......................253 Chapter 27 IGMP/MLD Status ..........................255 VMG1312-B Series User’s Guide...
Page 12 32.2 The TR-069 Client Screen ......................269 Chapter 33 TR-064..............................271 33.1 Overview ............................271 33.2 The TR-064 Screen ........................271 Chapter 34 SNMP ..............................273 34.1 Overview ............................273 34.2 The SNMP Screen ........................273 Chapter 35 Time Settings ............................275 35.1 Overview ............................275 VMG1312-B Series User’s Guide...
Page 13 40.5 OAM Ping ............................292 Chapter 41 Troubleshooting..........................295 41.1 Power, Hardware Connections, and LEDs ..................295 41.2 Device Access and Login ......................296 41.3 Internet Access ..........................298 41.4 Wireless Internet Access .......................299 41.5 USB Device Connection ........................300 41.6 UPnP .............................300 VMG1312-B Series User’s Guide...
Page 14 Table of Contents Part III: Appendices ..................303 Appendix A Customer Support ......................305 Appendix B Wireless LANs......................311 Appendix C IPv6 ..........................325 Appendix D Services ........................333 Appendix E Legal Information......................338 Index ..............................345 VMG1312-B Series User’s Guide...
Page 15: User's Guide
User’s Guide...
Page 17: Introducing The Device
Introducing the Device 1.1 Overview The VMG1312-B Series is a wireless VDSL router and Gigabit Ethernet gateway. It has a DSL port and a Gigabit Ethernet port for super-fast Internet access. The Device supports both Packet Transfer Mode (PTM) and Asynchronous Transfer Mode (ATM). It is backward compatible with ADSL, ADSL2 and ADSL2+ in case VDSL is not available.
Page 18: Applications For The Device
This means that probes from the outside to your network are not allowed, but you can safely browse the Internet and download files. 1.4.2 Device’s USB Support The USB port of the Device is used for file-sharing, media server and printer-sharing. VMG1312-B Series User’s Guide...
Page 19 The Device allows you to share a USB printer on your LAN. You can do this by connecting a USB printer to one of the USB ports on the Device and then configuring a TCP/IP port on the computers connected to your network. VMG1312-B Series User’s Guide...
Page 20: Leds (Lights)
The Device has a successful 100 Mbps Ethernet connection with a device on the Local Area Network (LAN). Blinking The Device is sending or receiving data to/from the LAN at 100 Mbps. The Device does not have an Ethernet connection with the LAN. VMG1312-B Series User’s Guide...
Page 21: The Reset Button
1.7 Wireless Access The Device is a wireless Access Point (AP) for wireless clients, such as notebook computers or PDAs and iPads. It allows them to connect to the Internet without having to rely on inconvenient Ethernet cables. VMG1312-B Series User’s Guide...
Page 22: Using The Wlan/Wps Button
Once the connection is successfully made, the WLAN/WPS LED shines green. To turn off the wireless network, press the WLAN/WPS button on the front of the Device for one to five seconds. The WLAN/WPS LED turns off when the wireless network is off. VMG1312-B Series User’s Guide...
Page 23: The Web Configurator
Enter a new password, retype it to confirm and click Apply; alternatively click Skip to proceed to the main menu if you do not want to change the password now. VMG1312-B Series User’s Guide...
Page 24 After you finished or closed the Quick Start Wizard screen, the Network Map page appears. Figure 9 Network Map Click Status to display the Status screen, where you can view the Device’s interface and system information. VMG1312-B Series User’s Guide...
Page 25: Web Configurator Layout
Language: Select the language you prefer. Quick Start: Click this icon to open screens where you can configure the Device’s time zone Internet access, and wireless settings. Logout: Click this icon to log out of the web configurator. VMG1312-B Series User’s Guide...
Page 26: Main Window
Use this screen to view and configure the IEEE 802.1x settings on the Device. Ethernet WAN Use this screen to convert Ethernet LAN 4 port as WAN port, or restore the WAN port to LAN port. VMG1312-B Series User’s Guide...
Page 27 Use this screen to enable or disable SIP ALG. Address Mapping Use this screen to change your Device’s address mapping settings. Sessions Use this screen to configure the maximum number of NAT sessions each client host is allowed to have through the Device. VMG1312-B Series User’s Guide...
Page 28 Certificates Local Certificates Use this screen to view a summary list of certificates and manage certificates and certification requests. Trusted CA Use this screen to view and manage the list of the trusted CAs. System Monitor VMG1312-B Series User’s Guide...
Page 29 Use this screen to view the status of all IGMP/MLD settings on the Group Status Device. xDSL Statistics Use this screen to view the VMG1312-B Series’s xDSL traffic statistics. 3G Statistics Use this screen to look at 3G Internet connection status.
Page 30 Use this screen to configure CFM (Connectivity Fault Management) MD (maintenance domain) and MA (maintenance association), perform connectivity tests and view test reports. OAM Ping Use this screen to view information to help you identify problems with the DSL connection. VMG1312-B Series User’s Guide...
Page 31: Quick Start
Click Next. Figure 12 Quick Start - Welcome Enter your Internet connection information in this screen. The screen and fields to enter may vary depending on your current connection type. Click Next. VMG1312-B Series User’s Guide...
Page 32 Turn the wireless LAN on or off. If you keep it on, record the security settings so you can configure your wireless clients to connect to the Device. Click Save. Figure 14 Quick Start - Wireless Your Device saves your settings and attempts to connect to the Internet. VMG1312-B Series User’s Guide...
Page 33: Tutorials
Broadband screens. Click Network Setting > Broadband to open the following screen. Click Add New WAN Interface. In this example, the DSL connection has the following information. General Name MyDSLConnection VMG1312-B Series User’s Guide...
Page 34 Then select DNS as Static and enter the DNS server addresses provided to you, such as 192.168.5.2 (DNS server1)/192.168.5.1 (DNS server2). Leave the rest of the fields to the default settings. Click Apply to save your settings. VMG1312-B Series User’s Guide...
Page 35 Chapter 4 Tutorials VMG1312-B Series User’s Guide...
Page 36: Setting Up A Secure Wireless Network
802.11b/g/n Mixed Click Network Setting > Wireless to open the General screen. Select More Secure as the security level and WPA2-PSK as the security mode. Configure the screen using the provided parameters (see page 36). Click Apply. VMG1312-B Series User’s Guide...
Page 37: Using Wps
This section shows you how to set up a wireless network using WPS. It uses the Device as the AP and ZyXEL NWD210N as the wireless client which connects to the notebook. Note: The wireless client must be a WPS-aware device (for example, a WPS USB adapter or PCMCIA card). VMG1312-B Series User’s Guide...
Page 38 Both buttons have exactly the same function: you can use one or the other. Note: It doesn’t matter which button is pressed first. You must press the second button within two minutes of pressing the first one. VMG1312-B Series User’s Guide...
Page 39 Launch your wireless client’s configuration utility. Go to the WPS settings and select the PIN method to get a PIN number. Log into Device’s web configurator and go to the Network Setting > Wireless > WPS screen. Enable the WPS function and click Apply. VMG1312-B Series User’s Guide...
Page 40 This may take up to two minutes. The wireless client is then able to communicate with the Device securely. The following figure shows you how to set up a wireless network and its security on a Device and a wireless client by using PIN method. VMG1312-B Series User’s Guide...
Page 41: Without Wps
“DoNotStealMyWirelessNetwork” pre-shared key to establish an wireless Internet connection. Note: The Device supports IEEE 802.11b and IEEE 802.11g wireless clients. Make sure that your notebook or computer’s wireless adapter supports one of these standards. VMG1312-B Series User’s Guide...
Page 42: Setting Up Multiple Wireless Groups
Pre-Shared Key ForCompanyOnly 123456789 guest123 Click Network Setting > Wireless to open the General screen. Use this screen to set up the company’s general wireless network group. Configure the screen using the provided parameters and click Apply. VMG1312-B Series User’s Guide...
Page 43 Chapter 4 Tutorials Click Network Setting > Wireless > Guest/More AP to open the following screen. Click the Edit icon to configure the second wireless network group. Configure the screen using the provided parameters and click Apply. VMG1312-B Series User’s Guide...
Page 44 Chapter 4 Tutorials In the Guest/More AP screen, click the Edit icon to configure the third wireless network group.Configure the screen using the provided parameters and click Apply. VMG1312-B Series User’s Guide...
Page 45: Configuring Static Route For Routing To Another Network
In order to extend your Intranet and control traffic flowing directions, you may connect a router to the Device’s LAN. The router may be used to separate two department networks. This tutorial shows how to configure a static routing rule for two network routings. VMG1312-B Series User’s Guide...
Page 46 B. This tutorial uses the following example IP settings: Table 4 IP Settings in this Tutorial DEVICE / COMPUTER IP ADDRESS The Device’s WAN 172.16.1.1 The Device’s LAN 192.168.1.1 IP Type IPv4 Use Interface VDSL/ppp1.1 192.168.1.34 VMG1312-B Series User’s Guide...
Page 47: Configuring Qos Queue And Class Setup
Now B should be able to receive traffic from A. You may need to additionally configure B’s firewall settings to allow specific traffic to pass through. 4.6 Configuring QoS Queue and Class Setup This section contains tutorials on how you can configure the QoS screen. VMG1312-B Series User’s Guide...
Page 48 Click Apply. Tutorial: Advanced > QoS Click Queue Setup > Add new Queue to create a new queue. In the screen that opens, check Active and enter or select the following values: • Name: E-mail VMG1312-B Series User’s Guide...
Page 49 • Rate Limit: 5,000 (kbps) Tutorial: Advanced > QoS > Queue Setup Click Class Setup > Add new Classifier to create a new class. Check Active and follow the settings as shown in the screen below. VMG1312-B Series User’s Guide...
Page 50 Type the MAC address of your computer - AA:FF:AA:FF:AA:FF. Type the MAC Mask if you know it. To Queue Link this to an item in the Network Setting > QoS > Queue Setup screen, which is the E- Index mail queue created in this example. VMG1312-B Series User’s Guide...
Page 51: Access The Device Using Ddns
• IP Address: Enter the WAN IP address that your Device is currently using. You can find the IP address on the Device’s Web Configurator Status page. Then you will need to configure the same account and host name on the Device later. VMG1312-B Series User’s Guide...
Page 52: Configuring Ddns On Your Device
Josephine’s computer connects wirelessly to the Internet through the Device. Thomas decides to use the Security > MAC Filter screen to grant wireless network access to his computer but not to Josephine’s computer. VMG1312-B Series User’s Guide...
Page 53: Access Your Shared Files From A Computer
However, Josephine and others not listed in this screen will no longer be able to access the Internet through the Device. 4.9 Access Your Shared Files From a Computer Here is how to use an FTP program to access a file storage device connected to the Device’s USB port. VMG1312-B Series User’s Guide...
Page 54: Using The Print Server Feature
The Device allows you to share a USB printer on your LAN. You can do this by connecting a USB printer to one of the USB ports on the Device and then adding the printer on the computers connected to your network. VMG1312-B Series User’s Guide...
Page 55 Click Start > Control Panel > Devices and Printers to open the Devices and Printers screen. Click Add a printer. Tutorial: Printers Folder The Add Printer wizard screen displays. Click Add a network, wireless or Bluetooth printer. VMG1312-B Series User’s Guide...
Page 56 Select the Select a shared printer by name option. Enter the URL for your printer, http:// 192.168.1.1:631/printers/USB_PRINTER, in this example. This URL can be found in the Device’s Web Configurator on the Network Setting > USB Service > Printer Server screen. Click Next. VMG1312-B Series User’s Guide...
Page 57 Proceed to step to continue. If the Print Center icon is not in the Macintosh Dock, proceed to the next step. On your desktop, double-click the Macintosh HD icon to open the Macintosh HD window. Tutorial: Macintosh HD VMG1312-B Series User’s Guide...
