Zyxel VMG1312-B10B [106/394] Note wep is extremely insecure its encryption can be broken by an attacker using widely available software it is strongly recommended that you use a more effective security mechanism use the strongest security mechanism that all the wireless devices in your network support for example use wpa psk or wpa2 psk if all your wireless devices support it or use wpa or wpa2 if your wireless devices support it and you have a radius server if your wireless devices support nothing stronger than wep use the highest encryption level available

If you forget your password or cannot access the web configurator you will need to use the reset button at the back of the device to reload the factory default configuration file this means that you will lose all configurations that you had previously and the password will be reset to 1234 21

Led color status description 21

Make sure the power led is on not blinking 21

Table 1 led descriptions continued 21

The device is a wireless access point ap for wireless clients such as notebook computers or pdas and ipads it allows them to connect to the internet without having to rely on inconvenient ethernet cables 21

The reset button 21

To set the device back to the factory default settings press the reset button for ten seconds or until the power led begins to blink and then release it when the power led begins to blink the defaults have been restored and the device restarts 21

Vmg1312 b10b vmg1312 b30b series user s guide 21

Wireless access 21

Using the wlan wps button 22

Accessing the web configurator 23

Overview 23

The web configurator 23

Title bar 26

Web configurator layout 26

Main window 27

Chapter 2 the web configurator 28

Link tab function 28

Navigation panel 28

Table 3 navigation panel summary 28

Use the menu items on the navigation panel to open screens to configure device features the following tables describe each menu item 28

Vmg1312 b10b vmg1312 b30b series user s guide 28

Chapter 2 the web configurator 29

Link tab function 29

Table 3 navigation panel summary continued 29

Vmg1312 b10b vmg1312 b30b series user s guide 29

Chapter 2 the web configurator 30

Link tab function 30

Table 3 navigation panel summary continued 30

Vmg1312 b10b vmg1312 b30b series user s guide 30

Overview 31

Quick start 31

Quick start setup 31

Overview 33

Setting up an adsl pppoe connection 33

Tutorials 33

Configuring the wireless network settings 36

Setting up a secure wireless network 36

Note the wireless client must be a wps aware device for example a wps usb adapter or pcmcia card 38

Push button configuration pbc 38

Using wps 38

Note it doesn t matter which button is pressed first you must press the second button within two minutes of pressing the first one 39

Note your device has a wps button located on its front panel as well as a wps button in its configuration utility both buttons have exactly the same function you can use one or the other 39

Wireless client device 40

Pin configuration 41

Authentication by pin 42

Communication 42

Note the device supports ieee 802 1b and ieee 802 1g wireless clients make sure that your notebook or computer s wireless adapter supports one of these standards 42

Security info 42

Within 2 minutes 42

Without wps 42

Zyxel device 42

Company 43

Setting up multiple wireless groups 43

Vip guest 43

Configuring static route for routing to another network 47

000 kbps dsl 50

A colleague s computer other traffic automatic classifier 50

And or mac aa ff aa ff aa ff email traffic highest priority 50

Configuring qos queue and class setup 50

Note qos is applied to traffic flowing out of the device 50

Your computer ip 192 68 3 50

Add new classifier to create a new class check active and follow the settings as shown in the screen below 52

Chapter 4 tutorials 52

Vmg1312 b10b vmg1312 b30b series user s guide 52

Access the device using ddns 53

Note if you have a private wan ip address then you cannot use ddns 53

Registering a ddns account on www dyndns org 53

W x y z a b c d 53

Configuring ddns on your device 54

Testing the ddns setting 54

Configuring the mac address filter 55

Josephine 55

Thomas 55

Access your shared files from a computer 56

Note this example uses the filezilla ftp program to browse your shared files 56

Computer with 57

Configuring the device 57

Note the media server feature is enabled by default 57

Usb storage device 57

Using the media server feature 57

Using windows media player 57

Windows media player 57

Zyxel device 57

Windows vista 58

Windows 7 59

Note for this tutorial your dma 2500 should already be set up with the tv according to the instructions in the dma 2500 quick start guide 60

Using a digital media adapter 60

Dma 2500 61

Usb storage device 61

Zyxel device 61

Add a new printer using windows 62

Using the print server feature 62

Add a new printer using macintosh os x 65

Technical reference 69

Network map and status screens 71

Overview 71

The network map screen 71

The status screen 72

Chapter 5 network map and status screens 73

Each field is described in the following table 73

Label description 73

Table 5 status screen 73

Vmg1312 b10b vmg1312 b30b series user s guide 73

Chapter 5 network map and status screens 74

Label description 74

Table 5 status screen continued 74

Vmg1312 b10b vmg1312 b30b series user s guide 74

Broadband 75

Overview 75

What you can do in this chapter 75

Chapter 6 broadband 76

Connection dsl link type mode encapsulation connection settings 76

Encapsulation is used to include data from an upper layer protocol into a lower layer protocol to set up a wan connection to the internet you need to use the same encapsulation method used by your isp internet service provider if your isp offers a dial up internet connection using pppoe ppp over ethernet they should also provide a username and password and service name for user authentication 76

Encapsulation method 76

Layer 2 interface internet connection 76

Table 6 wan setup overview 76

The following terms and concepts may help as you read this chapter 76

The wan ip address is an ip address for the device which makes it accessible from an outside network it is used by the device to communicate with other devices in other networks it can be static fixed or dynamically assigned by the isp each time the device tries to access the internet 76

Use the 8021x screen to view and configure the ieee 802 x settings on the device section 6 on page 92 76

Use the advanced screen to enable or disable ptm over adsl annex m annex j and dsl phyr functions section 6 on page 91 76

Vmg1312 b10b vmg1312 b30b series user s guide 76

Wan ip address 76

What you need to know 76

Any number of consecutive blocks of zeros can be replaced by a double colon a double colon can only appear once in an ipv6 address so 2001 0db8 0000 0000 1a2f 0000 0000 0015 can be written as 2001 0db8 1a2f 0000 0000 0015 2001 0db8 0000 0000 1a2f 0015 2001 db8 1a2f 0 0 15 or 2001 db8 0 0 1a2f 15 77

Ipv6 addressing 77

Ipv6 introduction 77

Ipv6 prefix and prefix length 77

Leading zeros in a block can be omitted so 2001 0db8 1a2b 0015 0000 0000 1a2f 0000 can be written as 2001 db8 1a2b 15 0 0 1a2f 0 77

Before you begin 78

Ipv6 subnet masking 78

The broadband screen 78

Broadband continued 79

Chapter 6 broadband 79

Label description 79

Vmg1312 b10b vmg1312 b30b series user s guide 79

Add edit internet connection 80

Routing mode 80

Chapter 6 broadband 81

Label description 81

Table 8 routing mode continued 81

Vmg1312 b10b vmg1312 b30b series user s guide 81

Chapter 6 broadband 82

Label description 82

Table 8 routing mode continued 82

Vmg1312 b10b vmg1312 b30b series user s guide 82

Chapter 6 broadband 83

Label description 83

Table 8 routing mode continued 83

Vmg1312 b10b vmg1312 b30b series user s guide 83

Bridge mode 84

Broadband screen or the edit icon next to the connection you want to configure select bridge as the encapsulation mode the screen varies depending on the interface type you select 84

