![Zyxel VMG5313-B10A [231/398] Chapter 17 firewall](/img/pdf.png)
Zyxel VMG5313-B10A [231/398] Chapter 17 firewall
![Zyxel VMG5313-B10A [231/398] Chapter 17 firewall](/views2/1169623/page231/bge7.png)
Chapter 17 Firewall
VMG5313-B10A/-B30A Series User’s Guide
231
Apply Click Apply to save your changes.
Cancel Click Cancel to exit this screen without saving.
Table 88 Security > Firewall > DoS (continued)
LABEL DESCRIPTION
Содержание
- Default login details 1
- Quick start guide 1
- User s guide 1
- Vmg5313 b10a vmg5313 b30a 1
- Wireless n vdsl2 voip iad with usb 1
- Important 2
- Keep this guide for future reference 2
- Read carefully before use 2
- Related documentation 2
- Contents overview 3
- Technical reference 1 3
- User s guide 5 3
- Appendices 53 4
- Chapter 1 introducing the vmg 7 5
- Chapter 2 the web configurator 3 5
- Chapter 3 quick start 3 5
- Chapter 4 tutorials 5 5
- Contents overview 5
- Part i user s guide 15 5
- Table of contents 5
- Chapter 5 network map and status screens 3 6
- Chapter 6 broadband 9 6
- Part ii technical reference 71 6
- Chapter 7 wireless 07 7
- Chapter 8 home networking 39 7
- Chapter 10 quality of service qos 63 8
- Chapter 11 network address translation nat 81 8
- Chapter 9 routing 55 8
- Chapter 12 dynamic dns setup 99 9
- Chapter 13 vlan group 03 9
- Chapter 14 interface group 05 9
- Chapter 15 usb service 211 9
- Chapter 16 power management 19 10
- Chapter 17 firewall 23 10
- Chapter 18 mac filter 33 10
- Chapter 19 parental control 35 10
- Chapter 20 scheduler rule 41 10
- Chapter 21 certificates 43 11
- Chapter 22 vpn 51 11
- Chapter 23 voice 65 11
- Chapter 24 log 97 12
- Chapter 25 traffic status 01 12
- Chapter 26 voip status 05 12
- Chapter 27 xdsl statistics 07 12
- Chapter 28 3g statistics 311 12
- Chapter 29 user account 13 12
- Chapter 30 remote management 15 12
- Chapter 31 tr 069 client 19 13
- Chapter 32 tr 064 21 13
- Chapter 33 snmp 23 13
- Chapter 34 time settings 25 13
- Chapter 35 e mail notification 27 13
- Chapter 36 log setting 29 13
- Chapter 37 firmware upgrade 33 13
- Chapter 38 configuration 37 13
- Appendix a customer support 55 14
- Appendix b wireless lans 61 14
- Appendix c ipv6 75 14
- Appendix d services 83 14
- Appendix e legal information 87 14
- Chapter 39 diagnostic 40 14
- Chapter 40 troubleshooting 45 14
- Index 92 14
- Part iii appendices 353 14
- User s guide 15
- Good habits for managing the vmg 17
- Introducing the vmg 17
- Overview 17
- Ways to manage the vmg 17
- Applications for the vmg 18
- Internet access 18
- Adsl vdsl 19
- Ethernet 19
- Vmg s usb support 19
- Chapter 1 introducing the vmg 20
- Figure 2 usb file sharing application 20
- File sharing 20
- Led color status description 20
- Leds lights 20
- None of the leds are on if the vmg is not receiving power 20
- Pwr sys dsl internet 20
- Table 1 led descriptions 20
- The following graphic displays the labels of the leds 20
- Use the built in usb 2 port to share files on a usb memory stick or a usb hard drive b you can connect one usb hard drive to the vmg at a time use ftp to access the files on the usb device 20
- Vmg5313 b10a b30a series user s guide 20
- Chapter 1 introducing the vmg 21
- If you forget your password or cannot access the web configurator you will need to use the reset button at the back of the device to reload the factory default configuration file this means that you will lose all configurations that you had previously and the default login names and passwords will be reset see the cover page 21
- Led color status description 21
- Make sure the pwr sys led is on not blinking 21
- Table 1 led descriptions continued 21
- The reset button 21
- To set the device back to the factory default settings press the reset button for five seconds or until the pwr sys led begins to blink and then release it when the pwr sys led begins to blink the defaults have been restored and the device restarts 21
- Vmg5313 b10a b30a series user s guide 21
- Using the wi fi and wps buttons 22
- Wireless access 22
- Accessing the web configurator 23
- Overview 23
- The web configurator 23
- Title bar 25
- Web configurator layout 25
- Main window 26
- Chapter 2 the web configurator 27
- Link tab function 27
- Navigation panel 27
- Table 3 navigation panel summary 27
- Use the menu items on the navigation panel to open screens to configure vmg features the following tables describe each menu item 27
- Vmg5313 b10a b30a series user s guide 27
- Chapter 2 the web configurator 28
- Link tab function 28
- Table 3 navigation panel summary continued 28
- Vmg5313 b10a b30a series user s guide 28
- Chapter 2 the web configurator 29
- Link tab function 29
- Table 3 navigation panel summary continued 29
- Vmg5313 b10a b30a series user s guide 29
- Chapter 2 the web configurator 30
- Link tab function 30
- Table 3 navigation panel summary continued 30
- Vmg5313 b10a b30a series user s guide 30
- Chapter 2 the web configurator 31
- Link tab function 31
- Table 3 navigation panel summary continued 31
- Vmg5313 b10a b30a series user s guide 31
- Overview 33
- Quick start 33
- Quick start setup 33
- Overview 35
- Setting up an ethernet wan connection 35
- Tutorials 35
- Note the dsl internet connection and the ethernet internet connection cannot operate at the same time 37
- Setting up an adsl pppoe connection 37
- Chapter 4 tutorials 38
- Choose the encapsulation specified by your dsl service provider for this example the service provider requires a username and password to establish internet connection therefore select pppoe as the wan encapsulation type 38
- Enter the account information provided to you by your dsl service provider 38
- In this example the dsl connection has the following information 38
- Select the active check box enter the general and atm pvc configuration settings as provided above 38
- Set the ipv6 ipv4 mode to ipv4 only 38
- Set the type to adsl over atm 38
- Vmg5313 b10a b30a series user s guide 38
- Configuring the wireless network settings 41
- Setting up a secure wireless network 41
- Note the wireless client must be a wps aware device for example a wps usb adapter or pcmcia card 42
- Using wps 42
- Note it doesn t matter which button is pressed first you must press the second button within two minutes of pressing the first one 43
- Note your vmg has a wps button located on its front panel as well as a wps button in its configuration utility both buttons have exactly the same function you can use one or the other 43
- Push button configuration pbc 43
- Communication 44
- Pin configuration 44
- Press and hold for 5 seconds 44
- Wireless client device 44
- Within 2 minutes 44
- Wlan wps 44
- Authentication by pin 46
- Communication 46
- Note the vmg supports ieee 802 1b and ieee 802 1g wireless clients make sure that your notebook or computer s wireless adapter supports one of these standards 46
- Security info 46
- Within 2 minutes 46
- Without wps 46
- Zyxel device 46
- Company 47
- Setting up multiple wireless groups 47
- Vip guest 47
- Configuring static route for routing to another network 50
- 000 kbps dsl 53
- A colleague s computer other traffic automatic classifier 53
- And or mac aa ff aa ff aa ff email traffic highest priority 53
- Configuring qos queue and class setup 53
- Note qos is applied to traffic flowing out of the vmg 53
- Your computer ip 192 68 3 53
- Chapter 4 tutorials 55
- Vmg5313 b10a b30a series user s guide 55
- Access the vmg using ddns 56
- Note if you have a private wan ip address then you cannot use ddns 56
- Registering a ddns account on www dyndns org 56
- W x y z a b c d 56
- Configuring ddns on your vmg 57
- Configuring the mac address filter 57
- Testing the ddns setting 57
- Access your shared files from a computer 58
- Josephine 58
- Note this example uses the filezilla ftp program to browse your shared files 58
- Thomas 58
- Computer with 60
- Configuring the vmg 60
- Note the media server feature is enabled by default 60
- Usb storage device 60
- Using the media server feature 60
- Using windows media player 60
- Windows media player 60
- Zyxel device 60
- Windows vista 61
- Windows 7 62
- Note for this tutorial your dma 2500 should already be set up with the tv according to the instructions in the dma 2500 quick start guide 63
- Using a digital media adapter 63
- Dma 2500 64
- Usb storage device 64
- Zyxel device 64
- Add a new printer using windows 65
- Using the print server feature 65
- Add a new printer using macintosh os x 68
- Technical reference 71
- Network map and status screens 73
- Overview 73
- The network map screen 73
- The status screen 74
- Chapter 5 network map and status screens 75
- Each field is described in the following table 75
- Label description 75
- Table 5 status screen 75
- Vmg5313 b10a b30a series user s guide 75
- Chapter 5 network map and status screens 76
- Label description 76
