ZyXEL B-101 User Guide
ZyXEL B-101 Manual
 |
View all ZyXEL B-101 manuals
Add to My Manuals
Save this manual to your list of manuals |
ZyXEL B-101 manual content summary:
- ZyXEL B-101 | User Guide - Page 1
VSG1432-B101 Series 802.11n Wireless VDSL2 4-port Gateway Default Login Details IP Address http://192.168.1.1 User Name admin Password 1234 Firmware Version 1.10 Edition 1, 11/2010 www.zyxel.com www.zyxel.com Copyright © 2010 ZyXEL Communications Corporation - ZyXEL B-101 | User Guide - Page 2
- ZyXEL B-101 | User Guide - Page 3
Related Documentation • Quick Start Guide The Quick Start Guide is designed to help you get up and running right away. It contains information on setting up your network and configuring for Internet access. • Support Disc Refer to the included CD for support documents. • ZyXEL Web Site Please refer - ZyXEL B-101 | User Guide - Page 4
ZyXEL products. • Forum This contains discussions on ZyXEL products. Learn from others who use ZyXEL products and share your experiences as well. Customer Support In the event of problems that cannot be solved by using this manual in this manual is accurate. 4 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 5
The VSG1432-B101 may be referred to as the "ZyXEL Device", the "device", the "system" or the "product" in this User's Guide. • Product the "metric" value or the "scientific" value. For example, "k" for kilo may denote "1000" or "1024", "M" for mega may denote "1000000" or "1048576" and so on. • - ZyXEL B-101 | User Guide - Page 6
Document Conventions Icons Used in Figures Figures in this User's Guide may use the following generic icons. The ZyXEL Device icon is not an exact representation of your device. ZyXEL Device Computer Notebook computer Server Firewall Telephone Router Switch 6 VSG1432-B101 Series User's - ZyXEL B-101 | User Guide - Page 7
will step on them or stumble over them. • Always disconnect all cables from this device before servicing or disassembling. • Use ONLY an appropriate power adaptor or cord for your device. • Connect electrical and electronic equipment should be treated separately. VSG1432-B101 Series User's Guide 7 - ZyXEL B-101 | User Guide - Page 8
Safety Warnings 8 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 9
Parental Control ...227 Scheduler Rules ...231 Certificates ...233 IPSec ...245 Service Control ...265 ARP Table ...267 Logs ...269 Traffic Status ...273 Upgrade ...299 Configuration ...301 Diagnostic ...305 Troubleshooting ...307 Product Specifications ...315 VSG1432-B101 Series User's Guide 9 - ZyXEL B-101 | User Guide - Page 10
Contents Overview 10 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 11
11 Part I: User's Guide 21 Chapter 1 Introducing the VSG1432-B101 23 1.1 Overview ...23 1.2 Ways to Manage the ZyXEL Device 23 1.3 Good Habits for Managing the ZyXEL Device 23 1.4 Applications for the ZyXEL Device 24 1.4.1 Internet Access ...24 1.4.2 ZyXEL Device's USB Support 25 1.5 Hardware - ZyXEL B-101 | User Guide - Page 12
4.8.1 Registering a DDNS Account on www.dyndns.org 64 4.8.2 Configuring DDNS on Your ZyXEL Device 64 4.8.3 Testing the DDNS Setting 65 4.9 Access Your Shared Files From a ...86 6.3.1 Encapsulation ...86 6.3.2 Multiplexing ...87 6.3.3 VPI and VCI ...87 12 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 13
(WPA(2)-PSK 98 7.2.4 WPA(2) Authentication 99 7.3 The More AP Screen ...101 7.3.1 Edit More AP ...102 7.4 MAC Authentication ...103 7.5 The WPS Screen 113 7.9.3 Wireless Security Overview 114 7.9.4 Signal Problems ...117 7.9.5 BSS ...117 7.9.6 MBSSID 132 VSG1432-B101 Series User's Guide 13 - ZyXEL B-101 | User Guide - Page 14
137 8.7 Technical Reference ...142 8.7.1 LANs, WANs and the ZyXEL Device 143 8.7.2 DHCP Setup ...143 8.7.3 DNS Server Addresses Routing Screen ...148 9.2.1 Add/Edit Static Route 149 Chapter 10 Quality of Service (QoS)...151 10.1 Overview ...151 10.1.1 What You Can Do in this B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 15
General Screen 202 14.3 IGMP Filter Configuration 204 14.3.1 IGMP Host Limitation Edit 206 14.3.2 IGMP Service Add 207 14.3.3 IGMP Host Limitation Add 208 14.4 IGMP ACL Configuration 209 14.4.1 IGMP ACL Group Configuration 213 Chapter 16 Firewall...215 VSG1432-B101 Series User's Guide 15 - ZyXEL B-101 | User Guide - Page 16
Trusted CA Screen 241 20.4.1 View Trusted CA Certificate 242 20.4.2 Import Trusted CA Certificate 243 Chapter 21 IPSec ...245 21.1 Overview ...245 16 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 17
248 21.3.1 Add/Edit IPSec Setting 249 21.3.2 Configuring Manual Key 254 21.4 Technical Reference ...256 21.4.1 IPSec -Hellman (DH) Key Groups 264 Chapter 22 Service Control ...265 22.1 Overview ...265 22.2 The Service Control Screen 265 Chapter 23 ARP Table ...267 B101 Series User's Guide 17 - ZyXEL B-101 | User Guide - Page 18
...299 31.2 The Firmware Screen ...299 Chapter 32 Configuration ...301 32.1 Overview ...301 32.2 The Configuration Screen 301 32.3 The Reboot Screen ...304 18 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 19
The Diagnostic Screen ...305 Chapter 34 Troubleshooting...307 34.1 Power, Hardware Connections, and LEDs 307 34.2 ZyXEL Device Access and Login 308 34 E Services ...381 Appendix F Open Software Announcements 385 Appendix G Legal Information 397 Index...401 VSG1432-B101 Series User's Guide 19 - ZyXEL B-101 | User Guide - Page 20
Table of Contents 20 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 21
PART I User's Guide 21 - ZyXEL B-101 | User Guide - Page 22
22 - ZyXEL B-101 | User Guide - Page 23
CHAPTER 1 Introducing the VSG1432-B101 1.1 Overview The VSG1432-B101 is a wireless VDSL router and Gigabit Ethernet gateway. It has a DSL port and a Gigabit Ethernet port for super-fast Internet access over analog (POTS) telephone lines. The ZyXEL Device supports both Packet Transfer Mode (PTM) - ZyXEL B-101 | User Guide - Page 24
