![Zyxel VMG1312-B10B [217/394] Firewall](/img/pdf.png)
Zyxel VMG1312-B10B [217/394] Firewall
![Zyxel VMG1312-B10B [217/394] Firewall](/views2/1169620/page217/bgd9.png)
VMG1312-B10B / VMG1312-B30B Series User’s Guide 217
CHAPTER 15
Firewall
15.1 Overview
This chapter shows you how to enable and configure the Device’s security settings. Use the firewall
to protect your Device and network from attacks by hackers on the Internet and control access to
it. By default the firewall:
• allows traffic that originates from your LAN computers to go to all other networks.
• blocks traffic that originates on other networks from going to the LAN.
The following figure illustrates the default firewall action. User A can initiate an IM (Instant
Messaging) session from the LAN to the WAN (1). Return traffic for this session is also allowed (2).
However other traffic initiated from the WAN is blocked (3 and 4).
Figure 102 Default Firewall Action
15.1.1 What You Can Do in this Chapter
•Use the General screen to configure the security level of the firewall on the Device (Section 15.2
on page 219).
•Use the Service screen to add or remove predefined Internet services and configure firewall
rules (Section 15.3 on page 219).
•Use the Access Control screen to view and configure incoming/outgoing filtering rules (Section
15.4 on page 221).
•Use the DoS screen to activate protection against Denial of Service (DoS) attacks (.Section 15.5
on page 224).
WAN
LAN
3
4
1
2
A
Содержание
- Default login details 1
- Quick start guide 1
- User s guide 1
- Vmg1312 b10b and vmg1312 b30b series 1
- Wireless n vdsl2 4 port gateway with usb 1
- Important 2
- Keep this guide for future reference 2
- Read carefully before use 2
- Related documentation 2
- Contents overview 3
- Technical reference 9 3
- User s guide 5 3
- Chapter 1 introducing the device 7 5
- Chapter 2 the web configurator 3 5
- Chapter 3 quick start 1 5
- Chapter 4 tutorials 3 5
- Contents overview 5
- Part i user s guide 15 5
- Table of contents 5
- Chapter 5 network map and status screens 1 6
- Chapter 6 broadband 5 6
- Part ii technical reference 69 6
- Chapter 7 wireless 01 7
- Chapter 8 home networking 37 7
- Chapter 10 quality of service qos 67 8
- Chapter 11 network address translation nat 85 8
- Chapter 9 routing 61 8
- Chapter 12 dynamic dns setup 01 9
- Chapter 13 interface group 05 9
- Chapter 14 usb service 211 9
- Chapter 15 firewall 17 9
- Chapter 16 mac filter 25 10
- Chapter 17 parental control 27 10
- Chapter 18 scheduler rule 31 10
- Chapter 19 certificates 33 10
- Chapter 20 vpn 41 10
- Chapter 21 log 53 11
- Chapter 22 traffic status 57 11
- Chapter 23 arp table 61 11
- Chapter 24 routing table 63 11
- Chapter 25 igmp status 65 11
- Chapter 26 xdsl statistics 67 11
- Chapter 27 3g statistics 71 12
- Chapter 28 user account 73 12
- Chapter 29 remote management 75 12
- Chapter 30 tr 069 client 77 12
- Chapter 31 tr 064 79 12
- Chapter 32 time settings 81 12
- Chapter 33 e mail notification 85 12
- Chapter 34 logs setting 87 12
- User s guide 15
- Good habits for managing the device 17
- Introducing the device 17
- Overview 17
- Ways to manage the device 17
- Adsl vdsl 18
- Applications for the device 18
- Broadband screen 18
- Internet access 18
- Device s usb support 19
- File sharing 19
- Media server 19
- Chapter 1 introducing the device 20
- Figure 4 leds on the device 20
- Led color status description 20
- Leds lights 20
- None of the leds are on if the device is not receiving power 20
- Table 1 led descriptions 20
- The following graphic displays the labels of the leds 20
- Vmg1312 b10b vmg1312 b30b series user s guide 20
- Chapter 1 introducing the device 21
- If you forget your password or cannot access the web configurator you will need to use the reset button at the back of the device to reload the factory default configuration file this means that you will lose all configurations that you had previously and the password will be reset to 1234 21
- Led color status description 21
- Make sure the power led is on not blinking 21
- Table 1 led descriptions continued 21
- The device is a wireless access point ap for wireless clients such as notebook computers or pdas and ipads it allows them to connect to the internet without having to rely on inconvenient ethernet cables 21
- The reset button 21
- To set the device back to the factory default settings press the reset button for ten seconds or until the power led begins to blink and then release it when the power led begins to blink the defaults have been restored and the device restarts 21
- Vmg1312 b10b vmg1312 b30b series user s guide 21
- Wireless access 21
- Using the wlan wps button 22
- Accessing the web configurator 23
- Overview 23
- The web configurator 23
- Title bar 26
- Web configurator layout 26
- Main window 27
- Chapter 2 the web configurator 28
- Link tab function 28
- Navigation panel 28
- Table 3 navigation panel summary 28
- Use the menu items on the navigation panel to open screens to configure device features the following tables describe each menu item 28
- Vmg1312 b10b vmg1312 b30b series user s guide 28
- Chapter 2 the web configurator 29
- Link tab function 29
- Table 3 navigation panel summary continued 29
- Vmg1312 b10b vmg1312 b30b series user s guide 29
- Chapter 2 the web configurator 30
- Link tab function 30
- Table 3 navigation panel summary continued 30
- Vmg1312 b10b vmg1312 b30b series user s guide 30
- Overview 31
- Quick start 31
- Quick start setup 31
- Overview 33
- Setting up an adsl pppoe connection 33
- Tutorials 33
- Configuring the wireless network settings 36
- Setting up a secure wireless network 36
- Note the wireless client must be a wps aware device for example a wps usb adapter or pcmcia card 38
- Push button configuration pbc 38
- Using wps 38
- Note it doesn t matter which button is pressed first you must press the second button within two minutes of pressing the first one 39
- Note your device has a wps button located on its front panel as well as a wps button in its configuration utility both buttons have exactly the same function you can use one or the other 39
- Wireless client device 40
- Pin configuration 41
- Authentication by pin 42
- Communication 42
- Note the device supports ieee 802 1b and ieee 802 1g wireless clients make sure that your notebook or computer s wireless adapter supports one of these standards 42
- Security info 42
- Within 2 minutes 42
- Without wps 42
- Zyxel device 42
- Company 43
- Setting up multiple wireless groups 43
- Vip guest 43
- Configuring static route for routing to another network 47
- 000 kbps dsl 50
- A colleague s computer other traffic automatic classifier 50
- And or mac aa ff aa ff aa ff email traffic highest priority 50
- Configuring qos queue and class setup 50
- Note qos is applied to traffic flowing out of the device 50
- Your computer ip 192 68 3 50
- Add new classifier to create a new class check active and follow the settings as shown in the screen below 52
- Chapter 4 tutorials 52
- Vmg1312 b10b vmg1312 b30b series user s guide 52
- Access the device using ddns 53
- Note if you have a private wan ip address then you cannot use ddns 53
- Registering a ddns account on www dyndns org 53
- W x y z a b c d 53
- Configuring ddns on your device 54
- Testing the ddns setting 54
- Configuring the mac address filter 55
- Josephine 55
- Thomas 55
- Access your shared files from a computer 56
- Note this example uses the filezilla ftp program to browse your shared files 56
- Computer with 57
- Configuring the device 57
- Note the media server feature is enabled by default 57
- Usb storage device 57
- Using the media server feature 57
- Using windows media player 57
- Windows media player 57
- Zyxel device 57
- Windows vista 58
- Windows 7 59
- Note for this tutorial your dma 2500 should already be set up with the tv according to the instructions in the dma 2500 quick start guide 60
- Using a digital media adapter 60
- Dma 2500 61
- Usb storage device 61
- Zyxel device 61
- Add a new printer using windows 62
- Using the print server feature 62
- Add a new printer using macintosh os x 65
- Technical reference 69
- Network map and status screens 71
- Overview 71
- The network map screen 71
- The status screen 72
- Chapter 5 network map and status screens 73
- Each field is described in the following table 73
- Label description 73
- Table 5 status screen 73
- Vmg1312 b10b vmg1312 b30b series user s guide 73
- Chapter 5 network map and status screens 74
- Label description 74
- Table 5 status screen continued 74
- Vmg1312 b10b vmg1312 b30b series user s guide 74
- Broadband 75
- Overview 75
- What you can do in this chapter 75
- Chapter 6 broadband 76
- Connection dsl link type mode encapsulation connection settings 76