Chapter 6 broadband 84

Figure 21 bridge mode adsl vdsl over ptm 84

If you select adsl vdsl over ptm as the interface type the following screen appears 84

Label description 84

Table 8 routing mode continued 84

Vmg1312 b10b vmg1312 b30b series user s guide 84

Chapter 6 broadband 85

Figure 22 bridge mode adsl over atm 85

If you select adsl over atm as the interface type the following screen appears 85

Label description 85

Table 9 bridge mode adsl vdsl over ptm 85

The following table describes the fields in this screen 85

Vmg1312 b10b vmg1312 b30b series user s guide 85

Chapter 6 broadband 86

Label description 86

Table 10 bridge mode adsl over atm 86

The following table describes the fields in this screen 86

Vmg1312 b10b vmg1312 b30b series user s guide 86

Chapter 6 broadband 87

G backup 87

Label description 87

Table 10 bridge mode adsl over atm continued 87

The 3g backup screen 87

Vmg1312 b10b vmg1312 b30b series user s guide 87

Chapter 6 broadband 88

G backup 88

Label description 88

Note the actual data rate you obtain varies depending the 3g card you use the signal strength to the service provider s base station and so on 88

The following table describes the labels in this screen 88

Vmg1312 b10b vmg1312 b30b series user s guide 88

Chapter 6 broadband 89

G backup continued 89

Label description 89

Vmg1312 b10b vmg1312 b30b series user s guide 89

Chapter 6 broadband 90

G backup continued 90

Label description 90

Vmg1312 b10b vmg1312 b30b series user s guide 90

The advanced screen 91

Broadband continued 92

Chapter 6 broadband 92

Label description 92

The 8021x screen 92

The following table describes the labels in this screen 92

Vmg1312 b10b vmg1312 b30b series user s guide 92

X to display the following screen 92

Chapter 6 broadband 93

Edit 802 x settings 93

Ethernet wan to open this screen 93

Figure 27 802 x add edit 93

Label description 93

Note lan port 4 can operate as an ethernet wan port 93

Table 14 802 x add edit 93

The ethernet wan screen 93

The following table describes the labels in this screen 93

Use this screen to edit 802 x authentication settings click the edit icon next to the rule you want to edit the screen shown next appears 93

Vmg1312 b10b vmg1312 b30b series user s guide 93

Encapsulation 94

Ip over ethernet 94

Ppp over atm pppoa 94

Technical reference 94

Multiplexing 95

Ppp over ethernet pppoe 95

Rfc 1483 95

Traffic shaping 95

Atm traffic classes 96

Introduction to ieee 802 q tagged vlan 97

Introduction to vlans 97

Ip address assignment 97

Dns server address assignment 98

Ipv6 addressing 98

Multicast 98

Ipv6 prefix and prefix length 99

Overview 101

What you can do in this chapter 101

Wireless 101

Finding out more 102

Note if you are configuring the device from a computer connected to the wireless lan and you change the device s ssid channel or security settings you will lose your wireless connection when you press apply to confirm you must then change the wireless settings of your computer to match the device s new settings 102

The general screen 102

What you need to know 102

Wireless basics 102

Chapter 7 wireless 104

General 104

Label description 104

The following table describes the general wireless lan labels in this screen 104

Vmg1312 b10b vmg1312 b30b series user s guide 104

Basic wep encryption 105

Chapter 7 wireless 105

General continued 105

General no security 105

Label description 105

No security 105

Note if you do not enable any wireless security on your device your network is accessible to any wireless networking device that is within range 105

Select no security to allow wireless stations to communicate with the access points without any data encryption or authentication 105

The following table describes the labels in this screen 105

Vmg1312 b10b vmg1312 b30b series user s guide 105

Wep encryption scrambles the data transmitted between the wireless stations and the access points ap to keep network communications private both the wireless stations and the access points must use the same wep key 105

Note wep is extremely insecure its encryption can be broken by an attacker using widely available software it is strongly recommended that you use a more effective security mechanism use the strongest security mechanism that all the wireless devices in your network support for example use wpa psk or wpa2 psk if all your wireless devices support it or use wpa or wpa2 if your wireless devices support it and you have a radius server if your wireless devices support nothing stronger than wep use the highest encryption level available 106

Basic 802 x 107

Chapter 7 wireless 108

General basic 802 x continued 108

Label description 108

Vmg1312 b10b vmg1312 b30b series user s guide 108

Chapter 7 wireless 109

General more secure wpa 2 psk 109

Label description 109

More secure wpa 2 psk 109

The following table describes the labels in this screen 109

The wpa psk security mode provides both improved data encryption and user authentication over wep using a pre shared key psk both the device and the connecting client share a common password in order to validate the connection this type of encryption while robust is not as strong as wpa wpa2 or even wpa2 psk the wpa2 psk security mode is a newer more robust version of the wpa encryption standard it offers slightly better security although the use of psk makes it less robust than it could be 109

Vmg1312 b10b vmg1312 b30b series user s guide 109

Wireless to display the general screen select more secure as the security level then select wpa psk or wpa2 psk from the security mode list 109

Wpa 2 authentication 110

Chapter 7 wireless 111

General more secure wpa 2 continued 111

Label description 111

More ap 111

More ap the following screen displays 111

The more ap screen 111

This screen allows you to enable and configure multiple basic service sets bsss on the device 111

Vmg1312 b10b vmg1312 b30b series user s guide 111

Chapter 7 wireless 112

Label description 112

More ap 112

The following table describes the labels in this screen 112

Vmg1312 b10b vmg1312 b30b series user s guide 112

Edit more ap 113

Chapter 7 wireless 114

Label description 114

Mac authentication 114

Table 23 more ap edit continued 114

This screen allows you to configure the zyxel device to give exclusive access to specific devices allow or exclude specific devices from accessing the zyxel device deny every ethernet device has a unique mac media access control address the mac address is assigned at the factory and consists of six pairs of hexadecimal characters for example 00 a0 c5 00 00 02 you need to know the mac addresses of the devices to configure this screen 114

Vmg1312 b10b vmg1312 b30b series user s guide 114

Chapter 7 wireless 115

Label description 115

Mac authentication 115

Mac authentication the screen appears as shown 115

Mac restrict mode 115

The following table describes the labels in this screen 115

The wps screen 115

Use this screen to configure wifi protected setup wps on your device 115

Vmg1312 b10b vmg1312 b30b series user s guide 115

Wps allows you to quickly set up a wireless network with strong security without having to configure security settings manually set up each wps connection between two devices both devices must support wps see section 7 0 on page 131 for more information about wps 115

Chapter 7 wireless 116

Label description 116

Note the device applies the security settings of the ssid1 profile see section 7 on page 102 if you want to use the wps feature make sure you have set the security mode of ssid1 to wpa2 psk or no security 116