telephone jack. You can have up to five WAN services over one ADSL, VDSL or Ethernet WAN line. The ZyXEL Device cannot work in ADSL, VDSL and Ethernet WAN configure in the ZyXEL Device. Refer to Section 6.2 on page 77 for the Network Settings> Broadband screen. 24 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 25
your network. This means that probes from the outside to your network are not allowed, but you can safely browse the Internet and download files. 1.4.2 ZyXEL Device's USB Support The USB port of the ZyXEL Device is used for file-sharing. VSG1432-B101 Series User's Guide 25 - ZyXEL B-101 | User Guide - Page 26
FTP to access the files on the USB device. Figure 2 USB File Sharing Application B A 1.5 Hardware Setup Place the ZyXEL Device flat on a desk or table or on the stand for a vertical installation. Remove the ZyXEL Device's clear plastic covers before using it. 26 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 27
Chapter 1 Introducing the VSG1432-B101 To connect the stand, line up the arrow on the stand with the arrow on the bottom of the device as shown. Figure 3 Connecting the Stand VSG1432-B101 Series User's Guide 27 - ZyXEL B-101 | User Guide - Page 28
your ZyXEL Device's DSL WAN port to a telephone jack (or the DSL or modem jack on a splitter if you have one). 2b ETHERNET WAN: If you already have a broadband router or modem, use an Ethernet cable to connect the ETHERNET WAN port to it for Internet access. 28 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 29
Chapter 1 Introducing the VSG1432-B101 3 LAN: Use an Ethernet cable to connect a computer to a LAN port for initial configuration and/or Internet access. 4 USB: 1.7 LEDs (Lights) The following graphic displays the labels of the LEDs. Figure 5 LEDs on the Device VSG1432-B101 Series User's Guide 29 - ZyXEL B-101 | User Guide - Page 30
B101 None of the LEDs are on if the ZyXEL Device is not receiving power. Table 1 LED Descriptions LED COLOR STATUS DESCRIPTION POWER Green On The ZyXEL Device is receiving power and ready for use. Blinking The ZyXEL Device is self-testing. Red On The ZyXEL up. The ZyXEL Device is sending - ZyXEL B-101 | User Guide - Page 31
wireless network is turned off, press the WLAN/WPS button on the front of the ZyXEL Device for one second. Once the WLAN/WPS LED turns green, the wireless network connection between the ZyXEL Device and a WPS-compatible client by adding one device at a time. VSG1432-B101 Series User's Guide 31 - ZyXEL B-101 | User Guide - Page 32
B101 To activate WPS: 1 Make sure the POWER LED is on and not blinking. 2 Press the WLAN/WPS button for five seconds and release it. 3 Press the WPS button on another WPS-enabled device within range of the ZyXEL Device. The WLAN/WPS LED flashes green and orange while the ZyXEL Device sets - ZyXEL B-101 | User Guide - Page 33
device. Web pop-up blocking is enabled by default in Windows XP SP (Service Pack) 2. • JavaScripts (enabled by default). • Java permissions (enabled your ZyXEL Device hardware is properly connected (refer to the Quick Start Guide). 2 Launch your web browser. If the ZyXEL B101 Series User's Guide 33 - ZyXEL B-101 | User Guide - Page 34
enter your password and click Login. For security reasons, you will be temporarily denied access to the ZyXEL Device for a period of time (15 minutes by default) if you have entered the incorrect username change the password now. Figure 9 Change Password Screen 34 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 35
6 The Network Map page appears. Figure 10 Network Map Chapter 2 The Web Configurator Note: For security reasons, the ZyXEL Device automatically logs you out if you do not use the web configurator for ten minutes (default). If this happens, log in again. 7 Click Status - ZyXEL B-101 | User Guide - Page 36
divided into these parts: • A - title bar • B - main window • C - navigation panel 2.2.1 Title Bar The title bar provides some icons in the upper right corner. 36 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 37
authentication/security settings. More AP Use this screen to configure multiple BSSs on the ZyXEL Device. MAC Use this screen to block or allow wireless traffic from wireless Authentication Others Use this screen to configure advanced wireless settings. VSG1432-B101 Series User's Guide 37 - ZyXEL B-101 | User Guide - Page 38
Internet services and configure firewall rules. Access Control Use this screen to enable specific traffic directions for network services. MAC Filter Use this screen to block or allow traffic from devices of certain MAC addresses to the ZyXEL Device. 38 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 39
. Reboot Use this screen to reboot the ZyXEL Device without turning the power off. Diagnostic Ping & TraceRoute & NsLookup Use this screen to identify problems with the DSL connection. You can use Ping, TraceRoute, or Nslookup to help you identify problems. VSG1432-B101 Series User's Guide 39 - ZyXEL B-101 | User Guide - Page 40
Chapter 2 The Web Configurator 40 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 41
Quick Start 3.1 Overview Use the Quick Start screens to configure the ZyXEL Device's time zone and basic Internet access and wireless settings. Note: quick start screens. Select the time zone of the ZyXEL Device's location and click Next. Figure 12 Time Zone VSG1432-B101 Series User's Guide 41 - ZyXEL B-101 | User Guide - Page 42
account's user name and password exactly as provided by your Internet Service Provider (ISP). If your ISP also gave you static IP wireless clients to connect to the ZyXEL Device. Click Save. Figure 14 Internet Connection 4 Your ZyXEL Device saves your settings and attempts to connect to - ZyXEL B-101 | User Guide - Page 43
shows you how to use the ZyXEL Device's various features. • Setting QoS Queue and Class Setup, see page 60 • Access the ZyXEL Device Using DDNS, see page 63 • Access Your Shared Files your Internet Service Provider (ISP) to configure the ZyXEL Device. Be sure to contact your service provider for - ZyXEL B-101 | User Guide - Page 44