- Encapsulation is used to include data from an upper layer protocol into a lower layer protocol to set up a wan connection to the internet you need to use the same encapsulation method used by your isp internet service provider if your isp offers a dial up internet connection using pppoe ppp over ethernet they should also provide a username and password and service name for user authentication 76
- Encapsulation method 76
- Layer 2 interface internet connection 76
- Table 6 wan setup overview 76
- The following terms and concepts may help as you read this chapter 76
- The wan ip address is an ip address for the device which makes it accessible from an outside network it is used by the device to communicate with other devices in other networks it can be static fixed or dynamically assigned by the isp each time the device tries to access the internet 76
- Use the 8021x screen to view and configure the ieee 802 x settings on the device section 6 on page 92 76
- Use the advanced screen to enable or disable ptm over adsl annex m annex j and dsl phyr functions section 6 on page 91 76
- Vmg1312 b10b vmg1312 b30b series user s guide 76
- Wan ip address 76
- What you need to know 76
- Any number of consecutive blocks of zeros can be replaced by a double colon a double colon can only appear once in an ipv6 address so 2001 0db8 0000 0000 1a2f 0000 0000 0015 can be written as 2001 0db8 1a2f 0000 0000 0015 2001 0db8 0000 0000 1a2f 0015 2001 db8 1a2f 0 0 15 or 2001 db8 0 0 1a2f 15 77
- Ipv6 addressing 77
- Ipv6 introduction 77
- Ipv6 prefix and prefix length 77
- Leading zeros in a block can be omitted so 2001 0db8 1a2b 0015 0000 0000 1a2f 0000 can be written as 2001 db8 1a2b 15 0 0 1a2f 0 77
- Before you begin 78
- Ipv6 subnet masking 78
- The broadband screen 78
- Broadband continued 79
- Chapter 6 broadband 79
- Label description 79
- Vmg1312 b10b vmg1312 b30b series user s guide 79
- Add edit internet connection 80
- Routing mode 80
- Chapter 6 broadband 81
- Label description 81
- Table 8 routing mode continued 81
- Vmg1312 b10b vmg1312 b30b series user s guide 81
- Chapter 6 broadband 82
- Label description 82
- Table 8 routing mode continued 82
- Vmg1312 b10b vmg1312 b30b series user s guide 82
- Chapter 6 broadband 83
- Label description 83
- Table 8 routing mode continued 83
- Vmg1312 b10b vmg1312 b30b series user s guide 83
- Bridge mode 84
- Broadband screen or the edit icon next to the connection you want to configure select bridge as the encapsulation mode the screen varies depending on the interface type you select 84
- Chapter 6 broadband 84
- Figure 21 bridge mode adsl vdsl over ptm 84
- If you select adsl vdsl over ptm as the interface type the following screen appears 84
- Label description 84
- Table 8 routing mode continued 84
- Vmg1312 b10b vmg1312 b30b series user s guide 84
- Chapter 6 broadband 85
- Figure 22 bridge mode adsl over atm 85
- If you select adsl over atm as the interface type the following screen appears 85
- Label description 85
- Table 9 bridge mode adsl vdsl over ptm 85
- The following table describes the fields in this screen 85
- Vmg1312 b10b vmg1312 b30b series user s guide 85
- Chapter 6 broadband 86
- Label description 86
- Table 10 bridge mode adsl over atm 86
- The following table describes the fields in this screen 86
- Vmg1312 b10b vmg1312 b30b series user s guide 86
- Chapter 6 broadband 87
- G backup 87
- Label description 87
- Table 10 bridge mode adsl over atm continued 87
- The 3g backup screen 87
- Vmg1312 b10b vmg1312 b30b series user s guide 87
- Chapter 6 broadband 88
- G backup 88
- Label description 88
- Note the actual data rate you obtain varies depending the 3g card you use the signal strength to the service provider s base station and so on 88
- The following table describes the labels in this screen 88
- Vmg1312 b10b vmg1312 b30b series user s guide 88
- Chapter 6 broadband 89
- G backup continued 89
- Label description 89
- Vmg1312 b10b vmg1312 b30b series user s guide 89
- Chapter 6 broadband 90
- G backup continued 90
- Label description 90
- Vmg1312 b10b vmg1312 b30b series user s guide 90
- The advanced screen 91
- Broadband continued 92
- Chapter 6 broadband 92
- Label description 92
- The 8021x screen 92
- The following table describes the labels in this screen 92
- Vmg1312 b10b vmg1312 b30b series user s guide 92
- X to display the following screen 92
- Chapter 6 broadband 93
- Edit 802 x settings 93
- Ethernet wan to open this screen 93
- Figure 27 802 x add edit 93
- Label description 93
- Note lan port 4 can operate as an ethernet wan port 93
- Table 14 802 x add edit 93
- The ethernet wan screen 93
- The following table describes the labels in this screen 93
- Use this screen to edit 802 x authentication settings click the edit icon next to the rule you want to edit the screen shown next appears 93
- Vmg1312 b10b vmg1312 b30b series user s guide 93
- Encapsulation 94
- Ip over ethernet 94
- Ppp over atm pppoa 94
- Technical reference 94
- Multiplexing 95
- Ppp over ethernet pppoe 95
- Rfc 1483 95
- Traffic shaping 95
- Atm traffic classes 96
- Introduction to ieee 802 q tagged vlan 97
- Introduction to vlans 97
- Ip address assignment 97
- Dns server address assignment 98
- Ipv6 addressing 98
- Multicast 98
- Ipv6 prefix and prefix length 99
- Overview 101
- What you can do in this chapter 101
- Wireless 101
- Finding out more 102
- Note if you are configuring the device from a computer connected to the wireless lan and you change the device s ssid channel or security settings you will lose your wireless connection when you press apply to confirm you must then change the wireless settings of your computer to match the device s new settings 102
- The general screen 102
- What you need to know 102
- Wireless basics 102
- Chapter 7 wireless 104
- General 104
- Label description 104
- The following table describes the general wireless lan labels in this screen 104
- Vmg1312 b10b vmg1312 b30b series user s guide 104
- Basic wep encryption 105
- Chapter 7 wireless 105
- General continued 105
- General no security 105
- Label description 105
- No security 105
- Note if you do not enable any wireless security on your device your network is accessible to any wireless networking device that is within range 105
- Select no security to allow wireless stations to communicate with the access points without any data encryption or authentication 105
- The following table describes the labels in this screen 105
- Vmg1312 b10b vmg1312 b30b series user s guide 105
- Wep encryption scrambles the data transmitted between the wireless stations and the access points ap to keep network communications private both the wireless stations and the access points must use the same wep key 105
- Note wep is extremely insecure its encryption can be broken by an attacker using widely available software it is strongly recommended that you use a more effective security mechanism use the strongest security mechanism that all the wireless devices in your network support for example use wpa psk or wpa2 psk if all your wireless devices support it or use wpa or wpa2 if your wireless devices support it and you have a radius server if your wireless devices support nothing stronger than wep use the highest encryption level available 106
- Basic 802 x 107
- Chapter 7 wireless 108
- General basic 802 x continued 108
- Label description 108
- Vmg1312 b10b vmg1312 b30b series user s guide 108
- Chapter 7 wireless 109
- General more secure wpa 2 psk 109
- Label description 109
- More secure wpa 2 psk 109
- The following table describes the labels in this screen 109
- The wpa psk security mode provides both improved data encryption and user authentication over wep using a pre shared key psk both the device and the connecting client share a common password in order to validate the connection this type of encryption while robust is not as strong as wpa wpa2 or even wpa2 psk the wpa2 psk security mode is a newer more robust version of the wpa encryption standard it offers slightly better security although the use of psk makes it less robust than it could be 109
- Vmg1312 b10b vmg1312 b30b series user s guide 109
- Wireless to display the general screen select more secure as the security level then select wpa psk or wpa2 psk from the security mode list 109
- Wpa 2 authentication 110
- Chapter 7 wireless 111
- General more secure wpa 2 continued 111
- Label description 111
- More ap 111
- More ap the following screen displays 111
- The more ap screen 111
- This screen allows you to enable and configure multiple basic service sets bsss on the device 111
- Vmg1312 b10b vmg1312 b30b series user s guide 111
- Chapter 7 wireless 112
- Label description 112
- More ap 112
- The following table describes the labels in this screen 112