Note you must also activate wps on that device within two minutes to have it present its pin to the device 116

Note you must press the other wireless device s wps button within two minutes of pressing this button 116

The following table describes the labels in this screen 116

Vmg1312 b10b vmg1312 b30b series user s guide 116

Wps the following screen displays select enable and click apply to activate the wps function then you can configure the wps settings in this screen 116

Chapter 7 wireless 117

Label description 117

Note note this works only if the wireless device to which the device is connected also supports this feature 117

The following table describes the labels in this screen 117

The wmm screen 117

Use this screen to enable wi fi multimedia wmm and wmm power save in wireless networks for multimedia applications 117

Vmg1312 b10b vmg1312 b30b series user s guide 117

Wmm the following screen displays 117

Wps continued 117

An ap using the wireless distribution system wds can function as a wireless network bridge allowing you to wirelessly connect two wired network segments the wds screen allows you to configure the device to connect to two or more aps wirelessly when wds is enabled 118

Chapter 7 wireless 118

Label description 118

Note at the time of writing wds is compatible with other zyxel aps only not all models support wds links check your other ap s documentation 118

Note wds security is independent of the security settings between the device and any wireless clients 118

The following table describes the labels in this screen 118

The wds screen 118

Use this screen to set up your wds wireless distribution system links between the device and other wireless aps you need to know the mac address of the peer device once the security settings of peer sides match one another the connection between devices is made 118

Vmg1312 b10b vmg1312 b30b series user s guide 118

Wds the following screen displays 118

Chapter 7 wireless 119

Figure 42 wds scan 119

Label description 119

Table 28 wds scan 119

The following table describes the labels in this screen 119

Vmg1312 b10b vmg1312 b30b series user s guide 119

Wds continued 119

Wds scan 119

Wds to have the device automatically search and display the available aps within range select an ap and click apply to have the device establish a wireless link with the selected wireless device 119

Chapter 7 wireless 120

Label description 120

Others 120

Others the screen appears as shown 120

See section 7 0 on page 124 for detailed definitions of the terms listed in this screen 120

The following table describes the labels in this screen 120

The others screen 120

Vmg1312 b10b vmg1312 b30b series user s guide 120

Chapter 7 wireless 121

Label description 121

Others continued 121

Vmg1312 b10b vmg1312 b30b series user s guide 121

Technical reference 122

The channel status screen 122

Wireless network overview 122

Radio channels 123

Additional wireless terms 124

Wireless security overview 124

Mac address filter 125

User authentication 125

Encryption 126

Note it is recommended that wireless networks use wpa psk wpa or stronger encryption the other types of encryption are better than none at all but it is still possible for unauthorized wireless devices to figure out the original information pretty quickly 126

Signal problems 126

Mbssid 127

Notes on multiple bsss 127

Ap 2 ap 1 128

Note the wireless devices must use the same preamble mode in order to communicate 128

Preamble type 128

Wifi protected setup wps 128

Wireless distribution system wds 128

Pin configuration 129

Push button configuration 129

How wps works 131

Example wps network setup 132

Client 1 ap1 133

Client 2 133

Client 1 ap1 134

Client 2 134

Limitations of wps 134

Home networking 137

Overview 137

What you can do in this chapter 137

About lan 138

About upnp 138

Identifying upnp devices 138

Ip address 138

Nat traversal 138

Radvd router advertisement daemon 138

Subnet mask 138

What you need to know 138

Before you begin 139

Cautions with upnp 139

Finding out more 139

The lan setup screen 139

Upnp and zyxel 139

Chapter 8 home networking 140

Click apply to save your settings 140

Label description 140

Lan setup 140

The following table describes the fields in this screen 140

Vmg1312 b10b vmg1312 b30b series user s guide 140

Chapter 8 home networking 141

Label description 141

Lan setup continued 141

Vmg1312 b10b vmg1312 b30b series user s guide 141

Chapter 8 home networking 142

Every ethernet device has a unique mac media access control address the mac address is assigned at the factory and consists of six pairs of hexadecimal characters for example 00 a0 c5 00 00 02 142

Label description 142

Lan setup continued 142

The static dhcp screen 142

This table allows you to assign ip addresses on the lan to specific individual computers based on their mac addresses 142

Vmg1312 b10b vmg1312 b30b series user s guide 142

Chapter 8 home networking 143

Figure 55 static dhcp add edit 143

If you click add new static lease in the static dhcp screen or the edit icon next to a static dhcp entry the following screen displays 143

Label description 143

Static dhcp 143

Static dhcp to open the following screen 143

Table 34 static dhcp add edit 143

The following table describes the labels in this screen 143

Vmg1312 b10b vmg1312 b30b series user s guide 143

Chapter 8 home networking 144

Label description 144

See page 138 for more information on upnp 144

Table 34 static dhcp add edit continued 144

The upnp screen 144

Universal plug and play upnp is a distributed open networking standard that uses tcp ip for simple peer to peer network connectivity between devices a upnp device can dynamically join a network obtain an ip address convey its capabilities and learn about other devices on the network in turn a device can leave a network smoothly and automatically when it is no longer in use 144

Upnp to display the screen shown next 144

Vmg1312 b10b vmg1312 b30b series user s guide 144

Chapter 8 home networking 145

Click start and control panel double click add remove programs 145

Follow the steps below to install the upnp in windows me 145

Installing upnp in windows example 145

Installing upnp in windows me 145

Label description 145

The following table describes the labels in this screen 145

This section shows how to install upnp in windows me and windows xp 145

Vmg1312 b10b vmg1312 b30b series user s guide 145

Installing upnp in windows xp 147

Auto discover your upnp enabled network device 148

Using upnp in windows xp example 148

Web configurator easy access 151

The additional subnet screen 154

The stb vendor id screen 155

Chapter 8 home networking 156

Label description 156

Lan vlan 156

Lan vlan to open this screen use this screen to control the vlan id and ieee 802 p priority tags of traffic sent out through individual lan ports 156

Technical reference 156

The following table describes the labels in this screen 156

The lan vlan screen 156

This section provides some technical background information about the topics covered in this chapter 156

Vmg1312 b10b vmg1312 b30b series user s guide 156

Dhcp setup 157

Dns server addresses 157

Ip pool setup 157

Lans wans and the device 157

Wan lan 157

Ip address and subnet mask 158

Lan tcp ip 158

Private ip addresses 158

Note regardless of your particular situation do not create an arbitrary ip address always follow the guidelines above for more information on address assignment please refer to rfc 1597 address allocation for private internets and rfc 1466 guidelines for management of ip address space 159

Overview 161

Routing 161

Chapter 9 routing 162

Label description 162

Static route 162

Static route to open the following screen 162

The following table describes the labels in this screen 162

The routing screen 162

Vmg1312 b10b vmg1312 b30b series user s guide 162

Add edit static route 163

Chapter 9 routing 163

Figure 63 routing add edit 163

Label description 163

Table 40 routing add edit 163

The following table describes the labels in this screen 163

The policy forwarding screen 163

Traditionally routing is based on the destination address only and the device takes the shortest path to forward a packet policy forwarding allows the device to override the default routing behavior and alter the packet forwarding based on the policy defined by the network administrator policy based routing is applied to outgoing packets prior to the normal routing 163