as the WAN encapsulation type. 4 Enter the account information provided to you by your DSL service provider. 5 Configure this rule as your default Internet connection by selecting the Apply as Default as 192.168.5.2 (DNS server1)/192.168.5.1 (DNS server2). 44 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 45
6 Click Apply to save your settings. Chapter 4 Tutorials 7 You should see a summary of your new DSL connection setup in the Broadband screen as follows. VSG1432-B101 Series User's Guide 45 - ZyXEL B-101 | User Guide - Page 46
a website, such as zyxel.com to see if you have correctly set up your Internet connection. Be sure to contact your service provider for any information on the ZyXEL Device. Then he can set up a wireless network using WPS (Section 4.3.2 on page 48) or manual configuration ( B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 47
/g/n Mixed in the 802.11 Mode field. Click Apply. Thomas can now use the WPS feature to establish a wireless connection between his notebook and the ZyXEL Device (see Section 4.3.2 on page 48). He can also VSG1432-B101 Series User's Guide 47 - ZyXEL B-101 | User Guide - Page 48
uses the ZyXEL Device as the AP and ZyXEL NWD210N as the wireless client which connects to the notebook. Note: The wireless client must be a WPS-aware device (for example, a WPS USB adapter or PCMCIA card). There are press the WPS button (Start or WPS button). 48 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 49
the ZyXEL Device's front panel for more than 5 seconds. Alternatively, you may log into ZyXEL Device Apply. Then click the Connect button. Note: Your ZyXEL Device has a WPS button located on its front minutes of pressing the first one. The ZyXEL Device sends the proper configuration settings to the - ZyXEL B-101 | User Guide - Page 50
shows you an example of how to set up a wireless network and its security by pressing a button on both ZyXEL Device and wireless client. Example WPS Process: PBC Method Wireless Client ZyXEL Device WITHIN 2 MINUTES WPS SECURITY INFO Press and hold for 5 seconds COMMUNICATION 50 VSG1432 - ZyXEL B-101 | User Guide - Page 51
, you need to use both the ZyXEL Device's web configurator and the wireless the PIN method to get a PIN number. 2 Log into ZyXEL Device's web configurator and go to the Network Settings > Wireless client utility screen within two minutes. The ZyXEL Device authenticates the wireless client and sends - ZyXEL B-101 | User Guide - Page 52
wireless network and its security on a ZyXEL Device and a wireless client by using PIN method. Example WPS Process: PIN Method Wireless Client ZyXEL Device WITHIN 2 MINUTES Authentication by PIN pre-shared key to establish an wireless Internet connection. 52 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 53
Chapter 4 Tutorials Note: The ZyXEL Device supports IEEE 802.11b and IEEE 802.11g wireless clients. Make sure that your notebook or computer's wireless adapter supports one of these standards. 4.4 Setting WPA2-PSK ForVIPOnly GUEST Guest Basic Static WEP Guest VSG1432-B101 Series User's Guide 53 - ZyXEL B-101 | User Guide - Page 54
Apply. 2 Click Network Settings > Wireless > More AP to open the following screen. Click the Edit icon to configure the second wireless network group. 54 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 55
Chapter 4 Tutorials 3 Configure the screen using the provided parameters and click Apply. 4 In the More AP screen, click the Edit icon to configure the third wireless network group. VSG1432-B101 Series User's Guide 55 - ZyXEL B-101 | User Guide - Page 56
that the SSIDs are active and ready for wireless access. 4.5 Setting Up NAT Port Forwarding Thomas manages the Doom server on a computer behind the ZyXEL Device. In order for players on the Internet (like A in the figure below) to communicate with the Doom server, Thomas needs to configure the - ZyXEL B-101 | User Guide - Page 57
Tutorials the ZyXEL Device. new rule and configure the screen with the following values: Service Name WAN Interface External Port/s Server IP Address Protocol Doom_Server Select supported by the Doom server. 2 The screen should look as follows. Click Apply. VSG1432-B101 Series User's Guide 57 - ZyXEL B-101 | User Guide - Page 58
table. The ZyXEL Device forwards you may connect a router to the ZyXEL Device's LAN. The router may be In the following figure, router R is connected to the ZyXEL Device's LAN. R connects to two networks, N1 ( is sent to the ZyXEL Device's WAN default gateway by default. In this case, B will never - ZyXEL B-101 | User Guide - Page 59
to N2. In this case, the ZyXEL Device routes traffic from A to R Tutorial DEVICE / COMPUTER IP ADDRESS The ZyXEL Device's WAN 172.16.1.1 The ZyXEL Device's LAN 192.168.1.1 A 192 route traffic from N1 to N2: 1 Log into the ZyXEL Device's Web Configurator in advanced mode. 2 Click Advanced - ZyXEL B-101 | User Guide - Page 60
.1.23 for example) and/or MAC address (AA:FF:AA:FF:AA:FF for example) of your computer and map it to queue 7. 60 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 61
Set your WAN Managed Upstream Bandwidth to 10,000 kbps (or leave this blank to have the ZyXEL Device automatically determine this figure). Click Apply. Tutorial: Advanced > QoS 2 Click Queue Setup > : E-mail • To Interface: WAN • Priority: 1 (High) • Weight: 8 VSG1432-B101 Series User's Guide 61 - ZyXEL B-101 | User Guide - Page 62
Chapter 4 Tutorials • Rate Limit: 5,000 (kbps) Tutorial: Advanced > QoS > Queue Setup 3 Click Class Setup > Add new Classifier to create a new class. Check Active and follow the settings as shown in the screen below. Tutorial: Advanced > QoS > Class Setup 62 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 63
(DDNS) allows you to access the ZyXEL Device using a domain name. http://zyxelrouter.dyndns.org w.x.y.z A a.b.c.d To use this feature, you have to apply for DDNS service at www.dyndns.org. This tutorial covers: • Registering a DDNS Account on www.dyndns.org VSG1432-B101 Series User's Guide 63 - ZyXEL B-101 | User Guide - Page 64