Page 58 Set up your printer in the Printer List configuration screen. Select IP Printing from the drop- down list box. In the Printer’s Address field, type the IP address of your Device. Deselect the Use default queue on server check box. 10 Type LP1 in the Queue Name field. VMG1312-B Series User’s Guide...
Page 59 13 The Name LP1 on 192.168.1.1 displays in the Printer List field. The default printer Name displays in bold type. Tutorial: Print Server Your Macintosh print server driver setup is complete. You can now use the Device’s print server to print from a Macintosh computer. VMG1312-B Series User’s Guide...
Page 60 Chapter 4 Tutorials VMG1312-B Series User’s Guide...
Page 61: Technical Reference
Technical Reference...
Page 63: Network Map And Status Screens
5.2 The Network Map Screen Use this screen to view the network connection status of the device and its clients. A warning message appears if there is a connection problem. Figure 15 Network Map: Icon View Mode VMG1312-B Series User’s Guide...
Page 64: The Status Screen
This field displays the Device system name. It is used for identification. Model Number This shows the model number of your Device. Serial Number This shows the unique serial number of your Device. Firmware This is the current version of the firmware inside the Device. Version VMG1312-B Series User’s Guide...
Page 65 Device starts up when you plug it in, when you restart it (Maintenance > Reboot), or when you reset it. Current Date/ This field displays the current date and time in the Device. You can change this in Time Maintenance> Time Setting. System Resource VMG1312-B Series User’s Guide...
Page 66 For the WLAN interface, it displays the maximum transmission rate or N/A with WLAN disabled. For the 3G USB interface, this field displays Up when a 3G USB device is installed in a USB slot and NoDevice when no device is detected in any USB slot. VMG1312-B Series User’s Guide...
Page 67: Broadband
6.5 on page 87). • Use the Ethernet WAN screen to convert LAN port number four as a WAN port or restore the WAN to a LAN port (Section 6.6 on page 88). This is for Ethernet connection. VMG1312-B Series User’s Guide...
Page 68: What You Need To Know
Asynchronous Transfer Mode (ATM) is a WAN networking technology that provides high-speed data transfer. ATM uses fixed-size packets of information called cells. With ATM, a high QoS (Quality of Service) can be guaranteed. ATM uses a connection-oriented model and establishes a virtual circuit (VC) between Finding Out More VMG1312-B Series User’s Guide...
Page 69 16-bit blocks and written in hexadecimal notation. Hexadecimal uses four bits for each character (1 ~ 10, A ~ F). Each block’s 16 bits are then represented by four hexadecimal characters. For example, FFFF:FFFF:FFFF:FFFF:FC00:0000:0000:0000. VMG1312-B Series User’s Guide...
Page 70 Transition Router (AFTR in the graphic) to connect to the IPv4 Internet. The local network can also use IPv6 services. The Device uses it’s configured IPv6 WAN IP to route IPv6 traffic to the IPv6 Internet. VMG1312-B Series User’s Guide...
Page 71: Before You Begin
Click this button to create a new connection. Interface This is the index number of the entry. Name This is the service name of the connection. Type This shows whether it is an ATM, Ethernet or a PTM connection. VMG1312-B Series User’s Guide...
Page 72 This shows whether Multicast Listener Discovery (MLD) is activated or not for this connection. MLD is not available when the connection uses the bridging service. Modify Click the Edit icon to configure the WAN connection. Click the Delete icon to remove the WAN connection. VMG1312-B Series User’s Guide...
Page 73: Add/Edit Internet Connection
The following example screen displays when you select the ADSL/VDSL over ATM connection type, Routing mode, and PPPoE encapsulation. The screen varies when you select other interface type, encapsulation, and IPv6/IPv4 mode. Figure 22 Network Setting > Broadband > Add New WAN Interface/Edit (Routing Mode) VMG1312-B Series User’s Guide...
Page 74 PDU to identify the PDUs. The LCC header can be followed by an IEEE 802.1a SubNetwork Attachment Point (SNAP) header. This is available only when you select IPoA in the Encapsulation field. VMG1312-B Series User’s Guide...
Page 75 Disable PPPoE pass through if you do not need to allow hosts on the LAN to use PPPoE client software on their computers to connect to the ISP. IP Address (This is available only when you select IPv4 Only or IPv6/IPv4 DualStack in the IPv6/IPv4 Mode field.) VMG1312-B Series User’s Guide...
Page 76 Select Use Following Static DNS Address if you want the Device to use the DNS server addresses you configure manually. DNS Server1 Enter the first DNS server address assigned by the ISP. DNS Server 2 Enter the second DNS server address assigned by the ISP. VMG1312-B Series User’s Guide...
Page 77 It can reduce multicast traffic significantly. Apply as Select this option to have the Device use the WAN interface of this connection as the system Default default gateway. Gateway IPv6 DNS Configure the IPv6 DNS server in the following section. Server VMG1312-B Series User’s Guide...
Page 78: Bridge Mode
Select Bridge as the encapsulation mode. The screen varies depending on the interface type you select. If you select ADSL/VDSL over PTM as the interface type, the following screen appears. VMG1312-B Series User’s Guide...
Page 79 Rate Limit Enter the rate limit for the connection. This is the maximum transmission rate allowed for traffic on this connection. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG1312-B Series User’s Guide...
Page 80: The 3G Backup Screen
WAN connection. The Device automatically uses a wired WAN connection when available. Note: This Device supports connecting one 3G dongle at a time. Figure 24 Internet Access Application: 3G WAN Use this screen to configure your 3G settings. Click Network Setting > Broadband > 3G Backup. VMG1312-B Series User’s Guide...
Page 81 Select this to have the Device ping the particular host name or IP address you typed in this field. 3G Connection Settings Card This field displays the manufacturer and model name of your 3G card if you inserted one in description the Device. Otherwise, it displays N/A. VMG1312-B Series User’s Guide...
Page 82 Maintenance > Email Notification screen. 3G backup Type a title that you want to be in the subject line of the e-mail notifications that the Device Send Email sends. Title VMG1312-B Series User’s Guide...
Page 83 Select Keep to maintain an existing 3G connection or Drop to disconnect it. connection Actions Enable Email Select this to enable the e-mail notification function. The Device will e-mail you a Notification notification when there over budget occurs. VMG1312-B Series User’s Guide...
Page 84: The Advanced Screen
8.832 2048 4.3125 20.5 1972 4.3125 11.5 8.832 2048 4.3125 14.5 2783 4.3125 14.5 2783 4.3125 14.5 17.664 4096 4.3125 14.5 3479 8.625 14.5 Click Network Setting > Broadband > Advanced to display the following screen. VMG1312-B Series User’s Guide...
Page 85 ITU G.992.1 (better known as G.dmt) is an ITU standard for ADSL using discrete multitone modulation. G.dmt full-rate ADSL expands the usable bandwidth of existing copper telephone lines, delivering high-speed data communications at rates up to 8 Mbit/s downstream and 1.3 Mbit/s upstream. VMG1312-B Series User’s Guide...
Page 86 The Device must comply with at least one profile specified in G.993.2. but compliance with more than one profile is allowed. Apply Click Apply to save your changes back to the Device. Cancel Click Cancel to return to the previous configuration. VMG1312-B Series User’s Guide...
Page 87: The 802.1X Screen
This shows the Trusted CA used for this authentication. This displays N/A when there is no Trusted CA assigned. Modify Click this icon to edit an item. Apply Click Apply to save your changes back to the Device. Cancel Click Cancel to return to the previous configuration. VMG1312-B Series User’s Guide...
Page 88: Modify 802.1X Settings
6.6 The Ethernet WAN Screen Use the Ethernet WAN screen to convert LAN port number four as a WAN port and to restore it back from a WAN to a LAN port for Ethernet Internet access. VMG1312-B Series User’s Guide...
Page 89: Technical Reference
Encapsulation Be sure to use the encapsulation method required by your ISP. The Device can work in bridge mode or routing mode. When the Device is in routing mode, it supports the following methods. VMG1312-B Series User’s Guide...
Page 90 ATM virtual circuit (VC-based multiplexing). Please refer to RFC 1483 for more detailed information. Multiplexing There are two conventions to identify what protocols the virtual circuit (VC) is carrying. Be sure to use the multiplexing method required by your ISP. VC-based Multiplexing VMG1312-B Series User’s Guide...
Page 91 If the PCR, SCR or MBS is set to the default of "0", the system will assign a maximum value that correlates to your upstream line rate. The following figure illustrates the relationship between PCR, SCR and MBS. Figure 30 Example of Traffic Shaping VMG1312-B Series User’s Guide...
Page 92 When properly configured, VLAN prevents one subscriber from accessing the network resources of another on the same LAN, thus a user will not see the printers and hard disks of another user in the same building. VMG1312-B Series User’s Guide...
Page 93 DNS Server Address Assignment Use Domain Name System (DNS) to map a domain name to its corresponding IP address and vice versa, for instance, the IP address of www.zyxel.com is 204.217.0.2. The DNS server is extremely VMG1312-B Series User’s Guide...
Page 94 IPv6 prefix length specifies how many most significant bits (start from the left) in the address compose the network address. The prefix length is written as “/x” where x is a number. For example, 2001:db8:1a2b:15::1a2f:0/32 means that the first 32 bits (2001:db8) is the subnet prefix. VMG1312-B Series User’s Guide...
Page 95: Wireless
However, wireless networking is different from that of most traditional radio communications in that there a number of wireless networking standards available with different methods of data encryption. VMG1312-B Series User’s Guide...
Page 96: The General Screen
Apply to confirm. You must then change the wireless settings of your computer to match the Device’s new settings. Click Network Setting > Wireless to open the General screen. Figure 31 Network Setting > Wireless > General VMG1312-B Series User’s Guide...
Page 97 Specify the maximum rate for downstream wireless traffic to this WLAN from the WAN in Downstream kilobits per second (Kbps). Bandwidth BSSID This shows the MAC address of the wireless interface on the Device when wireless LAN is enabled. Security Level VMG1312-B Series User’s Guide...
Page 98: No Security
RADIUS server. If your wireless devices support nothing stronger than WEP, use the highest encryption level available. Your Device allows you to configure up to four 64-bit or 128-bit WEP keys but only one key can be enabled at any one time. VMG1312-B Series User’s Guide...
Page 99: More Secure (Wpa(2)-Psk)
WPA encryption standard. It offers slightly better security, although the use of PSK makes it less robust than it could be. Click Network Setting > Wireless to display the General screen. Select More Secure as the security level. Then select WPA-PSK or WPA2-PSK from the Security Mode list. VMG1312-B Series User’s Guide...
Page 100: The Guest / More Ap Screen
7.3 The Guest / More AP Screen This screen allows you to enable and configure multiple Basic Service Sets (BSSs) on the Device. Click Network Setting > Wireless > Guest / More AP. The following screen displays. VMG1312-B Series User’s Guide...
Page 101: Edit Guest / More Ap
Click the Edit icon to configure the SSID profile. 7.3.1 Edit Guest / More AP Use this screen to edit an SSID profile. Click the Edit icon next to an SSID in the Guest / More AP screen. The following screen displays. VMG1312-B Series User’s Guide...
Page 102 Specify the maximum number of clients that can connect to this network at the same time. Hide SSID Select this check box to hide the SSID in the outgoing beacon frame so a station cannot obtain the SSID through scanning using a site survey tool. VMG1312-B Series User’s Guide...
Page 103: Mac Authentication
MAC (Media Access Control) address. The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02. You need to know the MAC addresses of the devices to configure this screen. VMG1312-B Series User’s Guide...
Page 104: The Wps Screen
Click the Delete icon to delete the entry. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. 7.5 The WPS Screen Use this screen to configure WiFi Protected Setup (WPS) on your Device. VMG1312-B Series User’s Guide...
Page 105 Method 2 Use this section to set up a WPS wireless network by entering the PIN of the client into the Device. Select Enable and click Apply to activate WPS method 2 on the Device. VMG1312-B Series User’s Guide...
Page 106: The Wmm Screen
Use this screen to enable Wi-Fi MultiMedia (WMM) and WMM Power Save in wireless networks for multimedia applications. Click Network Setting > Wireless > WMM. The following screen displays. Figure 39 Network Setting > Wireless > WMM VMG1312-B Series User’s Guide...