- Vmg1312 b10b vmg1312 b30b series user s guide 112
- Edit more ap 113
- Chapter 7 wireless 114
- Label description 114
- Mac authentication 114
- Table 23 more ap edit continued 114
- This screen allows you to configure the zyxel device to give exclusive access to specific devices allow or exclude specific devices from accessing the zyxel device deny every ethernet device has a unique mac media access control address the mac address is assigned at the factory and consists of six pairs of hexadecimal characters for example 00 a0 c5 00 00 02 you need to know the mac addresses of the devices to configure this screen 114
- Vmg1312 b10b vmg1312 b30b series user s guide 114
- Chapter 7 wireless 115
- Label description 115
- Mac authentication 115
- Mac authentication the screen appears as shown 115
- Mac restrict mode 115
- The following table describes the labels in this screen 115
- The wps screen 115
- Use this screen to configure wifi protected setup wps on your device 115
- Vmg1312 b10b vmg1312 b30b series user s guide 115
- Wps allows you to quickly set up a wireless network with strong security without having to configure security settings manually set up each wps connection between two devices both devices must support wps see section 7 0 on page 131 for more information about wps 115
- Chapter 7 wireless 116
- Label description 116
- Note the device applies the security settings of the ssid1 profile see section 7 on page 102 if you want to use the wps feature make sure you have set the security mode of ssid1 to wpa2 psk or no security 116
- Note you must also activate wps on that device within two minutes to have it present its pin to the device 116
- Note you must press the other wireless device s wps button within two minutes of pressing this button 116
- The following table describes the labels in this screen 116
- Vmg1312 b10b vmg1312 b30b series user s guide 116
- Wps the following screen displays select enable and click apply to activate the wps function then you can configure the wps settings in this screen 116
- Chapter 7 wireless 117
- Label description 117
- Note note this works only if the wireless device to which the device is connected also supports this feature 117
- The following table describes the labels in this screen 117
- The wmm screen 117
- Use this screen to enable wi fi multimedia wmm and wmm power save in wireless networks for multimedia applications 117
- Vmg1312 b10b vmg1312 b30b series user s guide 117
- Wmm the following screen displays 117
- Wps continued 117
- An ap using the wireless distribution system wds can function as a wireless network bridge allowing you to wirelessly connect two wired network segments the wds screen allows you to configure the device to connect to two or more aps wirelessly when wds is enabled 118
- Chapter 7 wireless 118
- Label description 118
- Note at the time of writing wds is compatible with other zyxel aps only not all models support wds links check your other ap s documentation 118
- Note wds security is independent of the security settings between the device and any wireless clients 118
- The following table describes the labels in this screen 118
- The wds screen 118
- Use this screen to set up your wds wireless distribution system links between the device and other wireless aps you need to know the mac address of the peer device once the security settings of peer sides match one another the connection between devices is made 118
- Vmg1312 b10b vmg1312 b30b series user s guide 118
- Wds the following screen displays 118
- Chapter 7 wireless 119
- Figure 42 wds scan 119
- Label description 119
- Table 28 wds scan 119
- The following table describes the labels in this screen 119
- Vmg1312 b10b vmg1312 b30b series user s guide 119
- Wds continued 119
- Wds scan 119
- Wds to have the device automatically search and display the available aps within range select an ap and click apply to have the device establish a wireless link with the selected wireless device 119
- Chapter 7 wireless 120
- Label description 120
- Others 120
- Others the screen appears as shown 120
- See section 7 0 on page 124 for detailed definitions of the terms listed in this screen 120
- The following table describes the labels in this screen 120
- The others screen 120
- Vmg1312 b10b vmg1312 b30b series user s guide 120
- Chapter 7 wireless 121
- Label description 121
- Others continued 121
- Vmg1312 b10b vmg1312 b30b series user s guide 121
- Technical reference 122
- The channel status screen 122
- Wireless network overview 122
- Radio channels 123
- Additional wireless terms 124
- Wireless security overview 124
- Mac address filter 125
- User authentication 125
- Encryption 126
- Note it is recommended that wireless networks use wpa psk wpa or stronger encryption the other types of encryption are better than none at all but it is still possible for unauthorized wireless devices to figure out the original information pretty quickly 126
- Signal problems 126
- Mbssid 127
- Notes on multiple bsss 127
- Ap 2 ap 1 128
- Note the wireless devices must use the same preamble mode in order to communicate 128
- Preamble type 128
- Wifi protected setup wps 128
- Wireless distribution system wds 128
- Pin configuration 129
- Push button configuration 129
- How wps works 131
- Example wps network setup 132
- Client 1 ap1 133
- Client 2 133
- Client 1 ap1 134
- Client 2 134
- Limitations of wps 134
- Home networking 137
- Overview 137
- What you can do in this chapter 137
- About lan 138
- About upnp 138
- Identifying upnp devices 138
- Ip address 138
- Nat traversal 138
- Radvd router advertisement daemon 138
- Subnet mask 138
- What you need to know 138
- Before you begin 139
- Cautions with upnp 139
- Finding out more 139
- The lan setup screen 139
- Upnp and zyxel 139
- Chapter 8 home networking 140
- Click apply to save your settings 140
- Label description 140
- Lan setup 140
- The following table describes the fields in this screen 140
- Vmg1312 b10b vmg1312 b30b series user s guide 140
- Chapter 8 home networking 141
- Label description 141
- Lan setup continued 141
- Vmg1312 b10b vmg1312 b30b series user s guide 141
- Chapter 8 home networking 142
- Every ethernet device has a unique mac media access control address the mac address is assigned at the factory and consists of six pairs of hexadecimal characters for example 00 a0 c5 00 00 02 142
- Label description 142
- Lan setup continued 142
- The static dhcp screen 142
- This table allows you to assign ip addresses on the lan to specific individual computers based on their mac addresses 142
- Vmg1312 b10b vmg1312 b30b series user s guide 142
- Chapter 8 home networking 143
- Figure 55 static dhcp add edit 143
- If you click add new static lease in the static dhcp screen or the edit icon next to a static dhcp entry the following screen displays 143
- Label description 143
- Static dhcp 143
- Static dhcp to open the following screen 143
- Table 34 static dhcp add edit 143
- The following table describes the labels in this screen 143
- Vmg1312 b10b vmg1312 b30b series user s guide 143
- Chapter 8 home networking 144
- Label description 144
- See page 138 for more information on upnp 144
- Table 34 static dhcp add edit continued 144
- The upnp screen 144
- Universal plug and play upnp is a distributed open networking standard that uses tcp ip for simple peer to peer network connectivity between devices a upnp device can dynamically join a network obtain an ip address convey its capabilities and learn about other devices on the network in turn a device can leave a network smoothly and automatically when it is no longer in use 144
- Upnp to display the screen shown next 144
- Vmg1312 b10b vmg1312 b30b series user s guide 144
- Chapter 8 home networking 145
- Click start and control panel double click add remove programs 145
- Follow the steps below to install the upnp in windows me 145
- Installing upnp in windows example 145
- Installing upnp in windows me 145
- Label description 145
- The following table describes the labels in this screen 145
- This section shows how to install upnp in windows me and windows xp 145
- Vmg1312 b10b vmg1312 b30b series user s guide 145
- Installing upnp in windows xp 147
- Auto discover your upnp enabled network device 148
- Using upnp in windows xp example 148
- Web configurator easy access 151
- The additional subnet screen 154
- The stb vendor id screen 155
- Chapter 8 home networking 156
- Label description 156
- Lan vlan 156
- Lan vlan to open this screen use this screen to control the vlan id and ieee 802 p priority tags of traffic sent out through individual lan ports 156
- Technical reference 156
- The following table describes the labels in this screen 156
- The lan vlan screen 156