. 4.8.2 Configuring DDNS on Your ZyXEL Device Configure the following settings in the Advanced > DNS Setting > Dynamic DNS screen. • Select Enable Dynamic DNS. • Select DynDNS.org as the service provider. • Type zyxelrouter.dyndns.org in the Host Name field. 64 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 65
the ZyXEL Device and manage it. 4.9 Access Your Shared Files From a Computer Here is how to use an FTP program to access a file storage device connected to the ZyXEL Device's USB port. Note: This example uses the FileZilla FTP program to browse your shared files. VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 66
ZyXEL Device (the default is 192.168.1.1), your account's user name and password and port 21 and click Quickconnect. A screen asking for password authentication appears. File Sharing via Windows Explorer Once you log in the USB device displays in the mnt folder. 66 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 67
PART II Technical Reference 67 - ZyXEL B-101 | User Guide - Page 68
68 - ZyXEL B-101 | User Guide - Page 69
current status of the ZyXEL Device, system resources, and interfaces (LAN, WAN, and WLAN). 5.2 The Network Map Screen Use this screen to view the network connection status of the device and its clients. A warning message appears if there is a connection problem. VSG1432-B101 Series User's Guide 69 - ZyXEL B-101 | User Guide - Page 70
a list, click List View in the Viewing Mode selection box. You can configure how often you want the ZyXEL Device to update this screen in Refresh Interval. Figure 15 Network Map: Icon Mode Figure 16 Network Map: click on the IP address if you want to change it. 70 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 71
and Status Screens 5.3 The Status Screen Use this screen to view the status of the ZyXEL Device. Click Status to open this screen. Figure 17 Status Screen Each field is described PPPoE. This field displays the current IP address of the ZyXEL Device in the WAN. VSG1432-B101 Series User's Guide 71 - ZyXEL B-101 | User Guide - Page 72
services the ZyXEL Device is providing to the LAN. Choices are: Server - The ZyXEL ZyXEL Device is using in the wireless LAN. WPS This displays whether WPS is activated. Interface Status Interface This column displays each interface the ZyXEL Device has. 72 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 73
ZyXEL Device ZyXEL Device has been running since it last started up. The ZyXEL ZyXEL Device. You can change ZyXEL Device's processing ability is currently used. When this percentage is close to 100%, the ZyXEL percentage of the ZyXEL Device's memory is to 100%, the ZyXEL Device is probably - ZyXEL B-101 | User Guide - Page 74
Chapter 5 Network Map and Status Screens 74 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 75
settings from the Broadband screen. Use this screen to configure your ZyXEL Device for Internet access. A WAN (Wide Area Network) , you need to use the same encapsulation method used by your ISP (Internet Service Provider). If your ISP offers a dial-up Internet connection using PPPoE (PPP over - ZyXEL B-101 | User Guide - Page 76
devices in other networks. It can be static (fixed) or dynamically assigned by the ISP each time the ZyXEL Device tries to access the Internet. If your ISP assigns you a static WAN IP address, they should and WAN IP address. Get this information from your ISP. 76 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 77
configured WAN services (connections) on the ZyXEL Device. of the connection. Name This is the service name of the connection. Type This shows connection. IGMP Proxy This shows whether the ZyXEL Device act as an IGMP proxy on Gateway This shows whether the ZyXEL Device use the WAN interface of - ZyXEL B-101 | User Guide - Page 78
The ZyXEL Device supports PPPoE services, a function known as dynamic service selection. This enables the service provider to easily create and offer new IP services ZyXEL Device (rather than individual computers), the computers on the LAN do not need PPPoE software installed, since the ZyXEL - ZyXEL B-101 | User Guide - Page 79
Chapter 6 Broadband This screen displays when you select the Routing mode and PPPoE encapsulation. Figure 20 Broadband: Add/Edit: ADSL, PPPoE Encapsulation VSG1432-B101 Series User's Guide 79 - ZyXEL B-101 | User Guide - Page 80
an Ethernet header in the packet, so that you can have multiple services/connections over one PVC. You can set each connection to have its share one MAC address but use different VLAN IDs for different services. EoA supports ENET ENCAP (IPoE), PPPoE and RFC1483/2684 bridging encapsulation methods. - ZyXEL B-101 | User Guide - Page 81
the dropdown list box. Choices are: Service Category • LLC/SNAP-BRIDGING: In ATM virtual circuit (VC). To transport multiple protocols, the ZyXEL Device needs separate VCs. There is a binding between user@domain where domain identifies a service name, then enter both components exactly as given. - ZyXEL B-101 | User Guide - Page 82
PPPoE Service Name PPPoE Passthrough service here. This field is available when you select PPPoE encapsulation. In addition to the ZyXEL connect to the ISP via the ZyXEL Device. Each host can have ZyXEL Device act as an IGMP proxy on this connection. This allows the ZyXEL to have the ZyXEL Device use the - ZyXEL B-101 | User Guide - Page 83
if you want the ZyXEL Device use the DNS server addresses you configure manually. DNS Server 1 MAC-layer frame that contains bits to define class of service. 802.1Q Apply Cancel Select the IEEE 802.1p priority Apply to save your changes back to the ZyXEL Device. Click Cancel to exit this screen - ZyXEL B-101 | User Guide - Page 84
Ethernet header in the packet, so that you can have multiple services/ connections over one PVC. You can set each connection to have a single ATM virtual circuit (VC). To transport multiple protocols, the ZyXEL Device needs separate VCs. There is a binding between a VC and B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 85
