ZyXEL Communications VSG1435-B101 manual

www .zyxel.com www .zyxel.com VSG1435-B101 Series 802.1 1n Wireless VDSL2 4-port Gateway with HPNA Copyright © 2010 ZyXEL Communications Corporation Firmware V ersion 1.10 Edition 1, 11/2010 Default Login Details IP Address http://192.168.1.1 User Name admin Pa ss wo rd 12 34[...]

[...]

About This User's Guide VSG1435-B10 1 Series User ’s Guide 3 About This User's Guide Intended Audience This manual is intended for people who w ant to configure the Z yXEL Device using the web configur ator . Y ou should hav e at least a basic knowledge of T CP/IP networking concepts and topology . Related Document ation •Q u i c k S [...]

About This User's Guide VSG1435-B101 Series User’s Guide 4 • Download Library Search for the latest produc t updates an d documentation from this link. Re ad the T ech Doc Overview to find out how to efficiently use the User Guide, Quick Start Guide and Command Line Int erface R eference Guide in ord er to better understand how to use your[...]

Document Conventions VSG1435-B10 1 Series User ’s Guide 5 Document Conventions W arnings and Notes These are how warnings and notes are shown in this User’ s Guide. W arnings tell you about things that could harm you or your device. Note: Notes tell you other import ant informat ion (for e xample, other things you may need to configure or help [...]

Document Conventions VSG1435-B101 Series User’s Guide 6 Icons Used in Figures Figures in this User’s Guide may use the followi n g generic icons. The Z yXEL Device icon is not an exact represent ation of your device. ZyX E L D e v i c e Computer Notebook computer Server Firewall Te l e p h o n e Ro ut e r Sw itch[...]

Safety Warnings VSG1435-B10 1 Series User ’s Guide 7 Safety Warnings • Do NO T use this product near water , for ex am ple, in a wet basement or near a swim ming pool. • Do NO T expose your device to dampness, dust or corrosive liquids. • Do NO T store things on the device. • Do NOT install, use, or service this device during a thundersto[...]

Safety Warnings VSG1435-B101 Series User’s Guide 8[...]

Contents Overview VSG1435-B10 1 Series User ’s Guide 9 Contents Overview User ’ s Guide ................................................... ..................................................... .......... ......... 21 Introducing the VSG1435-B101 ............. ................ ................ ................ ................. ................[...]

Contents Overview VSG1435-B101 Series User’s Guide 10[...]

Table of Contents VSG1435-B10 1 Series User ’s Guide 11 Table of Contents About This User's Guide . ............................................................... ........................................ .. 3 Document Conventions.................................................................. ......................................... .5 S[...]

Table of Contents VSG1435-B101 Series User’s Guide 12 3.1 Overview ... ... .... ... ... ... ............. .... ... ... ... ... ............. .... ... ... ... .... ... ............. ... ... ... .... ... .... ............ 43 3.2 Quick S tart Setup ... ... .... ... ............. ... ... ... .... ... ... ............. ... .... ... ... ... ...........[...]

Table of Contents VSG1435-B10 1 Series User ’s Guide 13 6.3.3 VPI and VCI . ... .... ... ... ............. ... ... .... ... ... ............. ... .... ... ... ... ... ............. .... ... ... ... ... ..... .. 91 6.3.4 IP Address Assignment .... ... ... ... ... ............. .... ... ... ... .... ... ... ... ... .... ............. ... ... ... ..[...]

Table of Contents VSG1435-B101 Series User’s Guide 14 8.3 The S t atic DHCP Screen .... ... .... ... ... ... ... .... ............. ... ... ... .... ... ... ... ... .... ... ............. ... ... ... .... . 1 36 8.4 The UPnP Screen ......... ................ ................ ............. ................ ............. ................ ........ .[...]

Table of Contents VSG1435-B10 1 Series User ’s Guide 15 12.2.1 Add/Edit Port Forwarding . ............. ................ ............. ............. ................ ............. . 182 12.3 The Applications Screen ................... ....... ...... ............. ............. ................ ............. ........... 183 12.3.1 Add New Applicat[...]

Table of Contents VSG1435-B101 Series User’s Guide 16 Chapter 16 Firewall............................................................. ..................................................... ..... ............ 219 16.1 Overview ........... ................ ............. ................ ................ ............. ................ ............ .[...]

Table of Contents VSG1435-B10 1 Series User ’s Guide 17 Chapter 21 IPSec ........................................... ..................................................... .......................... ............ 249 21.1 Overview ........... ................ ............. ................ ................ ............. ................ ...........[...]

Table of Contents VSG1435-B101 Series User’s Guide 18 25.2 The W AN S tatus Screen ................... ................ ............. ................ ................. ............ ..... 2 7 8 25.3 The LAN S tatus Screen . .......... ................ ............. ............. ................ ............. ................ . 2 80 Chapter 26 IG[...]

Table of Contents VSG1435-B10 1 Series User ’s Guide 19 32.3 The Reboot Screen .................... ............. ................ ............. ................ ............. ............. .3 0 8 Chapter 33 Diagnostic........................................................ ..................................................... ........... ...... [...]

Table of Contents VSG1435-B101 Series User’s Guide 20[...]

21 P ART I User ’ s Guide[...]

22[...]

VSG1435-B10 1 Series User ’s Guide 23 C HAPTER 1 Introducing the VSG1435-B101 1.1 Overview The VSG1435-B101 is a wireless VDSL rout er and Gigabit Ethernet gatewa y with Home Phoneline Networking Al liance ( HPNA) capability . It has a DSL port and a Gigabit Ethernet port for super-fast Internet acc ess over analog (PO TS) telephone lines. The Z [...]

Chapter 1 Introducing th e VSG1435- B101 VSG1435-B101 Series User’s Guide 24 • W rite down the password and put it in a safe place. • Back up the configuration (and mak e sure you know how to restore it). Restoring an e arlier wo rking conf iguratio n may be usef ul if the device becomes unstable or even cr ashes. If you forget your password,[...]

Chapter 1 Introducing the VSG1435-B101 VSG1435-B10 1 Series User ’s Guide 25 Computers can connect to the Z y XEL Device’s LAN ports (or wirelessly). Figure 1 ZyXEL Device’ s Internet Access Application Y ou can also configure IP filtering on the Z yXEL Device for secure Internet access. When the IP filter is on, all incoming traf fic from th[...]

Chapter 1 Introducing th e VSG1435- B101 VSG1435-B101 Series User’s Guide 26 1.4.2 HomePNA The Z yXEL Device complies with HomePNA (Home Phoneline Netw orking All iance, also known as HPNA) 3.1, a home networ king technology for carrying data o ver existing coaxial cables and telephone wiring . The figure below shows y our Z yXEL Device ( A ) con[...]

Chapter 1 Introducing the VSG1435-B101 VSG1435-B10 1 Series User ’s Guide 27 File Sharing Use the built -in USB 2.0 port to share f iles on a USB memory stick or a USB hard drive ( B ). Y ou can connect one USB hard drive to the ZyXEL Device at a time. Use FTP to access the files on the USB device. Figure 3 USB File Sharing Application 1.5 Hardwa[...]

Chapter 1 Introducing th e VSG1435- B101 VSG1435-B101 Series User’s Guide 28 T o connect the stand, line up the arrow on the stand with the arrow on the bottom of the device as shown. Figure 4 Connecting the S tand[...]

Chapter 1 Introducing the VSG1435-B101 VSG1435-B10 1 Series User ’s Guide 29 1.6 Hardware Connections T o connect your Z yXEL Device: Figure 5 Hardware Connections 1 Attach the antenna and point it up. 2 Do one of the following for your Internet connection: 2a DSL WAN : Use a telephone cable to connect y our Z y XEL Device’ s DS L WA N port to [...]

Chapter 1 Introducing th e VSG1435- B101 VSG1435-B101 Series User’s Guide 30 3 HPNA : (VSG1435-B101 only) Use a coaxial cabl e to connect to a coaxial outlet and relay Internet traffic throughout your house through coaxial cabling. 4 LAN : Use an Ethernet cable to connect a computer to a LAN port for initial configur ati on and/or Internet access[...]

Chapter 1 Introducing the VSG1435-B101 VSG1435-B10 1 Series User ’s Guide 31 None of the LEDs are on if the Z y XEL Device is not receiving power . T able 1 LED Descriptions LED COLOR ST A TUS DESCRIPTION POWER Green On The Z yXEL Device is receiving power and ready for use. Blinking The Z yXEL Device is self-testing. R ed On The Z yXEL Device de[...]

Chapter 1 Introducing th e VSG1435- B101 VSG1435-B101 Series User’s Guide 32 1.8 The RESET Button If you forget your password or cannot acces s the web configurator , you will need to use the RE SET button at the back of the device to reload the factory -default configurati on file. This means that you will lose all configurations that you had pr[...]

Chapter 1 Introducing the VSG1435-B101 VSG1435-B10 1 Series User ’s Guide 33 Y ou can configure your wire less network in either the built-in W eb Configurator , or using the WPS button. Figure 7 Wireless Access Example 1.9.1 Using the WLAN/WPS Button If the wireles s network is turned off , press the WLAN/WPS button on the front of the Z yXEL De[...]

Chapter 1 Introducing th e VSG1435- B101 VSG1435-B101 Series User’s Guide 34 2 Press the WLAN/WPS button for five seconds and release it. 3 Press the WPS button on an other WPS-enabled device within range of the Z yXEL Device. The WLAN/WPS LED flashes green and or ange while the Z yXEL Device sets up a WPS connection with the other wireless devic[...]

VSG1435-B10 1 Series User ’s Guide 35 C HAPTER 2 The Web Configurator 2.1 Overview The web configurator is an HTML -based management interface that allows easy device setup and management via Internet browser . Use Internet Explorer 6.0 and later version s or Mozilla F irefox 3 and la t er ver sions or Sa f a ri 2 . 0 an d later versions. The rec[...]

Chapter 2 The Web Con figurator VSG1435-B101 Series User’s Guide 36 enter your password and click Login . For securit y reasons, you will be tempor arily denied access to the Z yXEL Devi ce for a pe riod of time (15 minutes by default) if you ha ve entered the incorrect username and password for a certain n umber of times (three times b y default[...]

Chapter 2 The Web Configurator VSG1435-B10 1 Series User ’s Guide 37 6 The Network Map page appears. Figure 1 1 Network Map Note: For security reasons, the ZyXEL Device automatically logs you out if you do not use the web configurator for ten minutes (defa ult). If this happens, log in again. 7 Click Status to display the Status screen, where you[...]

Chapter 2 The Web Con figurator VSG1435-B101 Series User’s Guide 38 2.2 W eb Configurator Layout Figure 12 Screen Layout As illustr ated above, the main screen is divided into these parts: • A - title bar • B - main window • C - navigation panel 2.2.1 T itle Bar The title bar prov ides some icons in the upper right corner . B C A[...]

Chapter 2 The Web Configurator VSG1435-B10 1 Series User ’s Guide 39 The icons provide the following functions. 2.2.2 Main Window The main window displays information and configurati on fields. It is discussed i n the rest of this d ocument. After you cli ck Status on the Network Map page, the Status screen is displa yed. See Chapter 5 on page 75[...]

Chapter 2 The Web Con figurator VSG1435-B101 Series User’s Guide 40 Home Networking LAN Setup Use this screen to configure LAN TCP/IP settings, and other adva nced properties. Static DHCP Use this screen to assign specific IP addresses to individual MAC addresses. UPnP Use this screen to turn UPnP and UPnP NA T - T on or off . Rou t in g Static R[...]

Chapter 2 The Web Configurator VSG1435-B10 1 Series User ’s Guide 41 Par e n ta l Control Use this screen to block web sites with the specific URL. Scheduler Rule Use this screen to configure the days and times when a configured restriction (such as parental control) is enforced. Certificates Local Certificates Use this screen to view a summary l[...]

Chapter 2 The Web Con figurator VSG1435-B101 Series User’s Guide 42[...]

VSG1435-B10 1 Series User ’s Guide 43 C HAPTER 3 Quick Start 3.1 Overview Use the Quick Start screens to configure the Z yXEL Device’ s time zone and basic Internet access and wireless setting s. Note: See the techn ical reference chapters (st arting on p age 71 ) for background information on the features in this chapter . 3.2 Quick S t art Se[...]

Chapter 3 Quick Start VSG1435-B101 Series User’s Guide 44 2 Enter your PPPoE account’ s user name an d password exactly as provided by your Internet Service Provider (ISP). If your ISP also gav e you static IP address settings to use, select Yes and ent er them in the fields that display . Click Next . Figure 14 Internet Con nection 3 T urn the[...]

VSG1435-B10 1 Series User ’s Guide 45 C HAPTER 4 Tutorials 4.1 Overview This chapter shows you how t o use th e Z yXEL Devi ce’ s va rious features. • Setting Up an ADSL PPP oE Connection , see page 45 • HomePNA Example Setup , see page 48 • Setting Up a Secure Wireless Network , see page 50 • Setting Up Multiple Wireless Groups , see p[...]

Chapter 4 Tutorials VSG1435-B101 Series User’s Guide 46 1 Click Network Settings > Broadband to open the following screen. Click Add New WAN Interface . 2 In this example, the DSL connection has the following information. 3 Select the Active check box. Enter the General and ATM PVC Configuration settings as prov ided above. Set the Type to ADS[...]

Chapter 4 Tutorials VSG1435-B10 1 Series User ’s Guide 47 5 Configure this rule as y our default Internet connection by selecting the Apply as Default Gateway check box . Then select DNS as Static and enter the DNS server addresses provided to you, such as 192.168.5.2 (DNS server1 )/ 19 2.168.5.1 (DNS server2). 6 Click Apply to save your se t tin[...]

Chapter 4 Tutorials VSG1435-B101 Series User’s Guide 48 7 Y ou should see a summary of your new DSL connect ion setup in the Broadband screen as follows. T ry to connect to a web site, such as zyxel .com to see if you ha ve correctly set up your Internet co nn ec ti on . Be sure to contact your service pro vider for any information you need to co[...]

Chapter 4 Tutorials VSG1435-B10 1 Series User ’s Guide 49 The figure below shows the hardw are setup for this t utorial: 1 Connect your Z yXEL Device to the Inte rne t source. This could be either DSL or Ethernet. 2 Connect the Z yXEL Device’ s coaxial port a co axial outlet in your house. This relays Internet connectivity to other coaxial outl[...]

Chapter 4 Tutorials VSG1435-B101 Series User’s Guide 50 4.4 Setting Up a S ecure Wireless Network Thomas wants t o set up a wireless network so that he can use hi s notebook to access the Internet. In this wireless ne twork, the Z yXEL Device serv es as an access point (AP), and the no tebook is the wireless client. The wireless client can access[...]

Chapter 4 Tutorials VSG1435-B10 1 Series User ’s Guide 51 1 Click Netw ork Settings > Wireless to open the General screen. Select More Secure as the security level and WPA-PSK as the s ec uri ty mo d e. C onf i gu re th e screen using the provided parameters (see page 50 ). Click Apply . 2 Go to the Wireless > Others screen and select 802.1[...]

Chapter 4 Tutorials VSG1435-B101 Series User’s Guide 52 use the notebook’ s wireless client to search for the Z yXEL Device (see Section 4.4.3 on page 56 ). 4.4.2 Using WPS This section shows you how to set up a wireless netw ork using W PS. It uses the Z yXEL Device as the AP and Z yXEL NW D210N as the wireless client which connects to the not[...]

Chapter 4 Tutorials VSG1435-B10 1 Series User ’s Guide 53 4 Push and hold the WPS button located on the ZyXEL Device’ s front panel for more than 5 seconds. Alternativ ely , you may lo g into Z yXEL Devi ce’ s web configur ator and go to the Network Settings > Wireless > WPS screen. Enable the WPS function and click Apply . Then click t[...]

Chapter 4 Tutorials VSG1435-B101 Series User’s Guide 54 The following figure shows y ou an example of how to set up a wireless network and its security by pressing a button on both Z yXEL Device and wireless client. Example WPS Process: PBC Method Wireless Client ZyXEL Device SECURITY INFO COMMUNICA TION WITHIN 2 MINUTES Press and hold for 5 seco[...]

Chapter 4 Tutorials VSG1435-B10 1 Series User ’s Guide 55 PIN Configuration When you use the PIN configuration meth od, y ou need to use both the Z yXEL Device’ s web configurator and the wireless client’ s utility . 1 Launch your wireless client’s configuration utility . Go to the WPS settings and select the PIN method to get a PIN number [...]

Chapter 4 Tutorials VSG1435-B101 Series User’s Guide 56 The following figure shows y ou how to set up a wireless network and it s security on a Z yXEL Device and a wireless client by using PIN method. Example W PS Process: PIN Method 4.4.3 Without WPS Use the wireless adapt er’s utilit y installed on the notebook to search for the “Example”[...]