- This section provides some technical background information about the topics covered in this chapter 156
- Vmg1312 b10b vmg1312 b30b series user s guide 156
- Dhcp setup 157
- Dns server addresses 157
- Ip pool setup 157
- Lans wans and the device 157
- Wan lan 157
- Ip address and subnet mask 158
- Lan tcp ip 158
- Private ip addresses 158
- Note regardless of your particular situation do not create an arbitrary ip address always follow the guidelines above for more information on address assignment please refer to rfc 1597 address allocation for private internets and rfc 1466 guidelines for management of ip address space 159
- Overview 161
- Routing 161
- Chapter 9 routing 162
- Label description 162
- Static route 162
- Static route to open the following screen 162
- The following table describes the labels in this screen 162
- The routing screen 162
- Vmg1312 b10b vmg1312 b30b series user s guide 162
- Add edit static route 163
- Chapter 9 routing 163
- Figure 63 routing add edit 163
- Label description 163
- Table 40 routing add edit 163
- The following table describes the labels in this screen 163
- The policy forwarding screen 163
- Traditionally routing is based on the destination address only and the device takes the shortest path to forward a packet policy forwarding allows the device to override the default routing behavior and alter the packet forwarding based on the policy defined by the network administrator policy based routing is applied to outgoing packets prior to the normal routing 163
- Use this screen to add or edit a static route click add new static route in the routing screen or the edit icon next to the static route you want to edit the screen shown next appears 163
- Vmg1312 b10b vmg1312 b30b series user s guide 163
- Chapter 9 routing 164
- Label description 164
- Policy forwarding 164
- Policy forwarding to open the following screen 164
- The following table describes the labels in this screen 164
- Vmg1312 b10b vmg1312 b30b series user s guide 164
- You can use source based policy forwarding to direct traffic from different users through different connections or distribute traffic among multiple paths for load sharing 164
- Add edit policy forwarding 165
- Chapter 9 routing 165
- Click add new policy forward rule in the policy forwarding screen or click the edit icon next to a policy use this screen to configure the required information for a policy route 165
- Figure 65 policy forwarding add edit 165
- Label description 165
- Routing information protocol rip rfc 1058 and rfc 1389 allows a device to exchange routing information with other routers 165
- Table 42 policy forwarding add edit 165
- The following table describes the labels in this screen 165
- Vmg1312 b10b vmg1312 b30b series user s guide 165
- Chapter 9 routing 166
- Figure 66 rip 166
- Label description 166
- Rip to open the rip screen 166
- Table 43 rip 166
- The following table describes the labels in this screen 166
- The rip screen 166
- Vmg1312 b10b vmg1312 b30b series user s guide 166
- Overview 167
- Quality of service qos 167
- What you can do in this chapter 167
- Before traffic shaping after traffic shaping 168
- Qos versus cos 168
- Tagging and marking 168
- Traffic 168
- Traffic rate 168
- Traffic shaping 168
- What you need to know 168
- Before traffic policing after traffic policing 169
- The quality of service general screen 169
- Traffic 169
- Traffic policing 169
- Traffic rate 169
- Chapter 10 quality of service qos 170
- General 170
- Label description 170
- Queue setup to open the screen as shown next 170
- The following table describes the labels in this screen 170
- The queue setup screen 170
- Vmg1312 b10b vmg1312 b30b series user s guide 170
- Chapter 10 quality of service qos 171
- Label description 171
- Queue setup 171
- The following table describes the labels in this screen 171
- Use this screen to configure qos queue assignment 171
- Vmg1312 b10b vmg1312 b30b series user s guide 171
- Adding a qos queue 172
- Chapter 10 quality of service qos 172
- Click add new queue or the edit icon in the queue setup screen to configure a queue 172
- Figure 69 queue setup add 172
- Label description 172
- Table 46 queue setup add 172
- The class setup screen 172
- The following table describes the labels in this screen 172
- Use this screen to add edit or delete qos classifiers a classifier groups traffic into data flows according to specific criteria such as the source address destination address source port number destination port number or incoming interface for example you can configure a classifier to select traffic from the same protocol port such as telnet to form a flow 172
- Vmg1312 b10b vmg1312 b30b series user s guide 172
- Chapter 10 quality of service qos 173
- Class setup 173
- Class setup to open the following screen 173
- Label description 173
- The following table describes the labels in this screen 173
- Vmg1312 b10b vmg1312 b30b series user s guide 173
- You can give different priorities to traffic that the device forwards out through the wan interface give high priority to voice and video to make them run more smoothly similarly give low priority to many large file downloads so that they do not reduce the quality of other applications 173
- Add edit qos class 174
- Chapter 10 quality of service qos 175
- Label description 175
- Table 48 class setup add edit 175
- The following table describes the labels in this screen 175
- Vmg1312 b10b vmg1312 b30b series user s guide 175
- Chapter 10 quality of service qos 176
- Label description 176
- Table 48 class setup add edit continued 176
- Vmg1312 b10b vmg1312 b30b series user s guide 176
- Chapter 10 quality of service qos 177
- Label description 177
- Policer setup 177
- Policer setup the screen appears as shown 177
- Table 48 class setup add edit continued 177
- The following table describes the labels in this screen 177
- The qos policer setup screen 177
- Vmg1312 b10b vmg1312 b30b series user s guide 177
- Add edit a qos policer 178
- Chapter 10 quality of service qos 178
- Click add new policer in the policer setup screen or the edit icon next to a policer to show the following screen 178
- Figure 73 policer setup add edit 178
- Label description 178
- Table 50 policer setup add edit 178
- The following table describes the labels in this screen 178
- Vmg1312 b10b vmg1312 b30b series user s guide 178
- Chapter 10 quality of service qos 179
- Label description 179
- Monitor 179
- Monitor the screen appears as shown 179
- Table 50 policer setup add edit 179
- The following table describes the labels in this screen 179
- The qos monitor screen 179
- Vmg1312 b10b vmg1312 b30b series user s guide 179
- Diffserv 180
- Dscp and per hop behavior 180
- Ieee 802 q tag 180
- Technical reference 180
- Automatic priority queue assignment 181
- Chapter 10 quality of service qos 181
- Dscp is backward compatible with the three precedence bits in the tos octet so that non diffserv compliant tos enabled network device will not conflict with the dscp mapping 181
- Ieee 802 p user priority ethernet priority 181
- If you enable qos on the device the device can automatically base on the ieee 802 p priority level ip precedence and or packet length to assign priority to traffic which does not match a class 181
- Ip precedence 181
- Layer 2 layer 3 181
- Priority queue 181
- Similar to ieee 802 p prioritization at layer 2 you can use ip precedence to prioritize packets in a layer 3 network ip precedence uses three bits of the eight bit tos type of service field in the ip header there are eight classes of services ranging from zero to seven in ip precedence zero is the lowest priority level and seven is the highest 181
- Table 53 internal layer2 and layer3 qos mapping 181
- The dscp value determines the forwarding behavior the phb per hop behavior that each packet gets across the diffserv network based on the marking rule different kinds of traffic can be marked for different kinds of forwarding resources can then be allocated according to the dscp values and the configured policies 181
- The following table shows you the internal layer 2 and layer 3 qos mapping on the device on the device traffic assigned to higher priority queues gets through faster while traffic in lower index queues is dropped if the network is congested 181
- Tos ip precedence dscp ip packet length byte 181
- Vmg1312 b10b vmg1312 b30b series user s guide 181
- Single rate three color marker 182
- Token bucket 182
- Two rate three color marker 183
- Network address translation nat 185
- Overview 185
- What you can do in this chapter 185
- What you need to know 185
- Configuring servers behind port forwarding example 186
- Finding out more 186