- Table 5 status screen continued 76
- Vmg5313 b10a b30a series user s guide 76
- Chapter 5 network map and status screens 77
- Label description 77
- Table 5 status screen continued 77
- Vmg5313 b10a b30a series user s guide 77
- Broadband 79
- Overview 79
- What you can do in this chapter 79
- Ipv6 introduction 80
- Wan ip address 80
- What you need to know 80
- Any number of consecutive blocks of zeros can be replaced by a double colon a double colon can only appear once in an ipv6 address so 2001 0db8 0000 0000 1a2f 0000 0000 0015 can be written as 2001 0db8 1a2f 0000 0000 0015 2001 0db8 0000 0000 1a2f 0015 2001 db8 1a2f 0 0 15 or 2001 db8 0 0 1a2f 15 81
- Ipv6 addressing 81
- Ipv6 prefix and prefix length 81
- Ipv6 rapid deployment 81
- Ipv6 subnet masking 81
- Leading zeros in a block can be omitted so 2001 0db8 1a2b 0015 0000 0000 1a2f 0000 can be written as 2001 db8 1a2b 15 0 0 1a2f 0 81
- Before you begin 82
- Dual stack lite 82
- The broadband screen 83
- Broadband 84
- Chapter 6 broadband 84
- Label description 84
- The following table describes the labels in this screen 84
- Vmg5313 b10a b30a series user s guide 84
- Add edit internet connection 85
- Routing mode 85
- Add new wan interface edit routing mode 86
- Chapter 6 broadband 86
- Label description 86
- The following table describes the labels in this screen 86
- Vmg5313 b10a b30a series user s guide 86
- Add new wan interface edit routing mode continued 87
- Chapter 6 broadband 87
- Label description 87
- Vmg5313 b10a b30a series user s guide 87
- Add new wan interface edit routing mode continued 88
- Chapter 6 broadband 88
- Label description 88
- Vmg5313 b10a b30a series user s guide 88
- Add new wan interface edit routing mode continued 89
- Chapter 6 broadband 89
- Label description 89
- Vmg5313 b10a b30a series user s guide 89
- Add new wan interface edit bridge mode 90
- Add new wan interface edit routing mode continued 90
- Bridge mode 90
- Broadband screen or the edit icon next to the connection you want to configure select bridge as the encapsulation mode the screen varies depending on the interface type you select 90
- Chapter 6 broadband 90
- If you select adsl vdsl over ptm as the interface type the following screen appears 90
- Label description 90
- Vmg5313 b10a b30a series user s guide 90
- Add new wan interface edit bridge mode 91
- Chapter 6 broadband 91
- Figure 21 internet access application 3g wan 91
- G backup 91
- Label description 91
- Note this vmg supports connecting one 3g dongle at a time 91
- The 3g backup screen 91
- The following table describes the fields in this screen 91
- The usb ports at the left side panel of the vmg allow you to attach a 3g dongle to wirelessly connect to a 3g network for internet access you can have the vmg use the 3g wan connection as a backup disconnect the dsl and ethernet wan ports to use the 3g dongle as your primary wan connection the vmg automatically uses a wired wan connection when available 91
- Vmg5313 b10a b30a series user s guide 91
- Chapter 6 broadband 92
- G backup 92
- Label description 92
- Note the actual data rate you obtain varies depending the 3g card you use the signal strength to the service provider s base station and so on 92
- The following table describes the labels in this screen 92
- Vmg5313 b10a b30a series user s guide 92
- Chapter 6 broadband 93
- G backup continued 93
- Label description 93
- Vmg5313 b10a b30a series user s guide 93
- Chapter 6 broadband 94
- G backup continued 94
- Label description 94
- Vmg5313 b10a b30a series user s guide 94
- Advanced to display the following screen 95
- Carrier bandwidth khz 95
- Chapter 6 broadband 95
- G backup continued 95
- Itu t g 93 standard defines a wide range of settings for various parameters some of which are encompassed in profiles as shown in the next table 95
- Label description 95
- Max downstream throughput mbit s 95
- Number of downstream carriers 95
- Power dbm 95
- Profile bandwidth mhz 95
- Table 11 vdsl profiles 95
- The advanced screen 95
- Use the advanced screen to enable or disable adsl over ptm annex m dsl phyr and sra seamless rate adaptation functions the vmg supports the phyr retransmission scheme phyr is a retransmission scheme designed to provide protection against noise on the dsl line it improves voice video and data transmission resilience by utilizing a retransmission buffer 95
- Vmg5313 b10a b30a series user s guide 95
- Advanced 96
- Chapter 6 broadband 96
- Label description 96
- The following table describes the labels in this screen 96
- Vmg5313 b10a b30a series user s guide 96
- Advanced continued 97
- Chapter 6 broadband 97
- Label description 97
- Vmg5313 b10a b30a series user s guide 97
- Chapter 6 broadband 98
- Label description 98
- The 802 x screen 98
- The following table describes the labels in this screen 98
- Vmg5313 b10a b30a series user s guide 98
- X to display the following screen 98
- Chapter 6 broadband 99
- Ethernet wan 99
- Label description 99
- Modify 99
- Modify 802 x settings 99
- The following table describes the labels in this screen 99
- Use the ethernet wan screen to convert lan port number four as a wan port and to restore it back from a wan to a lan port for ethernet internet access 99
- Use this screen to edit 802 x authentication settings click the edit icon next to the rule you want to edit the screen shown next appears 99
- Vmg5313 b10a b30a series user s guide 99
- X edit 99
- Encapsulation 100
- Label description 100
- Technical reference 100
- Ip over ethernet 101
- Multiplexing 101
- Ppp over atm pppoa 101
- Ppp over ethernet pppoe 101
- Rfc 1483 101
- Traffic shaping 102
- Atm traffic classes 103
- Introduction to vlans 103
- Ip address assignment 103
- Dns server address assignment 104
- Introduction to ieee 802 q tagged vlan 104
- Multicast 104
- Ipv6 addressing 105
- Ipv6 prefix and prefix length 105
- Overview 107
- What you can do in this chapter 107
- Wireless 107
- Finding out more 108
- Note if you are configuring the vmg from a computer connected to the wireless lan and you change the vmg s ssid channel or security settings you will lose your wireless connection when you press apply to confirm you must then change the wireless settings of your computer to match the vmg s new settings 108
- The general screen 108
- What you need to know 108
- Wireless basics 108
- Chapter 7 wireless 109
- General 109
- Label description 109
- The following table describes the general wireless lan labels in this screen 109
- Vmg5313 b10a b30a series user s guide 109
- Chapter 7 wireless 110
- General continued 110
- Label description 110
- No security 110
- Select no security to allow wireless stations to communicate with the access points without any data encryption or authentication 110
- Vmg5313 b10a b30a series user s guide 110
- Basic wep encryption 111
- Note if you do not enable any wireless security on your vmg your network is accessible to any wireless networking device that is within range 111
- Note wep is extremely insecure its encryption can be broken by an attacker using widely available software it is strongly recommended that you use a more effective security mechanism use the strongest security mechanism that all the wireless devices in your network support for example use wpa psk or wpa2 psk if all your wireless devices support it or use wpa or wpa2 if your wireless devices support it and you have a radius server if your wireless devices support nothing stronger than wep use the highest encryption level available 111
- Chapter 7 wireless 112
- General basic wep 112
- Label description 112
- The following table describes the labels in this screen 112
- Vmg5313 b10a b30a series user s guide 112
- Chapter 7 wireless 113
- General more secure wpa 2 psk 113
- Label description 113
- More secure wpa 2 psk 113
- The following table describes the labels in this screen 113
- The wpa psk security mode provides both improved data encryption and user authentication over wep using a pre shared key psk both the vmg and the connecting client share a common password in order to validate the connection this type of encryption while robust is not as strong as wpa wpa2 or even wpa2 psk the wpa2 psk security mode is a newer more robust version of the wpa encryption standard it offers slightly better security although the use of psk makes it less robust than it could be 113
- Vmg5313 b10a b30a series user s guide 113
- Wireless to display the general screen select more secure as the security level then select wpa psk or wpa2 psk from the security mode list 113
- Chapter 7 wireless 114
- General more secure wpa 2 psk continued 114
- Guest more ap 114
- Guest more ap the following screen displays 114
- Label description 114
- The following table describes the labels in this screen 114
- The guest more ap screen 114
- This screen allows you to enable and configure multiple basic service sets bsss on the vmg 114