Chapter 4 Tutorials VSG1435-B10 1 Series User ’s Guide 57 Note: The ZyXEL Device supports IEEE 8 02.1 1b and IEEE 802.1 1g wireless clients. Make sure that your notebook or co mputer ’s wireless adapter support s one of these standards. 4.5 Setting Up Multiple Wireless Group s Company A wants to create different wirele ss network groups for dif[...]

Chapter 4 Tutorials VSG1435-B101 Series User’s Guide 58 1 Click Network Settings > Wireless to open the General screen. Use this screen to set up the company’ s gener al wirele ss network group. Configure the screen using the provided par ameters and click Apply . 2 Click Network Settings > Wir eless > More AP to open the following scr[...]

Chapter 4 Tutorials VSG1435-B10 1 Series User ’s Guide 59 3 Configure the screen using the pr o vided parameters and cl ick Apply . 4 In the More AP screen, click the Edit icon to configure the third wireless network group.[...]

Chapter 4 Tutorials VSG1435-B101 Series User’s Guide 60 5 Configure the screen using the pr o vided parameters and cl ick Apply . 6 Check the status of VIP and Guest in the More AP screen. The yellow bulbs signify that the SSIDs are activ e and ready for wireless access. 4.6 Setting Up NA T Port Forwarding Thomas manages the Doom server on a comp[...]

Chapter 4 Tutorials VSG1435-B10 1 Series User ’s Guide 61 the Z y XEL Device. T raffic should be forw ar ded to t he port 666 of the Doom serv er computer which has an IP address of 192.168.1.34. Tutorial: NAT Port Forwarding Setup Thomas may set up the port settings by config uring the port settings for the Doom server computer (see Section 12.2[...]

Chapter 4 Tutorials VSG1435-B101 Series User’s Guide 62 3 The port forwarding settings y ou configured appear in the table. The ZyXEL Device forwards port 666 t raffic t o the computer with IP address 192.168.1.34. Players on the Internet then can ha v e access to Thomas’ Doom server . 4.7 Configuring S t atic Route for Routing to Another Netwo[...]

Chapter 4 Tutorials VSG1435-B10 1 Series User ’s Guide 63 Y ou need to specify a static rout ing rule on the Z yXEL Device to specify R as the router in charge of forwarding tr affic to N2 . In this case, the Z yXEL Device routes traffic from A to R and then R routes the tr affic to B . This tutorial uses the following example IP settings: T o co[...]

Chapter 4 Tutorials VSG1435-B101 Series User’s Guide 64 4a Select the Active check box. Enter the Route Name as R . 4b Ty p e 192.168.10 .0 and subnet ma s k 255.255.255.0 for the destination, N2 . 4c Ty p e 192.168.1. 253 ( R ’ s N1 address) in the Gateway IP Address field. 4a Click Apply . Now B should be able to receive t raffic from A . Y o[...]

Chapter 4 Tutorials VSG1435-B10 1 Series User ’s Guide 65 Note: QoS is applied to traf fic flowing out of the ZyXEL Device. T raffic t hat does not match this class is assigned a priority queue based on the internal QoS mapping tabl e on the ZyXEL Device. QoS Exampl e 1 Click Network Settings > QoS > General and select Active . Set y our WA[...]

Chapter 4 Tutorials VSG1435-B101 Series User’s Guide 66 • Rate Limit : 5,000 (kbps) Tutor ia l: Advanced > Q oS > Queue Setup 3 Click Class Setup > Add new Classifier to create a new class. Chec k Active and follow the settings as shown in the screen below . Tutoria l: Advanced > QoS > Class Setup[...]

Chapter 4 Tutorials VSG1435-B10 1 Series User ’s Guide 67 This maps e-mail tr affic comi ng from port 25 to the highest priorit y , which you have created in the previous screen (see the IP Protocol field). This also maps your computer’ s IP addre ss and MA C address to the E-mail queue (see the Source fields). 4 V erif y that the queue se tup [...]

Chapter 4 Tutorials VSG1435-B101 Series User’s Guide 68 • Configuring DDNS on Y ou r ZyXEL Device • T esting the DDNS Setting Note: If you have a private W AN IP address, then you cannot use DDNS. 4.9.1 Registering a DDNS Account on www .dyndns.org 1 Open a browser and type http://www.dyndns.org . 2 Apply for a user account. This tutorial use[...]

Chapter 4 Tutorials VSG1435-B10 1 Series User ’s Guide 69 • Enter the user na me ( UserName1 ) and password ( 12345 ). Click Apply . 4.9.3 T esting the DDNS Setting Now you should be able to access the Z yXEL Device from the Internet. T o test this: 1 Open a web browser on the comp uter (using the IP address a.b.c.d ) that is connected to the I[...]

Chapter 4 Tutorials VSG1435-B101 Series User’s Guide 70 1 In FileZilla enter t he IP address of the Z yXEL Device (the default is 192.168.1.1), your account’ s user name and password and port 21 and click Quickconnect . A screen asking for password au thenticati on appears. File Shari ng via Wi ndows Expl orer Once you log in the USB device dis[...]

71 P ART II T echnical Reference[...]

72[...]

VSG1435-B10 1 Series User ’s Guide 73 C HAPTER 5 Network Map and Status Screens 5.1 Overview After you log i nto the W eb Confi gurator , the Ne twork Map screen app ears. This shows the network connection status of th e ZyXEL Device and clients connected to it. Y ou can use the Stat us screen to look at the current status of the Z yXEL Device, s[...]

Chapter 5 Network Map and Status Screens VSG1435-B101 Series User’s Guide 74 If you pref er to view the status in a list, click List View in the Viewing Mode selection box. Y ou can configure how often you want the ZyXEL Device to update this screen in Refresh Interval . Figure 16 Network Map: Icon Mo de Figure 17 Network Map: List Mode In Icon M[...]

Chapter 5 Network Map and Status Screens VSG1435-B10 1 Series User ’s Guide 75 5.3 The S t atus Screen Use this screen to view the st atus of the Z yXEL Device. Click Status to open thi s screen. Figure 18 S tatus Screen Each field is desc ribed in the followi ng table. T able 5 Status Screen LABEL DESCRIPTION R efresh Interval Select how often y[...]

Chapter 5 Network Map and Status Screens VSG1435-B101 Series User’s Guide 76 IP Subnet Mask This field displays the current subnet mask in the W AN. This field is av ailable only when your W AN type is IPoE or IPoA . W AN T y pe This field displays the current WAN connection type. LAN Information MAC Address This shows the LAN Ethernet adapter MA[...]

Chapter 5 Network Map and Status Screens VSG1435-B10 1 Series User ’s Guide 77 Status This field indicates whether or not the ZyXEL Device is using the interface. For the LAN interfaces, the Ethernet W AN interface, or the HPNA interface, this field displays Up when the Z y XEL Device is using the interface and NoLink when the line is disconnecte[...]

Chapter 5 Network Map and Status Screens VSG1435-B101 Series User’s Guide 78[...]

VSG1435-B10 1 Series User ’s Guide 79 C HAPTER 6 Broadband 6.1 Overview This chapter describes how to configure W AN settings from the Broadband screen. Use this screen to configure yo ur Z yXEL Device for Internet access. A WAN (Wide Area Network) connection is an outside connection to another network or the Internet. It connects your private ne[...]

Chapter 6 Broadband VSG1435-B101 Series User’s Guide 80 W AN IP Address The WAN IP address is an IP address for the Z yXEL Device, which mak es it accessible from an outside network. It is used by the Z yXEL Device to communicate with other devices in other networks. It can be static (fix ed) or dynamically assigned by the ISP each ti me the Z yX[...]

Chapter 6 Broadband VSG1435-B10 1 Series User ’s Guide 81 6.2 The Broadband Screen Use this screen to change y our Z yXEL De vice’ s Internet ac ce ss settings. Click Network Settings> Broadband from the menu. The summary table shows you the configured W AN services (connections) on the Z yXEL Device. Figure 20 Network Settings > Bro adba[...]

Chapter 6 Broadband VSG1435-B101 Series User’s Guide 82 6.2.1 Add/Edit Broadband Click Add new WAN interface in the Broadband screen or the Edit icon next to an existing W AN interface to configur e a W AN connection. The screen differs according to the mode and encapsulation you choose. 6.2.2 PPPoE Encap sulation The ZyXEL Device suppor ts PPPoE[...]

Chapter 6 Broadband VSG1435-B10 1 Series User ’s Guide 83 This screen displays when y ou select the Routing mode and PPPoE encapsulation. Figure 21 Broadband : Add/Edit: ADSL, PPPoE Encapsulation[...]

Chapter 6 Broadband VSG1435-B101 Series User’s Guide 84 The following table describes t he labels in this screen. T able 7 Broadband: Add/Edit: Routing Mode LABEL DESCRIPTION General Active Select this to activ ate the WAN configur ation settings. Name Specify a descriptive name of up to 15 alphanumeric char acters for this connection. T ype Sele[...]

Chapter 6 Broadband VSG1435-B10 1 Series User ’s Guide 85 Encapsulation Mode Select the method of multiplexing used by yo ur ISP from the drop- down list box. Choices are: • LLC/SNAP-B RIDGING: In LCC encapsulation, bridged PDUs are encapsulated by identifying the type of the bridged media in the SNAP header . This is available only when you se[...]

Chapter 6 Broadband VSG1435-B101 Series User’s Guide 86 PPP Auto Connect Select this option if you do not want the connection to time out. IDLE Timeout This v alue specifies the time in minutes that elapses before the router automatically disconnects from the PPPoE serv er . This field is not configurable if you select PPP Auto Connect . PPPoE Se[...]

Chapter 6 Broadband VSG1435-B10 1 Series User ’s Guide 87 6.2.2.1 Bridge This screen displays when y ou select the Bridge mode. Figure 22 Broadband : Add/Edit: Bridge Mode DNS Select Dynamic if you want the ZyXE L Device use the DNS server addresses assigned by your ISP . Select Static if you want the ZyXE L Device use the DNS server addresses yo[...]

Chapter 6 Broadband VSG1435-B101 Series User’s Guide 88 The following table describes t he labels in this screen. T able 8 Broadband: Add/Edit: Bridge Mode LABEL DESCRIPTION General Active Select this to activ ate the WAN configur ation settings. Name Specify a descriptive name of up to 15 alphanumeric char acters for this connection. T ype Selec[...]

Chapter 6 Broadband VSG1435-B10 1 Series User ’s Guide 89 P eak Cell Rate Divide the DSL line r ate (bps) by 424 (the size of an A TM cell) to find the Peak Cell R ate (PCR). This is the maximum rate at which the sender can send cells. T ype the PCR here.This field is not av ailable when you select UBR Without PCR . Sustain Cell Rat e The Sustain[...]

Chapter 6 Broadband VSG1435-B101 Series User’s Guide 90 6.3 T echnical Reference This section provi des some technical background informatio n about the topics covered in th is ch apter . 6.3.1 Encap sulation Be sure to use the encapsulation method required by your ISP . The Z yXEL Device supports the following methods. 6.3.1.1 PPP over Ethernet [...]

Chapter 6 Broadband VSG1435-B10 1 Series User ’s Guide 91 6.3.2 Multiplexing There are two conventions to identify what protocols the virtual circuit (VC) is carrying. Be sure to use the multiple xing method required by your ISP . VC-based Multiplexing In this case, by prior mutual agreement, each protocol is assi gned to a specific virtual circu[...]

Chapter 6 Broadband VSG1435-B101 Series User’s Guide 92 6.3.5 NA T NA T (Network Address T ranslation - NA T , RFC 1631) is the transl ation of the IP address of a host in a packet, for exampl e, the source address of an outgoing packet, used wit hin one network to a di fferent IP address known within anot her network. 6.3.6 T raffic Shaping T ra[...]

Chapter 6 Broadband VSG1435-B10 1 Series User ’s Guide 93 6.3.7 A TM T raffic Classes These are the basic A TM traffic classes defined by the A TM Forum T raffic Management 4.0 Specificati on. Const ant Bit Rate (CBR) Constant Bit R ate (CBR) provid es fixed bandwidth that is always a vail able even if no data is being sent. CBR traffic i s gener[...]

Chapter 6 Broadband VSG1435-B101 Series User’s Guide 94 In Multi- T enant Unit (MTU) applications, VLAN is vital in p roviding isolation and security among the subscribers. When pr operly configured, VLAN prevents one subscriber f r om ac ce ss i ng th e network re sources of another on the same LAN, thus a user will not see the printers and hard[...]

VSG1435-B10 1 Series User ’s Guide 95 C HAPTER 7 Wireless 7.1 Overview This chapter describes the Z y XEL Device’s Networ k Settings > Wireless screens. Use these screens to set up y o ur Z yXEL Device ’s wireless connec ti on . 7.1.1 What Y ou Can Do in this Chapter This section describes the Z y XEL Device’ s Wireless screens. Use thes[...]

Chapter 7 Wireless VSG1435-B101 Series User’s Guide 96 7.1.2 What Y ou Need to Know Wireless Basics “Wireless” is essentially r adio communication. In the same w ay that walkie-tal kie radios send and receive information ov er the airwaves, wireless networking devices exchange informat ion with one anot her . A wireless networking device is j[...]

Chapter 7 Wireless VSG1435-B10 1 Series User ’s Guide 97 Click Netw ork Settings > Wireless to open the General screen. Figure 24 Network Settings > Wireless > General The following table describes t he genera l wireless L AN labels in this screen. T able 9 Network Settings > Wireless > General LABEL DESCRIPTION Wireless Network Se[...]

Chapter 7 Wireless VSG1435-B101 Series User’s Guide 98 P assphrase Ty p e If you set security for the wireless LAN and ha ve the Z yXEL Device generate a password, the setting in this field determines how the ZyXEL Device generates the password. Select None to set the Z yXEL Device’ s pa ssword gener ation to not be based on a passphrase. Selec[...]

Chapter 7 Wireless VSG1435-B10 1 Series User ’s Guide 99 7.2.1 No Security Select No Security to allow wireless stations to communicate with the access points without any data encrypti on or authentication. Note: If you do not enable any wireless security on your ZyXEL Device, your network is accessible to any wireless ne tworking device that is [...]

Chapter 7 Wireless VSG1435-B101 Series User’s Guide 100 The following table describes t he labels in this screen. 7.2.2 Basic (WEP Encryption) WEP encryption scrambl es the data transmi tted between the wireless stations and the access points (AP) to keep network c ommunications priv ate. Both the wi reless stations and the access points must use[...]

Chapter 7 Wireless VSG1435-B10 1 Series User ’s Guide 101 The following table describes t he labels in this screen. T able 1 1 Wireless > General: Basic (WEP) LABEL DESCRIPTION Security Level Select Basic to enable WEP data encryption. Generate password automatically Select this option to have the Zy XEL Device automatically generate a passwor[...]

Chapter 7 Wireless VSG1435-B101 Series User’s Guide 102 7.2.3 More Secure (WP A(2)-PSK) The WP A-PSK security mode pro vides both improved d ata encryption and user authentication over WEP . Using a Pre-Sh ared K ey (PSK), both the Z yXEL Device and the connecting client share a co mmon password in order t o validate the connection. This type of [...]

Chapter 7 Wireless VSG1435-B10 1 Series User ’s Guide 103 7.2.4 WP A(2) Authentication The WPA2 security mo d e is cu rrently th e most robust form of encryption for wireless networks. It requires a RADIUS se rver to authenticate user credentials and is a full implementation the securi ty protocol. Use this securit y option for maximum protection[...]

Chapter 7 Wireless VSG1435-B101 Series User’s Guide 104 Click Network Settings > Wireless to display the General screen. Select More Secure as the security level. Then select WPA or WPA2 from the Security Mode list. Figure 28 Wireless > General: More Secure: WP A(2) The following table describes t he labels in this screen. T able 13 Wireles[...]

Chapter 7 Wireless VSG1435-B10 1 Series User ’s Guide 105 7.3 The More AP Screen This screen allows y ou to enable and conf igure multiple Basi c Service Sets (BS Ss) on the Z yXEL Device. Click Network Settings > Wireless > More AP . The following screen displays. Figure 29 Network Settings > Wireless > Mo re AP The following table d[...]

Chapter 7 Wireless VSG1435-B101 Series User’s Guide 106 7.3.1 Edit More AP Use this screen to ed it an SSID profile. Cl ick the Edit icon next to an SSID in the More AP screen. The following screen displays. Figure 30 More AP: Edit The following table describes t he fields in this screen. SSID An SSID profile is the set of par a meters relating t[...]

Chapter 7 Wireless VSG1435-B10 1 Series User ’s Guide 107 7.4 MAC Authentication This screen allows you to configure the Z y XEL Device to give exclusive ac cess to specific devi ces (Allow) or exclude specifi c devices from accessing the Z yXEL Device (Deny) . Every Ethernet de vice has a uniq ue MAC (Media Access Control) address. The MAC addre[...]

Chapter 7 Wireless VSG1435-B101 Series User’s Guide 108 Use this screen to view your Z y XEL Devi ce’ s MAC filter setting s and add new MAC filter rules. Click Wireless > MAC Authentication . The screen appears as shown. Figure 31 Wireless > MAC Authentication The following table describes t he labels in this screen. T able 16 Wireless &[...]