types by inserting a tag into a MAC-layer frame that contains bits to define class of service. 802.1Q Apply Cancel Select the IEEE 802.1p priority level (from 0 to 7) to your changes back to the ZyXEL Device. Click Cancel to exit this screen without saving. VSG1432-B101 Series User's Guide 85 - ZyXEL B-101 | User Guide - Page 86
ZyXEL Device supports PPPoE (Point-to-Point Protocol over Ethernet). PPPoE is an IETF Draft standard (RFC 2516) specifying how a personal computer (PC) interacts with a broadband modem (DSL, cable, wireless, etc.) connection. The PPPoE option is for a dial-up connection using PPPoE. For the service - ZyXEL B-101 | User Guide - Page 87
applicable (N/A). If you have a static IP, then you only need to fill in the IP Address field and not the Gateway IP Address field. VSG1432-B101 Series User's Guide 87 - ZyXEL B-101 | User Guide - Page 88
correlates to your upstream line rate. The following figure illustrates the relationship between PCR, SCR and MBS. Figure 22 Example of Traffic Shaping 88 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 89
VLAN, a device cannot directly talk to or hear from devices that are not in the same group(s); the traffic must first go through a router. VSG1432-B101 Series User's Guide 89 - ZyXEL B-101 | User Guide - Page 90
4095 (FFF) is reserved, so the maximum possible VLAN configurations are 4,094. TPID User Priority 2 Bytes 3 Bits CFI VLAN ID 1 Bit 12 Bits 90 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 91
on your ZyXEL Device (Section 7.3 on page 101). • Use ZyXEL Device acts as a bridge with other ZyXEL access points (Section 7.7 on page 107). • Use the Others screen to configure wireless advanced features, such as the RTS/CTS Threshold (Section 7.8 on page 110). VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 92
the wireless LAN and you change the ZyXEL Device's SSID, channel or security settings, you will lose your wireless connection when you press Apply to confirm. You must then change the wireless settings of your computer to match the ZyXEL Device's new settings. 92 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 93
Auto to have the ZyXEL Device automatically determine a channel to use. If you are having problems with wireless interference, changing ZyXEL Device is currently using then displays next to this field. Click more... to show more information. Click less to hide them. VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 94
radio channels to increase throughput. The wireless clients must also support 40 MHz. It is often better to use the 20 Wireless Network Settings Wireless The SSID (Service Set IDentity) identifies the service set with which a Network wireless ZyXEL Device. 94 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 95
wired LAN devices through the ZyXEL Device. Select both Client ZyXEL Device. Enhanced Multicast Forwarding Select this check box to allow the ZyXEL have same wireless security settings as the ZyXEL Device. When you select to use any wireless security on your ZyXEL Device, your network is - ZyXEL B-101 | User Guide - Page 96
support it, or use WPA or WPA2 if your wireless devices support it and you have a RADIUS server. If your wireless devices support nothing stronger than WEP, use the highest encryption level available. Your ZyXEL level. Figure 25 Wireless > General: Basic (WEP) 96 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 97
select this automatically option. Password 1~4 The password (WEP keys) are used to encrypt data. Both the ZyXEL Device and the wireless stations must use the same password (WEP key) for data transmission. If you security key that the network is going to use. VSG1432-B101 Series User's Guide 97 - ZyXEL B-101 | User Guide - Page 98
both improved data encryption and user authentication over WEP. Using a Pre-Shared Key (PSK), both the ZyXEL Device and the connecting client share a common password in order to validate the connection. This type fields in this section. Click less to hide them. 98 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 99
this field to allow wireless devices using WPA-PSK security mode to connect to your ZyXEL Device. The ZyXEL Device supports WPA-PSK and WPA2-PSK simultaneously. Encryption Select the encryption type (AES or TKIP therefore is more compatible with older devices. VSG1432-B101 Series User's Guide 99 - ZyXEL B-101 | User Guide - Page 100
instructs you ZyXEL Device. The key is not sent over the network. Click more... to show more fields in this section. Click less to hide them. This field is only available for WPA2. Select this if you want the ZyXEL Device to support WPA and WPA2 simultaneously. 100 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 101
7.3 The More AP Screen This screen allows you to enable and configure multiple Basic Service Sets (BSSs) on the ZyXEL Device. Click Network Settings > Wireless > More AP. The following screen displays. Figure A gray bulb signifies that this SSID is not active. VSG1432-B101 Series User's Guide 101 - ZyXEL B-101 | User Guide - Page 102
parameters relating to one of the ZyXEL Device's BSSs. The SSID (Service Set IDentifier) identifies the Service Set with which a wireless device Settings Wireless Network Name (SSID) The SSID (Service Set IDentity) identifies the service set with which a wireless device is associated. Wireless - ZyXEL B-101 | User Guide - Page 103
wireless clients which want to associate to this network must have same wireless security settings as the ZyXEL Device. After you select to use a security, additional options appears in this screen. Or you MAC addresses of the devices to configure this screen. VSG1432-B101 Series User's Guide 103 - ZyXEL B-101 | User Guide - Page 104