Use this screen to add or edit a static route click add new static route in the routing screen or the edit icon next to the static route you want to edit the screen shown next appears 163

Vmg1312 b10b vmg1312 b30b series user s guide 163

Chapter 9 routing 164

Label description 164

Policy forwarding 164

Policy forwarding to open the following screen 164

The following table describes the labels in this screen 164

Vmg1312 b10b vmg1312 b30b series user s guide 164

You can use source based policy forwarding to direct traffic from different users through different connections or distribute traffic among multiple paths for load sharing 164

Add edit policy forwarding 165

Chapter 9 routing 165

Click add new policy forward rule in the policy forwarding screen or click the edit icon next to a policy use this screen to configure the required information for a policy route 165

Figure 65 policy forwarding add edit 165

Label description 165

Routing information protocol rip rfc 1058 and rfc 1389 allows a device to exchange routing information with other routers 165

Table 42 policy forwarding add edit 165

The following table describes the labels in this screen 165

Vmg1312 b10b vmg1312 b30b series user s guide 165

Chapter 9 routing 166

Figure 66 rip 166

Label description 166

Rip to open the rip screen 166

Table 43 rip 166

The following table describes the labels in this screen 166

The rip screen 166

Vmg1312 b10b vmg1312 b30b series user s guide 166

Overview 167

Quality of service qos 167

What you can do in this chapter 167

Before traffic shaping after traffic shaping 168

Qos versus cos 168

Tagging and marking 168

Traffic 168

Traffic rate 168

Traffic shaping 168

What you need to know 168

Before traffic policing after traffic policing 169

The quality of service general screen 169

Traffic 169

Traffic policing 169

Traffic rate 169

Chapter 10 quality of service qos 170

General 170

Label description 170

Queue setup to open the screen as shown next 170

The following table describes the labels in this screen 170

The queue setup screen 170

Vmg1312 b10b vmg1312 b30b series user s guide 170

Chapter 10 quality of service qos 171

Label description 171

Queue setup 171

The following table describes the labels in this screen 171

Use this screen to configure qos queue assignment 171

Vmg1312 b10b vmg1312 b30b series user s guide 171

Adding a qos queue 172

Chapter 10 quality of service qos 172

Click add new queue or the edit icon in the queue setup screen to configure a queue 172

Figure 69 queue setup add 172

Label description 172

Table 46 queue setup add 172

The class setup screen 172

The following table describes the labels in this screen 172

Use this screen to add edit or delete qos classifiers a classifier groups traffic into data flows according to specific criteria such as the source address destination address source port number destination port number or incoming interface for example you can configure a classifier to select traffic from the same protocol port such as telnet to form a flow 172

Vmg1312 b10b vmg1312 b30b series user s guide 172

Chapter 10 quality of service qos 173

Class setup 173

Class setup to open the following screen 173

Label description 173

The following table describes the labels in this screen 173

Vmg1312 b10b vmg1312 b30b series user s guide 173

You can give different priorities to traffic that the device forwards out through the wan interface give high priority to voice and video to make them run more smoothly similarly give low priority to many large file downloads so that they do not reduce the quality of other applications 173

Add edit qos class 174

Chapter 10 quality of service qos 175

Label description 175

Table 48 class setup add edit 175

The following table describes the labels in this screen 175

Vmg1312 b10b vmg1312 b30b series user s guide 175

Chapter 10 quality of service qos 176

Label description 176

Table 48 class setup add edit continued 176

Vmg1312 b10b vmg1312 b30b series user s guide 176

Chapter 10 quality of service qos 177

Label description 177

Policer setup 177

Policer setup the screen appears as shown 177

Table 48 class setup add edit continued 177

The following table describes the labels in this screen 177

The qos policer setup screen 177

Vmg1312 b10b vmg1312 b30b series user s guide 177

Add edit a qos policer 178

Chapter 10 quality of service qos 178

Click add new policer in the policer setup screen or the edit icon next to a policer to show the following screen 178

Figure 73 policer setup add edit 178

Label description 178

Table 50 policer setup add edit 178

The following table describes the labels in this screen 178

Vmg1312 b10b vmg1312 b30b series user s guide 178

Chapter 10 quality of service qos 179

Label description 179

Monitor 179

Monitor the screen appears as shown 179

Table 50 policer setup add edit 179

The following table describes the labels in this screen 179

The qos monitor screen 179

Vmg1312 b10b vmg1312 b30b series user s guide 179

Diffserv 180

Dscp and per hop behavior 180

Ieee 802 q tag 180

Technical reference 180

Automatic priority queue assignment 181

Chapter 10 quality of service qos 181

Dscp is backward compatible with the three precedence bits in the tos octet so that non diffserv compliant tos enabled network device will not conflict with the dscp mapping 181

Ieee 802 p user priority ethernet priority 181

If you enable qos on the device the device can automatically base on the ieee 802 p priority level ip precedence and or packet length to assign priority to traffic which does not match a class 181

Ip precedence 181

Layer 2 layer 3 181

Priority queue 181

Table 53 internal layer2 and layer3 qos mapping 181

The dscp value determines the forwarding behavior the phb per hop behavior that each packet gets across the diffserv network based on the marking rule different kinds of traffic can be marked for different kinds of forwarding resources can then be allocated according to the dscp values and the configured policies 181

The following table shows you the internal layer 2 and layer 3 qos mapping on the device on the device traffic assigned to higher priority queues gets through faster while traffic in lower index queues is dropped if the network is congested 181

Tos ip precedence dscp ip packet length byte 181

Vmg1312 b10b vmg1312 b30b series user s guide 181

Single rate three color marker 182

Token bucket 182

Two rate three color marker 183

Network address translation nat 185

Overview 185

What you can do in this chapter 185

What you need to know 185

Configuring servers behind port forwarding example 186

Finding out more 186

Note many residential broadband isp accounts do not allow you to run any server processes such as a web or ftp server from your location your isp may periodically check for servers and may suspend your account if it discovers any active services at your location if you are unsure refer to your isp 186

Port forwarding 186

The port forwarding screen 186

68 ip address assigned by isp 187

A 192 68 3 187

B 192 68 4 187

Chapter 11 network address translation nat 187

D 192 68 6 c 192 68 187

Figure 75 multiple servers behind nat example 187

Label description 187

Port forwarding 187

Port forwarding to open the following screen 187

See appendix g on page 379 for port numbers commonly used for particular services 187

The following table describes the fields in this screen 187

Third c in the example you assign the lan ip addresses and the isp assigns the wan ip address the nat network appears as a single host on the internet 187

Vmg1312 b10b vmg1312 b30b series user s guide 187

Wan lan 187

Add edit port forwarding 188

Chapter 11 network address translation nat 188

Click add new rule in the port forwarding screen or click the edit icon next to an existing rule to open the following screen 188