Chapter 7 Wireless VSG1435-B10 1 Series User ’s Guide 109 7.5 The WPS Screen Use this screen to configure WiFi Prot ected Setup (WPS) on your Z yXEL Device. WPS allows you to q uickly set up a wirele ss network with strong securit y , without having to conf ig ur e security se tt i ng s man ually . Set up each WPS conne ction between two devices.[...]

Chapter 7 Wireless VSG1435-B101 Series User’s Guide 11 0 7.6 The WMM Screen Use this scre en to enable Wi - Fi Mu ltiMedia (W MM ) and WMM Power Save in wireless networks for multimedia applications. Connect Click this button to add another WPS-enabled wireless device (within wireless range of the Z yXEL Device) to your wireless network. This but[...]

Chapter 7 Wireless VSG1435-B10 1 Series User ’s Guide 111 Click Network Settings > Wireless > WMM . The following screen displays. Figure 33 Network Settings > Wireless > WMM The following table describes t he labels in this screen. 7.7 The WDS Screen An AP using the Wireless Distribution S y stem (WDS) can function as a wireless netw[...]

Chapter 7 Wireless VSG1435-B101 Series User’s Guide 11 2 Click Network Settings > Wireless > WDS . The following screen displays. Figure 34 Network Settings > Wireless > WDS The following table describes t he labels in this screen. T able 19 Network Settings > Wireless > WDS LABEL DESCRIPTION Wireless Bridge Setup AP Mode Select[...]

Chapter 7 Wireless VSG1435-B10 1 Series User ’s Guide 11 3 7.7.1 WDS Scan Y ou can click the Scan ic on in Wireless > WDS to have the Z yXEL Device automatically search and display the a vaila ble APs wi thin range. Select an AP and click Apply to have the Z yXEL Device establish a wireless li nk with the selected wireless device. Figure 35 WD[...]

Chapter 7 Wireless VSG1435-B101 Series User’s Guide 11 4 7.8 The Others Screen Use this screen to configure ad vanced wireless settings. Cl ick Network Settings > Wireless > Others . The screen appears as shown. See Section 7.9.2 on page 117 for detailed defini tions of the terms listed in this screen. Figure 36 Network Settings > Wirele[...]

Chapter 7 Wireless VSG1435-B10 1 Series User ’s Guide 11 5 7.9 T echnical Reference This section discusses wireless LANs in depth. F or more information, see the appendix. 7.9.1 Wireless Network Overview Wireless networks c onsist of wireless clients, access points and bridges. D TIM Interval Deliv ery T raffic Indication Message (DTIM) is the ti[...]

Chapter 7 Wireless VSG1435-B101 Series User’s Guide 11 6 • A wireless cl ient is a ra dio connected to a user’ s computer . • An access point is a r adio with a wired c onnection to a network, which can connect with numerous wireless clients and let them access the network. • A bridge is a r adio that rela ys communications between access[...]

Chapter 7 Wireless VSG1435-B10 1 Series User ’s Guide 11 7 • If two wireless networks overlap , th ey should use a different channel. Like radio stations or television channels , each wireless net work uses a specific channel, or frequency , to send and receive information. • Every device in the same wireless network must use security compati[...]

Chapter 7 Wireless VSG1435-B101 Series User’s Guide 11 8 7.9.3 Wireless Security Overview By their nature, rad io communications are si mple to intercept. F or wireless data networks, this means that anyone with in r ange of a wireless network without security can not only read the data passi ng over the airwav es , but also join the network. Onc[...]

Chapter 7 Wireless VSG1435-B10 1 Series User ’s Guide 11 9 not broadcast the SSID . In additi on, you should change t he default SSID to something that is diffic ult to guess. This type of sec urity is fairly weak, howev er , because there are ways for unauthorized wirel ess devices to get the SSID. In addition, un autho r ized wir eless devices [...]

Chapter 7 Wireless VSG1435-B101 Series User’s Guide 120 7.9.3.4 Encryption Wireless networks can us e encryption to protect the info rmation that is sent in the wireless network. Encryption is l ike a secret code. If you do not know the secr et code, you cannot unders tand the message. The types of encryption y ou can choose de pend on the type o[...]

Chapter 7 Wireless VSG1435-B10 1 Series User ’s Guide 121 7.9.4 Signal Problems Because wireless networks are radio ne tworks, their signal s are subject to limitations of distanc e, interference and absorption. Problems with distance occur when the two r adios are too far apart. Problems with interference occur when other radio waves interrupt t[...]

Chapter 7 Wireless VSG1435-B101 Series User’s Guide 122 wireless station A and B can stil l access the wired network but cannot communicate with each other . Figure 38 Basic Service set 7.9.6 MBSSID T raditionally , you need to use different APs to configure different Basic Service Sets (BSSs). As well as the cost of buying extra APs, there is al[...]

Chapter 7 Wireless VSG1435-B10 1 Series User ’s Guide 123 7.9.7 Preamble T ype Preamble is used to signal that data is coming to the receiver . Short and long refer to the length of the synchronization field in a packet. Short preamble increases performance as less time sending preamble means more time for sending data. All IEEE 802. 11 compliant[...]

Chapter 7 Wireless VSG1435-B101 Series User’s Guide 124 7.9.9 WiFi Protected Setup (WPS) Y our ZyXEL Device supports WiFi Protected Setup (WPS), which is an easy way to set up a secure wireless network. WPS is an industry standard specification, defined by the WiFi Alli ance. WPS allows you to q uickly set up a wirele ss network with strong secur[...]

Chapter 7 Wireless VSG1435-B10 1 Series User ’s Guide 125 7.9.9.2 PIN Configuration Each WPS-enabled device has its own PIN (P ersonal Identification Number). This may either be static (it cannot be changed) or dynamic (in some devices you can generate a new PIN by clicki ng on a button in the configuration interface). Use the PIN method instead [...]

Chapter 7 Wireless VSG1435-B101 Series User’s Guide 126 The following figure shows a WPS-enab led wi reless c lient (ins talled in a no tebook computer) connecting to the WPS- enabled AP via the PIN method. Figure 40 Example WPS Process: PIN Method 7.9.9.3 How WPS Works When two WPS-enabled devices connect, each device must assume a specific role[...]

Chapter 7 Wireless VSG1435-B10 1 Series User ’s Guide 127 The following figure sh ows a WPS -en able d client (install ed in a notebook computer) connecting to a WPS-enabled access point. Figure 41 How WPS works The roles of registrar and enrollee last on ly as long as the WPS setup process is active (two minutes). The next time you use WPS, a di[...]

Chapter 7 Wireless VSG1435-B101 Series User’s Guide 128 7.9.9.4 Example WPS Network Setup This section shows how security settings are distri buted in an example WPS setup. The following figure shows an example network. In step 1 , both AP1 and Client 1 are unconfigured. When WPS is activ ated on both, they perform the handshake. In this example,[...]

Chapter 7 Wireless VSG1435-B10 1 Series User ’s Guide 129 point. However , you know that Client 2 supports the registrar function, so y ou use it to perform the WPS handshak e instead. Figure 44 WPS: Example Network S tep 3 7.9.9.5 Limit ations of WPS WPS has some limitations of which you should be a ware. • WPS works in Infrastructure networks[...]

Chapter 7 Wireless VSG1435-B101 Series User’s Guide 130 • When you use the PBC method, there is a short period (from the moment you press the button on one device to the moment you press the button on the other device) when any WPS-enabled devi ce could join the network. This is because the registrar has no wa y of id entifying the “corre ct?[...]

VSG1435-B10 1 Series User ’s Guide 131 C HAPTER 8 Home Networking 8.1 Overview A Local Area Network (LAN) is a shared communicat ion system to which many networking devices are connected. It is usually located in one immediate area such as a building or floor of a building. Use the LAN screens to help you configure a LAN DHCP server and manage IP[...]

Chapter 8 Hom e Netw or kin g VSG1435-B101 Series User’s Guide 132 8.1.2 What Y ou Need T o Know 8.1.2.1 About LAN IP Address IP addresses identify indi vidual devices on a network. Every networking device (including computers, serv ers, routers, printers, etc.) needs an IP address to communicate across the netw ork. These networking devices are [...]

Chapter 8 Hom e Netw or king VSG1435-B10 1 Series User ’s Guide 133 • Dynamic port mapping • Learning public IP addresses • Assigning lease times to mappings Windows Messenger is an example of an application that supports NA T tr aversal and UPnP . See the Chapter 12 on page 179 for more i nformation on NA T . Cautions with UPnP The automat[...]

Chapter 8 Hom e Netw or kin g VSG1435-B101 Series User’s Guide 134 8.2 The LAN Setup Screen Use this screen to set the Lo cal Area Netw ork IP addr ess and su b n e t m a s k o f y o u r Z yXEL Device. Click Network Settings > Home Networking to open the LAN Setup screen. Follow these steps to configure your LAN settings. 1 Enter an IP address[...]

Chapter 8 Hom e Netw or king VSG1435-B10 1 Series User ’s Guide 135 The following table describes t he fields in this screen. T able 24 Network Settings > Home Networking > LAN Setup LABEL DESCRIPTION Group Name Select the interface group name for which you want to configure LAN settings. See Chapter 15 on page 215 for how to create a new i[...]

Chapter 8 Hom e Netw or kin g VSG1435-B101 Series User’s Guide 136 8.3 The S t atic DHCP Screen This table allows y ou to assign IP addresses on the LAN to specific individual computers based on their MAC Addresses. Every Ethernet dev ice has a unique MAC (Media Access Control) address. The MAC address is assigned at the factory and consists of s[...]

Chapter 8 Hom e Netw or king VSG1435-B10 1 Series User ’s Guide 137 If you click Add new st atic lease in the Static DHCP screen or the Edit icon next to a static DHCP en tr y , th e following screen displays. Figure 47 S tatic DHCP: Add/Edit The following table describes t he labels in this screen. 8.4 The UPnP Screen Universal Plug and Play (UP[...]

Chapter 8 Hom e Netw or kin g VSG1435-B101 Series User’s Guide 138 Use the following screen to configure the UPnP settings on your Z yXEL Device. Click Network Settings > Home Networking > UPnP to displ a y the screen shown next. Figure 48 Network Settings > Ho me Networking > UPnP The following table describes t he labels in this scr[...]

Chapter 8 Hom e Netw or king VSG1435-B10 1 Series User ’s Guide 139 2 Click on the Windows Setup tab and select Communication in the Components selection box. Click Details . Add/Remove Programs: Wi ndows Setup: Communicatio n 3 In the Communications window , select the Universal Plug and Play check box in the Compone nts selection bo x. Add/Remo[...]

Chapter 8 Hom e Netw or kin g VSG1435-B101 Series User’s Guide 140 4 Click OK to go back to the Add/Remove Programs Properties window and click Next . 5 Restart the computer when promp te d. Inst alling UPnP in Windows XP Fol low the steps below to install the UPnP in Windows XP . 1 Click Start and Control Panel . 2 Double-click Network Connectio[...]

Chapter 8 Hom e Netw or king VSG1435-B10 1 Series User ’s Guide 141 5 In the Networking Services window , select the Universal Plug and Play check box. Networki ng Services 6 Click OK to go back to the Windows Optional Networking Component Wizard window and click Next . 8.6 Using UPnP in Windows XP Example This section shows y ou how to use the U[...]

Chapter 8 Hom e Netw or kin g VSG1435-B101 Series User’s Guide 142 2 Right- click the icon and select Properties . Network Co nnection s 3 In the Internet Connection Properties window , click Settings to see the por t mappings there were automatically created. Internet Connec tion Properties[...]

Chapter 8 Hom e Netw or king VSG1435-B10 1 Series User ’s Guide 143 4 Y ou may edit or delete the port mappings or cl ick Add to manually add port mappings. Internet Connec tion Properties : Advanced Settin gs Internet Connec tion Properties : Advanced Settin gs: Add 5 When the UPnP-enabled device is discon nected from your computer , all port ma[...]

Chapter 8 Hom e Netw or kin g VSG1435-B101 Series User’s Guide 144 7 Double-click on the icon to display y o ur current In te rnet connection status. Internet Conn ection Status Web Configurator Eas y Access With UPnP , you can access the web-base d configur ator on the Z yXEL Device without finding out the IP address of the Z y XEL Device first.[...]

Chapter 8 Hom e Netw or king VSG1435-B10 1 Series User ’s Guide 145 3 Select My Network Places under Other Places . Network Co nnection s 4 An icon with the description f or each UPnP-enabled device displays under Local Network . 5 Right- click on the icon for your Z yXEL Device and select Invoke . The web configurator login screen displays. Netw[...]

Chapter 8 Hom e Netw or kin g VSG1435-B101 Series User’s Guide 146 6 Right- click on t he icon for y our Z yXEL Device and select Properties . A properties window displays with basic info rmatio n ab out the Z yXEL Device. Network Co nnection s: My Netw ork Plac es: Proper ties: Ex ample 8.7 T echnical Reference This section provi des some techni[...]

Chapter 8 Hom e Netw or king VSG1435-B10 1 Series User ’s Guide 147 8.7.1 LANs, W ANs and the ZyXEL Device The actual physical connec tion determines whether the Z yXEL Device ports are LAN or W AN ports. There are two sepa ra te IP networks, on e inside the LAN network and t he ot her outside th e WAN network as shown next. Figure 49 LAN and W A[...]

Chapter 8 Hom e Netw or kin g VSG1435-B101 Series User’s Guide 148 • The ISP tells you the DNS serv er addresses, usually in the form of an info r mat io n sh e et, wh en yo u sig n u p. If you r ISP g ives yo u DNS s erve r addresses, enter them in the DNS Server fields in the DHCP Setup screen. • Some ISPs choose to disseminate the DNS serv[...]

Chapter 8 Hom e Netw or king VSG1435-B10 1 Series User ’s Guide 149 The subnet mask specifies the network number portion of an IP address. Y our Z yXEL Devi ce will co mpute the subnet mas k automatically based on the IP address that you entered. Y ou don't need to change the subnet mask computed by the Z yXEL Device unless you are instructe[...]

Chapter 8 Hom e Netw or kin g VSG1435-B101 Series User’s Guide 150[...]

VSG1435-B10 1 Series User ’s Guide 151 C HAPTER 9 Static Routing 9.1 Overview The Z yXEL Device usually uses the default gatewa y to route outbound tr affic from computers on the LAN to the Internet. T o have the Z yXEL Device send data to devices not reachable through the de fault g ateway , use static routes. For example, the next figure shows [...]

Chapter 9 Static Routing VSG1435-B101 Series User’s Guide 152 9.2 The Routing Screen Use this screen to view and configure th e static route rules on the ZyXEL Device. Click Network Settings > Routing > Static Route to open the foll owing sc reen. Figure 51 Network Settings > Ro uting > S t atic Route The following table describes t h[...]

Chapter 9 Static Routing VSG1435-B10 1 Series User ’s Guide 153 9.2.1 Add/Edit S t atic Route Use this sc reen to add o r edit a stat ic route. Click Add new Static Route Entry in the Routing screen or the Edit icon next to the stat ic route you want to ed it. The screen shown next appears. Figure 52 Routing: Ad d/Edit The following table describ[...]

Chapter 9 Static Routing VSG1435-B101 Series User’s Guide 154[...]

VSG1435-B10 1 Series User ’s Guide 155 C HAPTER 10 Quality of Service (QoS) 10.1 Overview Quality of Service (QoS) refers to both a network’ s ability to deliver data with minimum delay , and the networking me thods used to control the use of bandwidth. Without QoS , all tr affic data is equally likely to be dropped when the network is congeste[...]

Chapter 10 Quality of Service (QoS) VSG1435-B101 Series User’s Guide 156 •T h e Monitor screen lets you view the Z yXEL Device's QoS-related packet statistics ( Section 10.7 on page 169 ). 10.2 What Y ou Need to Know The following terms and conc epts may he lp as you read through this chapter . QoS versus C os QoS is used to prioritize s o[...]

Chapter 10 Quality of Service (QoS) VSG1435-B10 1 Series User ’s Guide 157 T raffic Policing T raffic pol ici ng is the limiting of the input or output transmission r ate of a class of traffic on the basis of user- defined criteria. T raffic policing methods measure t raffic flows against user -defined crit eria and iden tif y it as either confor[...]

Chapter 10 Quality of Service (QoS) VSG1435-B101 Series User’s Guide 158 The following table describes t he labels in this screen. 10.4 The Queue Setup Screen Click Network Settings > QoS > Queue Setup to open the screen as shown next. T able 30 Network Settings > QoS > General LABEL DESCRIPTION QoS Select the Enable check box to turn[...]

Chapter 10 Quality of Service (QoS) VSG1435-B10 1 Series User ’s Guide 159 Use this screen to conf igure QoS queue assignment. Figure 54 Network Settings > QoS > Queu e Setup The following table describes t he labels in this screen. T able 31 Network Settings > QoS > Queue Setup LABEL DESCRIPTION Add new Queue Click this button to cre[...]