- Vmg5313 b10a b30a series user s guide 114
- Edit guest more ap 115
- Chapter 7 wireless 116
- Edit continued 116
- Label description 116
- Vmg5313 b10a b30a series user s guide 116
- Chapter 7 wireless 117
- Label description 117
- Mac authentication 117
- Mac authentication the screen appears as shown 117
- The following table describes the labels in this screen 117
- This screen allows you to configure the zyxel device to give exclusive access to specific devices allow or exclude specific devices from accessing the zyxel device deny every ethernet device has a unique mac media access control address the mac address is assigned at the factory and consists of six pairs of hexadecimal characters for example 00 a0 c5 00 00 02 you need to know the mac addresses of the devices to configure this screen 117
- Vmg5313 b10a b30a series user s guide 117
- Note the vmg applies the security settings of the ssid1 profile see section 7 on page 108 if you want to use the wps feature make sure you have set the security mode of ssid1 to wpa2 psk or no security 118
- The wps screen 118
- Chapter 7 wireless 119
- Label description 119
- Note you must also activate wps on that device within two minutes to have it present its pin to the vmg 119
- The wmm screen 119
- Use this screen to enable wi fi multimedia wmm and wmm power save in wireless networks for multimedia applications 119
- Vmg5313 b10a b30a series user s guide 119
- Wmm the following screen displays 119
- Wps continued 119
- An ap using the wireless distribution system wds can function as a wireless network bridge allowing you to wirelessly connect two wired network segments the wds screen allows you to configure the vmg to connect to two or more aps wirelessly when wds is enabled 120
- Chapter 7 wireless 120
- Label description 120
- Note at the time of writing wds is compatible with other zyxel aps only not all models support wds links check your other ap s documentation 120
- Note note this works only if the wireless device to which the vmg is connected also supports this feature 120
- Note wds security is independent of the security settings between the vmg and any wireless clients 120
- The following table describes the labels in this screen 120
- The wds screen 120
- Use this screen to set up your wds wireless distribution system links between the vmg and other wireless aps you need to know the mac address of the peer device once the security settings of peer sides match one another the connection between devices is made 120
- Vmg5313 b10a b30a series user s guide 120
- Wds the following screen displays 120
- Chapter 7 wireless 121
- Label description 121
- The following table describes the labels in this screen 121
- Vmg5313 b10a b30a series user s guide 121
- The others screen 122
- Wds scan 122
- Chapter 7 wireless 123
- Label description 123
- Others 123
- The following table describes the labels in this screen 123
- Vmg5313 b10a b30a series user s guide 123
- Channel status the screen appears as shown click scan to scan the wireless lan channels you can view the results in the channel scan result section 124
- Chapter 7 wireless 124
- Label description 124
- Others continued 124
- The channel status screen 124
- Vmg5313 b10a b30a series user s guide 124
- Technical reference 125
- Wireless network overview 125
- Radio channels 126
- Additional wireless terms 127
- Wireless security overview 127
- Mac address filter 128
- User authentication 128
- Encryption 129
- Note it is recommended that wireless networks use wpa psk wpa or stronger encryption the other types of encryption are better than none at all but it is still possible for unauthorized wireless devices to figure out the original information pretty quickly 129
- Signal problems 129
- Mbssid 130
- Notes on multiple bsss 130
- Ap 2 ap 1 131
- Note the wireless devices must use the same preamble mode in order to communicate 131
- Preamble type 131
- Wifi protected setup wps 131
- Wireless distribution system wds 131
- Pin configuration 132
- Push button configuration 132
- How wps works 134
- Example wps network setup 135
- Client 1 ap1 136
- Client 2 136
- Client 1 ap1 137
- Client 2 137
- Limitations of wps 137
- Home networking 139
- Overview 139
- What you can do in this chapter 139
- About lan 140
- About upnp 140
- Identifying upnp devices 140
- Ip address 140
- Nat traversal 140
- Radvd router advertisement daemon 140
- Subnet mask 140
- What you need to know 140
- Before you begin 141
- Cautions with upnp 141
- Finding out more 141
- The lan setup screen 141
- Upnp and zyxel 141
- Chapter 8 home networking 142
- Click apply to save your settings 142
- Label description 142
- Lan setup 142
- The following table describes the fields in this screen 142
- Vmg5313 b10a b30a series user s guide 142
- Chapter 8 home networking 143
- Label description 143
- Lan setup continued 143
- Vmg5313 b10a b30a series user s guide 143
- Chapter 8 home networking 144
- Label description 144
- Lan setup continued 144
- The static dhcp screen 144
- This table allows you to assign ip addresses on the lan to specific individual computers based on their mac addresses 144
- Vmg5313 b10a b30a series user s guide 144
- Chapter 8 home networking 146
- Label description 146
- See page 140 for more information on upnp 146
- Table 32 static dhcp add edit 146
- The following table describes the labels in this screen 146
- The upnp screen 146
- Universal plug and play upnp is a distributed open networking standard that uses tcp ip for simple peer to peer network connectivity between devices a upnp device can dynamically join a network obtain an ip address convey its capabilities and learn about other devices on the network in turn a device can leave a network smoothly and automatically when it is no longer in use 146
- Upnp to display the screen shown next 146
- Vmg5313 b10a b30a series user s guide 146
- Chapter 8 home networking 147
- Click change advanced sharing settings 147
- Click the start icon control panel and then the network and sharing center 147
- Label description 147
- Make sure the computer is connected to a lan port of the vmg turn on your computer and the vmg 147
- The following table describes the labels in this screen 147
- This section shows you how to use the upnp feature in windows 7 upnp server is installed in windows 7 activate upnp on the vmg 147
- Turning on upnp in windows 7 example 147
- Vmg5313 b10a b30a series user s guide 147
- The additional subnet screen 148
- Additional subnet 149
- Additional subnet to display the screen shown next 149
- Chapter 8 home networking 149
- If your isp provides the public lan service the vmg may use an lan ip address that can be accessed from the wan 149
- Interface with the vmg itself as the gateway for the lan network when you use ip alias you can also configure firewall rules to control access to the lan s logical network subnet 149
- Label description 149
- The following table describes the labels in this screen 149
- Vmg5313 b10a b30a series user s guide 149
- Note the vmg needs to restart to make the role change take effect 150
- The stb vendor id screen 150
- The wake on lan screen 150
- The tftp server name screen 151
- Dhcp setup 152
- Ip pool setup 152
- Lans wans and the vmg 152
- Technical reference 152
- Wan lan 152
- Dns server addresses 153
- Ip address and subnet mask 153
- Lan tcp ip 153
- Note regardless of your particular situation do not create an arbitrary ip address always follow the guidelines above for more information on address assignment please refer to rfc 1597 address allocation for private internets and rfc 1466 guidelines for management of ip address space 154
- Private ip addresses 154
- Overview 155
- Routing 155
- The routing screen 155
- Add edit static route 156
- Chapter 9 routing 156
- Figure 60 routing add edit 156
- Label description 156
- Static route 156
- Table 39 routing add edit sheet 1 of 2 156
- The following table describes the labels in this screen 156
- Use this screen to add or edit a static route click add new static route in the routing screen or the edit icon next to the static route you want to edit the screen shown next appears 156
- Vmg5313 b10a b30a series user s guide 156
- Chapter 9 routing 157
- Dns route 157
- Dns route to open the following screen 157
- Label description 157
- Table 39 routing add edit sheet 2 of 2 157
- The dns route screen 157
- The following table describes the labels in this screen 157
- Vmg5313 b10a b30a series user s guide 157
- The dns route add screen 158
- The policy forwarding screen 158
- Chapter 9 routing 159
- Label description 159
- Policy forwarding 159
- Policy forwarding to open the following screen 159
- The following table describes the labels in this screen 159
- Vmg5313 b10a b30a series user s guide 159