Figure 77 port forwarding add edit 188

Label description 188

Port forwarding continued 188

Table 55 port forwarding add edit 188

The following table describes the labels in this screen 188

Vmg1312 b10b vmg1312 b30b series user s guide 188

Applications 189

Applications the following screen appears 189

Chapter 11 network address translation nat 189

Label description 189

Table 55 port forwarding add edit continued 189

The applications screen 189

The following table describes the labels in this screen 189

This screen provides a summary of all nat applications and their configuration in addition this screen allows you to create new applications and or remove existing ones 189

Vmg1312 b10b vmg1312 b30b series user s guide 189

Add new application 190

The port triggering screen 190

Add edit port triggering rule 192

Chapter 11 network address translation nat 192

Figure 82 port triggering add edit 192

Label description 192

Port triggering continued 192

Table 59 port triggering configuration add edit 192

The following table describes the labels in this screen 192

This screen lets you create new port triggering rules click add new rule in the port triggering screen or click a rule s edit icon to open the following screen 192

Vmg1312 b10b vmg1312 b30b series user s guide 192

Chapter 11 network address translation nat 193

In addition to the servers for specified services nat supports a default server ip address a default server receives packets from ports that are not specified in the nat port forwarding setup screen 193

Label description 193

Note if you do not assign a default server address the device discards all packets received for ports that are not specified in the nat port forwarding screen 193

Table 59 port triggering configuration add edit continued 193

The dmz screen 193

The following table describes the fields in this screen 193

Vmg1312 b10b vmg1312 b30b series user s guide 193

The address mapping screen 194

The alg screen 194

Add edit address mapping rule 195

Address mapping 195

Chapter 11 network address translation nat 195

Figure 86 address mapping add edit 195

Label description 195

The following table describes the fields in this screen 195

To add or edit an address mapping rule click add new rule or the rule s edit icon in the address mapping screen to display the screen shown next 195

Vmg1312 b10b vmg1312 b30b series user s guide 195

Chapter 11 network address translation nat 196

Global local denotes the ip address of a host in a packet as the packet traverses a router for example the local address refers to the ip address of a host when the packet is in the local network while the global address refers to the ip address of the host when the same packet is traveling in the wan side 196

Inside outside denotes where a host is located relative to the device for example the computers of your subscribers are the inside hosts while the web servers on the internet are the outside hosts 196

Label description 196

Nat definitions 196

Table 63 address mapping add edit 196

Technical reference 196

The following table describes the fields in this screen 196

This part contains more information regarding nat 196

Vmg1312 b10b vmg1312 b30b series user s guide 196

What nat does 197

How nat works 198

Inside global address iga 198

Inside local address ila 198

Wan lan 198

Chapter 11 network address translation nat 199

Figure 88 nat application with ip alias 199

Nat application 199

Port forwarding services and port numbers 199

Services port number 199

Table 65 services and port numbers 199

The following figure illustrates a possible nat application where three inside lans logical lans using ip alias behind the device can communicate with three distinct wan networks 199

The most often used port numbers are shown in the following table please refer to rfc 1700 for further information about port numbers please also refer to the supporting cd for more examples and details on port forwarding and nat 199

Vmg1312 b10b vmg1312 b30b series user s guide 199

Ip address assigned by isp 200

Port forwarding example 200

Dynamic dns setup 201

Overview 201

What you can do in this chapter 201

Dyndns wildcard 202

The dns entry screen 202

What you need to know 202

Add edit dns entry 203

The dynamic dns screen 203

Chapter 12 dynamic dns setup 204

Dynamic dns 204

Label description 204

The following table describes the fields in this screen 204

Vmg1312 b10b vmg1312 b30b series user s guide 204

Interface group 205

Overview 205

The interface group screen 205

What you can do in this chapter 205

68 x 24 206

68 x 24 vdsl_poe ppp0 206

Default eth 2 4 206

Dhcp vendor id option msft 5 206

Interface group configuration 206

Internet 206

Chapter 13 interface group 207

Figure 95 interface group configuration 207

Label description 207

Note an interface can belong to only one group at a time 207

Table 70 interface group configuration 207

The following table describes the fields in this screen 207

Vmg1312 b10b vmg1312 b30b series user s guide 207

Chapter 13 interface group 208

Click the add button in the interface grouping configuration screen to open the following screen 208

Figure 96 interface grouping criteria 208

Interface grouping criteria 208

Label description 208

Table 70 interface group configuration continued 208

Table 71 interface grouping criteria 208

The following table describes the fields in this screen 208

Vmg1312 b10b vmg1312 b30b series user s guide 208

Chapter 13 interface group 209

Label description 209

Table 71 interface grouping criteria continued 209

Vmg1312 b10b vmg1312 b30b series user s guide 209

Overview 211

Usb service 211

What you can do in this chapter 211

What you need to know 211

About printer server 212

Operating system 212

Print server 212

Supported oss 212

Tcp ip 212

The file sharing screen 212

Before you begin 213

Note if your usb device cannot be detected by the device see the troubleshooting for suggestions 213

The device will not be able to join the workgroup if your local area network has restrictions set up that do not allow devices to join a workgroup in this case contact your network administrator 213

Note anyone on your network can play the media files in the published shares no user name and password or other form of security is used the media server is enabled by default with the video photo and music shares published 214

The media server screen 214

Before you begin 215

Note your printer s installation instructions may ask that you connect the printer to your computer connect your printer to the device instead 215

The printer server screen 215

Firewall 217

Overview 217

What you can do in this chapter 217

Land attack 218

Ping of death 218

Syn attack 218

What you need to know 218

Chapter 15 firewall 219

Firewall to display the general screen 219

General 219

Label description 219

The firewall screen 219

The following table describes the labels in this screen 219

The service screen 219

Use this screen to set the security level of the firewall on the device firewall rules are grouped based on the direction of travel of packets to which they apply 219

Vmg1312 b10b vmg1312 b30b series user s guide 219

You can configure customized services and port numbers in the service screen for a comprehensive list of port numbers and services visit the iana internet assigned number authority website see appendix g on page 379 for some examples 219

Add edit a service 220

Chapter 15 firewall 220

Figure 105 service add edit 220

Label description 220

Service 220

Service to display the following screen 220

The following table describes the labels in this screen 220

Use this screen to add a customized service rule that you can use in the firewall s acl rule configuration click add new service entry or the edit icon next to an existing service rule in the service screen to display the following screen 220

Vmg1312 b10b vmg1312 b30b series user s guide 220

Access control 221

Access control to display the following screen this screen displays a list of the configured incoming or outgoing filtering rules 221

Chapter 15 firewall 221

Label description 221

Table 77 service add edit 221

The access control screen 221

The following table describes the labels in this screen 221

Vmg1312 b10b vmg1312 b30b series user s guide 221

Access control continued 222

Add edit an acl rule 222

Chapter 15 firewall 222

Click add new acl rule or the edit icon next to an existing acl rule in the access control screen the following screen displays 222