Chapter 10 Quality of Service (QoS) VSG1435-B101 Series User’s Guide 160 10.4.1 Adding a QoS Queue Click Add new Queue or the edit icon in the Queue Setup screen to configure a queue. Figure 55 Queue Setup: Add The following table describes t he labels in this screen. T able 32 Queue Setup: Add LABEL DESCRIPTION Active Select to enable or disable[...]

Chapter 10 Quality of Service (QoS) VSG1435-B10 1 Series User ’s Guide 161 10.5 The Class Setup Screen Use this screen to add, edit or delete QoS classifiers. A classifier groups traffic into data flows according to specific criteria such as the source address, destination address, source port number , destination port number or incoming interfac[...]

Chapter 10 Quality of Service (QoS) VSG1435-B101 Series User’s Guide 162 To Q u e u e This is the name of the queue in which traffic of this classifier is put. Modify Click the Edit icon to edit the classifie r . Click the Delete icon to delete an existing classifier . Note that subsequent rules move up by one when you tak e this action. T able 3[...]

Chapter 10 Quality of Service (QoS) VSG1435-B10 1 Series User ’s Guide 163 10.5.1 Add/Edit QoS Class Click Add new Cl assifier in the Class Setup screen or the Edit icon next to a classifier to open the following screen. Figure 57 Class Setup: Add/Edit[...]

Chapter 10 Quality of Service (QoS) VSG1435-B101 Series User’s Guide 164 The following table describes t he labels in this screen. T able 34 Class Setup: Add/Edit LABEL DESCRIPTION Active Select this to enable this classifier . Class Name Enter a descriptive name of up to 15 printable English keyboard characters, not including spaces. Classificat[...]

Chapter 10 Quality of Service (QoS) VSG1435-B10 1 Series User ’s Guide 165 MAC Mask T ype the mask for the specified MAC address to determine which bits a packet’ s MAC address should match. Enter “f” for each bit of the spec ified source MAC address that the traffic’ s MAC address should match. Enter “0” for the bit(s) of the matched[...]

Chapter 10 Quality of Service (QoS) VSG1435-B101 Series User’s Guide 166 TCP A C K This field is available only when you select IP in the Ether Type field. If you select this option, the matched T CP packets must contain the ACK (Acknowledge) flag. Exclude Select this option to exclude the packets that match the specified criteria from this class[...]

Chapter 10 Quality of Service (QoS) VSG1435-B10 1 Series User ’s Guide 167 10.6 The QoS Policer Setup Screen Use this screen to configure QoS policers that allow y ou to limit the transmis sion rate of incoming traffic. Click Network Settings > QoS > Policer Setup . The screen appears as shown. Figure 58 Network Settings > QoS > Po li[...]

Chapter 10 Quality of Service (QoS) VSG1435-B101 Series User’s Guide 168 10.6.1 Add/Edit a QoS Policer Click Add new Of fice r in the Policer Setup screen or the Edit icon nex t t o a policer to show the following screen. Figure 59 Policer Setup: Add/Edit The following table describes t he labels in this screen. T able 36 Policer Setup: Add/Edit [...]

Chapter 10 Quality of Service (QoS) VSG1435-B10 1 Series User ’s Guide 169 10.7 The QoS Monitor Screen T o view the ZyXEL Device’ s QoS packet statistics, click Network Settings > QoS > Monitor . The screen appears as shown. Figure 60 Network Settings > QoS > Monitor The following table describes t he labels in this screen. Apply Cl[...]

Chapter 10 Quality of Service (QoS) VSG1435-B101 Series User’s Guide 170 10.8 T echnical Reference The following section contains additional technical information about the Z yXEL Device features de sc ri bed in this chapter . IEEE 802.1Q T ag The IEEE 802.1Q standard defi nes an exp licit VLAN tag in the MAC header to identify the VLAN membershi[...]

Chapter 10 Quality of Service (QoS) VSG1435-B10 1 Series User ’s Guide 171 DiffServ QoS is used to prioritize source-to- desti nat ion traffic flows. All packets in the flow are given the same priority . Y o u can use CoS (class of service) to give different priorities to different pac ket types. DiffServ (Differentia ted Services) is a class of [...]

Chapter 10 Quality of Service (QoS) VSG1435-B101 Series User’s Guide 172 Automatic Priority Queue Assignment If yo u e nab le Q oS on t he ZyXEL D evi ce , the Z y XEL Device can automaticall y base on the IEEE 802.1p priority lev el, IP prec edence and/or pac ket length t o assign priority to t raffic which does not match a clas s. The following[...]

Chapter 10 Quality of Service (QoS) VSG1435-B10 1 Series User ’s Guide 173 T oken Bucket The token buck et algorithm uses tokens in a buc k et to control when tr affic can be transmit ted. The buck et stores tokens , each of which represents one byte. The algorithm allows burs ts of up to b bytes which is also t he bucket size, so the bucket can [...]

Chapter 10 Quality of Service (QoS) VSG1435-B101 Series User’s Guide 174 All packets are ev aluated against the CBS. If a pac ket does not exc eed the CBS i t is marked green. Otherwise it is ev aluated against the EBS. If it is below the EBS then it is marked yellow . If it ex ceeds the EBS then it is marked red. The following shows how tokens w[...]

VSG1435-B10 1 Series User ’s Guide 175 C HAPTER 11 Policy Forwarding 1 1.1 Overview T raditional ly , routing is based on the destination address only and the Z yXEL Device takes the shortest path to forwar d a packet. Pol icy forwarding all ows the Z yXEL Device to ov erride the default routing beha vior and alter the pack et forwarding based on[...]

Chapter 11 Policy F or wa rding VSG1435-B101 Series User’s Guide 176 1 1.2.1 Add/Edit Policy Forwarding Click Add new Policy Forward Rule in the Policy Forwarding screen or click the Edit icon next to a policy . Use this screen to configure the required information for a policy rou te . Figure 62 Policy Forwarding: Add/Edit The following table de[...]

Chapter 11 Policy Forwarding VSG1435-B10 1 Series User ’s Guide 177 WA N Select a WAN interface through which the tr affic is sent. Y ou must have the W AN interface(s) already configured in the Broadband screens. Apply Click Apply to save yo ur changes. Cancel Click Ca ncel to exit this screen without saving. T able 41 Policy Forwarding: Add/Edi[...]

Chapter 11 Policy F or wa rding VSG1435-B101 Series User’s Guide 178[...]

VSG1435-B10 1 Series User ’s Guide 179 C HAPTER 12 Network Address Translation (NAT) 12.1 Overview This chapter discusses how to configure NA T on the ZyXEL Device. NA T (Network Address T ranslation - NA T , RFC 1631) is the transl ation of the IP address of a host in a packet, for example, the source addr ess of an outgoing packet, used within [...]

Chapter 12 Network Address Translation (NAT) VSG1435-B101 Series User’s Guide 180 Global/Local Global/local denot es the IP address of a host in a packet as the pack et tr averses a router , for example, the local addr ess refers to the IP address of a host when the packet is in the local network, while the gl obal address refers to the IP addres[...]

Chapter 12 Network A ddress Trans lation (NAT) VSG1435-B10 1 Series User ’s Guide 181 Note: Many residential broadband ISP accoun t s do not allow you to run any server processes (such as a We b or FTP server) from your location. Y our ISP may periodically check for servers and may sus pend your accoun t if it discovers any active services at you[...]

Chapter 12 Network Address Translation (NAT) VSG1435-B101 Series User’s Guide 182 The following table describes t he fields in this screen. 12.2.1 Add/Edit Port Forwarding Click Add new rule in the Port Forwarding screen or cl ick the Edit icon n ext to an existing rule to open the following screen. Figure 65 Port Forwarding: Add/Edit T able 42 N[...]

Chapter 12 Network A ddress Trans lation (NAT) VSG1435-B10 1 Series User ’s Guide 183 The following table describes t he labels in this screen. 12.3 The Applications Screen This screen provides a summary of all NA T applications and their configur ation. In addition, this sc reen allows yo u to create new applications and/or remov e existing ones[...]

Chapter 12 Network Address Translation (NAT) VSG1435-B101 Series User’s Guide 184 T o access this screen, click Network Settings > NAT > Applications . The following screen appears. Figure 66 Network Settings > NA T > Applications The following table describes t he labels in this screen. 12.3.1 Add New Application This screen lets you[...]

Chapter 12 Network A ddress Trans lation (NAT) VSG1435-B10 1 Series User ’s Guide 185 The following table describes t he labels in this screen. 12.4 The Port T riggering Screen Some services use a dedicated r ange of ports on the client side and a dedicated rang e of ports on the server sid e. Wi th regul ar port forwarding you set a forwarding p[...]

Chapter 12 Network Address Translation (NAT) VSG1435-B101 Series User’s Guide 186 For example: Figure 68 T rigger Port Forwarding Process: Example 1 Jane requests a file from the R eal Audio server ( port 7070). 2 P ort 7070 is a “trigger” port and causes t he Z yXEL Device to record Jane’ s computer IP address. The Z yXEL Device associates[...]

Chapter 12 Network A ddress Trans lation (NAT) VSG1435-B10 1 Series User ’s Guide 187 12.4.1 Add/Edit Port T riggering Rule This screen lets you create new port triggering rules. Click Add new rule in the Port Triggering screen or click a rule’ s Edit icon to open the following screen. Figure 70 Port T riggering: Add/Edit WA N I nt e r f a c e [...]

Chapter 12 Network Address Translation (NAT) VSG1435-B101 Series User’s Guide 188 The following table describes t he labels in this screen. T able 47 Port T riggering: Configuration Add/Edit LABEL DESCRIPTION Active Select the check box to enable this rule. This field is read-only in the Port Triggering Configuration screen. Service Name Enter a [...]

Chapter 12 Network A ddress Trans lation (NAT) VSG1435-B10 1 Series User ’s Guide 189 12.5 The DMZ Screen In addition to the servers for specified services, NA T supports a default server IP address. A default serv er rec eiv es pack ets from ports that are not specifi ed in the NAT Port Forwarding Setup screen. Figure 71 Network Settings > NA[...]

Chapter 12 Network Address Translation (NAT) VSG1435-B101 Series User’s Guide 190 12.6 The ALG Screen Some NA T routers ma y include a SIP Application Lay er Gateway (AL G). A SIP ALG allows SIP calls to pass through NA T by examining and translating IP addres ses embedded in the data stream. When the Z yXEL Device registers with the SIP register[...]

Chapter 12 Network A ddress Trans lation (NAT) VSG1435-B10 1 Series User ’s Guide 191 Click Network Settings > NAT > Sessions to displ a y the following screen. Figure 73 Network Settings > NA T > Sessions The following table describes t he fields in this screen. 12.8 T echnical Reference This part contains more information regarding [...]

Chapter 12 Network Address Translation (NAT) VSG1435-B101 Series User’s Guide 192 Note that inside/outside refers t o the locati on of a host, while gl obal/local refers to the IP address of a host used in a pack et. Thus, an inside local ad dress (ILA) is the IP address of an inside host i n a packet when the pack et is still in t he local netwo[...]

Chapter 12 Network A ddress Trans lation (NAT) VSG1435-B10 1 Series User ’s Guide 193 12.8.3 How NA T Works Each packet has two addres ses – a source address and a destination address. For outgoing packets, t h e ILA (Inside Local Addr ess) is the source address on the LAN, and the IGA (Inside Global Address) is the source address on the W AN. [...]

Chapter 12 Network Address Translation (NAT) VSG1435-B101 Series User’s Guide 194 12.8.4 NA T Application The following figure illustr ates a possible NA T application, where three inside LANs ( l o g i c a l L A N s u s i n g I P a l i a s ) b e h i n d t h e ZyXEL Device can communicat e with three distinct W AN networks. Figure 75 NA T Applica[...]

Chapter 12 Network A ddress Trans lation (NAT) VSG1435-B10 1 Series User ’s Guide 195 Port Forwarding Example Let's say you want to assi gn ports 21-25 to o n e F T P , T e l ne t a n d S MT P s e rv e r ( A in the example), port 80 to another ( B in the example) and assign a default server IP address of 192.168.1.35 to a t hird ( C in the e[...]

Chapter 12 Network Address Translation (NAT) VSG1435-B101 Series User’s Guide 196[...]

VSG1435-B10 1 Series User ’s Guide 197 C HAPTER 13 Dynamic DNS Setup 13.1 Overview DNS DNS (Domain Name System) is for mapping a domain name to its corresponding IP address and vice v ersa. The DNS se rver is extremely important because without it, you must know the IP addre ss of a machine before you can access it. In addition to the system DNS [...]

Chapter 13 Dy namic DNS Se tup VSG1435-B101 Series User’s Guide 198 Figure 77 Example of DNS Routing T opology Dynamic DNS Dynamic DNS allows you to update your current dynamic IP a ddress with one or many dynamic DNS services so that anyo ne can contact you (in NetMeeting, CU- SeeMe, etc.). Y ou can also access your FTP server or W eb site on yo[...]

Chapter 13 Dynamic DNS Setup VSG1435-B10 1 Series User ’s Guide 199 you want to be able to use, for example, www .y ourhost.dyndns.org and still reach your hostname. If you have a pr ivate WAN I P add res s , the n you can n ot u se D y n am i c DNS. 13.2 The DNS Entry Screen Use this screen to view and configure DNS routes on the Z yXEL Device. [...]

Chapter 13 Dy namic DNS Se tup VSG1435-B101 Series User’s Guide 200 13.2.1 Add/Edit DNS Entry Y ou can manually add or edit the ZyXEL De vice’ s DNS name and IP address entry . Click Add new DNS entry in the DNS Entry screen or the Edit icon next to the entry you want to edit. The screen shown next appears. Figure 79 DNS Entry: Add/Edit The fol[...]

Chapter 13 Dynamic DNS Setup VSG1435-B10 1 Series User ’s Guide 201 The following table describes t he fields in this screen. T able 55 Advanced > DNS Setting > Dynamic DNS LABEL DESCRIPTION Dynamic DNS Select this check box to use dynamic DNS. Service Provider Select your Dynamic DNS service provider from the drop-down list box. Hostname T[...]

Chapter 13 Dy namic DNS Se tup VSG1435-B101 Series User’s Guide 202[...]

VSG1435-B10 1 Series User ’s Guide 203 C HAPTER 14 IGMP 14.1 Overview T raditionally , IP packets are transmitted in one of either two ways - Unicast (1 sender to 1 recipient) or Broadcast (1 sender to everybody on the network). Multicast deliv ers IP packets to just a group of hosts on the network. IGMP (Internet Group Mu lticast Protocol) is a [...]

Chapter 14 IG M P VSG1435-B101 Series User’s Guide 204 multicast hosts to learn the IP multic ast group membershi p. It checks IGMP packets pas sing through it, picks out th e group regist ration information, and configures multicasting accordingly . IGMP snooping allows th e Z yXEL Devi ce to learn multicast g roups without y ou having to manu a[...]

Chapter 14 IGMP VSG1435-B10 1 Series User ’s Guide 205 The following figure shows a network example where A is the multicast source while computers 1, 2 and 3 are the receiv ers. In the figure A is connected to the upstream interface and 1, 2 and 3 are connected to the do wnstrea m interf ace. Figure 81 IGMP Proxy Netwo rk Example The Z yXEL Devi[...]

Chapter 14 IG M P VSG1435-B101 Series User’s Guide 206 14.2 The IGMP General Screen Use the IGMP General screen to configure general IGMP proxy and IGMP packet processing settings. Click Network Settings > IGMP Setting > General to open the following screen. Figure 82 Network Settings > IGMP Setting > General The following table descr[...]

Chapter 14 IGMP VSG1435-B10 1 Series User ’s Guide 207 Ignore IGMP report without router alert optio n Select this to discard IGMP report packets that do not include a router alert option. Ignore IGMP leave without router alert optio n Select this to discard IGMP leave pack ets that do not include a router alert option. Ignore IGMP query without [...]

Chapter 14 IG M P VSG1435-B101 Series User’s Guide 208 14.3 IGMP Filter Configuration Use this screen to control IGMP access. Click Network Settings > IGMP Setting > IGMP Filter to open the following screen. Figure 83 Network Settings > IGMP Setting > IGMP Filter The following table describes t he fields in this screen. T able 57 Netw[...]

Chapter 14 IGMP VSG1435-B10 1 Series User ’s Guide 209 Allow IGMP packets from Ethernet LAN port1 ~ 4 Select specific LAN Ethernet ports upon which to accept IGMP packets. Clear individual LAN Ethernet port options to discard IGMP packets received on those ports. LAN Host This table lists the LAN computers the Z yXEL Device has detected. LAN Host[...]

Chapter 14 IG M P VSG1435-B101 Series User’s Guide 210 14.3.1 IGMP Host Limit ation Edit Use this screen to control a LAN host’ s access to IGMP services through the Z yXEL Device. Click Network Settings > IGMP Setting > IGMP Filter and then a LAN host’s Edit icon to open the following screen. Figure 84 Network Sett ings > IGMP Setti[...]