- Add edit policy forwarding 160
- Chapter 9 routing 160
- Click add new policy forward rule in the policy forwarding screen or click the edit icon next to a policy use this screen to configure the required information for a policy route 160
- Figure 64 policy forwarding add edit 160
- Label description 160
- Routing information protocol rip rfc 1058 and rfc 1389 allows a device to exchange routing information with other routers 160
- Table 43 policy forwarding add edit 160
- The following table describes the labels in this screen 160
- Vmg5313 b10a b30a series user s guide 160
- Chapter 9 routing 161
- Figure 65 rip 161
- Label description 161
- Rip to open the rip screen 161
- Table 44 rip 161
- The following table describes the labels in this screen 161
- The rip screen 161
- Vmg5313 b10a b30a series user s guide 161
- Overview 163
- Quality of service qos 163
- What you can do in this chapter 163
- What you need to know 163
- Before traffic policing after traffic policing 164
- Before traffic shaping after traffic shaping 164
- Tagging and marking 164
- Traffic 164
- Traffic policing 164
- Traffic rate 164
- Traffic shaping 164
- The quality of service general screen 165
- Chapter 10 quality of service qos 166
- General continued continued 166
- Label description 166
- Queue setup 166
- Queue setup to open the screen as shown next 166
- The queue setup screen 166
- Use this screen to configure qos queue assignment 166
- Vmg5313 b10a b30a series user s guide 166
- Adding a qos queue 167
- Chapter 10 quality of service qos 167
- Click add new queue or the edit icon in the queue setup screen to configure a queue 167
- Figure 68 queue setup add 167
- Label description 167
- Queue setup 167
- Table 47 queue setup add 167
- The following table describes the labels in this screen 167
- Vmg5313 b10a b30a series user s guide 167
- Chapter 10 quality of service qos 168
- Class setup to open the following screen 168
- Label description 168
- Table 47 queue setup add continued 168
- The class setup screen 168
- Use this screen to add edit or delete qos classifiers a classifier groups traffic into data flows according to specific criteria such as the source address destination address source port number destination port number or incoming interface for example you can configure a classifier to select traffic from the same protocol port such as telnet to form a flow 168
- Vmg5313 b10a b30a series user s guide 168
- You can give different priorities to traffic that the vmg forwards out through the wan interface give high priority to voice and video to make them run more smoothly similarly give low priority to many large file downloads so that they do not reduce the quality of other applications 168
- Add edit qos class 169
- Chapter 10 quality of service qos 169
- Class setup 169
- Click add new classifier in the class setup screen or the edit icon next to a classifier to open the following screen 169
- Label description 169
- The following table describes the labels in this screen 169
- Vmg5313 b10a b30a series user s guide 169
- Chapter 10 quality of service qos 171
- Label description 171
- Table 49 class setup add edit continued 171
- Vmg5313 b10a b30a series user s guide 171
- Chapter 10 quality of service qos 172
- Label description 172
- Table 49 class setup add edit continued 172
- Vmg5313 b10a b30a series user s guide 172
- Chapter 10 quality of service qos 173
- Label description 173
- Policer setup 173
- Policer setup the screen appears as shown 173
- Table 49 class setup add edit continued 173
- The following table describes the labels in this screen 173
- The qos policer setup screen 173
- Vmg5313 b10a b30a series user s guide 173
- Add edit a qos policer 174
- Chapter 10 quality of service qos 174
- Click add new policer in the policer setup screen or the edit icon next to a policer to show the following screen 174
- Figure 72 policer setup add edit 174
- Label description 174
- Table 51 policer setup add edit 174
- The following table describes the labels in this screen 174
- Vmg5313 b10a b30a series user s guide 174
- Chapter 10 quality of service qos 175
- Ieee 802 p specifies the user priority field and defines up to eight separate traffic types the following table describes the traffic types defined in the ieee 802 d standard which incorporates the 802 p 175
- Ieee 802 q tag 175
- Label description 175
- Priority level traffic type 175
- Table 51 policer setup add edit 175
- Table 52 ieee 802 p priority level and traffic type 175
- Technical reference 175
- The following section contains additional technical information about the vmg features described in this chapter 175
- The ieee 802 q standard defines an explicit vlan tag in the mac header to identify the vlan membership of a frame across bridges a vlan tag includes the 12 bit vlan id and 3 bit user priority the vlan id associates a frame with a specific vlan and provides the information that devices need to process the frame across the network 175
- Vmg5313 b10a b30a series user s guide 175
- Automatic priority queue assignment 176
- Diffserv 176
- Dscp and per hop behavior 176
- Ip precedence 176
- A packet can be transmitted if the number of tokens in the bucket is equal to or greater than the size of the packet in bytes 177
- After a packet is transmitted a number of tokens corresponding to the packet size is removed from the bucket 177
- Chapter 10 quality of service qos 177
- Ieee 802 p user priority ethernet priority 177
- Layer 2 layer 3 177
- Priority queue 177
- Table 53 internal layer2 and layer3 qos mapping 177
- The following table shows you the internal layer 2 and layer 3 qos mapping on the vmg on the vmg traffic assigned to higher priority queues gets through faster while traffic in lower index queues is dropped if the network is congested 177
- The token bucket algorithm uses tokens in a bucket to control when traffic can be transmitted the bucket stores tokens each of which represents one byte the algorithm allows bursts of up to b bytes which is also the bucket size so the bucket can hold up to b tokens tokens are generated and added into the bucket at a constant rate the following shows how tokens work with packets 177
- Token bucket 177
- Tos ip precedence dscp ip packet length byte 177
- Vmg5313 b10a b30a series user s guide 177
- Single rate three color marker 178
- Two rate three color marker 178
- Network address translation nat 181
- Overview 181
- What you can do in this chapter 181
- What you need to know 181
- Configuring servers behind port forwarding example 182
- Finding out more 182
- Note many residential broadband isp accounts do not allow you to run any server processes such as a web or ftp server from your location your isp may periodically check for servers and may suspend your account if it discovers any active services at your location if you are unsure refer to your isp 182
- Port forwarding 182
- The port forwarding screen 182
- 68 ip address assigned by isp 183
- Wan lan 183
- Add edit port forwarding 184
- Chapter 11 network address translation nat 184
- Click add new rule in the port forwarding screen or click the edit icon next to an existing rule to open the following screen 184
- Figure 75 port forwarding add edit 184
- Label description 184
- Port forwarding continued 184
- Table 55 port forwarding add edit 184
- The following table describes the labels in this screen 184
- Vmg5313 b10a b30a series user s guide 184
- Applications 185
- Applications the following screen appears 185
- Chapter 11 network address translation nat 185
- Label description 185
- Table 55 port forwarding add edit continued 185
- The applications screen 185
- This screen provides a summary of all nat applications and their configuration in addition this screen allows you to create new applications and or remove existing ones 185
- Vmg5313 b10a b30a series user s guide 185
- Add new application 186
- Applications 186
- Chapter 11 network address translation nat 186
- Figure 77 applications add 186
- Label description 186
- Table 57 applications add 186
- The following table describes the labels in this screen 186
- This screen lets you create new nat application rules click add new application in the applications screen to open the following screen 186
- Vmg5313 b10a b30a series user s guide 186
- The port triggering screen 187
- Add edit port triggering rule 188
- Chapter 11 network address translation nat 188
- Label description 188
- Port triggering 188
- The following table describes the labels in this screen 188
- This screen lets you create new port triggering rules click add new rule in the port triggering screen or click a rule s edit icon to open the following screen 188
- Vmg5313 b10a b30a series user s guide 188
- Chapter 11 network address translation nat 189
- Figure 80 port triggering add edit 189