Page 107: The Wds Screen
Note: At the time of writing, WDS is compatible with other ZyXEL APs only. Not all models support WDS links. Check your other AP’s documentation. Click Network Setting > Wireless > WDS. The following screen displays. VMG1312-B Series User’s Guide...
Page 108 Click the Delete icon to remove this entry. Scan Click the Scan icon to search and display the available APs within range. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG1312-B Series User’s Guide...
Page 109: Wds Scan
7.8 The Others Screen Use this screen to configure advanced wireless settings. Click Network Setting > Wireless > Others. The screen appears as shown. Section 7.10.2 on page 114 for detailed definitions of the terms listed in this screen. VMG1312-B Series User’s Guide...
Page 110 Delivery Traffic Indication Message (DTIM) is the time period after which broadcast and multicast packets are transmitted to mobile clients in the Power Saving mode. A high DTIM value can cause clients to lose connectivity with the network. This value can be set from 1 to 255. VMG1312-B Series User’s Guide...
Page 111: The Channel Status Screen
Note: The Scan button only works when the Device uses 20MHz for the wireless channel width. You can go to the General screen, click the Network Setting > Wireless > more link, and then change the channel width setting in the Bandwidth field. VMG1312-B Series User’s Guide...
Page 112: Technical Reference
• An “infrastructure” type of network has one or more access points and one or more wireless clients. The wireless clients connect to the access points. • An “ad-hoc” type of network is one in which there is no access point. Wireless clients connect to one another in order to exchange information. VMG1312-B Series User’s Guide...
Page 113 When you create a network, you must select a channel to use. Since the available unlicensed spectrum varies from one country to another, the number of available channels also varies. VMG1312-B Series User’s Guide...
Page 114: Additional Wireless Terms
A good way to come up with effective security keys, passwords and so on is to use obscure information that you personally will easily remember, and to enter it in a way that appears random VMG1312-B Series User’s Guide...
Page 115 Some wireless devices, such as scanners, can detect wireless networks but cannot use wireless networks. These kinds of wireless devices might not have MAC addresses. Hexadecimal characters are 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, A, B, C, D, E, and F. VMG1312-B Series User’s Guide...
Page 116: Signal Problems
Problems with absorption occur when physical objects (such as thick walls) are between the two radios, muffling the signal. VMG1312-B Series User’s Guide...
Page 117: Bss
• You must use different keys for different BSSs. If two wireless devices have different BSSIDs (they are in different BSSs), but have the same keys, they may hear each other’s communications (but not communicate with each other). VMG1312-B Series User’s Guide...
Page 118: Preamble Type
WPS allows you to quickly set up a wireless network with strong security, without having to configure security settings manually. Each WPS connection works between two devices. Both devices must support WPS (check each device’s documentation to make sure). VMG1312-B Series User’s Guide...
Page 119 (referred to here as the AP) and a client device using the PIN method. Ensure WPS is enabled on both devices. Access the WPS section of the AP’s configuration interface. See the device’s User’s Guide for how to do this. VMG1312-B Series User’s Guide...
Page 120 If you cannot connect, check the list of associated wireless clients in the AP’s configuration utility. If you see the wireless client in the list, WPS was successful. The following figure shows a WPS-enabled wireless client (installed in a notebook computer) connecting to the WPS-enabled AP via the PIN method. VMG1312-B Series User’s Guide...
Page 121: How Wps Works
If the registrar is already part of a network, it sends the existing information. If not, it generates the SSID and WPA(2)-PSK randomly. The following figure shows a WPS-enabled client (installed in a notebook computer) connecting to a WPS-enabled access point. VMG1312-B Series User’s Guide...
Page 122: Example Wps Network Setup
When WPS is activated on both, they perform the handshake. In this example, AP1 is the registrar, and Client 1 is the enrollee. The registrar randomly generates the security information to set up the network, since it is unconfigured and has no existing information. VMG1312-B Series User’s Guide...
Page 123 In step 3, you add another access point (AP2) to your network. AP2 is out of range of AP1, so you cannot use AP1 for the WPS handshake with the new access point. However, you know that Client 2 supports the registrar function, so you use it to perform the WPS handshake instead. VMG1312-B Series User’s Guide...
Page 124: Limitations Of Wps
If this happens, open the access point’s configuration interface and look at the list of associated clients (usually displayed by MAC address). It does not matter if the VMG1312-B Series User’s Guide...
Page 125 Check the MAC addresses of your wireless clients (usually printed on a label on the bottom of the device). If there is an unknown MAC address you can remove it or reset the AP. VMG1312-B Series User’s Guide...
Page 126 Chapter 7 Wireless VMG1312-B Series User’s Guide...
Page 127: Home Networking
Set Top Box (STB) devices when they request IP addresses (Section 8.6 on page 138) • Use the TFTP Server screen to identify a TFTP server for configuration file download using DHCP option 66. (Section 8.7 on page 139). VMG1312-B Series User’s Guide...
Page 128: What You Need To Know
UPnP devices and enable exchange of simple product and service descriptions. NAT traversal allows the following: • Dynamic port mapping • Learning public IP addresses VMG1312-B Series User’s Guide...
Page 129: Before You Begin
Enter the IP subnet mask into the IP Subnet Mask field. Unless instructed otherwise it is best to leave this alone, the configurator will automatically compute a subnet mask based upon the IP address you entered. VMG1312-B Series User’s Guide...
Page 130 Select Enable to have the Device act as a DHCP server or DHCP relay agent. Select Disable to stop the DHCP server on the Device. Select DHCP Relay to have the Device forward DHCP request to the DHCP server. VMG1312-B Series User’s Guide...
Page 131 LAN IPv6 address. An IPv6 prefix length specifies how many most significant bits (starting from the left) in the address compose the network address. This field displays the bit number of the IPv6 subnet mask. VMG1312-B Series User’s Guide...
Page 132 IPv4 DNS Server First: The Device forwards the requests to the IPv4 DNS server first and then the IPv6 DNS server. Then it sends clients the first DNS information it receives. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG1312-B Series User’s Guide...
Page 133: The Static Dhcp Screen
Click the Delete icon to delete a static DHCP entry. A window displays asking you to confirm that you want to delete the selected entry. If you click Add new static lease in the Static DHCP screen or the Edit icon next to a static DHCP entry, the following screen displays. VMG1312-B Series User’s Guide...
Page 134: The Upnp Screen
IP address, convey its capabilities and learn about other devices on the network. In turn, a device can leave a network smoothly and automatically when it is no longer in use. page 128 for more information on UPnP. VMG1312-B Series User’s Guide...
Page 135: Turning On Upnp In Windows 7 Example
Windows 7. Activate UPnP on the Device. Make sure the computer is connected to a LAN port of the Device. Turn on your computer and the Device. Click the start icon, Control Panel and then the Network and Sharing Center. VMG1312-B Series User’s Guide...
Page 136 Select Turn on network discovery and click Save Changes. Network discovery allows your computer to find other computers and devices on the network and other computers on the network to find your computer. This makes it easier to share files and printers. VMG1312-B Series User’s Guide...
Page 137: The Additional Subnet Screen
Unless you are implementing subnetting, use the subnet mask computed by the Device. Public LAN Active Select the checkbox to enable the Public LAN feature. Your ISP must support Public LAN and Static IP. IP Address Enter the public IP address provided by your ISP. VMG1312-B Series User’s Guide...
Page 138: The Stb Vendor Id Screen
Click Cancel to exit this screen without saving. 8.6.1 The Add/Edit STB Vendor ID Screen Use this screen to configure an STB’s Vendor Class Identifier (DHCP option 60). Click Network Setting > Home Networking > STB Vendor ID to open this screen. VMG1312-B Series User’s Guide...
Page 139: The Tftp Server Name Screen
Table 37 Network Setting > Home Networking > TFTP Server Name LABEL DESCRIPTION the IP address or the hostname of a single TFTP server. TFTP Server Enter the Name Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG1312-B Series User’s Guide...
Page 140: Technical Reference
• The ISP tells you the DNS server addresses, usually in the form of an information sheet, when you sign up. If your ISP gives you DNS server addresses, enter them in the DNS Server fields in the DHCP Setup screen. VMG1312-B Series User’s Guide...
Page 141: Lan Tcp/Ip
However, the Internet Assigned Numbers Authority (IANA) has reserved the following three blocks of IP addresses specifically for private networks: • 10.0.0.0 — 10.255.255.255 • 172.16.0.0 — 172.31.255.255 • 192.168.0.0 — 192.168.255.255 VMG1312-B Series User’s Guide...
Page 142 Note: Regardless of your particular situation, do not create an arbitrary IP address; always follow the guidelines above. For more information on address assignment, please refer to RFC 1597, “Address Allocation for Private Internets” and RFC 1466, “Guidelines for Management of IP Address Space”. VMG1312-B Series User’s Guide...
Page 143: Routing
Figure 61 Example of Routing Topology 9.2 The Routing Screen Use this screen to view and configure the static route rules on the Device. Click Network Setting > Routing > Static Route to open the following screen. VMG1312-B Series User’s Guide...
Page 144: Add/Edit Static Route
Use this screen to add or edit a static route. Click Add new static route in the Routing screen or the Edit icon next to the static route you want to edit. The screen shown next appears. Figure 63 Routing: Add/Edit VMG1312-B Series User’s Guide...
Page 145: The Dns Route Screen
The following table describes the labels in this screen. Table 40 Network Setting > Routing > DNS Route LABEL DESCRIPTION Add new DNS Click this to add a new DNS route. Route This is the index number of a DNS route. VMG1312-B Series User’s Guide...
Page 146: The Dns Route Add Screen
Policy-based routing is applied to outgoing packets, prior to the normal routing. You can use source-based policy forwarding to direct traffic from different users through different connections or distribute traffic among multiple paths for load sharing. VMG1312-B Series User’s Guide...
Page 147 This is the WAN interface through which the traffic is routed. Modify Click the Edit icon to edit this policy. Click the Delete icon to remove a policy from the Device. A window displays asking you to confirm that you want to delete the policy. VMG1312-B Series User’s Guide...
Page 148: Add/Edit Policy Forwarding
Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. 9.5 RIP Routing Information Protocol (RIP, RFC 1058 and RFC 1389) allows a device to exchange routing information with other routers. VMG1312-B Series User’s Guide...
Page 149: The Rip Screen
Select Active to have the Device advertise its route information and also listen for routing updates from neighboring routers. Enabled Select the check box to activate the settings. Apply Click Apply to save your changes back to the Device. VMG1312-B Series User’s Guide...
Page 150 Chapter 9 Routing VMG1312-B Series User’s Guide...
Page 151: Quality Of Service (Qos)
QoS versus Cos QoS is used to prioritize source-to-destination traffic flows. All packets in the same flow are given the same priority. CoS (class of service) is a way of managing traffic in a network by grouping VMG1312-B Series User’s Guide...
Page 152 Time (Before Traffic Policing) (After Traffic Policing) The Device supports three incoming traffic metering algorithms: Token Bucket Filter (TBF), Single Rate Two Color Maker (srTCM), and Two Rate Two Color Marker (trTCM). You can specify actions VMG1312-B Series User’s Guide...
Page 153: The Quality Of Service General Screen
You can also set this number lower than the interfaces’ actual transmission speed. This will cause the Device to not use some of the interfaces’ available bandwidth. If you leave this field blank, the Device automatically sets this number to be 95% of the WAN interfaces’ actual upstream transmission speed. VMG1312-B Series User’s Guide...
Page 154: The Queue Setup Screen