Figure 107 access control add edit 222

Label description 222

Vmg1312 b10b vmg1312 b30b series user s guide 222

Chapter 15 firewall 223

Label description 223

Table 79 access control add edit 223

The following table describes the labels in this screen 223

Vmg1312 b10b vmg1312 b30b series user s guide 223

The dos screen 224

Mac filter 225

Overview 225

The mac filter screen 225

Chapter 16 mac filter 226

Label description 226

Mac filter 226

The following table describes the labels in this screen 226

Vmg1312 b10b vmg1312 b30b series user s guide 226

Overview 227

Parental control 227

The parental control screen 227

Add edit a parental control rule 228

Chapter 17 parental control 228

Click add new pcp in the parental control screen to add a new rule or click the edit icon next to an existing rule to edit it use this screen to configure a restricted access schedule and or url filtering settings to block the users on your network from accessing certain web sites 228

Figure 111 parental control rule add edit 228

Label description 228

Parental control continued 228

Vmg1312 b10b vmg1312 b30b series user s guide 228

Chapter 17 parental control 229

Label description 229

Table 83 parental control rule add edit 229

The following table describes the fields in this screen 229

Vmg1312 b10b vmg1312 b30b series user s guide 229

Overview 231

Scheduler rule 231

The scheduler rule screen 231

Add edit a schedule 232

Chapter 18 scheduler rule 232

Click the add button in the scheduler rule screen or click the edit icon next to a schedule rule to open the following screen use this screen to configure a restricted access schedule 232

Figure 113 scheduler rule add edit 232

Label description 232

Table 85 scheduler rule add edit 232

The following table describes the fields in this screen 232

Vmg1312 b10b vmg1312 b30b series user s guide 232

Certificates 233

Overview 233

What you can do in this chapter 233

What you need to know 233

Certificates to open the local certificates screen this is the device s summary list of certificates and certification requests 234

Chapter 19 certificates 234

Label description 234

Local certificates 234

The following table describes the labels in this screen 234

The local certificates screen 234

Vmg1312 b10b vmg1312 b30b series user s guide 234

After you click apply the following screen displays to notify you that you need to get the certificate request signed by a certificate authority if you already have click load_signed to import the signed certificate into the device otherwise click back to return to the local certificates screen 235

Chapter 19 certificates 235

Create certificate request 235

Figure 115 create certificate request 235

Label description 235

Local certificates and then create certificate request to open the following screen use this screen to have the device generate a certification request 235

Table 87 create certificate request 235

The following table describes the labels in this screen 235

Vmg1312 b10b vmg1312 b30b series user s guide 235

Load signed certificate 236

Note you must remove any spaces from the certificate s filename before you can import it 236

Chapter 19 certificates 237

Label description 237

Table 88 load signed certificate 237

The following table describes the fields in this screen 237

The following table describes the labels in this screen 237

The trusted ca screen 237

Trusted ca 237

Trusted ca to open the following screen this screen displays a summary list of certificates of the certification authorities that you have set the device to accept as trusted the device accepts any valid certificate signed by a certification authority on this list as being trustworthy thus you do not need to import any certificate that is signed by one of these certification authorities 237

Vmg1312 b10b vmg1312 b30b series user s guide 237

Chapter 19 certificates 238

Click the view icon in the trusted ca screen to open the following screen use this screen to view in depth information about the certification authority s certificate 238

Figure 119 trusted ca view 238

Label description 238

Table 90 trusted ca view 238

The following table describes the fields in this screen 238

View trusted ca certificate 238

Vmg1312 b10b vmg1312 b30b series user s guide 238

Chapter 19 certificates 239

Click the import certificate button in the trusted ca screen to open the following screen the device trusts any valid certificate signed by any of the imported trusted ca certificates 239

Figure 120 trusted ca import certificate 239

Import trusted ca certificate 239

Label description 239

Table 91 trusted ca import certificate 239

The following table describes the fields in this screen 239

Vmg1312 b10b vmg1312 b30b series user s guide 239

Ipsec vpn 241

Overview 241

The general screen 241

Add new connection to open this screen as shown next 242

Chapter 20 vpn 242

Ipsec vpn add 242

Label description 242

Table 92 ipsec vpn 242

This screen contains the following fields 242

Vmg1312 b10b vmg1312 b30b series user s guide 242

Chapter 20 vpn 244

Label description 244

Note only use manual key as a temporary solution because it is not as secure as a regular ipsec sa 244

Table 93 ipsec vpn add 244

Vmg1312 b10b vmg1312 b30b series user s guide 244

Chapter 20 vpn 245

Label description 245

Table 93 ipsec vpn add 245

Vmg1312 b10b vmg1312 b30b series user s guide 245

Chapter 20 vpn 246

Label description 246

Note only use manual key as a temporary solution because it is not as secure as a regular ipsec sa 246

Table 93 ipsec vpn add 246

Vmg1312 b10b vmg1312 b30b series user s guide 246

Chapter 20 vpn 247

Ipsec architecture 247

Label description 247

Table 93 ipsec vpn add 247

Technical reference 247

The overall ipsec architecture is shown as follows 247

This section provides some technical background information about the topics covered in this section 247

Vmg1312 b10b vmg1312 b30b series user s guide 247

Encapsulation 248

Ipsec algorithms 248

Key management 248

Ike phases 249

Transport mode 249

Tunnel mode 249

Negotiation mode 250

Ipsec and nat 251

Vpn nat and nat traversal 251

Diffie hellman dh key groups 252

Pre shared key 252

Overview 253

What you can do in this chapter 253

What you need to know 253

Chapter 21 log 254

Code severity 254

Label description 254

Log to open the system log screen 254

System log 254

Table 96 syslog severity levels 254

The following table describes the fields in this screen 254

The system log screen 254

Vmg1312 b10b vmg1312 b30b series user s guide 254

Chapter 21 log 255

Label description 255

Security log 255

Security log to open the following screen 255

The following table describes the fields in this screen 255

The security log screen 255

Vmg1312 b10b vmg1312 b30b series user s guide 255

Overview 257

The wan status screen 257

Traffic status 257

What you can do in this chapter 257

Chapter 22 traffic status 258

Label description 258

The following table describes the fields in this screen 258

Vmg1312 b10b vmg1312 b30b series user s guide 258

Chapter 22 traffic status 259

Label description 259

Lan to open the following screen the figure in this screen shows the interface that is currently connected on the device 259