- Note many residential broadband isp accounts do not allow you to run any server processes such as a web or ftp server from your location your isp may periodically check for servers and may suspend your account if it discovers any active services at your location if you are unsure refer to your isp 186
- Port forwarding 186
- The port forwarding screen 186
- 68 ip address assigned by isp 187
- A 192 68 3 187
- B 192 68 4 187
- Chapter 11 network address translation nat 187
- D 192 68 6 c 192 68 187
- Figure 75 multiple servers behind nat example 187
- Label description 187
- Port forwarding 187
- Port forwarding to open the following screen 187
- See appendix g on page 379 for port numbers commonly used for particular services 187
- The following table describes the fields in this screen 187
- Third c in the example you assign the lan ip addresses and the isp assigns the wan ip address the nat network appears as a single host on the internet 187
- Vmg1312 b10b vmg1312 b30b series user s guide 187
- Wan lan 187
- Add edit port forwarding 188
- Chapter 11 network address translation nat 188
- Click add new rule in the port forwarding screen or click the edit icon next to an existing rule to open the following screen 188
- Figure 77 port forwarding add edit 188
- Label description 188
- Port forwarding continued 188
- Table 55 port forwarding add edit 188
- The following table describes the labels in this screen 188
- Vmg1312 b10b vmg1312 b30b series user s guide 188
- Applications 189
- Applications the following screen appears 189
- Chapter 11 network address translation nat 189
- Label description 189
- Table 55 port forwarding add edit continued 189
- The applications screen 189
- The following table describes the labels in this screen 189
- This screen provides a summary of all nat applications and their configuration in addition this screen allows you to create new applications and or remove existing ones 189
- Vmg1312 b10b vmg1312 b30b series user s guide 189
- Add new application 190
- The port triggering screen 190
- Add edit port triggering rule 192
- Chapter 11 network address translation nat 192
- Figure 82 port triggering add edit 192
- Label description 192
- Port triggering continued 192
- Table 59 port triggering configuration add edit 192
- The following table describes the labels in this screen 192
- This screen lets you create new port triggering rules click add new rule in the port triggering screen or click a rule s edit icon to open the following screen 192
- Vmg1312 b10b vmg1312 b30b series user s guide 192
- Chapter 11 network address translation nat 193
- In addition to the servers for specified services nat supports a default server ip address a default server receives packets from ports that are not specified in the nat port forwarding setup screen 193
- Label description 193
- Note if you do not assign a default server address the device discards all packets received for ports that are not specified in the nat port forwarding screen 193
- Table 59 port triggering configuration add edit continued 193
- The dmz screen 193
- The following table describes the fields in this screen 193
- Vmg1312 b10b vmg1312 b30b series user s guide 193
- The address mapping screen 194
- The alg screen 194
- Add edit address mapping rule 195
- Address mapping 195
- Chapter 11 network address translation nat 195
- Figure 86 address mapping add edit 195
- Label description 195
- The following table describes the fields in this screen 195
- To add or edit an address mapping rule click add new rule or the rule s edit icon in the address mapping screen to display the screen shown next 195
- Vmg1312 b10b vmg1312 b30b series user s guide 195
- Chapter 11 network address translation nat 196
- Global local denotes the ip address of a host in a packet as the packet traverses a router for example the local address refers to the ip address of a host when the packet is in the local network while the global address refers to the ip address of the host when the same packet is traveling in the wan side 196
- Inside outside denotes where a host is located relative to the device for example the computers of your subscribers are the inside hosts while the web servers on the internet are the outside hosts 196
- Label description 196
- Nat definitions 196
- Table 63 address mapping add edit 196
- Technical reference 196
- The following table describes the fields in this screen 196
- This part contains more information regarding nat 196
- Vmg1312 b10b vmg1312 b30b series user s guide 196
- What nat does 197
- How nat works 198
- Inside global address iga 198
- Inside local address ila 198
- Wan lan 198
- Chapter 11 network address translation nat 199
- Figure 88 nat application with ip alias 199
- Nat application 199
- Port forwarding services and port numbers 199
- Services port number 199
- Table 65 services and port numbers 199
- The following figure illustrates a possible nat application where three inside lans logical lans using ip alias behind the device can communicate with three distinct wan networks 199
- The most often used port numbers are shown in the following table please refer to rfc 1700 for further information about port numbers please also refer to the supporting cd for more examples and details on port forwarding and nat 199
- Vmg1312 b10b vmg1312 b30b series user s guide 199
- Ip address assigned by isp 200
- Port forwarding example 200
- Dynamic dns setup 201
- Overview 201
- What you can do in this chapter 201
- Dyndns wildcard 202
- The dns entry screen 202
- What you need to know 202
- Add edit dns entry 203
- The dynamic dns screen 203
- Chapter 12 dynamic dns setup 204
- Dynamic dns 204
- Label description 204
- The following table describes the fields in this screen 204
- Vmg1312 b10b vmg1312 b30b series user s guide 204
- Interface group 205
- Overview 205
- The interface group screen 205
- What you can do in this chapter 205
- 68 x 24 206
- 68 x 24 vdsl_poe ppp0 206
- Default eth 2 4 206
- Dhcp vendor id option msft 5 206
- Interface group configuration 206
- Internet 206
- Chapter 13 interface group 207
- Figure 95 interface group configuration 207
- Label description 207
- Note an interface can belong to only one group at a time 207
- Table 70 interface group configuration 207
- The following table describes the fields in this screen 207
- Vmg1312 b10b vmg1312 b30b series user s guide 207
- Chapter 13 interface group 208
- Click the add button in the interface grouping configuration screen to open the following screen 208
- Figure 96 interface grouping criteria 208
- Interface grouping criteria 208
- Label description 208
- Table 70 interface group configuration continued 208
- Table 71 interface grouping criteria 208
- The following table describes the fields in this screen 208
- Vmg1312 b10b vmg1312 b30b series user s guide 208
- Chapter 13 interface group 209
- Label description 209
- Table 71 interface grouping criteria continued 209
- Vmg1312 b10b vmg1312 b30b series user s guide 209
- Overview 211
- Usb service 211
- What you can do in this chapter 211
- What you need to know 211
- About printer server 212
- Operating system 212
- Print server 212
- Supported oss 212
- Tcp ip 212
- The file sharing screen 212
- Before you begin 213
- Note if your usb device cannot be detected by the device see the troubleshooting for suggestions 213
- The device will not be able to join the workgroup if your local area network has restrictions set up that do not allow devices to join a workgroup in this case contact your network administrator 213
- Note anyone on your network can play the media files in the published shares no user name and password or other form of security is used the media server is enabled by default with the video photo and music shares published 214
- The media server screen 214
- Before you begin 215
- Note your printer s installation instructions may ask that you connect the printer to your computer connect your printer to the device instead 215
- The printer server screen 215
- Firewall 217
- Overview 217
- What you can do in this chapter 217
- Land attack 218
- Ping of death 218
- Syn attack 218
- What you need to know 218
- Chapter 15 firewall 219
- Firewall to display the general screen 219
- General 219
- Label description 219
- The firewall screen 219
- The following table describes the labels in this screen 219
- The service screen 219
- Use this screen to set the security level of the firewall on the device firewall rules are grouped based on the direction of travel of packets to which they apply 219
- Vmg1312 b10b vmg1312 b30b series user s guide 219
- You can configure customized services and port numbers in the service screen for a comprehensive list of port numbers and services visit the iana internet assigned number authority website see appendix g on page 379 for some examples 219