10.4 The Queue Setup Screen Click Network Setting > QoS > Queue Setup to open the screen as shown next. Use this screen to configure QoS queue assignment. Figure 70 Network Setting > QoS > Queue Setup VMG1312-B Series User’s Guide...
Page 155: Adding A Qos Queue
Active Select to enable or disable this queue. Name Enter the descriptive name of this queue. Interface Select the interface to which this queue is applied. This field is read-only if you are editing the queue. VMG1312-B Series User’s Guide...
Page 156: The Class Setup Screen
Give high priority to voice and video to make them run more smoothly. Similarly, give low priority to many large file downloads so that they do not reduce the quality of other applications. Click Network Setting > QoS > Class Setup to open the following screen. VMG1312-B Series User’s Guide...
Page 157: Add/Edit Qos Class
Click the Delete icon to delete an existing classifier. Note that subsequent rules move up by one when you take this action. 10.5.1 Add/Edit QoS Class Click Add new Classifier in the Class Setup screen or the Edit icon next to a classifier to open the following screen. VMG1312-B Series User’s Guide...
Page 158 The following table describes the labels in this screen. Table 49 Class Setup: Add/Edit LABEL DESCRIPTION Active Select this to enable this classifier. Class Name Enter a descriptive name of up to 15 printable English keyboard characters, not including spaces. VMG1312-B Series User’s Guide...
Page 159 This field is available only when you select IP in the Ether Type field. This field simplifies classifier configuration by allowing you to select a predefined application. When you select a predefined application, you do not configure the rest of the filter fields. VMG1312-B Series User’s Guide...
Page 160 Unchange, the Device forward traffic of this class according to the default routing table. To Queue Index Select a queue that applies to this class. You should have configured a queue in the Queue Setup screen already. VMG1312-B Series User’s Guide...
Page 161: The Qos Policer Setup Screen
QoS classes. Modify Click the Edit icon to edit the policer. Click the Delete icon to delete an existing policer. Note that subsequent rules move up by one when you take this action. VMG1312-B Series User’s Guide...
Page 162: Add/Edit A Qos Policer
Burst Size peak burst size (two rate three color) or excess burst size (single rate three color) if it is also configured. This is the maximum size of the (first) token bucket in a traffic metering algorithm. VMG1312-B Series User’s Guide...
Page 163: Technical Reference
Typically used for controlled load, latency-sensitive traffic such as SNA (Systems Network Architecture) transactions. Level 3 Typically used for “excellent effort” or better than best effort and would include important business traffic that can tolerate some delay. Level 2 This is for “spare bandwidth”. VMG1312-B Series User’s Guide...
Page 164 Automatic Priority Queue Assignment If you enable QoS on the Device, the Device can automatically base on the IEEE 802.1p priority level, IP precedence and/or packet length to assign priority to traffic which does not match a class. VMG1312-B Series User’s Guide...
Page 165 • A packet can be transmitted if the number of tokens in the bucket is equal to or greater than the size of the packet (in bytes). • After a packet is transmitted, a number of tokens corresponding to the packet size is removed from the bucket. VMG1312-B Series User’s Guide...
Page 166 (CIR) and the Peak Information Rate (PIR). The CIR specifies the average rate at which packets are admitted to the network. The PIR is greater than or equal to the CIR. CIR and PIR values are based VMG1312-B Series User’s Guide...
Page 167 • If the PBS bucket has enough tokens, the Device checks the CBS bucket. The packet is marked green and can be transmitted if the number of tokens in the CBS bucket is equal to or greater than the size of the packet (in bytes). Otherwise, the packet is marked yellow. VMG1312-B Series User’s Guide...
Page 168 Chapter 10 Quality of Service (QoS) VMG1312-B Series User’s Guide...
Page 169: Network Address Translation (Nat)
IP address of a host when the packet is in the local network, while the global address refers to the IP address of the host when the same packet is traveling in the WAN side. VMG1312-B Series User’s Guide...
Page 170: The Port Forwarding Screen
80 to another (B in the example) and assign a default server IP address of 192.168.1.35 to a third (C in the example). You assign the LAN IP addresses and the ISP assigns the WAN IP address. The NAT network appears as a single host on the Internet. VMG1312-B Series User’s Guide...
Page 171 This shows the WAN interface through which the service is forwarded. WAN IP This field displays the incoming packet’s destination IP address. Server IP This is the server’s IP address. Address Start Port This is the first external port number that identifies a service. VMG1312-B Series User’s Guide...
Page 172: Add/Edit Port Forwarding
Enter a name to identify this rule using keyboard characters (A-Z, a-z, 1-2 and so on). WAN Interface Select the WAN interface through which the service is forwarded. You must have already configured a WAN connection with NAT enabled. VMG1312-B Series User’s Guide...
Page 173: The Applications Screen
This screen provides a summary of all NAT applications and their configuration. In addition, this screen allows you to create new applications and/or remove existing ones. To access this screen, click Network Setting > NAT > Applications. The following screen appears. Figure 79 Network Setting > NAT > Applications VMG1312-B Series User’s Guide...
Page 174: Add New Application
View Rule Click this to display the configuration of the service that you have chosen in Application Fowarded. Click OK to save your changes. Cancel Click Cancel to exit this screen without saving. VMG1312-B Series User’s Guide...
Page 175: The Port Triggering Screen
Device times out in three minutes with UDP (User Datagram Protocol) or two hours with TCP/IP (Transfer Control Protocol/Internet Protocol). Click Network Setting > NAT > Port Triggering to open the following screen. Use this screen to view your Device’s trigger port settings. VMG1312-B Series User’s Guide...
Page 176: Add/Edit Port Triggering Rule
Click the Delete icon to delete an existing rule. 11.4.1 Add/Edit Port Triggering Rule This screen lets you create new port triggering rules. Click Add new rule in the Port Triggering screen or click a rule’s Edit icon to open the following screen. VMG1312-B Series User’s Guide...
Page 177: The Dmz Screen
11.5 The DMZ Screen In addition to the servers for specified services, NAT supports a default server IP address. A default server receives packets from ports that are not specified in the NAT Port Forwarding Setup screen. VMG1312-B Series User’s Guide...
Page 178: The Alg Screen
Device is behind a SIP ALG. Use this screen to enable and disable the NAT and SIP (VoIP) ALG in the Device. To access this screen, click Network Setting > NAT > ALG. Figure 85 Network Setting > NAT > ALG VMG1312-B Series User’s Guide...
Page 179: The Address Mapping Screen
IP address from your ISP. You can only do this for the Many-to-One mapping type. Global End IP This is the ending Inside Global IP Address (IGA). This field is blank for One-to-One and Many-to-One mapping types. VMG1312-B Series User’s Guide...
Page 180: Add/Edit Address Mapping Rule
SUA (i.e., PAT, port address translation), the Device's Single User Account feature that previous routers supported only. Many-to-Many: This mode maps multiple local IP addresses to shared global IP addresses. Local Start IP Enter the starting Inside Local IP Address (ILA). VMG1312-B Series User’s Guide...
Page 181: The Sessions Screen
NAT sessions. Apply Click this to save your changes on this screen. Cancel Click this to exit this screen without saving any changes. 11.9 Technical Reference This part contains more information regarding NAT. VMG1312-B Series User’s Guide...
Page 182: Nat Definitions
With no servers defined, your Device filters out all incoming inquiries, thus preventing intruders from probing your network. For more information on IP address translation, refer to RFC 1631, The IP Network Address Translator (NAT). VMG1312-B Series User’s Guide...
Page 183: How Nat Works
Address (ILA) Address (IGA) 192.168.1.11 192.168.1.10 11.9.4 NAT Application The following figure illustrates a possible NAT application, where three inside LANs (logical LANs using IP alias) behind the Device can communicate with three distinct WAN networks. VMG1312-B Series User’s Guide...
Page 184 Let's say you want to assign ports 21-25 to one FTP, Telnet and SMTP server (A in the example), port 80 to another (B in the example) and assign a default server IP address of 192.168.1.35 to a VMG1312-B Series User’s Guide...
Page 185 (C in the example). You assign the LAN IP addresses and the ISP assigns the WAN IP address. The NAT network appears as a single host on the Internet. Figure 91 Multiple Servers Behind NAT Example A=192.168.1.33 192.168.1.1 B=192.168.1.34 IP address assigned by ISP C=192.168.1.35 D=192.168.1.36 VMG1312-B Series User’s Guide...
Page 186 Chapter 11 Network Address Translation (NAT) VMG1312-B Series User’s Guide...
Page 187: Dynamic Dns Setup
Enabling the wildcard feature for your host causes *.yourhost.dyndns.org to be aliased to the same IP address as yourhost.dyndns.org. This feature is useful if you want to be able to use, for example, www.yourhost.dyndns.org and still reach your hostname. VMG1312-B Series User’s Guide...
Page 188: The Dns Entry Screen
You can manually add or edit the Device’s DNS name and IP address entry. Click Add new DNS entry in the DNS Entry screen or the Edit icon next to the entry you want to edit. The screen shown next appears. Figure 93 DNS Entry: Add/Edit VMG1312-B Series User’s Guide...
Page 189: The Dynamic Dns Screen
You can specify up to two host names in the field separated by a comma (","). Username Type your user name. Password Type the password assigned to you. Dynamic DNS Status User This shows Success if the account is correctly set up with the Dynamic DNS provider Authentication account. Result VMG1312-B Series User’s Guide...
Page 190 Current Dynamic This shows the IP address your Dynamic DNS provider has currently associated with the hostname. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG1312-B Series User’s Guide...
Page 191: Igmp/Mld
13.2 The IGMP/MLD Screen Use this screen to configure multicast groups the Device has joined and which ports have joined it. To open this screen, click Network Setting > IGMP/MLD. VMG1312-B Series User’s Guide...
Page 192 Group-Specific Query message. Multicast routers use group-specific queries to learn whether any member remains in a specific multicast group. Robustness Enter the number of times (1~7) the Device can resend a packet if packet loss occurs due to Value network congestion. VMG1312-B Series User’s Guide...
Page 193 Select this to have the Device add a host to a multicast group immediately once the Device Join Immediate receives an IGMP or MLD join message. (IPTV) Apply Click Apply to save your changes back to the Device. Cancel Click Cancel to exit this screen without saving. VMG1312-B Series User’s Guide...
Page 194 Chapter 13 IGMP/MLD VMG1312-B Series User’s Guide...
Page 195: Vlan Group
Use these screens to group separate VLAN groups together to be treated as one VLAN group. 14.2 The Vlan Group Screen Click Network Setting > Vlan Group to open the following screen. Figure 97 Network Setting > Vlan Group VMG1312-B Series User’s Guide...
Page 196: Add/Edit A Vlan Group
Select Tx tagging to tag outgoing traffic from the associated LAN port with the VLAN ID number entered above. Apply Click Apply to save your changes back to the Device. Cancel Click Cancel to exit this screen without saving. VMG1312-B Series User’s Guide...
Page 197: Interface Group
In the following example, the client that sends packets with the DHCP Vendor ID option set to MSFT 5.0 (meaning it is a Windows 2000 DHCP client) is assigned the IP address 192.168.2.2 and uses the WAN VDSL_PoE/ppp0.1 interface. VMG1312-B Series User’s Guide...
Page 198: Interface Group Configuration
Click the Add New Interface Group button in the Interface Group screen to open the following screen. Use this screen to create a new interface group. Note: An interface can belong to only one group at a time. VMG1312-B Series User’s Guide...
Page 199 With the following DHCP Vendor IDs This shows the index number of the rule. Filter Criteria This shows the filtering criteria. The LAN interface on which the matched traffic is received will belong to this group automatically. VMG1312-B Series User’s Guide...
Page 200: Interface Grouping Criteria
DHCP option 60. DHCP option 60 option DHCP Option Select this and enter the device identity of the matched traffic. IAID Enter the Identity Association Identifier (IAID) of the device, for example, the WAN connection index number. VMG1312-B Series User’s Guide...
Page 201 Enter the model name of the device. Name Serial Enter the serial number of the device. Number Apply Click Apply to save your changes back to the Device. Cancel Click Cancel to exit this screen without saving. VMG1312-B Series User’s Guide...