ZyXEL ZyXEL Device. MAC addresses not listed will be allowed to access the ZyXEL ZyXEL Device. MAC addresses not listed will be denied access to the ZyXEL allowed or denied access to the ZyXEL Device in these address fields. Enter allowed or denied access to the ZyXEL Device. Click the Delete icon - ZyXEL B-101 | User Guide - Page 105
manually. Set up each WPS connection between two devices. Both devices must support WPS. See Section 7.9.9.3 on page 122 for more information about WPS. Note: The ZyXEL DESCRIPTION Enable WPS Select Enable to activate WPS on the ZyXEL Device. Method 1 Use this section to set up a WPS wireless - ZyXEL B-101 | User Guide - Page 106
of the ZyXEL Device) to client into the ZyXEL Device. Enter ZyXEL Device. Method 3 Use this section to set up a WPS wireless network by entering the PIN of the ZyXEL ZyXEL Device. Generate New PIN Number The PIN (Personal Identification Number) of the ZyXEL to have the ZyXEL Device create a new - ZyXEL B-101 | User Guide - Page 107
to have the ZyXEL Device automatically give a service a priority level according ZyXEL Device and any wireless clients. Note: At the time of writing, WDS is compatible with other ZyXEL APs only. Not all models support WDS links. Check your other AP's documentation. VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 108
other APs. In this mode, clients cannot connect to the ZyXEL Device wirelessly. This field is available only when you set operating Enabled to turn on WDS and enter the peer device's MAC address manually in the table below. Select Disable to turn off WDS. You can VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 109
Scan You can click the Scan icon in Wireless > WDS to have the ZyXEL Device automatically search and display the available APs within range. Select an AP and click Apply to have the your changes. Cancel Click Cancel to restore your previously saved settings. VSG1432-B101 Series User's Guide 109 - ZyXEL B-101 | User Guide - Page 110
> Wireless > General screen, specify the interval in minutes for how often the ZyXEL Device scans for the best channel. Enter 0 to disable the periodical scan. Output Power Set the output power A high value helps save current consumption of the access point. 110 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 111
IEEE 802.11g performance. Select Off to disable 802.11 protection. The transmission rate of your ZyXEL Device might be reduced in a mixed-mode network. Preamble This field displays Off and is not consist of wireless clients, access points and bridges. VSG1432-B101 Series User's Guide 111 - ZyXEL B-101 | User Guide - Page 112
wireless network, devices A and B use the access point (AP) to interact with the other devices (such as the printer) or with the Internet. Your ZyXEL Device is the AP. Every wireless network must follow these basic guidelines. • Every device in the same wireless network must use the same SSID. The - ZyXEL B-101 | User Guide - Page 113
the ZyXEL Device. The process of verifying whether a wireless device is allowed to use the wireless network. A small fragmentation threshold is recommended for busy networks, while a larger threshold provides faster performance if the network is not very busy. VSG1432-B101 Series User's Guide 113 - ZyXEL B-101 | User Guide - Page 114
" as your security key. The following sections introduce different types of wireless security you can set up in the wireless network. 7.9.3.1 SSID Normally, the ZyXEL Device acts like a beacon and regularly broadcasts the SSID in the area. You can hide the SSID instead, in which case the - ZyXEL B-101 | User Guide - Page 115
device's User's Guide or other documentation. You can use the MAC address filter to tell the ZyXEL Device which devices are . However, every device in the wireless network has to support IEEE 802.1x to do this. For wireless networks, 8, 9, A, B, C, D, E, and F. VSG1432-B101 Series User's Guide 115 - ZyXEL B-101 | User Guide - Page 116
login) and select the WPA compatible option in the ZyXEL Device. Many types of encryption use a key to protect the information in the wireless network. The longer the key, the stronger the encryption. Every device in the wireless network must have the same key. 116 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 117
are coincidental emitters such as electric motors or microwaves. Problems with absorption occur when physical objects (such as thick two radios, muffling the signal. 7.9.5 BSS A Basic Service Set (BSS) exists when all communications between wireless stations VSG1432-B101 Series User's Guide 117 - ZyXEL B-101 | User Guide - Page 118
of buying extra APs, there is also the possibility of channel interference. The ZyXEL Device's MBSSID (Multiple Basic Service Set IDentifier) function allows you to use one access point to provide several BSSs rather be used in conjunction with 802.1x security. 118 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 119
setting to automatically use short preamble when all wireless devices on the network support it, otherwise the ZyXEL Device uses long preamble. Note: The wireless devices MUST use the same Internet through AP 2. Figure 38 WDS Link Example A WDS AP 1 AP 2 VSG1432-B101 Series User's Guide 119 - ZyXEL B-101 | User Guide - Page 120
to configure security settings manually. Each WPS connection works between two devices. Both devices must support WPS (check each utility and locate the button (see the device's User's Guide for how to do this - for the ZyXEL Device, see Section 7.6 on page 106). 3 Press B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 121
or in the WPS section of the client's configuration interface (see the device's User's Guide for how to find the WPS PIN - for the ZyXEL Device, see Section 7.5 on page 105). 4 Enter the client's PIN in the the wireless client in the list, WPS was successful. VSG1432-B101 Series User's Guide 121 - ZyXEL B-101 | User Guide - Page 122