- Add edit a service 220
- Chapter 15 firewall 220
- Figure 105 service add edit 220
- Label description 220
- Service 220
- Service to display the following screen 220
- The following table describes the labels in this screen 220
- Use this screen to add a customized service rule that you can use in the firewall s acl rule configuration click add new service entry or the edit icon next to an existing service rule in the service screen to display the following screen 220
- Vmg1312 b10b vmg1312 b30b series user s guide 220
- Access control 221
- Access control to display the following screen this screen displays a list of the configured incoming or outgoing filtering rules 221
- Chapter 15 firewall 221
- Label description 221
- Table 77 service add edit 221
- The access control screen 221
- The following table describes the labels in this screen 221
- Vmg1312 b10b vmg1312 b30b series user s guide 221
- Access control continued 222
- Add edit an acl rule 222
- Chapter 15 firewall 222
- Click add new acl rule or the edit icon next to an existing acl rule in the access control screen the following screen displays 222
- Figure 107 access control add edit 222
- Label description 222
- Vmg1312 b10b vmg1312 b30b series user s guide 222
- Chapter 15 firewall 223
- Label description 223
- Table 79 access control add edit 223
- The following table describes the labels in this screen 223
- Vmg1312 b10b vmg1312 b30b series user s guide 223
- The dos screen 224
- Mac filter 225
- Overview 225
- The mac filter screen 225
- Chapter 16 mac filter 226
- Label description 226
- Mac filter 226
- The following table describes the labels in this screen 226
- Vmg1312 b10b vmg1312 b30b series user s guide 226
- Overview 227
- Parental control 227
- The parental control screen 227
- Add edit a parental control rule 228
- Chapter 17 parental control 228
- Click add new pcp in the parental control screen to add a new rule or click the edit icon next to an existing rule to edit it use this screen to configure a restricted access schedule and or url filtering settings to block the users on your network from accessing certain web sites 228
- Figure 111 parental control rule add edit 228
- Label description 228
- Parental control continued 228
- Vmg1312 b10b vmg1312 b30b series user s guide 228
- Chapter 17 parental control 229
- Label description 229
- Table 83 parental control rule add edit 229
- The following table describes the fields in this screen 229
- Vmg1312 b10b vmg1312 b30b series user s guide 229
- Overview 231
- Scheduler rule 231
- The scheduler rule screen 231
- Add edit a schedule 232
- Chapter 18 scheduler rule 232
- Click the add button in the scheduler rule screen or click the edit icon next to a schedule rule to open the following screen use this screen to configure a restricted access schedule 232
- Figure 113 scheduler rule add edit 232
- Label description 232
- Table 85 scheduler rule add edit 232
- The following table describes the fields in this screen 232
- Vmg1312 b10b vmg1312 b30b series user s guide 232
- Certificates 233
- Overview 233
- What you can do in this chapter 233
- What you need to know 233
- Certificates to open the local certificates screen this is the device s summary list of certificates and certification requests 234
- Chapter 19 certificates 234
- Label description 234
- Local certificates 234
- The following table describes the labels in this screen 234
- The local certificates screen 234
- Vmg1312 b10b vmg1312 b30b series user s guide 234
- After you click apply the following screen displays to notify you that you need to get the certificate request signed by a certificate authority if you already have click load_signed to import the signed certificate into the device otherwise click back to return to the local certificates screen 235
- Chapter 19 certificates 235
- Create certificate request 235
- Figure 115 create certificate request 235
- Label description 235
- Local certificates and then create certificate request to open the following screen use this screen to have the device generate a certification request 235
- Table 87 create certificate request 235
- The following table describes the labels in this screen 235
- Vmg1312 b10b vmg1312 b30b series user s guide 235
- Load signed certificate 236
- Note you must remove any spaces from the certificate s filename before you can import it 236
- Chapter 19 certificates 237
- Label description 237
- Table 88 load signed certificate 237
- The following table describes the fields in this screen 237
- The following table describes the labels in this screen 237
- The trusted ca screen 237
- Trusted ca 237
- Trusted ca to open the following screen this screen displays a summary list of certificates of the certification authorities that you have set the device to accept as trusted the device accepts any valid certificate signed by a certification authority on this list as being trustworthy thus you do not need to import any certificate that is signed by one of these certification authorities 237
- Vmg1312 b10b vmg1312 b30b series user s guide 237
- Chapter 19 certificates 238
- Click the view icon in the trusted ca screen to open the following screen use this screen to view in depth information about the certification authority s certificate 238
- Figure 119 trusted ca view 238
- Label description 238
- Table 90 trusted ca view 238
- The following table describes the fields in this screen 238
- View trusted ca certificate 238
- Vmg1312 b10b vmg1312 b30b series user s guide 238
- Chapter 19 certificates 239
- Click the import certificate button in the trusted ca screen to open the following screen the device trusts any valid certificate signed by any of the imported trusted ca certificates 239
- Figure 120 trusted ca import certificate 239
- Import trusted ca certificate 239
- Label description 239
- Table 91 trusted ca import certificate 239
- The following table describes the fields in this screen 239
- Vmg1312 b10b vmg1312 b30b series user s guide 239
- Ipsec vpn 241
- Overview 241
- The general screen 241
- Add new connection to open this screen as shown next 242
- Chapter 20 vpn 242
- Ipsec vpn add 242
- Label description 242
- Table 92 ipsec vpn 242
- This screen contains the following fields 242
- Vmg1312 b10b vmg1312 b30b series user s guide 242
- Chapter 20 vpn 244
- Label description 244
- Note only use manual key as a temporary solution because it is not as secure as a regular ipsec sa 244
- Table 93 ipsec vpn add 244
- Vmg1312 b10b vmg1312 b30b series user s guide 244
- Chapter 20 vpn 245
- Label description 245
- Table 93 ipsec vpn add 245
- Vmg1312 b10b vmg1312 b30b series user s guide 245
- Chapter 20 vpn 246
- Label description 246
- Note only use manual key as a temporary solution because it is not as secure as a regular ipsec sa 246
- Table 93 ipsec vpn add 246
- Vmg1312 b10b vmg1312 b30b series user s guide 246
- Chapter 20 vpn 247
- Ipsec architecture 247
- Label description 247
- Table 93 ipsec vpn add 247
- Technical reference 247
- The overall ipsec architecture is shown as follows 247
- This section provides some technical background information about the topics covered in this section 247
- Vmg1312 b10b vmg1312 b30b series user s guide 247
- Encapsulation 248
- Ipsec algorithms 248
- Key management 248
- Ike phases 249
- Transport mode 249
- Tunnel mode 249
- Negotiation mode 250
- Ipsec and nat 251
- Vpn nat and nat traversal 251
- Diffie hellman dh key groups 252
- Pre shared key 252
- Overview 253
- What you can do in this chapter 253
- What you need to know 253
- Chapter 21 log 254
- Code severity 254
- Label description 254
- Log to open the system log screen 254
- System log 254
- Table 96 syslog severity levels 254
- The following table describes the fields in this screen 254
- The system log screen 254
- Vmg1312 b10b vmg1312 b30b series user s guide 254
- Chapter 21 log 255
- Label description 255
- Security log 255
- Security log to open the following screen 255
- The following table describes the fields in this screen 255
- The security log screen 255
- Vmg1312 b10b vmg1312 b30b series user s guide 255
- Overview 257
- The wan status screen 257
- Traffic status 257
- What you can do in this chapter 257
- Chapter 22 traffic status 258
- Label description 258
- The following table describes the fields in this screen 258
- Vmg1312 b10b vmg1312 b30b series user s guide 258
- Chapter 22 traffic status 259
- Label description 259
- Lan to open the following screen the figure in this screen shows the interface that is currently connected on the device 259
- The following table describes the fields in this screen 259
- The lan status screen 259
- Vmg1312 b10b vmg1312 b30b series user s guide 259
- The nat status screen 260
- Arp table 261