Chapter 14 IGMP VSG1435-B10 1 Series User ’s Guide 21 1 14.3.2 IGMP Service Add Use this screen to add or edi t an IGMP multicast service domain. Click Network Settings > IGMP Setting > IGMP Filter > Add a new rule to open the following screen. Figure 85 Network Settings > IGMP Setting > IGMP Filter > Add a new service The follo[...]

Chapter 14 IG M P VSG1435-B101 Series User’s Guide 212 14.3.3 IGMP Host Limit ation Add Use this screen to cont rol a LAN host’ s access to an IGMP multicas t service domain. Click Network Settings > IGMP Setting > IGMP Filter > Add a new host limitation to open the following screen. Figure 86 Network Sett ings > IGMP Setting > I[...]

Chapter 14 IGMP VSG1435-B10 1 Series User ’s Guide 213 14.4 IGMP ACL Configuration Use the IGMP Access Control List (ACL) to block or allow access to specific multicast media channels. Click Network Settings > IGMP Setting > IGMP ACL to open the following screen. Figure 87 Network Settings > IGMP Setting > IGMP ACL The following table[...]

Chapter 14 IG M P VSG1435-B101 Series User’s Guide 214 14.4.1 IGMP ACL Add Use this screen to configure the multicast IP address of a multicast media channel to which you want to block or allow access. Click Network Set tings > IGMP Setting > IGMP ACL > Add a new rule to open the following screen. Figure 88 Network Settings > IGMP Set[...]

VSG1435-B10 1 Series User ’s Guide 215 C HAPTER 15 Interface Group 15.1 Overview By default, all LAN and W AN interfaces on the Z yXEL Device are in the same group and can communicate with each other . Create interface groups to have the Z yXEL Device assign the IP addresses in diffe rent domains to different groups. Each group acts as an in de p[...]

Chapter 15 In te r fac e Gr ou p VSG1435-B101 Series User’s Guide 216 In the following example, the cl ient that sends pack ets with the DHCP V endor ID option set to MSFT 5.0 (meaning it is a Windows 2000 DHCP client) is assigned the IP address 192.168.2.2 and uses th e W AN VDSL_P oE/pp p0.1 interface. Figure 89 Interface Gro uping Application [...]

Chapter 15 Interface Group VSG1435-B10 1 Series User ’s Guide 217 15.2.1 Interface Group Configuration Click the Add New Interface Group button in th e Interface Group screen to open the following screen. Us e this screen to create a new interface group . Note: An interface can belong to only one group at a time. Figure 91 Interface Group Configu[...]

Chapter 15 In te r fac e Gr ou p VSG1435-B101 Series User’s Guide 218 Automatically Add Clients With the following DHCP V endor IDs Enter the V endor Class Identifiers (DHCP Option 60) to identify LAN hosts to add to the interface group by criteria such as the type of the hardware or firmware. Apply Click Apply to save your changes back to the Z [...]

VSG1435-B10 1 Series User ’s Guide 219 C HAPTER 16 Firewall 16.1 Overview This chapter shows you how t o enable an d configure the Z yXE L Device firewall. Use the firewall to protect your Z yXE L Device and network from attacks by hackers o n the Internet an d control a ccess to it. By default the firew all: • allows tr affic that originates f[...]

Chapter 16 Firewall VSG1435-B101 Series User’s Guide 220 16.1.2 What Y ou Need to Know SYN Att ack A SYN attack floods a targeted system with a series of SYN packets . Each packet causes the targeted system to issue a SYN- ACK response. Whi le the targeted system waits for the ACK that follows the SYN- ACK, it queues up all out standing SYN- ACK [...]

Chapter 16 Firewall VSG1435-B10 1 Series User ’s Guide 221 16.2 The Firewall Screen Use this screen to set t he security le vel of the firewall on the Z yXEL Device. Firewall rules are grouped based on t h e direct ion of tr avel of packets to which they apply . Click Security Settings > Firewall to display the fol lowing screen. Figure 93 Sec[...]

Chapter 16 Firewall VSG1435-B101 Series User’s Guide 222 Click Security Settings > Firewall > Protocol to display the following screen. Figure 94 Security Settings > Firewall > Proto col The following table describes t he labels in this screen. T able 66 Security Settings > Firewall > Protocol LABEL DESCRIPTION Add New Protocol [...]

Chapter 16 Firewall VSG1435-B10 1 Series User ’s Guide 223 16.3.1 Add a Protocol Use this screen to add a customized servic e rule that you can us e in the firewall’ s ACL rule configuration. C lick Add New Protocol Entry in the Protocol screen to display the following screen. Figure 95 Security Settings > Firewall > Proto col > Add Th[...]

Chapter 16 Firewall VSG1435-B101 Series User’s Guide 224 16.4 The Access Control Screen Click Security Settings > Firewall > Access Control to display the following screen. This screen disp lays a list of the configured incoming or outg oing filterin g rules. Figure 96 Security Settings > Firewall > Access Contr ol The following table[...]

Chapter 16 Firewall VSG1435-B10 1 Series User ’s Guide 225 Src IP This displays the source IP addresses to which this rule applies. Please note that a blank source address is equiv alent to Any . Dst IP This displays the destination IP addresses to which this rule applies. Please note that a blank destination address is equiv alent to Any . Proto[...]

Chapter 16 Firewall VSG1435-B101 Series User’s Guide 226 16.4.1 Add/Edit an ACL Rule Click Add New ACL Rule or the Edit i con next to an existing ACL rule in the Access Control screen. The following screen displays. Figure 97 Security Settings > Firewall > Access Contr ol > Add/Edit The following table describes t he labels in this scree[...]

Chapter 16 Firewall VSG1435-B10 1 Series User ’s Guide 227 Select Protocol Select the transport layer protocol that defines your customized port from the drop-down list box. The specif ic protocol rule sets you add in the Security Settings > Fire wall > Protocol > Add screen display in this list. If you want to configure a custo mized pr[...]

Chapter 16 Firewall VSG1435-B101 Series User’s Guide 228[...]

VSG1435-B10 1 Series User ’s Guide 229 C HAPTER 17 MAC Filter 17.1 Overview This screen allows you to configure the Z y XEL Device to give exclusive ac cess to specific devices or ex clude specific devices from accessing the Z yXEL Device. Every Ethernet dev ice has a unique MAC (Media Access Control) address. The MAC address is assigned at the f[...]

Chapter 17 MAC Filter VSG1435-B101 Series User’s Guide 230 The following table describes t he labels in this screen. T able 70 Security Settings > MAC Filter LABEL DESCRIPTION MAC Filter Setup MAC Filter Select En able to activate the MAC filter function. Otherwise, select Disable . Add new devices to the Allow List automatically Select this c[...]

VSG1435-B10 1 Series User ’s Guide 231 C HAPTER 18 Parental Control 18.1 Overview P arental control allows you to permit or block access to certain web sites from home network computers. Y ou can define time periods and days du ring which the Z yXEL Device performs parental control on a specific user in the Security Settings > Scheduler Rules [...]

Chapter 18 Pare n ta l Cont ro l VSG1435-B101 Series User’s Guide 232 The following table describes t he fields in this screen. 18.2.1 Add/Edit Parent al Control Rule Click Add new rule in the P arental Control screen or click the Edit icon next to a rule to open the followi ng screen. Figure 100 Parent al Control: Add/Ed it T able 71 Parental Co[...]

Chapter 18 Parental Control VSG1435-B10 1 Series User ’s Guide 233 The following table describes t he fields in this screen. T able 72 Parental Control: Add/Edit LABEL DESCRIPTION PC Name/IP/MAC Select the user that you want to apply this rule to from the drop-down list box. If you w ant to add an user that is not listed, select User Defined and [...]

Chapter 18 Pare n ta l Cont ro l VSG1435-B101 Series User’s Guide 234[...]

VSG1435-B10 1 Series User ’s Guide 235 C HAPTER 19 Scheduler Rules 19.1 Overview Y ou can define time periods and days du ring which the Z yXEL Device performs scheduled rules of certain features (suc h as Firewall Access Control, Parental Control) on a specific user in the Scheduler Rules screen. 19.2 The Scheduler Rules Screen Use this screen t[...]

Chapter 19 Sc he dule r R ules VSG1435-B101 Series User’s Guide 236 19.2.1 Add/Edit a Schedule Click the Add button in the Scheduler Rules screen or click the Edit icon next to a schedule rule to open the following screen. Use this screen to configure a restricted access schedule f or a specific user on y our network. Figure 102 Scheduler Rules: [...]

VSG1435-B10 1 Series User ’s Guide 237 C HAPTER 20 Certificates 20.1 Overview The Z yXEL Device can use certifica tes (als o called digital IDs) to authenticate users. Certificates are based on public-pri v ate key pairs. A certificate contains the certificate owner’ s identity and public k ey . Certificates provide a way to ex change public ke[...]

Chapter 20 Certificates VSG1435-B101 Series User’s Guide 238 20.3 The Local Certificates Screen Click Security Settings > Certificates to op en the Local Certificates screen. This is the Z yXEL Devi ce’ s summary list of certificates and ce rtificat io n requests . Figure 103 Security Settings > Certificates > L ocal Certificates The f[...]

Chapter 20 Certificates VSG1435-B10 1 Series User ’s Guide 239 20.3.1 Create Certificate Request Click Security Settings > Certificates > Local Certificates and then Create Certificate Request to open the following screen. Use this screen to hav e the Z yXEL Device gener ate a certification request. Figure 104 Create Certificat e Request Th[...]

Chapter 20 Certificates VSG1435-B101 Series User’s Guide 240 Figure 105 Certificate Req uest Created 20.3.2 Load Signed Certificate After you create a certificate request and ha ve it signed by a Certificate Authorit y , in the Local Certificates screen click the certificate request’s Load Signed icon to import the signed certificate into the Z[...]

Chapter 20 Certificates VSG1435-B10 1 Series User ’s Guide 241 Note: Y ou must remove any sp aces from th e certificate’ s filename before you can import it. Figure 106 Load Signed Certificate The following table describes t he labels in this screen. 20.3.3 Import Certificate Click Security Settings > Local Certificates and then Import Certi[...]

Chapter 20 Certificates VSG1435-B101 Series User’s Guide 242 Note: Y ou must remove any sp aces from th e certificate’ s filename before you can import it. Figure 107 Import Loca l Certificate The following table describes t he labels in this screen. T able 78 Import Local Certificate LABEL DESCRIPTION Import from file Click this check box to o[...]

Chapter 20 Certificates VSG1435-B10 1 Series User ’s Guide 243 If you click Import from file in the Import Local Certificate screen, the following screen is displa yed. Figure 108 Import Local Certifica te > Import from file The following table describes t he labels in this screen. 20.3.4 Certificate Det ails Click Security Settings> Certif[...]

Chapter 20 Certificates VSG1435-B101 Series User’s Guide 244 Figure 109 Certificate Det ails The following table describes t he labels in this screen. T able 80 Certificate Details LABEL DESCRIPTION Name This field displays the identifying na me of this certificate. If you want to change the name, type up to 63 char acters to identify this certif[...]

Chapter 20 Certificates VSG1435-B10 1 Series User ’s Guide 245 20.4 The T rusted CA Screen Click Security Settings > Certificates > Trusted CA to open the following screen. This screen disp lays a summary lis t of certificates of the certification authorities that y ou have set the Z yXEL De vice to accept as tru s te d. The ZyXEL Device ac[...]

Chapter 20 Certificates VSG1435-B101 Series User’s Guide 246 20.4.1 V iew T rusted CA Certificate Click the View ic on in the Trusted CA screen to open the following screen. Use this screen to view in-dep th information about the certification authori ty’ s certificate. Figure 1 1 1 T rusted CA: V iew The following table describes t he fields i[...]

Chapter 20 Certificates VSG1435-B10 1 Series User ’s Guide 247 20.4.2 Import T rusted CA Certificate Click the Import Certificate button in the Tru sted CA screen to open the following screen. The Z yXEL Device tr usts any v alid certificate sig ned by any of the imported trusted CA certificates. Figure 1 12 T rusted CA: Impor t Certificate Subje[...]

Chapter 20 Certificates VSG1435-B101 Series User’s Guide 248 The following table describes t he fields in this screen. If you click Import from file in the Import Local Certif icate screen, the following screen is displayed. Figure 1 13 T rusted CA: Impor t Certificate > Import from file The following table describes t he labels in this screen[...]

VSG1435-B10 1 Series User ’s Guide 249 C HAPTER 21 IPSec 21.1 Overview A virtual priv ate network (VPN) pro vides secure communications between sit es without the expense of leased site-to-site lines. A s ecure VPN is a combination of tunneling, encryption, aut hentication, access control and auditing. It is used to transport tr affic over the In[...]

Chapter 21 IP Sec VSG1435-B101 Series User’s Guide 250 21.1.2 What Y ou Need to Know A VPN tunnel is usually established in two phases. Each phase establ ishes a security association (SA) , a contr act in dicating what securit y par ameters the Z yXEL Device an d the remote IPSec rout er will use. The firs t phase establishes an Internet K ey Exc[...]

Chapter 21 IPSec VSG1435-B10 1 Series User ’s Guide 251 Finding Out More See Section 21.4 on page 260 for adv anced technical information on IPSec VPN . 21.2 The IPSec S t atus Screen Click Security Settings > IPSec > Status to open the scr een as shown. Use this screen to displ ay and manage activ e VPN connections. A Security Association [...]

Chapter 21 IP Sec VSG1435-B101 Series User’s Guide 252 21.3 The IPSec Settings Screen The following figure helps explain the main fields in the web configur ator . Figure 1 17 IPSec Summary Fields Local and remote IP addresses must be st atic. Click Security Settings > IPSec to open the Settings screen. This is a menu of your IPSec tunnels. Fi[...]

Chapter 21 IPSec VSG1435-B10 1 Series User ’s Guide 253 21.3.1 Add/Edit IPSec Setting Click Add New Connection or a policy’ s Edit icon in the IPSec > Settings screen to edit VPN policies. Note: The ZyXEL Device uses the system default gateway interface’ s W AN IP address as its W AN IP address to set up a VPN tunnel. 21.3.1.1 Auto(IKE) Ke[...]

Chapter 21 IP Sec VSG1435-B101 Series User’s Guide 254 Method field on the IPSec > Setting: Add/Edit screen. The following is the IPSec Setting - Auto(IKE) screen. Figure 1 19 Settings > Add/Ed it: Auto(IKE) The following table describes t he fields in this screen. T able 87 Settings > Add/Edit: Auto(IKE) LABEL DESCRIPTION Enable Select [...]

Chapter 21 IPSec VSG1435-B10 1 Series User ’s Guide 255 T unnel access from local IP addresses Specify the IP addresses of the devi ces behind the ZyXEL Device that can use the VPN tunnel. The local IP addresses m ust correspond to the remote IPSec router's config ured remote IP addresses. T wo active SAs cannot have the local and remote IP [...]

Chapter 21 IP Sec VSG1435-B101 Series User’s Guide 256 Authentication Method Select Pre-Shared Key to use a pre-shared k ey for authentication. A pre-shared key identifies a communicating party during a phase 1 IKE negotiation. It is called "pre-shared" because you have to share it with another party before you can commun icate with the[...]

Chapter 21 IPSec VSG1435-B10 1 Series User ’s Guide 257 21.3.1.2 Manual Key Setup Manual ke y management is useful if you have prob lems with Auto(IKE) key management. 21.3.1.3 Security Pa rameter Index (SPI) An SPI is used to distinguish different SA s terminating at the same destination and using the same IPSec protocol. This data al lows for t[...]

Chapter 21 IP Sec VSG1435-B101 Series User’s Guide 258 Current Z yXEL implementation assumes id entical outgoing and in coming SP Is . 21.3.2 Configuring Manual Key Y ou only configure VPN man u al key w h en yo u se lec t Manual in the Key Exchange Method field on the IPSec > Setting: Add/Edit screen. The following is th e IPSec Setting - Man[...]

Chapter 21 IPSec VSG1435-B10 1 Series User ’s Guide 259 T unnel access from local IP addresses Specify the IP addresses of the devi ces behind the ZyXEL Device that can use the VPN tunnel. The local IP addresses m ust correspond to the remote IPSec router's config ured remote IP addresses. T wo active SAs cannot have the local and remote IP [...]

Chapter 21 IP Sec VSG1435-B101 Series User’s Guide 260 21.4 T echnical Reference This section provi des some technical background informatio n about the topics covered in th is ch apter . Encryption Algorithm Select DES , 3DES , AES(aes-cbc) or ESP_NULL from the drop-down list box. When you use one of these encryption algorithms for data communic[...]

Chapter 21 IPSec VSG1435-B10 1 Series User ’s Guide 261 21.4.1 IPSec Architecture The over all IPSec architecture i s shown as follows. Figure 121 IPSec Architecture IPSec Algorithms The ESP (Encapsulating Security Payl oad) Protocol (RFC 2406) and AH (Authentication Header) protocol ( RFC 2402) describe the packet formats and the default standar[...]