Page 202 Chapter 15 Interface Group VMG1312-B Series User’s Guide...
Page 203: Usb Service
207). • Use the Printer Server screen to enable the print server (Section 16.4 on page 208). 16.1.2 What You Need To Know The following terms and concepts may help as you read this chapter. VMG1312-B Series User’s Guide...
Page 204 A port maps a network service such as http to a process running on your computer, such as a process run by your web browser. When traffic from the Internet is received on your computer, the port number is used to identify which process running on your computer it is intended for. VMG1312-B Series User’s Guide...
Page 205: Before You Begin
Use this screen to set up file sharing through the Device. The Device’s LAN users can access the shared folder (or share) from the USB device inserted in the Device. To access this screen, click Network Setting > USB Service > File Sharing. Figure 104 Network Setting > USB Service > File Sharing VMG1312-B Series User’s Guide...
Page 206: The Add New User Screen
Use this screen to create a user account that can access the secured shares on the USB device. To access this screen, click the Add New User button in the Network Setting > USB Service > File Sharing screen. VMG1312-B Series User’s Guide...
Page 207: The Media Server Screen
The media server is enabled by default with the video, photo, and music shares published. To change your Device’s media server settings, click Network Setting > USB Service > Media Server. The screen appears as shown. VMG1312-B Series User’s Guide...
Page 208: Print Server
TCP/IP port for printing via the network. Follow your printer manufacturers instructions on how to install the printer software on your computer. Note: Your printer’s installation instructions may ask that you connect the printer to your computer. Connect your printer to the Device instead. VMG1312-B Series User’s Guide...
Page 209: The Print Server Screen
Table 79 Network Setting > USB Service > Print Server LABEL DESCRIPTION Print Server Select Enable to have the Device share a USB printer. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG1312-B Series User’s Guide...
Page 210 Chapter 16 USB Service VMG1312-B Series User’s Guide...
Page 211: Power Management
LEDs in one of the two screens. 17.2 The Power Management Screen Use this screen to manually turn on/off interface(s) or LEDs. Click Network Setting > Power Management > Power Management. The screen appears as shown. VMG1312-B Series User’s Guide...
Page 212: The Auto Switch Off Screen
Use this screen to view schedules to turn on or off specific interface(s) and/or all LED lights on the Device. To access this screen, click Network Setting > Power Management > Auto Switch Off. Figure 109 Network Setting > Power Managment > Auto Switch Off VMG1312-B Series User’s Guide...
Page 213: The Auto Switch Off Add Or Modify Screen
Time This field shows the time period of the schedule. Description This field shows more information about this rule. Modify Click the Edit icon to modify the rule or click the Delete icon to remove it. VMG1312-B Series User’s Guide...
Page 214: The Add/Edit Rule Screen
22:00~23:59 and another schedule for 00:00~08:00. Description Enter more information for this rule here. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG1312-B Series User’s Guide...
Page 215: Firewall
• Use the Access Control screen to view and configure incoming/outgoing filtering rules (Section 18.4 on page 220). • Use the DoS screen to activate protection against Denial of Service (DoS) attacks (.Section 18.5 on page 222). VMG1312-B Series User’s Guide...
Page 216: What You Need To Know
Use this screen to set the security level of the firewall on the Device. Firewall rules are grouped based on the direction of travel of packets to which they apply. Click Security > Firewall to display the General screen. VMG1312-B Series User’s Guide...
Page 217: The Protocol Screen
You can configure customized services and port numbers in the Protocol screen. For a comprehensive list of port numbers and services, visit the IANA (Internet Assigned Number Authority) website. See Appendix D on page 333 for some examples. Click Security > Firewall > Protocol to display the following screen. VMG1312-B Series User’s Guide...
Page 218: Add/Edit A Service
Use this screen to add a customized service rule that you can use in the firewall’s ACL rule configuration. Click Add new service entry or the edit icon next to an existing service rule in the Service screen to display the following screen. VMG1312-B Series User’s Guide...
Page 219 Enter a unique name (up to 32 printable English keyboard characters, including spaces) for your customized port. Service Enter a description for your customized port. Description Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG1312-B Series User’s Guide...
Page 220: The Access Control Screen
Click the Move To icon to change the order of the rule. Enter the number in the # field. 18.4.1 Add/Edit an ACL Rule Click Add new ACL rule or the Edit icon next to an existing ACL rule in the Access Control screen. The following screen displays. VMG1312-B Series User’s Guide...
Page 221 Custom Source This field is displayed only when you select Specific Protocol in Select Protocol. Port Enter a single port number or the range of port numbers of the source. VMG1312-B Series User’s Guide...
Page 222: The Dos Screen
The following table describes the labels in this screen. Table 89 Security > Firewall > DoS LABEL DESCRIPTION DoS Protection Select Enable to enable protection against DoS attacks. Blocking Deny Ping Select Enable to block ping request packets. Response VMG1312-B Series User’s Guide...
Page 223 Chapter 18 Firewall Table 89 Security > Firewall > DoS (continued) LABEL DESCRIPTION Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG1312-B Series User’s Guide...
Page 224 Chapter 18 Firewall VMG1312-B Series User’s Guide...
Page 225: Mac Filter
19.2 The MAC Filter Screen Use this screen to allow wireless and LAN clients access to the Device. Click Security > MAC Filter. The screen appears as shown. Figure 119 Security > MAC Filter VMG1312-B Series User’s Guide...
Page 226 Device in these address fields. Enter the MAC addresses in a valid MAC address format, that is, six hexadecimal character pairs, for example, 12:34:56:78:9a:bc. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG1312-B Series User’s Guide...
Page 227: Parental Control
This shows the index number of the rule. Status This indicates whether the rule is active or not. A yellow bulb signifies that this rule is active. A gray bulb signifies that this rule is not active. VMG1312-B Series User’s Guide...
Page 228: Add/Edit A Parental Control Profile
Click Add new PCP in the Parental Control screen to add a new rule or click the Edit icon next to an existing rule to edit it. Use this screen to configure a restricted access schedule and/or URL filtering settings to block the users on your network from accessing certain web sites. VMG1312-B Series User’s Guide...
Page 229 Chapter 20 Parental Control Figure 121 Parental Control Rule: Add/Edit Rule Figure 122 Parental Control Rule: Add/Edit Rule > Add Service VMG1312-B Series User’s Guide...
Page 230 This shows the index number of the rule. Select the checkbox next to the rule to activate it. Service Name This shows the name of the rule. Protocol:Port This shows the protocol and the port of the rule. VMG1312-B Series User’s Guide...
Page 231 Click Add to show a screen to enter the URL of web site or URL keyword to which the Device URL Keyword blocks access. Click Delete to remove it. Apply Click this button to save your settings back to the Device. Cancel Click Cancel to restore your previously saved settings. VMG1312-B Series User’s Guide...
Page 232 Chapter 20 Parental Control VMG1312-B Series User’s Guide...
Page 233: Scheduler Rule
This shows the description of this rule. Modify Click the Edit icon to edit the schedule. Click the Delete icon to delete a scheduler rule. Note: You cannot delete a scheduler rule once it is applied to a certain feature. VMG1312-B Series User’s Guide...
Page 234: Add/Edit A Schedule
Enter the time period of each day, in 24-hour format, during which the rule will be enforced. Range Description Enter a description for this scheduler rule. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG1312-B Series User’s Guide...
Page 235: Certificates
22.3 The Local Certificates Screen Click Security > Certificates to open the Local Certificates screen. This is the Device’s summary list of certificates and certification requests. VMG1312-B Series User’s Guide...
Page 236: Create Certificate Request
22.3.1 Create Certificate Request Click Security > Certificates > Local Certificates and then Create Certificate Request to open the following screen. Use this screen to have the Device generate a certification request. VMG1312-B Series User’s Guide...
Page 237 After you click Apply, the following screen displays to notify you that you need to get the certificate request signed by a Certificate Authority. If you already have, click Load_Signed to import the signed certificate into the Device. Otherwise click Back to return to the Local Certificates screen. Figure 128 Certificate Request Created VMG1312-B Series User’s Guide...
Page 238: Load Signed Certificate
The Device accepts any valid certificate signed by a certification authority on this list as being trustworthy; thus you do not need to import any certificate that is signed by one of these certification authorities. VMG1312-B Series User’s Guide...
Page 239: View Trusted Ca Certificate
22.4.1 View Trusted CA Certificate Click the View icon in the Trusted CA screen to open the following screen. Use this screen to view in-depth information about the certification authority’s certificate. VMG1312-B Series User’s Guide...
Page 240: Import Trusted Ca Certificate
Click Back to return to the previous screen. 22.4.2 Import Trusted CA Certificate Click the Import Certificate button in the Trusted CA screen to open the following screen. The Device trusts any valid certificate signed by any of the imported trusted CA certificates. VMG1312-B Series User’s Guide...
Page 241 CA will be displayed in the Network Setting > Broadband > 802.1x: Authentication Edit screen. Certificate Copy and paste the certificate into the text box to store it on the Device. Click OK to save your changes. Cancel Click Cancel to exit this screen without saving. VMG1312-B Series User’s Guide...
Page 242 Chapter 22 Certificates VMG1312-B Series User’s Guide...
Page 243: Log
SEVERITY Emergency: The system is unusable. Alert: Action must be taken immediately. Critical: The system condition is critical. Error: There is an error condition on the system. Warning: There is a warning condition on the system. VMG1312-B Series User’s Guide...
Page 244: The System Log Screen
Level This field displays the severity level of the logs that the device is to send to this syslog server. Messages This field states the reason for the log. VMG1312-B Series User’s Guide...
Page 245: The Security Log Screen
Level This field displays the severity level of the logs that the device is to send to this syslog server. Messages This field states the reason for the log. VMG1312-B Series User’s Guide...
Page 246 Chapter 23 Log VMG1312-B Series User’s Guide...
Page 247: Traffic Status
Click System Monitor > Traffic Status to open the WAN screen. The figure in this screen shows the number of bytes received and sent on the Device. Figure 135 System Monitor > Traffic Status > WAN VMG1312-B Series User’s Guide...
Page 248: The Lan Status Screen
This indicates the number of received packets dropped on this interface. 24.3 The LAN Status Screen Click System Monitor > Traffic Status > LAN to open the following screen. The figure in this screen shows the interface that is currently connected on the Device. VMG1312-B Series User’s Guide...
Page 249: The Nat Status Screen
This indicates the number of received packets dropped on this interface. 24.4 The NAT Status Screen Click System Monitor > Traffic Status > NAT to open the following screen. The figure in this screen shows the NAT session statistics for hosts currently connected on the Device. VMG1312-B Series User’s Guide...
Page 250 No. of Open This displays the number of NAT sessions currently opened for the connected Session host. Total This displays what percentage of NAT sessions the Device can support is currently being used by all connected hosts. VMG1312-B Series User’s Guide...
Page 251: Arp Table
MAC address, swaps the sender and target pairs, and unicasts the answer directly back to the requesting machine. ARP updates the ARP Table for future reference and then sends the packet to the MAC address that replied. VMG1312-B Series User’s Guide...
Page 252: Arp Table Screen
This is the MAC address of the device with the listed IP address. Device This is the type of interface used by the device. You can click on the device type to go to its configuration screen. VMG1312-B Series User’s Guide...
Page 253: Routing Table