The following table describes the fields in this screen 259

The lan status screen 259

Vmg1312 b10b vmg1312 b30b series user s guide 259

The nat status screen 260

Arp table 261

Arp table screen 261

How arp works 261

Overview 261

Overview 263

Routing table 263

The routing table screen 263

Chapter 24 routing table 264

Label description 264

Routing table continued 264

Vmg1312 b10b vmg1312 b30b series user s guide 264

Igmp status 265

Overview 265

The igmp group status screen 265

The xdsl statistics screen 267

Xdsl statistics 267

Chapter 26 xdsl statistics 268

Label description 268

The following table describes the labels in this screen 268

Vmg1312 b10b vmg1312 b30b series user s guide 268

Xdsl statistics 268

Chapter 26 xdsl statistics 269

Label description 269

Vmg1312 b10b vmg1312 b30b series user s guide 269

Xdsl statistics continued 269

G statistics 271

Overview 271

The 3g statistics screen 271

Chapter 27 3g statistics 272

G statistics continued 272

Label description 272

Vmg1312 b10b vmg1312 b30b series user s guide 272

Overview 273

The user account screen 273

User account 273

Overview 275

Remote management 275

The remote mgmt screen 275

Chapter 29 remote management 276

Label description 276

Remote mgmt 276

The following table describes the fields in this screen 276

Vmg1312 b10b vmg1312 b30b series user s guide 276

Overview 277

The tr 069 client screen 277

Tr 069 client 277

Chapter 30 tr 069 client 278

Label description 278

The following table describes the fields in this screen 278

Tr 069 client 278

Vmg1312 b10b vmg1312 b30b series user s guide 278

Overview 279

The tr 064 screen 279

Tr 064 279

Overview 281

The time screen 281

Time settings 281

Chapter 32 time settings 282

Label description 282

The following table describes the fields in this screen 282

Time setting 282

Vmg1312 b10b vmg1312 b30b series user s guide 282

Chapter 32 time settings 283

Label description 283

Time setting continued 283

Vmg1312 b10b vmg1312 b30b series user s guide 283

E mail notification 285

Overview 285

The email notification screen 285

Chapter 33 e mail notification 286

Click the add button in the email notification screen use this screen to configure the required information for sending e mail via a mail server 286

Email notification edit 286

Label description 286

The following table describes the labels in this screen 286

Vmg1312 b10b vmg1312 b30b series user s guide 286

Logs setting 287

Overview 287

The log settings screen 287

An end of log message displays for each mail in which a complete log has been sent the following is an example of a log sent by e mail 288

Chapter 34 logs setting 288

Example e mail log 288

Label description 288

Logs setting 288

The date format here is day month year 288

The date format here is month day year the time format is hour minute second 288

The following table describes the fields in this screen 288

Vmg1312 b10b vmg1312 b30b series user s guide 288

You may edit the subject title 288

Firmware upgrade 291

Overview 291

The firmware screen 291

Configuration 293

Overview 293

The configuration screen 293

Do not turn off the device while configuration file upload is in progress 294

Restore configuration 294

Reset to factory defaults 295

The reboot screen 295

Diagnostic 297

Overview 297

What you can do in this chapter 297

What you need to know 297

Ping traceroute nslookup 298

802 ag 299

Ag to open the following screen use this screen to perform cfm actions 299

Chapter 37 diagnostic 299

Label description 299

The following table describes the fields in this screen 299

Vmg1312 b10b vmg1312 b30b series user s guide 299

Note the dslam to which the device is connected must also support atm f4 and or f5 to use this test 300

Oam ping 300

Note this screen is available only when you configure an atm layer 2 interface 301

Power hardware connections and leds 303

Troubleshooting 303

Device access and login 304

I cannot see or access the login screen in the web configurator 304

I forgot the ip address for the device 304

I forgot the password 304

I can see the login screen but i cannot log in to the device 305

I cannot telnet to the device 305

I cannot use ftp to upload download the configuration file i cannot use ftp to upload new firmware 305

I cannot access the internet 306

I cannot access the internet anymore i had access to the internet with the device but my internet connection is not available anymore 306

I cannot access the internet through a dsl connection 306

I cannot connect to the internet using a second dsl connection 306

Internet access 306

What factors may cause intermittent or unstabled wireless connection how can i solve this problem 307

What is a server set id ssid 307

Wireless internet access 307

I cannot open special applications such as white board file transfer and video when i use the msn messenger 308

Local network 308

The device fails to detect my usb device 308

The local area connection icon for upnp disappears in the screen 308

Usb device connection 308

Customer support 311

Ppendi 311

Austria 312

Belarus 312

Europe 312

Malaysia 312

Pakistan 312

Philipines 312

Singapore 312

Taiwan 312

Thailand 312

Vietnam 312

Belgium 313

Bulgaria 313

Denmark 313

Estonia 313

Finland 313

France 313

Germany 313

Hungary 313

Latvia 313

Lithuania 314

Netherlands 314

Norway 314

Poland 314

Romania 314

Russia 314

Slovakia 314

Sweden 314

Switzerland 314

Argentina 315

Ecuador 315

Latin america 315

Middle east 315

North america 315

Turkey 315

Ukraine 315

Africa 316

Australia 316

Oceania 316

South africa 316

Ppendi 317

Setting up your computer s ip address 317

Configuring 318

Installing components 318

Verifying settings 320

Windows 2000 nt xp 320

Verifying settings 325

Windows vista 325

Note during this procedure click continue whenever windows displays a screen saying that it needs your permission to continue 327

Verifying settings 331

Macintosh os 8 9 332

Macintosh os x 333

Verifying settings 333

Verifying settings 334

Note make sure you are logged in as the root administrator 335

Using the k desktop environment kde 335

Using configuration files 337

Verifying settings 338

Ip addresses and subnetting 339

Ppendi 339

Subnet masks 340

An ip address with host ids of all zeros is the ip address of the network 192 68 with a 24 bit subnet mask for example an ip address with host ids of all ones is the broadcast address for that network 192 68 55 with a 24 bit subnet mask for example 341

Appendix c ip addresses and subnetting 341

As these two ip addresses cannot be used for individual hosts calculate the maximum number of possible hosts in a network as follows 341

Binary 341

Decimal 1st octet 341

For example 192 25 is equivalent to saying 192 with subnet mask 255 55 55 28 341

Nd octet 341

Network size 341

Notation 341

Rd octet 4th octet 341

Since the mask is always a continuous number of ones beginning from the left followed by a continuous number of zeros for the remainder of the 32 bit mask you can simply specify the number of ones instead of writing the value of each octet this is usually specified by writing a followed by the number of bits in the mask after the address 341

Subnet mask host id size maximum number of hosts 341

Subnet masks are expressed in dotted decimal notation just like ip addresses the following examples show the binary and decimal notation for 8 bit 16 bit 24 bit and 29 bit subnet masks 341

Subnet masks can be referred to by the size of the network number part the bits with a 1 value for example an 8 bit mask means that the first 8 bits of the mask are ones and the remaining 24 bits are zeroes 341

Table 121 subnet masks 341

Table 122 maximum host numbers 341

The size of the network number determines the maximum number of possible hosts you can have on your network the larger the number of network number bits the smaller the number of remaining host id bits 341

Vmg1312 b10b vmg1312 b30b series user s guide 341

2 or 254 possible hosts 342

Appendix c ip addresses and subnetting 342

Figure 194 subnetting example before subnetting 342

In this example the company network address is 192 68 the first three octets of the address 192 68 are the network number and the remaining octet is the host id allowing a maximum of 342