Chapter 21 IP Sec VSG1435-B101 Series User’s Guide 262 21.4.2 Encap sulation The two modes of operation for IPSec VPNs are Transport mode and Tunnel mode. At the time of writing, the Z yXEL Device supports Tunnel mode only . Figure 122 T ranspo rt and T unnel Mode IPSec Encap sulation T ransport Mode Transport mode is used to protect upper layer [...]

Chapter 21 IPSec VSG1435-B10 1 Series User ’s Guide 263 21.4.3 IKE Phases There are two phases to every IKE (Internet K ey Exchange) negotiation – phase 1 (Authentication) and phase 2 (K ey Exc hange). A phase 1 exchange establishes an IKE SA and the second one uses that SA to negotiate SAs for IPSec. Figure 123 T wo Phases to Set Up the IPSec [...]

Chapter 21 IP Sec VSG1435-B101 Series User’s Guide 264 21.4.4 Negotiation Mode The phase 1 Negot iation Mod e you select de termines how t he Security Association (S A) will b e established for each conn ection through IKE negotiations . • Main Mode ensures the highest level of se curity when the com m un icating parties are nego ti at in g aut[...]

Chapter 21 IPSec VSG1435-B10 1 Series User ’s Guide 265 Transport mode ESP with authentication is not compatible with NA T . 21.4.6 VPN, NA T , and NA T T raversal NA T is incompat ible with the AH protocol in both transport and tunnel mode. An IPSec VPN using the AH protocol dig itall y signs t he outbou nd packe t, both d ata payload and header[...]

Chapter 21 IP Sec VSG1435-B101 Series User’s Guide 266 Finally , NA T is compatible with ESP in tunnel mode because integrity checks are performed over the combinat ion of the "original header plus original payload," which is unchanged by a NA T device. The co mpatibility of AH and ESP with NA T in tunnel and tr ansport modes is summari[...]

Chapter 21 IPSec VSG1435-B10 1 Series User ’s Guide 267 21.4.7.1 ID T ype and Content Examples T wo IPSec routers must have matchi ng ID type and content configuration in order to set up a VPN tunnel. The two Z yXEL Devices in this example can complete negotiation and establish a VPN tunnel. The two Z yXEL Devices in this example ca nnot complete[...]

Chapter 21 IP Sec VSG1435-B101 Series User’s Guide 268 21.4.9 Diffie-Hellman (DH) Key Group s Diffie-Hellman (DH) is a publi c-key crypt o graphy protocol that allows two parties to establish a shared secret o ver an un secured communications channel. Diffie- Hellman is used within IKE SA setup to establish session keys. 768-bit, 1024-bit 1536-bi[...]

VSG1435-B10 1 Series User ’s Guide 269 C HAPTER 22 Service Control 22.1 Overview This chapter provides information on the Service Control screens. Service Control allows you to manage your Z yXEL Device from a remote location through the following interfaces: •L A N •W A N Note: The ZyXEL Device is managed using the W eb Configurator . 22.2 T[...]

Chapter 22 Serv ice Control VSG1435-B101 Series User’s Guide 270 Click Security Settings > Service Control to open the following screen. Figure 125 Security Settings > Service Control The following table describes t he fields in this screen. T able 94 Security Settings > Service Control LABEL DESCRIPTION General # This is the ind ex numb[...]

VSG1435-B10 1 Series User ’s Guide 271 C HAPTER 23 ARP Table 23.1 Overview Address Resolution Protocol (ARP) is a pr otocol for mapping an Internet Protocol address (IP address) to a physi c al machine address, also known as a Media Access Control or MAC address, on the local area network. An IP (version 4) address is 32 bits long . In an Etherne[...]

Chapter 23 ARP Tab le VSG1435-B101 Series User’s Guide 272 23.2 ARP T able Screen Use the ARP table to view IP-to-MAC addr ess mapping(s). T o open this screen, click System Monitor > ARP Table . Figure 126 System Monitor > ARP T able The following table describes t he labels in this screen. T able 95 System Monitor > ARP T able LABEL DE[...]

VSG1435-B10 1 Series User ’s Guide 273 C HAPTER 24 Logs 24.1 Overview The web configurator allows y ou to choos e which categories of events and/o r alerts to hav e the Z yXEL Device log and then displa y the logs or have the Z yXEL Device send them to an administr ator (as e-mail) or to a syslog server . 24.1.1 What Y ou Can Do in this Chapter ?[...]

Chapter 24 L ogs VSG1435-B101 Series User’s Guide 274 Refer to the document ation of your syslog progr am for detail s. The following table describes the syslog sev erity levels. 24.2 The System Log Screen Use the System Log screen to see the system logs for the categories that y ou select in Maintenance > Log Setting . Click System Monitor &g[...]

Chapter 24 Logs VSG1435-B10 1 Series User ’s Guide 275 The following table describes t he fields in this screen. 24.3 The Security Log Screen Use the Security Log screen to see the security-related logs for the categories that you select . Clic k System Monitor > Log > Security Log to open the following screen. Figure 128 System Monitor >[...]

Chapter 24 L ogs VSG1435-B101 Series User’s Guide 276 The following table describes t he fields in this screen. T able 98 System Monitor > Log > Security Log LABEL DESCRIPTION Level Select a severity level from the dr op-down list box. This filters search results according to the severity lev el you have selected. When you select a severity[...]

VSG1435-B10 1 Series User ’s Guide 277 C HAPTER 25 Traffic Status 25.1 Overview Use the Traffic Status screens to look at network tr affic status and statistics of the WAN and LAN interfa ces. 25.1.1 What Y ou Can Do in this Chapter •U s e t h e WAN screen to view the W AN traffic statistics ( Sect ion 25.2 on pa ge 278 ). •U s e t h e LAN sc[...]

Chapter 25 Tra ff ic St at us VSG1435-B101 Series User’s Guide 278 25.2 The W AN S t atus Screen Click System Monitor > Traf fic Status to open the WAN screen. The figure in this screen shows the number of bytes re ceiv ed and sent on the Z yXEL Device. Figure 129 System Monitor > T raffic S tatus > W AN The following table describes t h[...]

Chapter 25 Traffic Status VSG1435-B10 1 Series User ’s Guide 279 P ackets Sent Data This indicates the number of tr ansmitted packets on this interface. Error This indicates the number of fr ames with errors tr ansmitted on this interface. Drop This indicates the number of outgoing pack ets dropped on this interface. P ackets Receiv ed Data This [...]

Chapter 25 Tra ff ic St at us VSG1435-B101 Series User’s Guide 280 25.3 The LAN S t atus Screen Click System Monitor > Traffic Status > LAN to open the following screen. The figure in this screen shows the i nterface that is currentl y co nnected on the Z yXEL Device. Figure 130 System Monitor > T raffic S tatus > LAN The following ta[...]

Chapter 25 Traffic Status VSG1435-B10 1 Series User ’s Guide 281 P ackets Sent Data This indicates the number of tr ansmitted packets on this interface. Error This indicates the number of fr ames with errors tr ansmitted on this interface. Drop This indicates the number of outgoing pack ets dropped on this interface. P ackets Receiv ed Data This [...]

Chapter 25 Tra ff ic St at us VSG1435-B101 Series User’s Guide 282[...]

VSG1435-B10 1 Series User ’s Guide 283 C HAPTER 26 IGMP Status 26.1 Overview Use the IGMP Status screens to look at IGMP group status and tr affic statistics . 26.1.1 What Y ou Can Do in this Chapter •U s e t h e IGMP Group screen to look at the current list of mul ticast groups the Z yXEL Device has joined and wh i ch ports ha ve joined each ([...]

Chapter 26 IG M P Stat us VSG1435-B101 Series User’s Guide 284 26.3 IGMP S t atistics Screen Use this screen to look at the current number of IG MP-rel ated packets received for each IGMP multicast group and from each LAN host. T o open this screen, click System Monitor > IGMP Group Status > IGMP Statistics . Figure 132 System Monitor > [...]

Chapter 26 IGMP Status VSG1435-B10 1 Series User ’s Guide 285 Host Address This field displays the IP address of a LAN computer that has sent the Z yXEL Device IGMP-related p ackets. Last Report Time This field displays when the Z yXEL Device received the latest packet from this LAN IP address for this IGMP multicast group. To t a l T i m e (sec)[...]

Chapter 26 IG M P Stat us VSG1435-B101 Series User’s Guide 286[...]

VSG1435-B10 1 Series User ’s Guide 287 C HAPTER 27 Users Configuration 27.1 Overview In the Users Configuration screen, y ou can view , add, and configure user accounts of the Z yXEL Device. 27.2 The Users Configuration Screen Click Maintenance > Users C onfiguration to open the following screen. Figure 133 Maintenance > Users Configura tio[...]

Chapter 27 Us er s Con fig ur a tion VSG1435-B101 Series User’s Guide 288 The following table describes t he labels in this screen. T able 103 Maintenance > Users Configuration LABEL DESCRIPTION Advanced Account Security T urn on advanced account securit y to enforce tighter security for the Z y XEL Device’ s user accounts. This includes: ?[...]

Chapter 27 Users Config uration VSG1435-B10 1 Series User ’s Guide 289 27.2.1 Add/Edit a Users Account Use this screen to add or edi t a users account. Click Add new user in the Users Configuration screen or the Edit icon next to the user account you w ant to edit . The screen shown next appears. Figure 134 Users Configur ation : Add/Edit The fol[...]

Chapter 27 Us er s Con fig ur a tion VSG1435-B101 Series User’s Guide 290 Expire Period Enter a number of days to specify how many days this user’ s password is available. Ret r y T i m e s The ZyXEL Dev ice can lock a user out if you use a wrong user name or password to log in the Z yXEL Device. Enter up to how man y times a user can re-enter [...]

VSG1435-B10 1 Series User ’s Guide 291 C HAPTER 28 Remote Management 28.1 Overview This chapter explains how to confi gure the Z yXEL Device’ s TR -069 and TR -064 auto-configur a ti on settings. 28.1.1 What Y ou Can Do in this Chapter •T h e TR-069 screen lets you configure th e Z yXEL Device’ s TR -069 auto- configur ation settings ( Sect[...]

Chapter 28 Remote Management VSG1435-B101 Series User’s Guide 292 Click Maintenance > Remo te Management > T R-069 Client to open the following screen. Use this s creen to conf igure your Z yXEL Device to be managed by an ACS. Figure 135 Maintenance > Remote Manageme nt > TR-069 Client The following table describes t he fields in this[...]

Chapter 28 Remote Management VSG1435-B10 1 Series User ’s Guide 293 28.3 The TR-064 Screen TR -064 is a LAN-Side DSL CPE Configurat io n protocol defined by the DSL Forum. TR -064 is built on top of UPnP . It allows the users to us e a TR -064 compliant CPE management application on their computer s from the LAN t o discover the CPE and configure[...]

Chapter 28 Remote Management VSG1435-B101 Series User’s Guide 294[...]

VSG1435-B10 1 Series User ’s Guide 295 C HAPTER 29 Time Settings 29.1 Overview This chapter shows you how to configure system related settings, suc h as system time, password, name, the domain name an d the inactivity timeout interv al. 29.2 The T ime Setting Screen T o change your Z yXEL Device’ s time and date, click Maintenan ce > Time Se[...]

Chapter 29 Ti m e Set tin gs VSG1435-B101 Series User’s Guide 296 The following table describes t he fields in this screen. T able 107 Maintenance > T ime Setting LABEL DESCRIPTION Current Date/Time Syst e m T im e This field displays the time and fate of your Z yXEL Device. Each time you reload this page, the Z yXEL Device synchronizes the ti[...]

Chapter 29 Time Settings VSG1435-B10 1 Series User ’s Guide 297 End rule Configure the day and time when Da ylight Saving Time ends if you enabled Daylight Saving. Y ou can select a specific date in a particular month or a specific day of a specific week in a particular month. The Time field uses the 24 hour format. Here are a couple of examples:[...]

Chapter 29 Ti m e Set tin gs VSG1435-B101 Series User’s Guide 298[...]

VSG1435-B10 1 Series User ’s Guide 299 C HAPTER 30 Logs Setting 30.1 Overview Y ou can configure where the ZyXEL Device sends logs and which logs and/or immediate alerts the Z yXEL Device records in the Logs Setting screen. 30.2 The Log Settings Screen T o change your Z yXEL Device’ s log settings, click Mainte nance > Logs Setting . The scr[...]

Chapter 30 Log s Set tin g VSG1435-B101 Series User’s Guide 300 The following table describes t he fields in this screen. T able 108 Maintenance > Logs Setting LABEL DESCRIPTION Sysl o g Logging The ZyXEL Device sends a log to an external syslog server . Active Select the Active check box to enable syslog loggin g. Mode Select the syslog desti[...]

Chapter 30 Log s Set ting VSG1435-B10 1 Series User ’s Guide 301 30.2.1 Example E-mail Log An "End of Log" message dis plays for each mail in whic h a complete log has been sent. The following is an example of a log sent by e-mail. • Y ou may edit the subject title. • The date format here is Day -Month- Y ear . • The date format h[...]

Chapter 30 Log s Set tin g VSG1435-B101 Series User’s Guide 302[...]

VSG1435-B10 1 Series User ’s Guide 303 C HAPTER 31 Firmware Upgrade 31.1 Overview This chapter explains how t o upload new firmw are to your Z yXEL Devi ce. Y ou can download new firmware releases from your nearest Z yXEL FTP site (or www .zyxel.com) to use to upgrade y our device’ s performance. Only use firmware for your device ’ s specific[...]

Chapter 31 Firmware Upgrade VSG1435-B101 Series User’s Guide 304 After you see the firmwa re updating screen , wait two minutes before logging into the Z yXEL Device again. Figure 141 Firmware Upload ing The Z yXEL Device automatically restarts in this time causing a temporary network disconnect. In some oper ating systems, y ou may see the follo[...]

VSG1435-B10 1 Series User ’s Guide 305 C HAPTER 32 Configuration 32.1 Overview The Configuration screen allows you to backup and restore device configur ati ons. Y ou can also reset your devi ce settings back to the factory default . 32.2 The Configuration Screen Click Maintenance > Configuration . Information related to factory defaults, back[...]

Chapter 32 Con fig ur at ion VSG1435-B101 Series User’s Guide 306 Click Backup to sa ve the Z yXEL Device’ s current configuration to your computer . Restore Configuration Re store Configur ation allows yo u to upload a new or previously saved configur ation file from your computer to y our Z yXEL Device. Do not turn off the ZyXEL Device wh ile[...]

Chapter 32 Configuration VSG1435-B10 1 Series User ’s Guide 307 If the upload w as not successful, th e follo wing sc reen will appear . Clic k OK to go back to the Configuration screen. Figure 146 Configuratio n Upload E rror Reset to Factory Default s Click the Reset button to clear all user-enter ed configur ation information and return the Z [...]

Chapter 32 Con fig ur at ion VSG1435-B101 Series User’s Guide 308 32.3 The Reboot Screen System restart allows you to reboot th e Z yXEL Devi ce r emote ly without turning the power off . Y ou may need to do this i f the Z yXEL Device hangs, for example. Click Maintenance > Reb oot . Click Reboot to have the Z yXEL Device reboot. This does not[...]

VSG1435-B10 1 Series User ’s Guide 309 C HAPTER 33 Diagnostic 33.1 Overview Y ou can use different diagnostic methods to test a connection and see detailed results. These read-only screens displa y in formation to help you identify problems with the Z yXEL Device. 33.2 The Diagnostic Screen Use this screen to ping, traceroute, or nslookup an IP a[...]

Chapter 33 Diagnostic VSG1435-B101 Series User’s Guide 310 The following table describes t he fields in this screen. T able 1 1 1 Maintenance > Diagnostic > Ping & T raceRoute & NsLoo kup LABEL DESCRIPTION URL or IP Address T ype the IP address of a computer that you want to perform ping, traceroute, or nslooku p in order to test a [...]

VSG1435-B10 1 Series User ’s Guide 31 1 C HAPTER 34 Troubleshooting This chapter offers some suggesti ons to solv e problems y ou might encounter . The potential problems are divided into the following categories . • P ower , Hardware Connections, and LEDs • Z yXEL Device Access and Login • Internet Access 34.1 Power , Hardware Connections,[...]

Chapter 34 Tro u blesh oo tin g VSG1435-B101 Series User’s Guide 312 2 Check the hardware connections. 3 Inspect your cables for damage. Cont act the vendor to replace any damaged cables. 4 T urn the Zy XEL Device off and on. 5 If the problem continues, contac t the vendor . 34.2 ZyXEL Device Access and Login I forgot the IP address for the ZyXEL[...]

Chapter 34 Troubleshooting VSG1435-B10 1 Series User ’s Guide 313 • If you changed t he IP address ( Section 8.2 on page 134 ), use the new IP address. • If you c hanged the IP address and have f orgotten it, see the troubles hooting suggestions for I forgot the IP address for the Z yXEL Device. 2 Check the hardware connections, and ma k e su[...]