This indicates the destination IPv4 address or IPv6 address and prefix of this route. Gateway This indicates the IPv4 address or IPv6 address of the gateway that helps forward this route’s traffic. Subnet Mask This indicates the destination subnet mask of the IPv4 route. VMG1312-B Series User’s Guide...
Page 254 This indicates the name of the interface through which the route is forwarded. brx indicates a LAN interface where x can be 0~3 to represent LAN1 to LAN4 respectively. ptm0 indicates a WAN interface using IPoE or in bridge mode. ppp0 indicates a WAN interface using PPPoE. VMG1312-B Series User’s Guide...
Page 255: Igmp/Mld Status
This field displays the name of an interface on the Device that belongs to an IGMP or MLD multicast group. Multicast Group This field displays the name of the IGMP or MLD multicast group to which the interface belongs. VMG1312-B Series User’s Guide...
Page 256 EXCLUDE means that the IP addresses in the Source List are not allowed to receive the multicast group’s traffic but other IP addresses can. Source List This is the list of IP addresses that are allowed or not allowed to receive the multicast group’s traffic depending on the filter mode. VMG1312-B Series User’s Guide...
Page 257: Xdsl Statistics
HAPTER xDSL Statistics 28.1 The xDSL Statistics Screen Use this screen to view detailed DSL statistics. Click System Monitor > xDSL Statistics to open the following screen. Figure 141 System Monitor > xDSL Statistics VMG1312-B Series User’s Guide...
Page 258 Chapter 28 xDSL Statistics VMG1312-B Series User’s Guide...
Page 259 Attainable Net These are the highest theoretically possible transfer rates at which the port could send and Data Rate receive payload data without transport layer protocol headers and traffic. xDSL Counters VMG1312-B Series User’s Guide...
Page 260 30% or more errored blocks or at least one defect. This is a subset of ES. This is the number of UnAvailable Seconds. This is the number of Loss Of Signal seconds. This is the number of Loss Of Frame seconds. This is the number of Loss of Margin seconds. VMG1312-B Series User’s Guide...
Page 261: Statistics
HSDPA - High-Speed Downlink Packet Access, 3.5G HSUPA - High-Speed Uplink Packet Access, 3.75G HSPA - HSDPA+HSUPA, 3.75G Service This field displays the name of the service provider. Provider Signal Strength This field displays the strength of the signal in dBm. VMG1312-B Series User’s Guide...
Page 262 This field displays the firmware version of the 3G card. Version SIM Card IMSI The International Mobile Subscriber Identity or IMSI is a unique identification number associated with all cellular networks. This number is provisioned in the SIM card. VMG1312-B Series User’s Guide...
Page 263: User Account
Retry Times. Group This field displays whether this user has Administrator or User privleges. Modify Click the Edit icon to configure the entry. Click the Delete icon to remove the entry. VMG1312-B Series User’s Guide...
Page 264: The User Account Add/Edit Screen
Retry Times. Group Specify whether this user will have Administrator or User privleges. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG1312-B Series User’s Guide...
Page 265: Remote Management
Use this screen to configure through which interface(s), which services can access the Device. You can also specify the port numbers the services must use to connect to the Device. Click Maintenance > Remote MGMT to open the following screen. Figure 145 Maintenance > Remote MGMT VMG1312-B Series User’s Guide...
Page 266: The Trust Domain Screen
Remote MGMT > Turst Domain to open the following screen. Note: If this list is empty, all public IP addresses can access the Device from the WAN through the specified services. Figure 146 Maintenance > Remote MGMT > Trust Domain VMG1312-B Series User’s Guide...
Page 267: The Add Trust Domain Screen
Enter a public IPv4 IP address which is allowed to access the service on the Device from the WAN. Apply Click Apply to save your changes back to the Device. Cancel Click Cancel to restore your previously saved settings. VMG1312-B Series User’s Guide...
Page 268 Chapter 31 Remote Management VMG1312-B Series User’s Guide...
Page 269: Client
ACS and specify the ACS IP address or domain name and username and password. Click Maintenance > TR-069 Client to open the following screen. Use this screen to configure your Device to be managed by an ACS. Figure 148 Maintenance > TR-069 Client VMG1312-B Series User’s Guide...
Page 270 You can choose a local certificate used by TR-069 client. The local certificate should be used by TR-069 imported in the Security > Certificates > Local Certificates screen. client Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG1312-B Series User’s Guide...
Page 271: Chapter 33 Tr-064
The following table describes the fields in this screen. Table 118 Maintenance > TR-064 LABEL DESCRIPTION State Select Enable to activate management via TR-064 on the LAN. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG1312-B Series User’s Guide...
Page 272 Chapter 33 TR-064 VMG1312-B Series User’s Guide...
Page 273: Snmp
The managed devices contain object variables/managed objects that define each piece of information to be collected about a device. Examples of variables include such as number of packets received, node port status etc. A Management Information Base (MIB) is a collection of VMG1312-B Series User’s Guide...
Page 274 Enter the SNMP system contact. Trap Destination Type the IP address of the station to send your SNMP traps to. Apply Click this to save your changes back to the Device. Cancel Click this to restore your previously saved settings. VMG1312-B Series User’s Guide...
Page 275: Time Settings
The following table describes the fields in this screen. Table 120 Maintenance > Time LABEL DESCRIPTION Current Date/Time Current Time This field displays the time of your Device. Each time you reload this page, the Device synchronizes the time with the time server. VMG1312-B Series User’s Guide...
Page 276 In Germany for instance, you would select 2 in the Hour field because Germany's time zone is one hour ahead of GMT or UTC (GMT+1). Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG1312-B Series User’s Guide...
Page 277: E-Mail Notification
This field displays the password of the sender’s mail account. Email Address This field displays the e-mail address that you want to be in the from/sender line of the e- mail that the Device sends. Delete Click this button to delete the selected entry(ies). VMG1312-B Series User’s Guide...
Page 278: Email Notification Edit
If you activate SSL/TLS authentication, the e-mail address must be able to be authenticated by the mail server as well. Apply Click this button to save your changes and return to the previous screen. Cancel Click this button to begin configuring this screen afresh. VMG1312-B Series User’s Guide...
Page 279: Log Setting
You can configure where the Device sends logs and which logs and/or immediate alerts the Device records in the Logs Setting screen. 37.2 The Log Settings Screen To change your Device’s log settings, click Maintenance > Logs Setting. The screen appears as shown. Figure 155 Maintenance > Logs Setting VMG1312-B Series User’s Guide...
Page 280: Example E-Mail Log
• You may edit the subject title. • The date format here is Day-Month-Year. • The date format here is Month-Day-Year. The time format is Hour-Minute-Second. VMG1312-B Series User’s Guide...
Page 281 |<1,02> 127|Apr 7 00 |From:192.168.1.131 To:192.168.1.255 |match |forward | 10:05:17 |UDP src port:00520 dest port:00520 |<1,02> 128|Apr 7 00 |From:192.168.1.1 To:192.168.1.255 |match |forward | 10:05:30 |UDP src port:00520 dest port:00520 |<1,02> End of Firewall Log VMG1312-B Series User’s Guide...
Page 282 Chapter 37 Log Setting VMG1312-B Series User’s Guide...
Page 283: Firmware Upgrade
Do NOT turn off the Device while firmware upload is in progress! Figure 157 Maintenance > Firmware Upgrade The following table describes the labels in this screen. After you see the firmware updating screen, wait two minutes before logging into the Device again. VMG1312-B Series User’s Guide...
Page 284 After two minutes, log in again and check your new firmware version in the Status screen. If the upload was not successful, the following screen will appear. Click OK to go back to the Firmware Upgrade screen. VMG1312-B Series User’s Guide...
Page 285 Chapter 38 Firmware Upgrade Figure 160 Error Message VMG1312-B Series User’s Guide...
Page 286 Chapter 38 Firmware Upgrade VMG1312-B Series User’s Guide...
Page 287: Configuration
The backup configuration file will be useful in case you need to return to your previous settings. Click Backup to save the Device’s current configuration to your computer. VMG1312-B Series User’s Guide...
Page 288 If the upload was not successful, the following screen will appear. Click OK to go back to the Configuration screen. Figure 163 Configuration Upload Error Reset to Factory Defaults Click the Reset button to clear all user-entered configuration information and return the Device to its factory defaults. The following warning screen appears. VMG1312-B Series User’s Guide...
Page 289: The Reboot Screen
System restart allows you to reboot the Device remotely without turning the power off. You may need to do this if the Device hangs, for example. Click Maintenance > Reboot. Click Reboot to have the Device reboot. This does not affect the Device's configuration. Figure 166 Maintenance > Reboot VMG1312-B Series User’s Guide...
Page 290: Diagnostic
If an MEP port does not respond to the source MEP, this may indicate a fault. Administrators can take further action to check and resume services from the fault according to the line connectivity status report. VMG1312-B Series User’s Guide...
Page 291: Ping & Traceroute & Nslookup
Click this button to perform a DNS lookup on the IP address of a computer you enter. 40.4 802.1ag Click Maintenance > Diagnostic > 8.2.1ag to open the following screen. Use this screen to perform CFM actions. VMG1312-B Series User’s Guide...
Page 292: Oam Ping
OAM (Operation, Administration and Maintenance) F4 or F5 loopback test on a PVC. The Device sends an OAM F4 or F5 packet to the DSLAM or ATM switch and then returns it to the Device. The test result then displays in the text box. VMG1312-B Series User’s Guide...
Page 293 ATM device. End-to-end loopback tests allow you to verify integrity of an end-to-end PVC. Note: The DSLAM to which the Device is connected must also support ATM F4 and/or F5 to use this test. Note: This screen is available only when you configure an ATM layer-2 interface. VMG1312-B Series User’s Guide...
Page 294 F4 end-end Press this to perform an OAM F4 end-to-end loopback test. F5 segment Press this to perform an OAM F5 segment loopback test. F5 end-end Press this to perform an OAM F5 end-to-end loopback test. VMG1312-B Series User’s Guide...
Page 295: Troubleshooting
Make sure you understand the normal behavior of the LED. See Section 1.5 on page Check the hardware connections. Inspect your cables for damage. Contact the vendor to replace any damaged cables. Turn the Device off and on. VMG1312-B Series User’s Guide...
Page 296: Device Access And Login
Make sure your Internet browser does not block pop-up windows and has JavaScripts and Java enabled. If it is possible to log in from another interface, check the service control settings for HTTP and HTTPS (Maintenance > Remote MGMT). VMG1312-B Series User’s Guide...
Page 297 I cannot use FTP to upload / download the configuration file. / I cannot use FTP to upload new firmware. See the troubleshooting suggestions for I cannot see or access the Login screen in the web configurator. Ignore the suggestions about your browser. VMG1312-B Series User’s Guide...
Page 298: Internet Access
ADSL or VDSL connection at one time. I cannot connect to the Internet using an Ethernet connection. The DSL connection has priority. If the DSL connection is up, then the Ethernet connection will be down. VMG1312-B Series User’s Guide...
Page 299: Wireless Internet Access
If the problem continues, contact your vendor. 41.4 Wireless Internet Access What factors may cause intermittent or unstabled wireless connection? How can I solve this problem? The following factors may cause interference: • Obstacles: walls, ceilings, furniture, and so on. VMG1312-B Series User’s Guide...
Page 300: Usb Device Connection
Re-connect your USB device to the Device. 41.6 UPnP When using UPnP and the Device reboots, my computer cannot detect UPnP and refresh My Network Places > Local Network. VMG1312-B Series User’s Guide...
Page 301 Chapter 41 Troubleshooting Disconnect the Ethernet cable from the Device’s LAN port or from your computer. Re-connect the Ethernet cable. The Local Area Connection icon for UPnP disappears in the screen. Restart your computer. VMG1312-B Series User’s Guide...
Page 302 Chapter 41 Troubleshooting VMG1312-B Series User’s Guide...
Page 303: Appendices
Appendices Appendices contain general information. Some information may not apply to your device.
Page 305: Appendix A Customer Support