Last octet binary 342

Last octet decimal 342

Subnet mask alternative notation 342

Subnetting 342

Table 123 alternative subnet mask notation 342

The borrowed host id bit can have a value of either 0 or 1 allowing two subnets 192 68 25 and 192 68 28 25 342

The following figure shows the company network before subnetting 342

The following table shows some possible subnet masks using both notations 342

Vmg1312 b10b vmg1312 b30b series user s guide 342

You can borrow one of the host id bits to divide the network 192 68 into two separate sub networks the subnet mask is now 25 bits 255 55 55 28 or 25 342

You can use subnetting to divide one network into multiple sub networks in the following example a network administrator creates two sub networks to isolate a group of servers from the rest of the company network for security reasons 342

Example four subnets 343

Appendix c ip addresses and subnetting 344

Broadcast address 344

Example eight subnets 344

Ip subnet mask network number last octet bit value 344

Subnet subnet address first address last address 344

Table 124 subnet 1 continued 344

Table 125 subnet 2 344

Table 126 subnet 3 344

Table 127 subnet 4 344

Table 128 eight subnets 344

The following table shows ip address last octet values for each subnet 344

Vmg1312 b10b vmg1312 b30b series user s guide 344

Appendix c ip addresses and subnetting 345

Broadcast address 345

No borrowed host bits subnet mask no subnets no hosts per subnet 345

Subnet planning 345

Subnet subnet address first address last address 345

Table 128 eight subnets continued 345

Table 129 24 bit network number subnet planning 345

Table 130 16 bit network number subnet planning 345

The following table is a summary for subnet planning on a network with a 16 bit network number 345

The following table is a summary for subnet planning on a network with a 24 bit network number 345

Vmg1312 b10b vmg1312 b30b series user s guide 345

Configuring ip addresses 346

Private ip addresses 346

Pop up windows javascripts and java permissions 347

Ppendi 347

Enable pop up blockers with exceptions 348

Javascripts 350

Java permissions 352

Java sun 353

Mozilla firefox 354

Ppendi 357

Wireless lans 357

Channel 359

Rts cts 359

Fragmentation threshold 360

Note enabling the rts threshold causes redundant network overhead that could negatively affect the throughput performance instead of providing a remedy 360

Ieee 802 1g wireless lan 361

Note you must enable the same wireless security settings on the device and on all wireless clients that you want to associate with it 361

Wireless security overview 361

Ieee 802 x 362

Radius 362

Types of radius messages 362

Eap md5 message digest algorithm 5 363

Eap tls transport layer security 363

Types of eap authentication 363

Appendix e wireless lans 364

Dynamic wep key exchange 364

Eap md5 eap tls eap ttls peap leap 364

Eap ttls is an extension of the eap tls authentication that uses certificates for only the server side authentications to establish a secure connection client authentication is then done by sending username and password through the secure connection thus client identity is protected for client authentication eap ttls supports eap methods and legacy authentication methods such as pap chap ms chap and ms chap v2 364

Eap ttls tunneled transport layer service 364

For added security certificate based authentications eap tls eap ttls and peap use dynamic keys for data encryption they are often deployed in corporate environments but for public deployment a simple user name and password pair is more practical the following table is a comparison of the features of authentication types 364

If this feature is enabled it is not necessary to configure a default encryption key in the wireless security configuration screen you may still configure and store keys but they will not be used while dynamic wep is enabled 364

Leap lightweight extensible authentication protocol is a cisco implementation of ieee 802 x 364

Like eap ttls server side certificate authentication is used to establish a secure connection then use simple username and password methods through the secured connection to authenticate the clients thus hiding client identity however peap only supports eap methods such as eap md5 eap mschapv2 and eap gtc eap generic token card for client authentication eap gtc is implemented only by cisco 364

Note eap md5 cannot be used with dynamic wep key exchange 364

Peap protected eap 364

Table 133 comparison of eap authentication types 364

The ap maps a unique key that is generated with the radius server this key expires when the wireless connection times out disconnects or reauthentication times out a new wep key is generated each time reauthentication is performed 364

Vmg1312 b10b vmg1312 b30b series user s guide 364

Encryption 365

Wpa and wpa2 365

User authentication 366

Wireless client wpa supplicants 366

Wpa 2 with radius application example 366

Wpa 2 psk application example 367

A radiation pattern is a diagram that allows you to visualize the shape of the antenna s coverage area 368

An antenna couples rf signals onto air a transmitter within a wireless device sends an rf signal to the antenna which propagates the signal through the air the antenna also operates in reverse by capturing rf signals from the air 368

An antenna in the frequency of 2 ghz ieee 802 1b and ieee 802 1g or 5ghz ieee 802 1a is needed to communicate efficiently in a wireless lan 368

Antenna characteristics 368

Antenna gain 368

Antenna gain measured in db decibel is the increase in coverage within the rf beam width higher antenna gain improves the range of the signal for better communications 368

Antenna overview 368

Appendix e wireless lans 368

Authentication method key management protocol 368

Encryptio n method 368

Enter manual key ieee 802 x 368

For an indoor site each 1 db increase in antenna gain results in a range increase of approximately 368

Frequency 368

Positioning the antennas properly increases the range and coverage area of a wireless lan 368

Radiation pattern 368

Refer to this table to see what other security parameters you should configure for each authentication method or key management protocol type mac address filters are not dependent on how you configure these security features 368

Security parameters summary 368

Table 134 wireless security relational matrix 368

Vmg1312 b10b vmg1312 b30b series user s guide 368

Positioning antennas 369

Types of antennas for wlan 369

Ppendi 371

Global address 372

Loopback address 372

Multicast address 372

Unspecified address 372

Eui 64 373

Identity association 373

Interface id 373

Subnet masking 373

Dhcp relay agent 374

Icmpv6 374

Neighbor discovery protocol ndp 374

Prefix delegation 374

Rebind 374

Renew rebind 374

Renew to s1 374

Ipv6 cache 375

Mld messages 375

Multicast listener discovery 375

Example enabling dhcpv6 on windows xp 376

Example enabling ipv6 on windows xp 2003 vista 376

Example enabling ipv6 on windows 7 377

Ppendi 379

Services 379

Appendix g services 380

Name protocol port s description 380

Table 138 examples of services 380

Vmg1312 b10b vmg1312 b30b series user s guide 380

Appendix g services 381

Name protocol port s description 381

Table 138 examples of services continued 381

Vmg1312 b10b vmg1312 b30b series user s guide 381

Appendix g services 382

Name protocol port s description 382

Table 138 examples of services continued 382

Vmg1312 b10b vmg1312 b30b series user s guide 382

Legal information 383

Ppendi 383

Fcc radiation exposure statement 384

Notices 384

注意 384

Open source licenses 385

Registration 385

Safety warnings 385

Zyxel limited warranty 385

Appendix h legal information 386

Vmg1312 b10b vmg1312 b30b series user s guide 386

Содержание

Похожие устройства