Chapter 34 Tro u blesh oo tin g VSG1435-B101 Series User’s Guide 314 I cannot T elnet to the ZyXEL Device. 1 See the troubleshooting suggestions for I cannot see or access the Login screen in the web configu rator . Ignore the suggestions about your browser . 2 Check the service control settings fo r T e ln et. See Chapter 22 on page 269 . I cann[...]

Chapter 34 Troubleshooting VSG1435-B10 1 Series User ’s Guide 315 I cannot access the Inter net through a DSL connection. 1 Make sur e yo u h ave th e DSL WAN port connecte d to a telephone jack (or the DSL or modem jack on a splitter if y ou have one). 2 Make sure you configured a proper DSL W AN interface ( Network Settings > Broadband scree[...]

Chapter 34 Tro u blesh oo tin g VSG1435-B101 Series User’s Guide 316 I cannot access the Internet anymore. I had access to the Internet (with the ZyXEL Device), but my Internet con nection is not av ailable anymore. 1 Y our session with the ZyXEL Device ma y ha v e expired. T ry logging into the ZyXEL Device again. 2 Check the hardware connection[...]

Chapter 34 Troubleshooting VSG1435-B10 1 Series User ’s Guide 317 What is a Server Set ID (SSID)? An SSID is a name that uniquely id entifi es a wireless network. The AP and all the clients within a wireless network must use the same SSID . What wireless security modes does my ZyXEL Device support? Wireless security is vital to your net w ork. It[...]

Chapter 34 Tro u blesh oo tin g VSG1435-B101 Series User’s Guide 318[...]

VSG1435-B10 1 Series User ’s Guide 319 C HAPTER 35 Product Specifications The following tables summarize the Z yXEL Device’ s hardware and firm ware features. 35.1 Hardware S pecifications T able 1 12 Hardware Specificatio ns Dimensions 210 (L) x 153 (W) x 40 (H) mm We i g h t 471 g P ower Adaptor Output 12 V 1.5 A P ower Adaptor Input 100 ~ 24[...]

Chapter 35 Product Specifications VSG1435-B101 Series User’s Guide 320 35.2 Firmware S pecifications Storage T emperature -20º ~ 60º C Operation Humidit y 20% ~ 85% RH (non-condensing) Storage Humidity 20% ~ 90% RH (non-condensing) T able 1 12 Hardware Specificatio ns (continued) T able 1 13 Firmware Specification s Default IP Address 192.168.1[...]

Chapter 35 Product Specifications VSG1435-B10 1 Series User ’s Guide 321 IP Multicast IP multicast is used to send traffic to a specific group of computers. The Z yXEL Device supports versions 2 and 3 of IGMP (Internet Group Management Protocol) used to join multicast groups (see RFC 2236). Time and Date Get the current time and date from an exte[...]

Chapter 35 Product Specifications VSG1435-B101 Series User’s Guide 322 VDSL Standards ITU- T G.9 93.1 VDSL Annex A (North American) Standard ITU G.993.2 (2/06) VDSL2 Annex A (North American) Standard • Corrigendum 1 (12/06) + Amen dment 1 (4/07) + Amendment 1 Corrigendum 1 (7/07) • Corrigendum 2 (7/07) + Amendment 2 (2/08) + Amendment 4 (1/09[...]

Chapter 35 Product Specifications VSG1435-B10 1 Series User ’s Guide 323 ADSL Standards ADSL ITU- T G.992.1 (G.dmt), Annex A and ETSI TS 101 388 V1.3.1 (05/2002) 1TR112 (U-R2 Deutsche T elekom AG) V ersion 7.0 including support of Dying Gasp and report of Self - T est-Result (A TU- T Reg is t e r # 3 ) EOC as specified in ITU- T G.992.1 (G.d mt) [...]

Chapter 35 Product Specifications VSG1435-B101 Series User’s Guide 324 The following list, which is not exhaust ive , illust rates the standards supported in the ZyXEL Device. T able 1 14 Standards Supported ST ANDARD DESCRIPTION RFC 1058 RIP-1 (R outing Information Protocol) RFC 1112 IGMP v1 RFC 1305 Network Time Protocol (NTP version 3) RFC 148[...]

VSG1435-B10 1 Series User ’s Guide 325 A PPENDIX A Setting up Y our Computer ’ s IP Address All computers must ha ve a 10M or 100M Ethernet adapter card and TCP/IP installed. Windows 95/98/Me/NT/2000/XP/Vis ta, Maci ntosh OS 7 and l ater operating systems and all versions of UNIX/LINUX include the software components you need to install and use[...]

Appendix A Setting up Your Computer’s IP Address VSG1435-B101 Series User’s Guide 326 Windows 95/98/Me Click Start , Settings , Control Panel and double-click the Network icon to open the Network window . Figure 151 WIndows 95/98/Me: Netwo rk: Configuration Inst alling Component s The Network window Configuration tab displays a list of installe[...]

Appendix A Setting up Your Computer’s IP Address VSG1435-B10 1 Series User ’s Guide 327 3 Select Microsoft from the list of manufacturers . 4 Select TCP/IP from the list of network protocols and then click OK . If you need Client for Microsoft Networks: 1 Click Add . 2 Select Client and then click Add . 3 Select Microsoft from the list of manuf[...]

Appendix A Setting up Your Computer’s IP Address VSG1435-B101 Series User’s Guide 328 3 Click the DNS Configuration t ab. • If you d o not know your DNS information, select Disable D NS . • If you k now your DNS information, select Enable DNS and type the information in the fields below (y ou may not need to fill them all in). Figure 153 Wi[...]

Appendix A Setting up Your Computer’s IP Address VSG1435-B10 1 Series User ’s Guide 329 Windows 2000/NT/XP The following example figures use the defa ult Windo ws XP GU I theme. 1 Click start ( Start in Windows 2000/NT), Settings , Control Panel . Figure 154 Windows XP: S tart Menu 2 In the Control Panel , double-cli ck Network Connections ( Ne[...]

Appendix A Setting up Your Computer’s IP Address VSG1435-B101 Series User’s Guide 330 3 Right- click Local Area Connection and then click Properties . Figure 156 Windows XP: Control Panel: Ne twork Connections: Properties 4 Select Internet Protocol (TCP/IP) (under the General tab in Win XP) and then click Properties . Figure 157 Windows XP: Loc[...]

Appendix A Setting up Your Computer’s IP Address VSG1435-B10 1 Series User ’s Guide 331 • If you ha ve a dynamic IP address cli ck Obtain an IP address automatically . • If you hav e a static IP address click Use the following IP Address and fill in the IP address , Subnet mask , and Default gateway fields. •C l i c k Advanced . Figure 15[...]

Appendix A Setting up Your Computer’s IP Address VSG1435-B101 Series User’s Guide 332 •C l i c k OK when finished. Figure 159 Windows XP: Adva nced TCP/IP Properties 7 In the Internet Protocol TCP/IP Properties windo w (the General tab in Windows XP): •C l i c k Obtain DNS server address automatically if you do not know your DNS server IP a[...]

Appendix A Setting up Your Computer’s IP Address VSG1435-B10 1 Series User ’s Guide 333 If you hav e previously configur ed DNS servers, click Ad vanced and then the DNS tab to order them. Figure 160 Windows XP: Internet Protocol (T CP/IP) Properties 8 Click OK to close the Internet Protocol (TCP/IP) Properties window. 9 Click Close ( OK in Win[...]

Appendix A Setting up Your Computer’s IP Address VSG1435-B101 Series User’s Guide 334 1 Click the Start icon, Control Panel . Figure 161 Windows V ista: S tart Menu 2 In the Control Panel , double-cli ck Network and Internet . Figure 162 Windows V ista: Control Panel 3 Click Network and Sharing Center . Figure 163 Windows V ista: Network And In[...]

Appendix A Setting up Your Computer’s IP Address VSG1435-B10 1 Series User ’s Guide 335 4 Click Manage network conne ctions . Figure 164 Windows V ista: Network and Sharing Center 5 Right- click Local Area Connection and then click Properties . Note: During this procedure, click Continue whenever Windo ws displays a screen saying that it needs [...]

Appendix A Setting up Your Computer’s IP Address VSG1435-B101 Series User’s Guide 336 6 Select Internet Protocol Version 4 (TCP/IPv4) and click Properties . Figure 166 Windows V ista: Local Area Connection Properties 7 The Internet Protocol Versio n 4 (TCP/IPv4) Properties window opens (the General tab ). • If you ha ve a dynamic IP address c[...]

Appendix A Setting up Your Computer’s IP Address VSG1435-B10 1 Series User ’s Guide 337 •C l i c k Advanced . Figure 167 Windows V ista: Intern et Protocol V ersion 4 (TCP/IPv4) Properties 8 If you do not know your gatewa y's IP address, remov e any previously i nstalled gateways in the IP Settings tab and click OK . Do one or more of th[...]

Appendix A Setting up Your Computer’s IP Address VSG1435-B101 Series User’s Guide 338 •C l i c k OK when finished. Figure 168 Windows V ista: Adva nced TCP/IP Properties 9 In the Internet Protocol Version 4 (TCP/IPv4) Properties window , (the General tab ): •C l i c k Obtain DNS server address automatically if you do not know your DNS serve[...]

Appendix A Setting up Your Computer’s IP Address VSG1435-B10 1 Series User ’s Guide 339 If you hav e previously configur ed DNS servers, click Ad vanced and then the DNS tab to order them. Figure 169 Windows V ista: Intern et Protocol V ersion 4 (TCP/IPv4) Properties 10 Click OK to close the Internet Protocol Versio n 4 (TCP/IPv4) Proper ties w[...]

Appendix A Setting up Your Computer’s IP Address VSG1435-B101 Series User’s Guide 340 Macintosh OS 8/9 1 Click the Apple menu, Control Panel and do uble-cl ick TCP/IP to open the TCP/ IP Control Panel . Figure 170 Macintosh OS 8/9: Apple Menu[...]

Appendix A Setting up Your Computer’s IP Address VSG1435-B10 1 Series User ’s Guide 341 2 Select Ethernet built-in from the Connect via list. Figure 171 Macintosh OS 8/9: TCP/IP 3 For d ynamically assigned settings, select Using DHCP Server fro m the Configure: list. 4 For s tatically assigned settings, do t he following: •F r o m t h e Confi[...]

Appendix A Setting up Your Computer’s IP Address VSG1435-B101 Series User’s Guide 342 Macintosh OS X 1 Click the Apple menu, and click System Preferences to open the System Preferences window . Figure 172 Macintosh OS X: Apple Menu 2 Click Netw ork in the icon bar . • Select Automatic from the Location list. • Select Built-in Ethernet from [...]

Appendix A Setting up Your Computer’s IP Address VSG1435-B10 1 Series User ’s Guide 343 •F r o m t h e Configure box, select Manually . • T ype your IP address in the IP Address box. • T ype your subnet mask in the Subnet mask box. • T ype the IP address of yo ur Z yXEL Device in the Router address box. 5 Click Apply Now and close the w[...]

Appendix A Setting up Your Computer’s IP Address VSG1435-B101 Series User’s Guide 344 2 Double-click on the profile of the network card you wish to configure. The Ethernet Device General screen displays as shown. Figure 175 Red Hat 9.0: KDE: Ethernet Device: General • If you ha ve a dynamic IP address, click Automatically obtain IP address se[...]

Appendix A Setting up Your Computer’s IP Address VSG1435-B10 1 Series User ’s Guide 345 6 Click the Activate button to apply the changes. The following sc reen displays. Click Yes to save the changes in all screens. Figure 177 Red Hat 9.0: KDE: Network Configuration: Act ivate 7 After the network card restart proc ess is complete, make sure the[...]

Appendix A Setting up Your Computer’s IP Address VSG1435-B101 Series User’s Guide 346 • If you ha ve a static IP address, ent er static in the BOOTPROTO= field. T ype IPADDR = followed by the IP address (in dotted decimal notation) and type NETMASK = followed by the subnet mask. The following example shows an example where the static IP addre[...]

Appendix A Setting up Your Computer’s IP Address VSG1435-B10 1 Series User ’s Guide 347 V erifying Settings Enter ifconfig in a terminal screen to ch eck your TCP/IP properties. Figure 182 Red Hat 9.0: Checking TCP/IP Properties [root@localhost]# ifconfig eth0 Link encap:Ethernet HWadd r 00:50:BA:72:5B:44 inet addr:172.23.19.129 B cast:172.23.1[...]

Appendix A Setting up Your Computer’s IP Address VSG1435-B101 Series User’s Guide 348[...]

VSG1435-B10 1 Series User ’s Guide 349 A PPENDIX B IP Addresses and Subnetting This appendix introduces IP addresses and subnet masks. IP addresses identify indi vidual devices on a network. Every networking device (including computers, serv ers, routers, printers, etc.) needs an IP address to communicate across the netw ork. These networking dev[...]

Appendix B IP Addresses and Subnetting VSG1435-B101 Series User’s Guide 350 The following figure shows an example IP address in which the first three octets (192.168.1) are the network number , and the fourth octet (16) is the host ID . Figure 183 Network Number and Host ID How much of the IP address is the networ k number and how much is the hos[...]

Appendix B IP Addresses and Subnetting VSG1435-B10 1 Series User ’s Guide 351 By conv ention, subnet masks alw ays cons ist of a continuous sequence of ones beginning from the leftmost bit of the mask, followed by a continuous sequence of zeros, for a total number of 32 bits. Subnet masks can be referred to by the size of the network number part [...]

Appendix B IP Addresses and Subnetting VSG1435-B101 Series User’s Guide 352 Not ation Since the mask is alw ays a continuo us number of ones beginning f rom the left, followed by a continuous number of zeros for the remainder of the 32 bit mask, you can simply specif y the number of ones instead of writing the v alue of each octet. Th is is us ua[...]

Appendix B IP Addresses and Subnetting VSG1435-B10 1 Series User ’s Guide 353 The following figure shows the company network before subnetting. Figure 184 Subnetting Example: Before Subnetting Y ou can “borrow” one of the host ID bits to divide the network 192.168.1.0 into two separate sub-networks. The subnet mask is now 25 bits (25 5.255.25[...]

Appendix B IP Addresses and Subnetting VSG1435-B101 Series User’s Guide 354 In a 25-bit subnet the host ID has 7 bits , so each sub-net work has a maximum of 2 7 – 2 or 126 possibl e hosts (a host ID of all zeroes is the subnet’ s address itself , all ones is the subnet’ s broadcast address). 192.168.1.0 with mask 255.255.255.128 i s subnet[...]

Appendix B IP Addresses and Subnetting VSG1435-B10 1 Series User ’s Guide 355 Example: Eight Subnet s Similarly , use a 27-bit mask to create eight subnets (000, 001, 010, 011, 100, 101, 110 and 111). The following table shows IP address last octet values for each sub net. T able 121 Subnet 3 IP/SUBNET MASK NETWORK NUMBER LAST OCTET BIT V ALUE IP[...]

Appendix B IP Addresses and Subnetting VSG1435-B101 Series User’s Guide 356 Subnet Planning The following table is a summary for subnet planning on a network with a 24-bit network number . The following table is a summary for subnet planning on a network with a 16-bit network number . Configuring IP Addresses Where you obtain your network number [...]

Appendix B IP Addresses and Subnetting VSG1435-B10 1 Series User ’s Guide 357 addresses, follow their instructions i n selecting th e IP addresse s and the sub n et mask. If the ISP did not explicitly give you an IP network nu mber , then most l ikely yo u have a single user account and the ISP will assign you a dynamic IP address when the connec[...]

Appendix B IP Addresses and Subnetting VSG1435-B101 Series User’s Guide 358[...]

VSG1435-B10 1 Series User ’s Guide 359 A PPENDIX C Pop-up Windows, JavaScript s and Java Permissions In order to use the web configurator yo u need to allow: • W eb browser pop-up wind ows from your device. • Jav aScripts (enabled by default). • Jav a permissions (enabled by default). Note: Internet Explorer 6 screens are used here . Screen[...]

Appendix C Pop-up Windows, JavaScripts and Java Perm issions VSG1435-B101 Series User’s Guide 360 1 In Internet Explorer , select Tools , Internet Options , Privacy . 2 Clear the Block pop-ups check box in the Pop-up Blocker sect ion of the screen. This disables an y web pop-up block ers you may have enabled. Figure 187 Internet Options: Privacy [...]

Appendix C Pop-up Windows, JavaScripts and Java Per missio ns VSG1435-B10 1 Series User ’s Guide 361 2 Select Settings… to open the Pop-up Blocker Settings screen. Figure 188 Internet Options: Privacy 3 T ype the IP address of your device (the web page that you do not want to have blocked) wi th the prefix “http://” . For example, http://19[...]

Appendix C Pop-up Windows, JavaScripts and Java Perm issions VSG1435-B101 Series User’s Guide 362 4 Click Add to mo ve the IP address to the list of Allowed sites . Figure 189 Pop-up Blo cker Settings 5 Click Close to return to the Privacy screen. 6 Click Apply to save this setting. JavaScript s If pages of the web configur ator do not display pr[...]