- Arp table screen 261
- How arp works 261
- Overview 261
- Overview 263
- Routing table 263
- The routing table screen 263
- Chapter 24 routing table 264
- Label description 264
- Routing table continued 264
- Vmg1312 b10b vmg1312 b30b series user s guide 264
- Igmp status 265
- Overview 265
- The igmp group status screen 265
- The xdsl statistics screen 267
- Xdsl statistics 267
- Chapter 26 xdsl statistics 268
- Label description 268
- The following table describes the labels in this screen 268
- Vmg1312 b10b vmg1312 b30b series user s guide 268
- Xdsl statistics 268
- Chapter 26 xdsl statistics 269
- Label description 269
- Vmg1312 b10b vmg1312 b30b series user s guide 269
- Xdsl statistics continued 269
- G statistics 271
- Overview 271
- The 3g statistics screen 271
- Chapter 27 3g statistics 272
- G statistics continued 272
- Label description 272
- Vmg1312 b10b vmg1312 b30b series user s guide 272
- Overview 273
- The user account screen 273
- User account 273
- Overview 275
- Remote management 275
- The remote mgmt screen 275
- Chapter 29 remote management 276
- Label description 276
- Remote mgmt 276
- The following table describes the fields in this screen 276
- Vmg1312 b10b vmg1312 b30b series user s guide 276
- Overview 277
- The tr 069 client screen 277
- Tr 069 client 277
- Chapter 30 tr 069 client 278
- Label description 278
- The following table describes the fields in this screen 278
- Tr 069 client 278
- Vmg1312 b10b vmg1312 b30b series user s guide 278
- Overview 279
- The tr 064 screen 279
- Tr 064 279
- Overview 281
- The time screen 281
- Time settings 281
- Chapter 32 time settings 282
- Label description 282
- The following table describes the fields in this screen 282
- Time setting 282
- Vmg1312 b10b vmg1312 b30b series user s guide 282
- Chapter 32 time settings 283
- Label description 283
- Time setting continued 283
- Vmg1312 b10b vmg1312 b30b series user s guide 283
- E mail notification 285
- Overview 285
- The email notification screen 285
- Chapter 33 e mail notification 286
- Click the add button in the email notification screen use this screen to configure the required information for sending e mail via a mail server 286
- Email notification edit 286
- Label description 286
- The following table describes the labels in this screen 286
- Vmg1312 b10b vmg1312 b30b series user s guide 286
- Logs setting 287
- Overview 287
- The log settings screen 287
- An end of log message displays for each mail in which a complete log has been sent the following is an example of a log sent by e mail 288
- Chapter 34 logs setting 288
- Example e mail log 288
- Label description 288
- Logs setting 288
- The date format here is day month year 288
- The date format here is month day year the time format is hour minute second 288
- The following table describes the fields in this screen 288
- Vmg1312 b10b vmg1312 b30b series user s guide 288
- You may edit the subject title 288
- Firmware upgrade 291
- Overview 291
- The firmware screen 291
- Configuration 293
- Overview 293
- The configuration screen 293
- Do not turn off the device while configuration file upload is in progress 294
- Restore configuration 294
- Reset to factory defaults 295
- The reboot screen 295
- Diagnostic 297
- Overview 297
- What you can do in this chapter 297
- What you need to know 297
- Ping traceroute nslookup 298
- 802 ag 299
- Ag to open the following screen use this screen to perform cfm actions 299
- Chapter 37 diagnostic 299
- Label description 299
- The following table describes the fields in this screen 299
- Vmg1312 b10b vmg1312 b30b series user s guide 299
- Note the dslam to which the device is connected must also support atm f4 and or f5 to use this test 300
- Oam ping 300
- Note this screen is available only when you configure an atm layer 2 interface 301
- Power hardware connections and leds 303
- Troubleshooting 303
- Device access and login 304
- I cannot see or access the login screen in the web configurator 304
- I forgot the ip address for the device 304
- I forgot the password 304
- I can see the login screen but i cannot log in to the device 305
- I cannot telnet to the device 305
- I cannot use ftp to upload download the configuration file i cannot use ftp to upload new firmware 305
- I cannot access the internet 306
- I cannot access the internet anymore i had access to the internet with the device but my internet connection is not available anymore 306
- I cannot access the internet through a dsl connection 306
- I cannot connect to the internet using a second dsl connection 306
- Internet access 306
- What factors may cause intermittent or unstabled wireless connection how can i solve this problem 307
- What is a server set id ssid 307
- Wireless internet access 307
- I cannot open special applications such as white board file transfer and video when i use the msn messenger 308
- Local network 308
- The device fails to detect my usb device 308
- The local area connection icon for upnp disappears in the screen 308
- Usb device connection 308
- Customer support 311
- Ppendi 311
- Austria 312
- Belarus 312
- Europe 312
- Malaysia 312
- Pakistan 312
- Philipines 312
- Singapore 312
- Taiwan 312
- Thailand 312
- Vietnam 312
- Belgium 313
- Bulgaria 313
- Denmark 313
- Estonia 313
- Finland 313
- France 313
- Germany 313
- Hungary 313
- Latvia 313
- Lithuania 314
- Netherlands 314
- Norway 314
- Poland 314
- Romania 314
- Russia 314
- Slovakia 314
- Sweden 314
- Switzerland 314
- Argentina 315
- Ecuador 315
- Latin america 315
- Middle east 315
- North america 315
- Turkey 315
- Ukraine 315
- Africa 316
- Australia 316
- Oceania 316
- South africa 316
- Ppendi 317
- Setting up your computer s ip address 317
- Configuring 318
- Installing components 318
- Verifying settings 320
- Windows 2000 nt xp 320
- Verifying settings 325
- Windows vista 325
- Note during this procedure click continue whenever windows displays a screen saying that it needs your permission to continue 327
- Verifying settings 331
- Macintosh os 8 9 332
- Macintosh os x 333
- Verifying settings 333
- Verifying settings 334
- Note make sure you are logged in as the root administrator 335
- Using the k desktop environment kde 335
- Using configuration files 337
- Verifying settings 338
- Ip addresses and subnetting 339
- Ppendi 339
- Subnet masks 340
- An ip address with host ids of all zeros is the ip address of the network 192 68 with a 24 bit subnet mask for example an ip address with host ids of all ones is the broadcast address for that network 192 68 55 with a 24 bit subnet mask for example 341
- Appendix c ip addresses and subnetting 341
- As these two ip addresses cannot be used for individual hosts calculate the maximum number of possible hosts in a network as follows 341
- Binary 341
- Decimal 1st octet 341
- For example 192 25 is equivalent to saying 192 with subnet mask 255 55 55 28 341
- Nd octet 341
- Network size 341
- Notation 341
- Rd octet 4th octet 341
- Since the mask is always a continuous number of ones beginning from the left followed by a continuous number of zeros for the remainder of the 32 bit mask you can simply specify the number of ones instead of writing the value of each octet this is usually specified by writing a followed by the number of bits in the mask after the address 341
- Subnet mask host id size maximum number of hosts 341
- Subnet masks are expressed in dotted decimal notation just like ip addresses the following examples show the binary and decimal notation for 8 bit 16 bit 24 bit and 29 bit subnet masks 341
- Subnet masks can be referred to by the size of the network number part the bits with a 1 value for example an 8 bit mask means that the first 8 bits of the mask are ones and the remaining 24 bits are zeroes 341
- Table 121 subnet masks 341
- Table 122 maximum host numbers 341
- The size of the network number determines the maximum number of possible hosts you can have on your network the larger the number of network number bits the smaller the number of remaining host id bits 341
- Vmg1312 b10b vmg1312 b30b series user s guide 341
- 2 or 254 possible hosts 342
- Appendix c ip addresses and subnetting 342
- Figure 194 subnetting example before subnetting 342
- In this example the company network address is 192 68 the first three octets of the address 192 68 are the network number and the remaining octet is the host id allowing a maximum of 342
- Last octet binary 342
- Last octet decimal 342
- Subnet mask alternative notation 342
- Subnetting 342
- Table 123 alternative subnet mask notation 342
- The borrowed host id bit can have a value of either 0 or 1 allowing two subnets 192 68 25 and 192 68 28 25 342
- The following figure shows the company network before subnetting 342