(SSID) and the WPAPSK or WPA2-PSK pre-shared key to the enrollee. Whether WPA-PSK or WPA2-PSK is used depends on the standards supported by the devices. If the registrar is already part of a network, it sends the existing information. If not, it generates the SSID and WPA(2)-PSK - ZyXEL B-101 | User Guide - Page 123
is not part of an existing network and can act as either enrollee or registrar (if it supports both functions). If the registrar is unconfigured, the security settings it transmits to the enrollee are enrollee, you must reset it to its factory defaults. VSG1432-B101 Series User's Guide 123 - ZyXEL B-101 | User Guide - Page 124
SECURITY INFO AP1 In step 2, you add another wireless client to the network. You know that Client 1 supports registrar mode, but it is better to use AP1 for the WPS handshake with the new client since you use AP1 for the WPS handshake with the new access 124 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 125
7 Wireless point. However, you know that Client 2 supports the registrar function, so you use it to perform the interface of the registrar device to discover the key the network is using (if the device supports this feature). Then, you can enter the key into the non-WPS device and join the - ZyXEL B-101 | User Guide - Page 126
on a label on the bottom of the device). If there is an unknown MAC address you can remove it or reset the AP. 126 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 127
the LAN Setup screen to set the LAN IP address, subnet mask, and DHCP settings of your ZyXEL device (Section 8.2 on page 130). • Use the Static DHCP screen to assign IP addresses enable UPnP and UPnP NAT traversal on the ZyXEL Device (Section 8.4 on page 133). VSG1432-B101 Series User's Guide 127 - ZyXEL B-101 | User Guide - Page 128
multiple sub-networks. DHCP A DHCP (Dynamic Host Configuration Protocol) server can assign your ZyXEL Device an IP address, subnet mask, DNS and other routing information when it's of simple product and service descriptions. NAT traversal allows the following: 128 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 129
of NAT traversal applications in establishing their own services and opening firewall ports may present network security ZyXEL ZyXEL has achieved UPnP certification from the Universal Plug and Play Forum UPnP™ Implementers Corp. (UIC). ZyXEL's UPnP implementation supports B101 Series User's Guide 129 - ZyXEL B-101 | User Guide - Page 130
your ZyXEL Device. instructed otherwise it is best to leave this alone, the configurator will automatically compute a subnet mask based upon the IP address you entered. 3 Click Apply to save your settings. Figure 44 Network Settings > Home Networking > LAN Setup 130 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 131
service provider. Select Dynamic if you have the Dynamic DNS service. DNS Server 1 DNS Server 2 Select Static if you have the Static DNS service. Enter the first and second DNS (Domain Name System) server IP address the ZyXEL Device passes to the DHCP clients. VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 132
entry. Status This field displays whether the client is connected to the ZyXEL Device. MAC Address The MAC (Media Access Control) or Ethernet address of hexadecimal notation). IP Address Modify A network interface card such as an Ethernet adapter has a hardwired address that B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 133
Static DHCP: Add/Edit LABEL DESCRIPTION Active This field displays whether the client is connected to the ZyXEL Device. MAC Address Enter the MAC address of a computer on your LAN. IP Address Enter the in use. See page 128 for more information on UPnP. VSG1432-B101 Series User's Guide 133 - ZyXEL B-101 | User Guide - Page 134
ZyXEL Device by using NAT traversal. UPnP applications automatically reserve a NAT forwarding port in order to communicate with another UPnP enabled device; this eliminates the need to manually Click Start and Control Panel. Double-click Add/Remove Programs. 134 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 135
3 In the Communications window, select the Universal Plug and Play check box in the Components selection box. Add/Remove Programs: Windows Setup: Communication: Components VSG1432-B101 Series User's Guide 135 - ZyXEL B-101 | User Guide - Page 136
Advanced in the main menu and select Optional Networking Components .... Network Connections 4 The Windows Optional Networking Components Wizard window displays. Select Networking Service in the Components selection box and click Details. Windows Optional Networking Components Wizard 136 VSG1432 - ZyXEL B-101 | User Guide - Page 137
Play check box. Networking Services 6 Click OK to go ZyXEL Device. Turn on your computer and the ZyXEL Device. Auto-discover Your UPnP-enabled Network Device 1 Click Start and Control Panel. Double-click Network Connections. An icon displays under Internet Gateway. VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 138
Chapter 8 Home Networking 2 Right-click the icon and select Properties. Network Connections 3 In the Internet Connection Properties window, click Settings to see the port mappings there were automatically created. Internet Connection Properties 138 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 139
Home Networking 4 You may edit or delete the port mappings or click Add to manually add port mappings. Internet Connection Properties: Advanced Settings Internet Connection Properties: Advanced Settings: . An icon displays in the system tray. System Tray Icon VSG1432-B101 Series User's Guide 139 - ZyXEL B-101 | User Guide - Page 140
finding out the IP address of the ZyXEL Device first. This comes helpful if you do not know the IP address of the ZyXEL Device. Follow the steps below to access the web configurator. 1 Click Start and then Control Panel. 2 Double-click Network Connections. 140 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 141