Appendix C Pop-up Windows, JavaScripts and Java Per missio ns VSG1435-B10 1 Series User ’s Guide 363 1 In Internet Explorer , click Tools , Internet Options and then the Security tab. Figure 190 Internet Options: Secu rity 2 Click the Custom Level... button . 3 Scroll down to Scriptin g . 4 Under Active scripting make sure that Enable is selected[...]

Appendix C Pop-up Windows, JavaScripts and Java Perm issions VSG1435-B101 Series User’s Guide 364 6 Click OK to close the window . Figure 191 Security Settings - Java Scripting Java Permissions 1 From Internet Explorer , click Tools , Internet Options and then the Security tab. 2 Click the Custom Level... button . 3 Scroll down to Microsoft VM . [...]

Appendix C Pop-up Windows, JavaScripts and Java Per missio ns VSG1435-B10 1 Series User ’s Guide 365 5 Click OK to close the window . Figure 192 Security Settings - Java JA V A (Sun) 1 From Internet Explorer , click Tools , Internet Options and then the Advanced tab. 2 Make sure that Use Java 2 for <applet> under Java (S un) is selected.[...]

Appendix C Pop-up Windows, JavaScripts and Java Perm issions VSG1435-B101 Series User’s Guide 366 3 Click OK to close the window . Figure 193 Java (Sun) Mozilla Firefox Mozilla Firefo x 2.0 screens are used here . Screens for other versions ma y vary . Y ou can enable Java, Javascript s and pop-ups in one screen. Click Tools, then click Options i[...]

Appendix C Pop-up Windows, JavaScripts and Java Per missio ns VSG1435-B10 1 Series User ’s Guide 367 Click Content .to show the screen below. Select the chec k boxes as shown in the following screen. Figure 195 Mozilla Firefox Content Security[...]

Appendix C Pop-up Windows, JavaScripts and Java Perm issions VSG1435-B101 Series User’s Guide 368[...]

VSG1435-B10 1 Series User ’s Guide 369 A PPENDIX D W ireless LANs Wireless LAN T opologies This section discuss es ad-hoc and infr astructure wi reless LAN topologies. Ad-hoc Wireless LAN Configuration The simplest WLAN configur ation is an in depend ent (Ad-hoc) WLAN that connect s a set of computers with wireless adapters (A, B, C). An y time t[...]

Appendix D Wireless LANs VSG1435-B101 Series User’s Guide 370 with each other . When Intra-BS S is disabled, wireless cli ent A and B can still access the wired network but cannot communicate with eac h other . Figure 197 Basic Service Set ESS An Extended Service Set (ESS) c onsists of a series of overlapping BS Ss, each containing an access poin[...]

Appendix D Wireless LANs VSG1435-B10 1 Series User ’s Guide 371 An ESSID (ES S IDentification) uniquely id entifies each ESS . All access points and their associated wirel ess clients within the same ESS must have the same ESSID in order to comm u nicate. Figure 198 Infrastructure WLAN Channel A channel is the r adio frequency(i es) used by wirel[...]

Appendix D Wireless LANs VSG1435-B101 Series User’s Guide 372 hidden node. Both stations (ST A) are with in range of the access point (AP) or wireless gatewa y , but out-of -range of ea ch other , so they canno t "h ear" each other , that is they do not know if the channel is currently being used. Therefore, they are consider ed hi dden[...]

Appendix D Wireless LANs VSG1435-B10 1 Series User ’s Guide 373 Fragment ation Threshold A Fragmentation Threshold is the maximum data fr agment size (between 256 and 2432 bytes) that can be sent in th e wireless network before the AP will fragment the packet into smaller dat a frames. A large Fragmentation Threshold is recommended for networks n[...]

Appendix D Wireless LANs VSG1435-B101 Series User’s Guide 374 The following figure shows the relative ef fectiveness of these wireless security methods av ailable on your Z yXEL Device. Note: Y ou must enable the same wireless security settings on the Z yXEL Device and on all wireless clients that you want to associate with it. IEEE 802.1x In Jun[...]

Appendix D Wireless LANs VSG1435-B10 1 Series User ’s Guide 375 • Authorization Determin es the network services availabl e to authenticated users once they are connected to the network. •A c c o u n t i n g K eeps track of the client’ s network activity . RADIUS is a simple package exchange in which your AP acts as a message rela y between[...]

Appendix D Wireless LANs VSG1435-B101 Series User’s Guide 376 EAP (Extensible Authenticati on Protocol) is an authentication prot ocol that runs on top of the IEEE 802.1x transport mechanism in order to support multiple types of user authentic a ti on . By using EAP to interact with an EAP-c om p atible RAD IU S server , an access point helps a w[...]

Appendix D Wireless LANs VSG1435-B10 1 Series User ’s Guide 377 T TLS supports EAP methods and legacy au thentication methods such as P AP , CHAP , MS-CHAP and MS-CHAP v2. PEAP (Protected EAP) Like EAP- TTLS , server -si de certificate authentication is used to establis h a secure connection , then u se si mple username and password methods throu[...]

Appendix D Wireless LANs VSG1435-B101 Series User’s Guide 378 WP A and WP A2 Wi-Fi Protected Ac cess (WPA ) is a subset of the IEEE 802.11i standard. WP A2 (IEEE 802.11i) is a wireless se curity standard that defi nes stronger encryption, authentication and key management than WPA. K ey differences between WP A or WPA2 and WEP are improved data e[...]

Appendix D Wireless LANs VSG1435-B10 1 Series User ’s Guide 379 The Message Integrity Check (MIC) is de signed to prevent an attacker from capturing data pack ets, altering them and resending them. The MIC pro vides a strong mathematical function in which the receiver and the transmitter each compute and then compare the MIC. If they do not match[...]

Appendix D Wireless LANs VSG1435-B101 Series User’s Guide 380 The Windows XP patch is a free download that adds WP A capabili ty to Windows XP's built-in "Z ero Configur ation" wirel e ss client. Howev er , you must run Windows XP to use it. WP A(2) with RADIUS Application Example T o set up WPA(2), you need t he IP address of the [...]

Appendix D Wireless LANs VSG1435-B10 1 Series User ’s Guide 381 2 The AP checks each wireless client's pa ssword an d allows it to join th e net w or k only if the password matches. 3 The AP and wireless clients gener ate a common PMK (P airwise Master K ey). The key itself is not s ent o v er the network, but is deriv ed from the PSK and t [...]

Appendix D Wireless LANs VSG1435-B101 Series User’s Guide 382 Antenna Overview An antenna couples RF signals onto air . A t ransmitter within a wireless device sends an RF signal to the antenna, whic h propagates the signal through the air . The antenna also operates in reverse by capturing RF signals from the air . P ositioning the antennas prop[...]

Appendix D Wireless LANs VSG1435-B10 1 Series User ’s Guide 383 T ypes of Antennas for WLAN There are two types of antennas used for wireless LAN applications. • Omni-directional antennas send the RF sign al out in all directions on a horizontal plane. The cover age area is torus-sh aped (like a donut) which makes these antennas ideal for a roo[...]

Appendix D Wireless LANs VSG1435-B101 Series User’s Guide 384[...]

VSG1435-B10 1 Series User ’s Guide 385 A PPENDIX E Services The following table lists some commonl y-used services and their associated protocol s and port n umbers. • Name : This is a short, descrip tive name for the service. Y ou can use this one or create a different one, if you like. • Protocol : This is the type of IP protocol used by th[...]

Appendix E Serv ices VSG1435-B101 Series User’s Guide 386 T able 130 Examples of Services NAME PROTOCOL PORT(S) DESCRIPTION AH (IPSEC_TUNNEL) User-Defined 51 The IPSEC AH (Aut hentica tion Header) tunneling protocol uses this service. AIM TCP 51 90 AOL ’s Internet Messenger service. AUTH TCP 11 3 Authentication protocol used by som e servers. B[...]

Appendix E S ervices VSG1435-B10 1 Series User ’s Guide 387 MSN Messenger TCP 1863 Microsoft Networks’ messenger service uses this protocol. NetBIOS TCP / U DP TCP / U DP TCP / U DP TCP / U DP 137 138 139 445 The Network Basic Input/Output System is used for communication between computers in a LAN. NEW- ICQ TCP 51 90 An Internet chat program. [...]

Appendix E Serv ices VSG1435-B101 Series User’s Guide 388 SFTP TC P 115 The Simple F ile T ransfer Protocol is an old way of tr ansferring files between computers. SMTP TC P 25 Simple Mail T ransfer Protocol is the message-exchange standard for the Internet. SMTP enables you to move messages from one e-mail server to another . SMTPS TC P 465 This[...]

VSG1435-B10 1 Series User ’s Guide 389 A PPENDIX F Open Sof tware Announcement s End-User License Agreement for “VSG1435-B101” WARNING: Z y XEL Communications Co rp. IS WILLING TO LICENSE THE SOFTWARE T O YOU ONL Y UPON THE CONDITION THA T YOU ACCEPT ALL OF THE TERMS CONT AINED IN THIS LICENSE AG REEMENT . PLEASE READ THE TERM S CAREFULL Y BE[...]

Appendix F Op en Software Announceme nts VSG1435-B101 Series User’s Guide 390 backup copy of the Softw are and Documentation solely for archiv al, back -up or disaster recovery purposes. Y ou shall no t exceed the scope of the license granted hereunder . Any rights not expressly gr an ted by Z yXEL to you are res erve d by Z yXEL, and all implied[...]

Appendix F O pen Software Announcem ents VSG1435-B10 1 Series User ’s Guide 391 contact the appropriate soft ware vendor or manufacturer directly for technical support and customer service rel ated to its software and p roducts. 5.Confidentiality Y ou acknowledge that the Software contai ns propriet ary trade secr ets of Z yXEL and you hereby agr[...]

Appendix F Op en Software Announceme nts VSG1435-B101 Series User’s Guide 392 LIABILITY FOR CONSEQUENTIAL OR INCIDENT AL DAMAGES, TH E ABOVE LIMIT A TION MA Y NO T APPL Y TO YOU . 8.Export R estrictions THIS LICENSE AGRE EM ENT IS EXPRES SL Y MADE SUBJECT TO ANY APPLICABLE LAWS, REGULA TIONS, ORDERS, OR OTHE R RESTRICT IONS ON THE EXPOR T OF THE [...]

Appendix F O pen Software Announcem ents VSG1435-B10 1 Series User ’s Guide 393 effective if i t is in writing and signed b y both parties hereto. If any part of this License Agreement is found inv alid or unenforceable by a court of competent jurisdiction, the remainder of this License Agreement shal l be interpreted so as to reasonably effect t[...]

Appendix F Op en Software Announceme nts VSG1435-B101 Series User’s Guide 394 Everyone is permi tted to copy and distribute verbatim copies of this license document, but changing it is not allowed. Preamble The licenses for most sof tware are design ed to take away your freedom to share and change it. By contrast, the GNU Ge neral Publi c Licens [...]

Appendix F O pen Software Announcem ents VSG1435-B10 1 Series User ’s Guide 395 TERMS AND CONDITIO NS FO R COPYING, DISTRIBUTION AND MODIFICA TION 0. This License applies to an y program or other work which contains a notice placed by the copyright holder saying it ma y be distributed under the terms of this General Pu bli c License. The "Pr[...]

Appendix F Op en Software Announceme nts VSG1435-B101 Series User’s Guide 396 These requirements apply to th e modified work as a wh ole. I f identi fiable sec tions of that work are not derived from the Pr ogr am, and can be reasonably considered independent and separate work s in themselves, then this License, and its terms, do not apply to tho[...]

Appendix F O pen Software Announcem ents VSG1435-B10 1 Series User ’s Guide 397 4. Y ou may not copy , modify , sublicense, or distribute the Program ex cept as expressly provided under this License. Any attempt otherwise to copy , modify , sublicense or distribute the Progr am is void, and will automatically terminat e your rights under this Lic[...]

Appendix F Op en Software Announceme nts VSG1435-B101 Series User’s Guide 398 places the Progr am under this License may add an expli cit geographi cal distribution li mitation excl uding those countries, so that distributi on is permitted only in or among countrie s not thus excl uded. In such case, this Li cense incorporates the limit ation as [...]

Appendix F O pen Software Announcem ents VSG1435-B10 1 Series User ’s Guide 399 END OF TERMS AND CONDITIONS All other trademarks or tr ade names mentio ned herein, if any , are the property of their respective owners. This Product includes ppp software under below l icense This directory contains source code and precompiled binaries f or ppp-2.4,[...]

Appendix F Op en Software Announceme nts VSG1435-B101 Series User’s Guide 400 FITNESS FOR A P AR TICULAR PURPOSE AND NONINFRINGEMENT . IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OT HE R LIABILITY , WHETH ER IN AN ACTION OF CONTRACT , TOR T OR O THERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH TH E S[...]

VSG1435-B10 1 Series User ’s Guide 401 A PPENDIX G Legal Information Copyright Copyright © 2010 by Z yXEL Communications Corpor ation. The contents of this publication ma y not be reproduced in any part or as a whole, transcrib ed, stored in a retriev al syst em, tr anslated into an y language , or transmitted in an y form or by any me ans, elec[...]

Appendix G Legal Information VSG1435-B101 Series User’s Guide 402 • This dev ice must acc e pt any interf erence received, including interference that may cause undesired operations. This device has been tested and found to comply with the limits for a Clas s B digital device pursuant to P art 15 of th e FCC Rules. These limi ts are designed to[...]

Appendix G Legal Information VSG1435-B10 1 Series User ’s Guide 403 本機限在不干擾合法電臺與不受 被干擾保障條件下於室內使用。 減少電磁波影響，請妥適使用。 Notices Changes or modifications not expressly appro ved by the party responsible for compliance could v oid the user's authority to oper ate the [...]

Appendix G Legal Information VSG1435-B101 Series User’s Guide 404 purpose. Z yXEL shall in no event be hel d liable for indirect or consequential damages of any ki nd to the purchaser . T o obtain the services of this warr anty , contact Z yXEL's Service Center for your Re turn Material A uthorization nu mber (RMA). Product s must be returne[...]

Index VSG1435-B10 1 Series User ’s Guide 405 Index A ACL rule 226 ACS 291 activation firewalls 221 SIP ALG 190 SSID 105 Address R esolution Protocol 271 administrator password 36 ADSL compliance 323 dual latency 323 EOC 323 multi-mode 32 3 TPS- TC 323 vend or ID 323 AH 261 algorithms 261 alternative subnet mask notation 352 antenna 319 directiona[...]

Index VSG1435-B101 Series User’s Guide 406 firewalls 221 reset 307 restoring 306 static route 153 , 200 , 289 copyright 401 CoS 171 CoS technologies 156 creating certificates 239 CTS (Clear to Send) 372 CTS threshold 11 4 , 11 7 D data fragment threshold 11 4 , 11 7 DDoS 220 default server address 189 Denials of Service, see DoS DH 268 DHCP 132 ,[...]

Index VSG1435-B10 1 Series User ’s Guide 407 H hidden node 371 HT TP 194 humidity 320 I IANA 357 Internet Assigned Numbers Authority see IANA IBSS 369 ID type and content 266 IEEE 802.11g 373 IEEE 802.1Q 94 IGA 192 IGMP 80 Access Control List 213 ACL 213 filter 208 multicast group list 283 router alert option 205 statistics 284 IGMP proxy 323 IGM[...]

Index VSG1435-B101 Series User’s Guide 408 MTU (Multi- T enant Unit) 94 multicast 80 IGMP 80 Multiple BSS, see MBS SID multiplexing 91 LLC -based 91 VC-based 91 N NA T 179 , 180 , 181 , 191 , 192 , 35 7 applications 194 IP alias 194 example 193 global 192 IGA 192 ILA 192 inside 192 IPSec 264 local 192 outside 192 port forwarding 180 port number 1[...]

Index VSG1435-B10 1 Series User ’s Guide 409 Quality of Service, see QoS R RADIUS 374 message types 375 messages 375 shared secret key 375 RADIUS server 11 9 registration product 404 related documentation 3 remote management TR -069 291 Remote Procedure Calls, see RPCs 291 reset 32 , 307 restart 308 restoring configuration 30 6 RFC 2516 321 RFC 3[...]

Index VSG1435-B101 Series User’s Guide 410 T T ag Control Information See TCI T ag Protocol Identifier See TPID TCI temperature 319 thresholds data fragment 11 4 , 11 7 RTS / C T S 11 4 , 11 7 time 295 TPID 94 TR -064 293 TR -069 291 ACS setup 291 authentication 292 trademar ks 401 traffic shaping 92 example 92 transparent bridging 323 transport [...]

Index VSG1435-B10 1 Series User ’s Guide 41 1 note 403 WDS 111 , 123 compatibility 111 example 123 web config urator 35 login 35 passwords 35 , 36 WEP 120 WEP Encryption 101 , 102 WEP encryption 100 WEP key 100 Wide Area Network, s ee WAN Wi-Fi Protected Access 378 wireless client WPA supplicants 379 Wireless Distribution System, see WDS wireless[...]

Index VSG1435-B101 Series User’s Guide 412[...]