- In addition to the servers for specified services nat supports a default server ip address a default server receives packets from ports that are not specified in the nat port forwarding setup screen 189
- Label description 189
- Table 59 port triggering configuration add edit 189
- The dmz screen 189
- The following table describes the labels in this screen 189
- Vmg5313 b10a b30a series user s guide 189
- The alg screen 190
- Address mapping 191
- Address mapping to display the following screen 191
- Chapter 11 network address translation nat 191
- Label description 191
- Ordering your rules is important because the vmg applies the rules in the order that you specify when a rule matches the current packet the vmg takes the corresponding action and the remaining rules are ignored 191
- The address mapping screen 191
- The following table describes the fields in this screen 191
- Vmg5313 b10a b30a series user s guide 191
- Add edit address mapping rule 192
- Address mapping continued 192
- Chapter 11 network address translation nat 192
- Figure 84 address mapping add edit 192
- Label description 192
- Table 63 address mapping add edit 192
- The following table describes the fields in this screen 192
- To add or edit an address mapping rule click add new rule or the rule s edit icon in the address mapping screen to display the screen shown next 192
- Vmg5313 b10a b30a series user s guide 192
- Chapter 11 network address translation nat 193
- Label description 193
- Sessions 193
- Sessions to display the following screen 193
- Table 63 address mapping add edit continued 193
- Technical reference 193
- The following table describes the fields in this screen 193
- The sessions screen 193
- This part contains more information regarding nat 193
- Vmg5313 b10a b30a series user s guide 193
- Nat definitions 194
- What nat does 194
- How nat works 195
- Inside global address iga 195
- Inside local address ila 195
- Nat application 195
- Wan lan 195
- Chapter 11 network address translation nat 196
- Figure 87 nat application with ip alias 196
- Let s say you want to assign ports 21 25 to one ftp telnet and smtp server a in the example port 80 to another b in the example and assign a default server ip address of 192 68 5 to a 196
- Port forwarding example 196
- Port forwarding services and port numbers 196
- Services port number 196
- Table 66 services and port numbers 196
- The most often used port numbers are shown in the following table please refer to rfc 1700 for further information about port numbers please also refer to the supporting cd for more examples and details on port forwarding and nat 196
- Vmg5313 b10a b30a series user s guide 196
- Ip address assigned by isp 197
- Dynamic dns setup 199
- Overview 199
- What you can do in this chapter 199
- Add edit dns entry 200
- Dyndns wildcard 200
- The dns entry screen 200
- What you need to know 200
- The dynamic dns screen 201
- Chapter 12 dynamic dns setup 202
- Dynamic dns continued 202
- Label description 202
- Vmg5313 b10a b30a series user s guide 202
- Overview 203
- The vlan group screen 203
- Vlan group 203
- What you can do in this chapter 203
- Add edit 204
- Add edit a vlan group 204
- Chapter 13 vlan group 204
- Click the add new vlan group button in the vlan group screen to open the following screen use this screen to create a new vlan group 204
- Figure 94 204
- Label description 204
- Table 71 interface group configuration 204
- The following table describes the fields in this screen 204
- Vlan group 204
- Vmg5313 b10a b30a series user s guide 204
- Interface group 205
- Overview 205
- The interface group screen 205
- What you can do in this chapter 205
- 68 x 24 206
- 68 x 24 vdsl_poe ppp0 206
- Default eth 2 4 206
- Dhcp vendor id option msft 5 206
- Interface group configuration 206
- Internet 206
- Note an interface can belong to only one group at a time 206
- Chapter 14 interface group 207
- Figure 97 interface group configuration 207
- Label description 207
- Table 73 interface group configuration 207
- The following table describes the fields in this screen 207
- Vmg5313 b10a b30a series user s guide 207
- Chapter 14 interface group 208
- Click the add button in the interface grouping configuration screen to open the following screen 208
- Figure 98 interface grouping criteria 208
- Interface grouping criteria 208
- Label description 208
- Table 74 interface grouping criteria 208
- The following table describes the fields in this screen 208
- Vmg5313 b10a b30a series user s guide 208
- Chapter 14 interface group 209
- Label description 209
- Table 74 interface grouping criteria continued 209
- Vmg5313 b10a b30a series user s guide 209
- Overview 211
- Usb service 211
- What you can do in this chapter 211
- What you need to know 211
- About file sharing 212
- About printer server 212
- Common internet file system 212
- File systems 212
- Operating system 212
- Print server 212
- Shares 212
- Tcp ip 212
- Workgroup name 212
- Before you begin 213
- Note if your usb device cannot be detected by the vmg see the troubleshooting for suggestions 213
- Supported oss 213
- The file sharing screen 213
- Chapter 15 usb service 214
- Each field is described in the following table 214
- File sharing 214
- File sharing screen 214
- Label description 214
- The add new user screen 214
- Vmg5313 b10a b30a series user s guide 214
- Note anyone on your network can play the media files in the published shares no user name and password or other form of security is used the media server is enabled by default with the video photo and music shares published 215
- The media server screen 215
- A usb printer with the driver already installed on your computer 216
- Before you begin 216
- Chapter 15 usb service 216
- Label description 216
- Media server 216
- Note your printer s installation instructions may ask that you connect the printer to your computer connect your printer to the vmg instead 216
- Print server 216
- The computers on your network must have the printer software already installed before they can create a tcp ip port for printing via the network follow your printer manufacturers instructions on how to install the printer software on your computer 216
- The following table describes the labels in this menu 216
- The vmg allows you to share a usb printer on your lan you can do this by connecting a usb printer to one of the usb ports on the vmg and then configuring a tcp ip port on the computers connected to your network 216
- To configure the print server you need the following 216
- Vmg5313 b10a b30a series user s guide 216
- Your vmg must be connected to your computer and any other devices on your network the usb printer must be connected to your vmg 216
- The print server screen 217
- Overview 219
- Power management 219
- The power management screen 219
- What you can do in this chapter 219
- What you need to know 219
- The auto switch off screen 220
- Add or modify rules 221
- Auto switch off 221
- Auto switch off screen 221
- Chapter 16 power management 221
- Label description 221
- The auto switch off add or modify screen 221
- The following table describes the labels in this menu 221
- Vmg5313 b10a b30a series user s guide 221
- Add new rule edit 222
- Add or modify rules screen 222
- Chapter 16 power management 222
- Each field is described in the following table 222
- Label description 222
- The add edit rule screen 222
- Vmg5313 b10a b30a series user s guide 222
- Firewall 223
- Overview 223
- What you can do in this chapter 223
- Land attack 224
- Ping of death 224
- Syn attack 224
- What you need to know 224
- The firewall screen 225
- The protocol screen 225
- Add edit a service 226
- Chapter 17 firewall 226
- Label description 226
- Protocol 226
- The following table describes the labels in this screen 226
- Use this screen to add a customized service rule that you can use in the firewall s acl rule configuration click add new service entry or the edit icon next to an existing service rule in the service screen to display the following screen 226
- Vmg5313 b10a b30a series user s guide 226
- Chapter 17 firewall 227
- Figure 111 service add edit 227
- Label description 227
- Table 85 service add edit 227
- The following table describes the labels in this screen 227
- Vmg5313 b10a b30a series user s guide 227
- Access control 228
- Access control to display the following screen this screen displays a list of the configured incoming or outgoing filtering rules 228
- Add edit an acl rule 228
- Chapter 17 firewall 228
- Click add new acl rule or the edit icon next to an existing acl rule in the access control screen the following screen displays 228
- Label description 228
- The access control screen 228
- The following table describes the labels in this screen 228
- Vmg5313 b10a b30a series user s guide 228
- Chapter 17 firewall 229
- Figure 113 access control add edit 229