- The following table shows some possible subnet masks using both notations 342
- Vmg1312 b10b vmg1312 b30b series user s guide 342
- You can borrow one of the host id bits to divide the network 192 68 into two separate sub networks the subnet mask is now 25 bits 255 55 55 28 or 25 342
- You can use subnetting to divide one network into multiple sub networks in the following example a network administrator creates two sub networks to isolate a group of servers from the rest of the company network for security reasons 342
- Example four subnets 343
- Appendix c ip addresses and subnetting 344
- Broadcast address 344
- Example eight subnets 344
- Ip subnet mask network number last octet bit value 344
- Similarly use a 27 bit mask to create eight subnets 000 001 010 011 100 101 110 and 111 344
- Subnet subnet address first address last address 344
- Table 124 subnet 1 continued 344
- Table 125 subnet 2 344
- Table 126 subnet 3 344
- Table 127 subnet 4 344
- Table 128 eight subnets 344
- The following table shows ip address last octet values for each subnet 344
- Vmg1312 b10b vmg1312 b30b series user s guide 344
- Appendix c ip addresses and subnetting 345
- Broadcast address 345
- No borrowed host bits subnet mask no subnets no hosts per subnet 345
- Subnet planning 345
- Subnet subnet address first address last address 345
- Table 128 eight subnets continued 345
- Table 129 24 bit network number subnet planning 345
- Table 130 16 bit network number subnet planning 345
- The following table is a summary for subnet planning on a network with a 16 bit network number 345
- The following table is a summary for subnet planning on a network with a 24 bit network number 345
- Vmg1312 b10b vmg1312 b30b series user s guide 345
- Configuring ip addresses 346
- Private ip addresses 346
- Pop up windows javascripts and java permissions 347
- Ppendi 347
- Enable pop up blockers with exceptions 348
- Javascripts 350
- Java permissions 352
- Java sun 353
- Mozilla firefox 354
- Ppendi 357
- Wireless lans 357
- Channel 359
- Rts cts 359
- Fragmentation threshold 360
- Note enabling the rts threshold causes redundant network overhead that could negatively affect the throughput performance instead of providing a remedy 360
- Ieee 802 1g wireless lan 361
- Note you must enable the same wireless security settings on the device and on all wireless clients that you want to associate with it 361
- Wireless security overview 361
- Ieee 802 x 362
- Radius 362
- Types of radius messages 362
- Eap md5 message digest algorithm 5 363
- Eap tls transport layer security 363
- Types of eap authentication 363
- Appendix e wireless lans 364
- Dynamic wep key exchange 364
- Eap md5 eap tls eap ttls peap leap 364
- Eap ttls is an extension of the eap tls authentication that uses certificates for only the server side authentications to establish a secure connection client authentication is then done by sending username and password through the secure connection thus client identity is protected for client authentication eap ttls supports eap methods and legacy authentication methods such as pap chap ms chap and ms chap v2 364
- Eap ttls tunneled transport layer service 364
- For added security certificate based authentications eap tls eap ttls and peap use dynamic keys for data encryption they are often deployed in corporate environments but for public deployment a simple user name and password pair is more practical the following table is a comparison of the features of authentication types 364
- If this feature is enabled it is not necessary to configure a default encryption key in the wireless security configuration screen you may still configure and store keys but they will not be used while dynamic wep is enabled 364
- Leap lightweight extensible authentication protocol is a cisco implementation of ieee 802 x 364
- Like eap ttls server side certificate authentication is used to establish a secure connection then use simple username and password methods through the secured connection to authenticate the clients thus hiding client identity however peap only supports eap methods such as eap md5 eap mschapv2 and eap gtc eap generic token card for client authentication eap gtc is implemented only by cisco 364
- Note eap md5 cannot be used with dynamic wep key exchange 364
- Peap protected eap 364
- Table 133 comparison of eap authentication types 364
- The ap maps a unique key that is generated with the radius server this key expires when the wireless connection times out disconnects or reauthentication times out a new wep key is generated each time reauthentication is performed 364
- Vmg1312 b10b vmg1312 b30b series user s guide 364
- Encryption 365
- Wpa and wpa2 365
- User authentication 366
- Wireless client wpa supplicants 366
- Wpa 2 with radius application example 366
- Wpa 2 psk application example 367
- A radiation pattern is a diagram that allows you to visualize the shape of the antenna s coverage area 368
- An antenna couples rf signals onto air a transmitter within a wireless device sends an rf signal to the antenna which propagates the signal through the air the antenna also operates in reverse by capturing rf signals from the air 368
- An antenna in the frequency of 2 ghz ieee 802 1b and ieee 802 1g or 5ghz ieee 802 1a is needed to communicate efficiently in a wireless lan 368
- Antenna characteristics 368
- Antenna gain 368
- Antenna gain measured in db decibel is the increase in coverage within the rf beam width higher antenna gain improves the range of the signal for better communications 368
- Antenna overview 368
- Appendix e wireless lans 368
- Authentication method key management protocol 368
- Encryptio n method 368
- Enter manual key ieee 802 x 368
- For an indoor site each 1 db increase in antenna gain results in a range increase of approximately 368
- Frequency 368
- Positioning the antennas properly increases the range and coverage area of a wireless lan 368
- Radiation pattern 368
- Refer to this table to see what other security parameters you should configure for each authentication method or key management protocol type mac address filters are not dependent on how you configure these security features 368
- Security parameters summary 368
- Table 134 wireless security relational matrix 368
- Vmg1312 b10b vmg1312 b30b series user s guide 368
- Positioning antennas 369
- Types of antennas for wlan 369
- Ppendi 371
- Global address 372
- Loopback address 372
- Multicast address 372
- Unspecified address 372
- Eui 64 373
- Identity association 373
- Interface id 373
- Subnet masking 373
- Dhcp relay agent 374
- Icmpv6 374
- Neighbor discovery protocol ndp 374
- Prefix delegation 374
- Rebind 374
- Renew rebind 374
- Renew to s1 374
- Ipv6 cache 375
- Mld messages 375
- Multicast listener discovery 375
- Example enabling dhcpv6 on windows xp 376
- Example enabling ipv6 on windows xp 2003 vista 376
- Example enabling ipv6 on windows 7 377
- Ppendi 379
- Services 379
- Appendix g services 380
- Name protocol port s description 380
- Table 138 examples of services 380
- Vmg1312 b10b vmg1312 b30b series user s guide 380
- Appendix g services 381
- Name protocol port s description 381
- Table 138 examples of services continued 381
- Vmg1312 b10b vmg1312 b30b series user s guide 381
- Appendix g services 382
- Name protocol port s description 382
- Table 138 examples of services continued 382
- Vmg1312 b10b vmg1312 b30b series user s guide 382
- Legal information 383
- Ppendi 383
- Fcc radiation exposure statement 384
- Notices 384
- 注意 384
- Open source licenses 385
- Registration 385
- Safety warnings 385
- Zyxel limited warranty 385
- Appendix h legal information 386
- Vmg1312 b10b vmg1312 b30b series user s guide 386
Похожие устройства
- Zyxel VMG1312-B10B Технические характеристики
- Zyxel VMG5313-B10A Инструкция по эксплуатации
- Zyxel VMG5313-B10A Технические характеристики
- Zyxel VES-1624FT-55A Инструкция по эксплуатации
- Zyxel VES-1624FT-55A Инструкция по установке
- Zyxel VES-1616FE-55A Инструкция по эксплуатации
- Zyxel IES-1248 EE Инструкция по эксплуатации
- Барс EKO ARC 164 Инструкция по эксплуатации
- Барс EKO ARC 184 Инструкция по эксплуатации
- Барс EKO ARC 204 Инструкция по эксплуатации
- Барс Mini ARC 160 D Инструкция по эксплуатации
- Барс Mini ARC 160 D Сертификат
- Барс Mini ARC 180 D Инструкция по эксплуатации
- Барс Mini ARC 180 D Сертификат
- Барс Mini ARC 200 D Инструкция по эксплуатации
- Барс Mini ARC 200 D Сертификат
- Барс Profi ARC 167 D (220) Инструкция по эксплуатации
- Барс Profi ARC 167 D (220) Сертификат
- Барс Profi ARC 187 D (220) Инструкция по эксплуатации
- Барс Profi ARC 187 D (220) Сертификат
Скачать
Случайные обсуждения
Ответы 1
Есть или нет режим репитера или усилителя и как его настроить пошаговая инструкция.
3 года назад