• Brief description of the problem and the steps you took to solve it. Corporate Headquarters (Worldwide) Taiwan • ZyXEL Communications Corporation • http://www.zyxel.com Asia China • ZyXEL Communications (Shanghai) Corp. ZyXEL Communications (Beijing) Corp. ZyXEL Communications (Tianjin) Corp. • http://www.zyxel.cn India • ZyXEL Technology India Pvt Ltd • http://www.zyxel.in Kazakhstan •...
Page 306 • ZyXEL Singapore Pte Ltd. • http://www.zyxel.com.sg Taiwan • ZyXEL Communications Corporation • http://www.zyxel.com Thailand • ZyXEL Thailand Co., Ltd • http://www.zyxel.co.th Vietnam • ZyXEL Communications Corporation-Vietnam Office • http://www.zyxel.com/vn/vi Europe Austria • ZyXEL Deutschland GmbH • http://www.zyxel.de VMG1312-B Series User’s Guide...
Page 307 • ZyXEL BY • http://www.zyxel.by Belgium • ZyXEL Communications B.V. • http://www.zyxel.com/be/nl/ Bulgaria • ZyXEL България • http://www.zyxel.com/bg/bg/ Czech • ZyXEL Communications Czech s.r.o • http://www.zyxel.cz Denmark • ZyXEL Communications A/S • http://www.zyxel.dk Estonia • ZyXEL Estonia • http://www.zyxel.com/ee/et/ Finland •...
Page 308 • ZyXEL Communications Poland • http://www.zyxel.pl Romania • ZyXEL Romania • http://www.zyxel.com/ro/ro Russia • ZyXEL Russia • http://www.zyxel.ru Slovakia • ZyXEL Communications Czech s.r.o. organizacna zlozka • http://www.zyxel.sk Spain • ZyXEL Spain • http://www.zyxel.es Sweden • ZyXEL Communications • http://www.zyxel.se Switzerland •...
Page 309 Ecuador • ZyXEL Communication Corporation • http://www.zyxel.com/ec/es/ Middle East Egypt • ZyXEL Communication Corporation • http://www.zyxel.com/homepage.shtml Middle East • ZyXEL Communication Corporation • http://www.zyxel.com/homepage.shtml North America • ZyXEL Communications, Inc. - North America Headquarters • http://www.us.zyxel.com/ VMG1312-B Series User’s Guide...
Page 310 Appendix A Customer Support Oceania Australia • ZyXEL Communications Corporation • http://www.zyxel.com/au/en/ Africa South Africa • Nology (Pty) Ltd. • http://www.zyxel.co.za VMG1312-B Series User’s Guide...
Page 311: Appendix B Wireless Lans
Intra-BSS traffic is traffic between wireless clients in the BSS. When Intra-BSS is enabled, wireless client A and B can access the wired network and communicate with each other. When Intra-BSS is disabled, wireless client A and B can still access the wired network but cannot communicate with each other. VMG1312-B Series User’s Guide...
Page 312 An ESSID (ESS IDentification) uniquely identifies each ESS. All access points and their associated wireless clients within the same ESS must have the same ESSID in order to communicate. VMG1312-B Series User’s Guide...
Page 313 (AP) or wireless gateway, but out-of-range of each other, so they cannot "hear" each other, that is they do not know if the channel is currently being used. Therefore, they are considered hidden from each other. VMG1312-B Series User’s Guide...
Page 314 If the Fragmentation Threshold value is smaller than the RTS/CTS value (see previously) you set then the RTS (Request To Send)/CTS (Clear to Send) handshake will never occur as data frames will be fragmented before they reach RTS/CTS size. VMG1312-B Series User’s Guide...
Page 315 It is supported by Windows XP and a number of network devices. Some advantages of IEEE 802.1x are: • User based identification that allows for roaming. VMG1312-B Series User’s Guide...
Page 316 In order to ensure network security, the access point and the RADIUS server use a shared secret key, which is a password, they both know. The key is not sent over the network. In addition to the VMG1312-B Series User’s Guide...
Page 317 Client authentication is then done by sending username and password through the secure connection, thus client identity is protected. For client authentication, EAP-TTLS supports EAP methods and legacy authentication methods such as PAP, CHAP, MS-CHAP and MS-CHAP v2. VMG1312-B Series User’s Guide...
Page 318 Key differences between WPA or WPA2 and WEP are improved data encryption and user authentication. If both an AP and the wireless clients support WPA2 and you have an external RADIUS server, use WPA2 for stronger data encryption. If you don't have an external RADIUS server, you should use VMG1312-B Series User’s Guide...
Page 319 RADIUS database. WPA2 reduces the number of key exchange messages from six to four (CCMP 4-way handshake) and shortens the time required to connect to a network. Other WPA2 authentication features that are different from WPA include key caching and VMG1312-B Series User’s Guide...
Page 320 The RADIUS server distributes the PMK to the AP. The AP then sets up a key hierarchy and management system, using the PMK to dynamically generate unique data encryption keys. The keys are used to encrypt every data packet that is wirelessly communicated between the AP and the wireless clients. VMG1312-B Series User’s Guide...
Page 321 The AP and wireless clients use the TKIP or AES encryption process, the PMK and information exchanged in a handshake to create temporal encryption keys. They use these keys to encrypt data exchanged between them. Figure 176 WPA(2)-PSK Authentication VMG1312-B Series User’s Guide...
Page 322: Security Parameters Summary
Antenna gain, measured in dB (decibel), is the increase in coverage within the RF beam width. Higher antenna gain improves the range of the signal for better communications. For an indoor site, each 1 dB increase in antenna gain results in a range increase of approximately VMG1312-B Series User’s Guide...
Page 323 For a single AP application, place omni-directional antennas as close to the center of the coverage area as possible. For directional antennas, point the antenna in the direction of the desired coverage area. VMG1312-B Series User’s Guide...
Page 324 Appendix B Wireless LANs VMG1312-B Series User’s Guide...
Page 325: Appendix C Ipv6
A link-local unicast address has a predefined prefix of fe80::/10. The link-local unicast address format is as follows. Table 133 Link-local Unicast Address Format 1111 1110 10 Interface ID 10 bits 54 bits 64 bits VMG1312-B Series User’s Guide...
Page 326 All DHCP severs on a local site. FF05:0:0:0:0:0:1:3 The following table describes the multicast addresses which are reserved and can not be assigned to a multicast group. Table 135 Reserved Multicast Address MULTICAST ADDRESS FF00:0:0:0:0:0:0:0 FF01:0:0:0:0:0:0:0 FF02:0:0:0:0:0:0:0 FF03:0:0:0:0:0:0:0 FF04:0:0:0:0:0:0:0 FF05:0:0:0:0:0:0:0 FF06:0:0:0:0:0:0:0 FF07:0:0:0:0:0:0:0 VMG1312-B Series User’s Guide...
Page 327 DHCPv6 server uses T1 and T2 to control the time at which the client contacts with the server to extend the lifetimes on any addresses in the IA_NA before the lifetimes expire. After T1, the client sends the server (S1) (from which the addresses in the IA_NA were obtained) a Renew message. If VMG1312-B Series User’s Guide...
Page 328 • Neighbor solicitation: A request from a host to determine a neighbor’s link-layer address (MAC address) and detect if the neighbor is still reachable. A neighbor being “reachable” means it responds to a neighbor solicitation message (from the host) with a neighbor advertisement message. VMG1312-B Series User’s Guide...
Page 329 Done message to the router or switch. The router or switch then sends a group-specific query to the port on which the Done message is received to determine if other devices connected to this port should remain in the group. VMG1312-B Series User’s Guide...
Page 330 Install Dibbler and select the DHCPv6 client option on your computer. After the installation is complete, select Start > All Programs > Dibbler-DHCPv6 > Client Install as service. Select Start > Control Panel > Administrative Tools > Services. Double click Dibbler - a DHCPv6 client. VMG1312-B Series User’s Guide...
Page 331 To enable IPv6 in Windows 7: Select Control Panel > Network and Sharing Center > Local Area Connection. Select the Internet Protocol Version 6 (TCP/IPv6) checkbox to enable it. Click OK to save the change. VMG1312-B Series User’s Guide...
Page 332 IPv4 Address... : 172.16.100.61 Subnet Mask ... : 255.255.255.0 Default Gateway ..: fe80::213:49ff:feaa:7125%11 172.16.100.254 VMG1312-B Series User’s Guide...
Page 333: Appendix D Services
• If the Protocol is TCP, UDP, or TCP/UDP, this is the IP port number. • If the Protocol is USER, this is the IP protocol number. • Description: This is a brief explanation of the applications that use this service or the situations in which this service is used. VMG1312-B Series User’s Guide...
Page 334 Microsoft Networks’ messenger service uses this protocol. NetBIOS TCP/UDP The Network Basic Input/Output System is used for communication between computers in a LAN. TCP/UDP TCP/UDP TCP/UDP NEW-ICQ 5190 An Internet chat program. NEWS A protocol for news groups. VMG1312-B Series User’s Guide...
Page 335 UNIX systems and network servers. SSDP 1900 The Simple Service Discovery Protocol supports Universal Plug-and-Play (UPnP). TCP/UDP Secure Shell Remote Login Program. STRM WORKS 1558 Stream Works Protocol. VMG1312-B Series User’s Guide...
Page 336 Internet and in UNIX environments. It operates over TCP/IP networks. Its primary function is to allow users to log into remote host systems. VDOLIVE 7000 A videoconferencing solution. The UDP port number is specified in the application. user- defined VMG1312-B Series User’s Guide...
Page 337 Appendix D Services VMG1312-B Series User’s Guide...
Page 338: Appendix E Legal Information
The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation. All rights reserved.
Page 339: European Union
ZyXEL ovime izjavljuje da je radijska oprema tipa u skladu s Direktivom 1999/5/EC. (Croatian) Íslenska Hér með lýsir, ZyXEL því yfir að þessi búnaður er í samræmi við grunnkröfur og önnur viðeigandi ákvæði tilskipunar (Icelandic) 1999/5/EC. VMG1312-B Series User’s Guide...
Page 340 Italia. Se non viene installato all 'interno del proprio fondo, l'utilizzo di prodotti Wireless LAN richiede una “Autorizzazione Generale”. Consultare http://www.sviluppoeconomico.gov.it/ per maggiori dettagli. Latvia The outdoor usage of the 2.4 GHz band requires an authorization from the Electronic Communications Office. Please check http:// www.esd.lv for more details. VMG1312-B Series User’s Guide...
Page 341: Safety Warnings
FOR COUNTRY CODE SELECTION USAGE (WLAN DEVICES) Note: The country code selection is for non-US model only and is not available to all US model. Per FCC regulation, all Wi-Fi product marketed in US must fixed to US operation channels only. VMG1312-B Series User’s Guide...
Page 342 Lo smaltimento abusivo del prodotto da parte del detentore comporta l’applicazione delle sanzioni amministrative previste dalla normativa vigente." VMG1312-B Series User’s Guide...
Page 343 Appendix E Legal Information Environmental Product Declaration VMG1312-B Series User’s Guide...
Page 344: Zyxel Limited Warranty
You can download the latest firmware at www.zyxel.com. If you cannot find it there, contact your vendor or ZyXEL Technical Support at support@zyxel.com.tw. To obtain the source code covered under those Licenses, please contact your vendor or ZyXEL Technical Support at support@zyxel.com.tw. VMG1312-B Series User’s Guide...
Page 345: Index
MSCHAP CCMs link trace test Auto Configuration Server, see ACS loopback test channel backup interference configuration channel, wireless LAN Basic Service Set, See BSS CHAP Basic Service Set, see BSS client list blinking LEDs compatibility, WDS VMG1312-B Series User’s Guide...
Page 346 DLNA add protocols configuration DDoS 128, 140 DNS server address assignment LAND attack Domain Name Ping of Death Domain Name System, see DNS SYN attack Domain Name System. See DNS. firmware version DS field forwarding ports VMG1312-B Series User’s Guide...
Page 347 Link Trace Response, see LTR wizard setup login Internet Protocol version 6 passwords Internet Protocol version 6, see IPv6 logs 243, 247, 255, 261, 279 Intra LAN Multicast Loop Back Response, see LBR IP address 128, 141 loopback ping VMG1312-B Series User’s Guide...
Page 348 LLC-based Power Mgmt VC-based Power Mgmt Add multiprotocol encapsulation PPPoE Benefits PPTP preamble 111, 114 preamble mode prefix delegation 169, 170, 171, 182 applications Printer Server IP alias printer sharing example and LAN VMG1312-B Series User’s Guide...
Page 349 RFC 1389. See RIP. MBSSID RFC 1483 static route 143, 148, 277 RFC 3164 configuration 88, 144, 146, 188 example static VLAN router features status Routing Information Protocol. See RIP firmware version RPPCs RTS (Request To Send) VMG1312-B Series User’s Guide...
Page 350 Two Rate Three Color Marker, see trTCM WEP encryption WEP key Wi-Fi Protected Access wireless client WPA supplicants Wireless Distribution System, see WDS unicast wireless LAN 95, 112 Universal Plug and Play, see UPnP authentication 114, 115 upgrading firmware example UPnP VMG1312-B Series User’s Guide...
Page 351 WPA-PSK wireless client supplicant with RADIUS application example WPA2 user authentication vs WPA2-PSK wireless client supplicant with RADIUS application example WPA2-Pre-Shared Key WPA2-PSK application example WPA-PSK 116, 319 application example VMG1312-B Series User’s Guide...