- Label description 229
- Table 87 access control add edit 229
- The following table describes the labels in this screen 229
- Vmg5313 b10a b30a series user s guide 229
- Chapter 17 firewall 230
- Dos denial of service attacks can flood your internet connection with invalid packets and connection requests using so much bandwidth and so many resources that internet access becomes unavailable 230
- Dos to display the following screen 230
- Label description 230
- Table 87 access control add edit continued 230
- The dos screen 230
- The following table describes the labels in this screen 230
- Vmg5313 b10a b30a series user s guide 230
- Chapter 17 firewall 231
- Dos continued 231
- Label description 231
- Vmg5313 b10a b30a series user s guide 231
- Mac filter 233
- Overview 233
- The mac filter screen 233
- Chapter 18 mac filter 234
- Label description 234
- Mac filter 234
- The following table describes the labels in this screen 234
- Vmg5313 b10a b30a series user s guide 234
- Overview 235
- Parental control 235
- The parental control screen 235
- Add edit a parental control profile 236
- Chapter 19 parental control 236
- Click add new pcp in the parental control screen to add a new rule or click the edit icon next to an existing rule to edit it use this screen to configure a restricted access schedule and or url filtering settings to block the users on your network from accessing certain web sites 236
- Label description 236
- Parental control continued 236
- Vmg5313 b10a b30a series user s guide 236
- Add keyword 238
- Chapter 19 parental control 238
- Label description 238
- Table 91 parental control rule add edit 238
- The following table describes the fields in this screen 238
- Vmg5313 b10a b30a series user s guide 238
- Chapter 19 parental control 239
- Label description 239
- Table 91 parental control rule add edit continued 239
- Vmg5313 b10a b30a series user s guide 239
- Overview 241
- Scheduler rule 241
- The scheduler rule screen 241
- Add edit a schedule 242
- Chapter 20 scheduler rule 242
- Click the add button in the scheduler rule screen or click the edit icon next to a schedule rule to open the following screen use this screen to configure a restricted access schedule 242
- Figure 121 scheduler rule add edit 242
- Label description 242
- Table 93 scheduler rule add edit 242
- The following table describes the fields in this screen 242
- Vmg5313 b10a b30a series user s guide 242
- Certificates 243
- Overview 243
- The local certificates screen 243
- What you can do in this chapter 243
- What you need to know 243
- Chapter 21 certificates 244
- Create certificate request 244
- Label description 244
- Local certificates 244
- Local certificates and then create certificate request to open the following screen use this screen to have the vmg generate a certification request 244
- The following table describes the labels in this screen 244
- Vmg5313 b10a b30a series user s guide 244
- After you click apply the following screen displays to notify you that you need to get the certificate request signed by a certificate authority if you already have click load_signed to import the signed certificate into the vmg otherwise click back to return to the local certificates screen 245
- Chapter 21 certificates 245
- Figure 123 create certificate request 245
- Label description 245
- Table 95 create certificate request 245
- The following table describes the labels in this screen 245
- Vmg5313 b10a b30a series user s guide 245
- Load signed certificate 246
- Note you must remove any spaces from the certificate s filename before you can import it 246
- Chapter 21 certificates 247
- Label description 247
- Table 96 load signed certificate 247
- The following table describes the fields in this screen 247
- The following table describes the labels in this screen 247
- The trusted ca screen 247
- Trusted ca 247
- Trusted ca to open the following screen this screen displays a summary list of certificates of the certification authorities that you have set the vmg to accept as trusted the vmg accepts any valid certificate signed by a certification authority on this list as being trustworthy thus you do not need to import any certificate that is signed by one of these certification authorities 247
- Vmg5313 b10a b30a series user s guide 247
- Import trusted ca certificate 248
- View trusted ca certificate 248
- Chapter 21 certificates 249
- Figure 128 trusted ca import certificate 249
- Label description 249
- Table 99 trusted ca import certificate 249
- The following table describes the fields in this screen 249
- Vmg5313 b10a b30a series user s guide 249
- Overview 251
- The ipsec vpn setup screen 251
- Chapter 22 vpn 252
- Ipsec vpn 252
- Label description 252
- The ipsec vpn add edit screen 252
- This screen contains the following fields 252
- Vmg5313 b10a b30a series user s guide 252
- Vpn screen to open this screen as shown next 252
- Chapter 22 vpn 253
- Ipsec vpn add edit 253
- Label description 253
- This screen contains the following fields 253
- Vmg5313 b10a b30a series user s guide 253
- Chapter 22 vpn 254
- Ipsec vpn add edit 254
- Label description 254
- Note only use manual key as a temporary solution because it is not as secure as a regular ipsec sa 254
- Vmg5313 b10a b30a series user s guide 254
- Chapter 22 vpn 255
- Ipsec vpn add edit 255
- Label description 255
- Vmg5313 b10a b30a series user s guide 255
- Chapter 22 vpn 256
- Ipsec vpn add edit 256
- Label description 256
- Vmg5313 b10a b30a series user s guide 256
- Chapter 22 vpn 257
- Ipsec vpn add edit 257
- Label description 257
- Vmg5313 b10a b30a series user s guide 257
- Chapter 22 vpn 258
- Ipsec architecture 258
- Label description 258
- Monitor 258
- Monitor to open this screen as shown next 258
- Technical reference 258
- The ipsec vpn monitor screen 258
- The overall ipsec architecture is shown as follows 258
- This screen contains the following fields 258
- This section provides some technical background information about the topics covered in this section 258
- Vmg5313 b10a b30a series user s guide 258
- Encapsulation 259
- Ipsec algorithms 259
- Key management 259
- Ike phases 260
- Transport mode 260
- Tunnel mode 260
- Negotiation mode 261
- Ipsec and nat 262
- Vpn nat and nat traversal 262
- Id type and content 263
- Diffie hellman dh key groups 264
- Id type and content examples 264
- Pre shared key 264
- Overview 265
- What you can do in this chapter 265
- Before you begin 266
- How to find out more 266
- Sip accounts 266
- The sip account screen 266
- What you need to know about voip 266
- Note click more to see all the fields in the screen you don t necessarily need to use all these fields to set up your account click less to see and configure only the fields needed for this feature 267
- The sip account add edit screen 267
- Add new accoun edit 268
- Chapter 23 voice 268
- Each field is described in the following table 268
- Label description 268
- Vmg5313 b10a b30a series user s guide 268
- Add new accoun edit continued 269
- Chapter 23 voice 269
- Label description 269
- Vmg5313 b10a b30a series user s guide 269
- Add new accoun edit continued 270
- Chapter 23 voice 270
- Label description 270
- Vmg5313 b10a b30a series user s guide 270
- Add new accoun edit continued 271
- Chapter 23 voice 271
- Label description 271
- Sip service provider to open the following screen 271
- The sip service provider screen 271
- Vmg5313 b10a b30a series user s guide 271
- The sip service provider add edit screen 272
- Note click more to see all the fields in the screen you don t necessarily need to use all these fields to set up your account click less to see and configure only the fields needed for this feature 273
- Add new provider edit 274
- Chapter 23 voice 274
- Each field is described in the following table 274
- Label description 274
- Vmg5313 b10a b30a series user s guide 274
- Add new provider edit continued 275
- Chapter 23 voice 275
- Label description 275
- Vmg5313 b10a b30a series user s guide 275
- Add new provider edit continued 276
- Chapter 23 voice 276
- Label description 276
- Vmg5313 b10a b30a series user s guide 276
- Add new provider edit continued 277
- Chapter 23 voice 277
- Label description 277
- Vmg5313 b10a b30a series user s guide 277
- Add new provider edit continued 278
- Chapter 23 voice 278
- Label description 278
- Vmg5313 b10a b30a series user s guide 278
- The call rule screen 279
- The phone screen 279
- The call history summary screen 280
- Call history outgoing 281
- Call history outgoing the following screen displays 281
- Call history summary 281
- Chapter 23 voice 281
- Each field is described in the following table 281
- Label description 281
- The call history outgoing calls screen 281
- Use this screen to see detailed information for each outgoing call you made 281
- Vmg5313 b10a b30a series user s guide 281