This manual is also suitable for:

Vmg1312-b series

ZyXEL Communications VMG1312-B Series User Manual

Contents Overview

Table of Contents

User's Guide

PART I User's Guide

Chapter 1 Introducing the Device

Chapter 2 The Web Configurator

Chapter 3 Quick Start

Chapter 4 Tutorials

Technical Reference

Part II: Technical Reference

Chapter 5 Network Map and Status Screens

Chapter 6 Broadband

Chapter 7 Wireless

Chapter 8 Home Networking

Chapter 9 Routing

Chapter 10 Quality of Service (Qos)

Chapter 11 Network Address Translation (NAT)

Chapter 12 Dynamic DNS Setup

Chapter 13 IGMP/MLD

Chapter 14 Vlan Group

Chapter 15 Interface Group

Chapter 16 USB Service

Chapter 17 Power Management

Chapter 18 Firewall

Chapter 19 MAC Filter

Chapter 20 Parental Control

Chapter 21 Scheduler Rule

Chapter 22 Certificates

Chapter 23 Log

Chapter 24 Traffic Status

Chapter 25 ARP Table

Chapter 26 Routing Table

Chapter 27 IGMP/MLD Status

Chapter 28 Xdsl Statistics

Chapter 29 3G Statistics

Chapter 30 User Account

Chapter 31 Remote Management

Chapter 32 Client

Chapter 33 TR-064

Chapter 34 SNMP

Quick Links

Related Manuals for ZyXEL Communications VMG1312-B Series

Summary of Contents for ZyXEL Communications VMG1312-B Series