- Technical reference 282
- The call history incoming calls screen 282
- Sip identities 283
- Sip number 283
- Sip registration 283
- Sip service domain 283
- Authorization requirements 284
- Sip proxy server 284
- Sip servers 284
- Sip user agent 284
- Sip redirect server 285
- Pulse code modulation 286
- Sip call progression 286
- Sip register server 286
- Proxy 1 proxy 2 287
- Sip call progression through proxy servers 287
- Sip rtp 287
- Ua 1 ua 2 287
- Voice coding 288
- Comfort noise generation 289
- Custom tones ivr 289
- Echo cancellation 289
- Mwi message waiting indication 289
- Recording custom tones 289
- Voice activity detection silence suppression 289
- Deleting custom tones 290
- Diffserv 290
- Listening to custom tones 290
- Quality of service qos 290
- Type of service tos 290
- Dscp and per hop behavior 291
- Phone services overview 291
- Europe type supplementary phone services 292
- European call hold 292
- Note to take full advantage of the supplementary phone services available through the vmg s phone ports you may need to subscribe to the services from your voip service provider 292
- The flash key 292
- European call transfer 293
- European call waiting 293
- European three way conference 293
- Usa type supplementary services 293
- Usa call hold 294
- Usa call transfer 294
- Usa call waiting 294
- Usa three way conference 294
- Action function description 295
- Chapter 23 voice 295
- Hang up the phone to drop the connection 295
- If you want to go back to the three way conversation press the flash key again 295
- If you want to separate the activated three way conference into two individual connections again press the flash key this time the party b is on line and party a is on hold 295
- If you want to separate the activated three way conference into two individual connections with party a on line and party b on hold press the flash key 295
- Phone functions summary 295
- Table 122 phone functions summary 295
- The following table shows the key combinations you can enter on your phone s keypad to use certain features 295
- Vmg5313 b10a b30a series user s guide 295
- Overview 297
- What you can do in this chapter 297
- What you need to know 297
- Chapter 24 log 298
- Code severity 298
- Label description 298
- Log to open the system log screen 298
- System log 298
- Table 123 syslog severity levels 298
- The following table describes the fields in this screen 298
- The system log screen 298
- Vmg5313 b10a b30a series user s guide 298
- Chapter 24 log 299
- Label description 299
- Security log 299
- Security log to open the following screen 299
- The following table describes the fields in this screen 299
- The security log screen 299
- Vmg5313 b10a b30a series user s guide 299
- Overview 301
- The wan status screen 301
- Traffic status 301
- What you can do in this chapter 301
- Chapter 25 traffic status 302
- Label description 302
- Lan to open the following screen the figure in this screen shows the interface that is currently connected on the vmg 302
- The following table describes the fields in this screen 302
- The lan status screen 302
- Vmg5313 b10a b30a series user s guide 302
- Chapter 25 traffic status 303
- Label description 303
- Nat to open the following screen the figure in this screen shows the nat session statistics for hosts currently connected on the vmg 303
- The following table describes the fields in this screen 303
- The nat status screen 303
- Vmg5313 b10a b30a series user s guide 303
- Chapter 25 traffic status 304
- Label description 304
- The following table describes the fields in this screen 304
- Vmg5313 b10a b30a series user s guide 304
- The voip status screen 305
- Voip status 305
- Chapter 26 voip status 306
- Label description 306
- Vmg5313 b10a b30a series user s guide 306
- Voip status continued 306
- The xdsl statistics screen 307
- Xdsl statistics 307
- Chapter 27 xdsl statistics 309
- Label description 309
- The following table describes the labels in this screen 309
- Vmg5313 b10a b30a series user s guide 309
- Xdsl statistics 309
- Chapter 27 xdsl statistics 310
- Label description 310
- Vmg5313 b10a b30a series user s guide 310
- Xdsl statistics continued 310
- G statistics 311
- Overview 311
- The 3g statistics screen 311
- Chapter 28 3g statistics 312
- G statistics continued 312
- Label description 312
- Vmg5313 b10a b30a series user s guide 312
- Overview 313
- The user account screen 313
- User account 313
- Add edit 314
- Chapter 29 user account 314
- Label description 314
- The following table describes the labels in this screen 314
- The user account add edit screen 314
- User account 314
- User account continued continued 314
- User account to open the following screen 314
- Vmg5313 b10a b30a series user s guide 314
- Overview 315
- Remote management 315
- The remote mgmt screen 315
- Chapter 30 remote management 316
- Label description 316
- Note if this list is empty all public ip addresses can access the vmg from the wan through the specified services 316
- Remote mgmt 316
- The following table describes the fields in this screen 316
- The trust domain screen 316
- Trust domain 316
- Turst domain to open the following screen 316
- Vmg5313 b10a b30a series user s guide 316
- The add trust domain screen 317
- Overview 319
- The tr 069 client screen 319
- Tr 069 client 319
- Chapter 31 tr 069 client 320
- Label description 320
- The following table describes the fields in this screen 320
- Tr 069 client 320
- Vmg5313 b10a b30a series user s guide 320
- Overview 321
- The tr 064 screen 321
- Tr 064 321
- Overview 323
- The snmp screen 323
- Chapter 33 snmp 324
- Get allows the manager to retrieve an object variable from the agent 324
- Getnext allows the manager to retrieve the next object variable from a table or list within an agent in snmpv1 when a manager wants to retrieve all elements of a table from an agent it initiates a get operation followed by a series of getnext operations 324
- Label description 324
- Set allows the manager to set values for object variables within an agent 324
- Snmp itself is a simple request response protocol based on the manager agent model the manager issues a request and the agent returns responses using the following protocol operations 324
- Snmp to open the following screen use this screen to configure the vmg snmp settings 324
- The following table describes the fields in this screen 324
- Trap used by the agent to inform the manager of some events 324
- Vmg5313 b10a b30a series user s guide 324
- Overview 325
- The time screen 325
- Time settings 325
- Chapter 34 time settings 326
- Label description 326
- Time continued 326
- Vmg5313 b10a b30a series user s guide 326
- E mail notification 327
- Overview 327
- The email notification screen 327
- Chapter 35 e mail notification 328
- Click the add button in the email notification screen use this screen to configure the required information for sending e mail via a mail server 328
- Email notification edit 328
- Label description 328
- The following table describes the labels in this screen 328
- Vmg5313 b10a b30a series user s guide 328
- Log setting 329
- Overview 329
- The log settings screen 329
- An end of log message displays for each mail in which a complete log has been sent the following is an example of a log sent by e mail 330
- Chapter 36 log setting 330
- Example e mail log 330
- Label description 330
- Logs setting 330
- The date format here is day month year 330
- The date format here is month day year the time format is hour minute second 330
- The following table describes the fields in this screen 330
- Vmg5313 b10a b30a series user s guide 330
- You may edit the subject title 330
- Firmware upgrade 333
- Overview 333
- The firmware screen 333
- After two minutes log in again and check your new firmware version in the status screen 334
- Chapter 37 firmware upgrade 334
- Figure 174 firmware uploading 334
- Figure 175 network temporarily disconnected 334
- Firmware upgrade 334
- If the upload was not successful the following screen will appear click ok to go back to the firmware upgrade screen 334
- Label description 334
- The vmg automatically restarts in this time causing a temporary network disconnect in some operating systems you may see the following icon on your desktop 334
- Vmg5313 b10a b30a series user s guide 334
- Configuration 337
- Overview 337
- The configuration screen 337
- Do not turn off the vmg while configuration file upload is in progress 338
- Reset to factory defaults 338
- Restore configuration 338
- The reboot screen 339
- Diagnostic 340
- Overview 340
- What you can do in this chapter 340
- What you need to know 340
- 802 ag 341
- Ping traceroute nslookup 341
- Chapter 39 diagnostic 342
- Label description 342
- Oam ping 342
- Oam ping to open the screen shown next use this screen to perform an oam operation administration and maintenance f4 or f5 loopback test on a pvc the vmg sends an oam f4 or f5 packet to the dslam or atm switch and then returns it to the vmg the test result then displays in the text box 342
- The following table describes the fields in this screen 342
- Vmg5313 b10a b30a series user s guide 342
- Note the dslam to which the vmg is connected must also support atm f4 and or f5 to use this test 343
- Note this screen is available only when you configure an atm layer 2 interface 343
- Power hardware connections and leds 345
- Troubleshooting 345
- I cannot see or access the login screen in the web configurator 346
- I forgot the ip address for the vmg 346
- I forgot the password 346
- Vmg access and login 346
- I can see the login screen but i cannot log in to the vmg 347
- I cannot telnet to the vmg 347
- I cannot use ftp to upload download the configuration file i cannot use ftp to upload new firmware 347
- I cannot access the internet 348
- I cannot access the internet through a dsl connection 348
- I cannot connect to the internet using a second dsl connection 348
- I cannot connect to the internet using an ethernet connection 348
- Internet access 348
- I cannot access the vmg anymore i had access to the vmg but my connection is not available anymore 349
- I cannot connect to the internet using a 3g connection 349
- What factors may cause intermittent or unstabled wireless connection how can i solve this problem 349
- Wireless internet access 349
- Local network 350
- The vmg fails to detect my usb device 350
- Usb device connection 350
- What is a server set id ssid 350
- The local area connection icon for upnp disappears in the screen 351
- Appendices 353
- Customer support 355
- Ppendi 355
- Austria 356
- Europe 356
- Malaysia 356
- Pakistan 356
- Philipines 356
- Singapore 356
- Taiwan 356
- Thailand 356
- Vietnam 356
- Belarus 357
- Belgium 357
- Bulgaria 357
- Denmark 357
- Estonia 357
- Finland 357
- France 357
- Germany 357
- Hungary 357
- Latvia 357
- Lithuania 358
- Netherlands 358
- Norway 358
- Poland 358
- Romania 358
- Russia 358
- Slovakia 358
- Sweden 358
- Switzerland 358
- Argentina 359
- Ecuador 359
- Latin america 359
- Middle east 359
- North america 359
- Turkey 359
- Ukraine 359
- Africa 360
- Australia 360
- Oceania 360
- South africa 360
- Ppendi 361
- Wireless lans 361
- Channel 363
- Rts cts 363
- Fragmentation threshold 364
- Note enabling the rts threshold causes redundant network overhead that could negatively affect the throughput performance instead of providing a remedy 364
- Ieee 802 1g wireless lan 365
- Ieee 802 x 365
- Note you must enable the same wireless security settings on the vmg and on all wireless clients that you want to associate with it 365
- Wireless security overview 365
- Radius 366
- Types of radius messages 366
- Eap md5 message digest algorithm 5 367
- Eap tls transport layer security 367
- Eap ttls tunneled transport layer service 367
- Types of eap authentication 367
- Appendix b wireless lans 368
- Dynamic wep key exchange 368
- Eap md5 eap tls eap ttls peap leap 368
- For added security certificate based authentications eap tls eap ttls and peap use dynamic keys for data encryption they are often deployed in corporate environments but for public deployment a simple user name and password pair is more practical the following table is a comparison of the features of authentication types 368
- If both an ap and the wireless clients support wpa2 and you have an external radius server use wpa2 for stronger data encryption if you don t have an external radius server you should use 368
- If this feature is enabled it is not necessary to configure a default encryption key in the wireless security configuration screen you may still configure and store keys but they will not be used while dynamic wep is enabled 368
- Key differences between wpa or wpa2 and wep are improved data encryption and user authentication 368
- Leap lightweight extensible authentication protocol is a cisco implementation of ieee 802 x 368
- Like eap ttls server side certificate authentication is used to establish a secure connection then use simple username and password methods through the secured connection to authenticate the clients thus hiding client identity however peap only supports eap methods such as eap md5 eap mschapv2 and eap gtc eap generic token card for client authentication eap gtc is implemented only by cisco 368
- Note eap md5 cannot be used with dynamic wep key exchange 368
- Peap protected eap 368
- Table 151 comparison of eap authentication types 368
- The ap maps a unique key that is generated with the radius server this key expires when the wireless connection times out disconnects or reauthentication times out a new wep key is generated each time reauthentication is performed 368
- Vmg5313 b10a b30a series user s guide 368
- Wi fi protected access wpa is a subset of the ieee 802 1i standard wpa2 ieee 802 1i is a wireless security standard that defines stronger encryption authentication and key management than wpa 368
- Wpa and wpa2 368
- Encryption 369
- User authentication 369
- Wireless client wpa supplicants 370
- Wpa 2 with radius application example 370
- Wpa 2 psk application example 371
- A radiation pattern is a diagram that allows you to visualize the shape of the antenna s coverage area 372
- An antenna couples rf signals onto air a transmitter within a wireless device sends an rf signal to the antenna which propagates the signal through the air the antenna also operates in reverse by capturing rf signals from the air 372
- An antenna in the frequency of 2 ghz ieee 802 1b and ieee 802 1g or 5ghz ieee 802 1a is needed to communicate efficiently in a wireless lan 372
- Antenna characteristics 372
- Antenna gain 372
- Antenna gain measured in db decibel is the increase in coverage within the rf beam width higher antenna gain improves the range of the signal for better communications 372
- Antenna overview 372
- Appendix b wireless lans 372
- Authentication method key management protocol 372
- Encryptio n method 372
- Enter manual key ieee 802 x 372
- For an indoor site each 1 db increase in antenna gain results in a range increase of approximately 372
- Frequency 372
- Positioning the antennas properly increases the range and coverage area of a wireless lan 372
- Radiation pattern 372
- Refer to this table to see what other security parameters you should configure for each authentication method or key management protocol type mac address filters are not dependent on how you configure these security features 372
- Security parameters summary 372
- Table 152 wireless security relational matrix 372
- Vmg5313 b10a b30a series user s guide 372
- Positioning antennas 373
- Types of antennas for wlan 373
- Ppendi 375
- Global address 376
- Loopback address 376
- Multicast address 376
- Unspecified address 376
- Eui 64 377
- Identity association 377
- Interface id 377
- Subnet masking 377
- Dhcp relay agent 378
- Icmpv6 378
- Neighbor discovery protocol ndp 378
- Prefix delegation 378
- Rebind 378
- Renew rebind 378
- Renew to s1 378
- Ipv6 cache 379
- Mld messages 379
- Multicast listener discovery 379
- Example enabling dhcpv6 on windows xp 380
- Example enabling ipv6 on windows xp 2003 vista 380
- Example enabling ipv6 on windows 7 381
- Ppendi 383
- Services 383
- Appendix d services 384
- Name protocol port s description 384
- Table 156 examples of services 384
- Vmg5313 b10a b30a series user s guide 384
- Appendix d services 385
- Name protocol port s description 385
- Table 156 examples of services continued 385
- Vmg5313 b10a b30a series user s guide 385
- Appendix d services 386
- Name protocol port s description 386
- Table 156 examples of services continued 386
- Vmg5313 b10a b30a series user s guide 386
- Legal information 387
- Ppendi 387
- Open source licenses 388
- Registration 388
- Safety warnings 388
Похожие устройства
- Zyxel VMG5313-B10A Технические характеристики
- Zyxel VES-1624FT-55A Инструкция по эксплуатации
- Zyxel VES-1624FT-55A Инструкция по установке
- Zyxel VES-1616FE-55A Инструкция по эксплуатации
- Zyxel IES-1248 EE Инструкция по эксплуатации
- Барс EKO ARC 164 Инструкция по эксплуатации
- Барс EKO ARC 184 Инструкция по эксплуатации
- Барс EKO ARC 204 Инструкция по эксплуатации
- Барс Mini ARC 160 D Инструкция по эксплуатации
- Барс Mini ARC 160 D Сертификат
- Барс Mini ARC 180 D Инструкция по эксплуатации
- Барс Mini ARC 180 D Сертификат
- Барс Mini ARC 200 D Инструкция по эксплуатации
- Барс Mini ARC 200 D Сертификат
- Барс Profi ARC 167 D (220) Инструкция по эксплуатации
- Барс Profi ARC 167 D (220) Сертификат
- Барс Profi ARC 187 D (220) Инструкция по эксплуатации
- Барс Profi ARC 187 D (220) Сертификат
- Барс Profi ARC 207 D (220) Инструкция по эксплуатации
- Барс Profi ARC 207 D (220) Сертификат