Connections Chapter 8 Home Networking 4 An icon with the description for each UPnP-enabled device displays under Local Network. 5 Right-click on the icon for your ZyXEL Device and select Invoke. The web configurator login screen displays. Network Connections: My Network Places VSG1432 - ZyXEL B-101 | User Guide - Page 142
properties window displays with basic information about the ZyXEL Device. Network Connections: My Network Places: Properties: Example 8.7 Technical Reference This section provides some technical background information about the topics covered in this chapter. 142 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 143
for the clients. If you turn DHCP service off, you must have another DHCP server on your LAN, or else the computer must be manually configured. IP Pool Setup The ZyXEL Device is pre-configured with a pool of that an ISP disseminates the DNS server addresses. VSG1432-B101 Series User's Guide 143 - ZyXEL B-101 | User Guide - Page 144
IPCP negotiation. The ZyXEL Device supports the IPCP DNS ZyXEL Device has built-in DHCP server capability that assigns IP addresses and DNS servers to systems that support follow their instructions in selecting the ) feature of the ZyXEL Device. The Internet ZyXEL Device, but make sure that no - ZyXEL B-101 | User Guide - Page 145
that you entered. You don't need to change the subnet mask computed by the ZyXEL Device unless you are instructed to do otherwise. Private IP Addresses Every machine on the Internet must have a unique RFC 1466, "Guidelines for Management of IP Address Space". VSG1432-B101 Series User's Guide 145 - ZyXEL B-101 | User Guide - Page 146
Chapter 8 Home Networking 146 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 147
one static route to connect to services offered by your ISP behind router R2. You create another static route to communicate with a separate network behind a router R3 connected to the LAN. Figure 49 Example of Static Routing Topology A R1 LAN R3 WAN R2 VSG1432-B101 Series User's Guide 147 - ZyXEL B-101 | User Guide - Page 148
Use this screen to view and configure the static route rules on the ZyXEL Device. Click Network Settings > Routing > Static Route to open the icon to edit the static route on the ZyXEL Device. Click the Delete icon to remove a static route from the ZyXEL Device. A window displays asking you to - ZyXEL B-101 | User Guide - Page 149
WAN port. The gateway helps forward packets to their destinations. Click Apply to save your changes. Click Cancel to exit this screen without saving. VSG1432-B101 Series User's Guide 149 - ZyXEL B-101 | User Guide - Page 150
Chapter 9 Static Routing 150 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 151
Service (QoS) 10.1 Overview Quality of Service video-ondemand. Configure QoS on the ZyXEL Device to group and prioritize application Internet gaming, and those for which jitter alone is a problem such as Internet radio or streaming video. This chapter contains B101 Series User's Guide 151 - ZyXEL B-101 | User Guide - Page 152
Service (QoS) • The Monitor screen lets you view the ZyXEL same priority. CoS (class of service) is a way of managing 2 tagging and DiffServ (Differentiated Services or DS). IEEE 802.1p the eight-bit ToS (Type of Service) field in the IP header. Tagging or service based queues). Your ZyXEL Device uses - ZyXEL B-101 | User Guide - Page 153
Policing) Time (After Traffic Policing) The ZyXEL Device supports three incoming traffic metering algorithms: Token Bucket for more information on each metering algorithm. 10.3 The Quality of Service General Screen Click Network Settings > QoS > General to open the B101 Series User's Guide 153 - ZyXEL B-101 | User Guide - Page 154
Service speed. The ZyXEL Device uses up supported connection speed. Click Apply to save your changes. Click Cancel to restore your previously saved settings. 10.4 The Queue Setup Screen Click Network Settings > QoS > Queue Setup to open the screen as shown next. 154 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 155
Chapter 10 Quality of Service (QoS) Use this screen to configure shows the descriptive name of this queue. Interface This shows the name of the ZyXEL Device's interface through which traffic in this queue passes. Priority This shows the take this action. VSG1432-B101 Series User's Guide 155 - ZyXEL B-101 | User Guide - Page 156
Chapter 10 Quality of Service (QoS) 10.4.1 Adding a QoS Queue Drop Tail (DT). Drop Tail (DT) is a simple queue management algorithm that allows the ZyXEL Device buffer to accept as many packets as it can until it is full. Once the this screen without saving. 156 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 157
Chapter 10 Quality of Service (QoS) 10.5 The Class Setup as Telnet) to form a flow. You can give different priorities to traffic that the ZyXEL Device forwards out through the WAN interface. Give high priority to voice and video to make of this classifier. VSG1432-B101 Series User's Guide 157 - ZyXEL B-101 | User Guide - Page 158
Chapter 10 Quality of Service (QoS) Table 33 Network Settings > QoS > Class Setup LABEL DESCRIPTION To Queue This is the name of the queue in which icon to delete an existing classifier. Note that subsequent rules move up by one when you take this action. 158 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 159
Chapter 10 Quality of Service (QoS) 10.5.1 Add/Edit QoS Class Click Add new Classifier in the Class Setup screen or the Edit icon next to a classifier to open the following screen. Figure 56 Class Setup: Add/Edit VSG1432-B101 Series User's Guide 159 - ZyXEL B-101 | User Guide - Page 160
Chapter 10 Quality of Service (QoS) The following table describes the labels in this screen. Table 34 Class Setup: Add/Edit LABEL DESCRIPTION Active Select port number(s) of the source. Select the check box and enter the source MAC address of the packet. 160 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 161
the specified MAC address to determine which bits a packet's MAC address should match. Exclude Others Service Enter "f" for each bit of the specified source MAC address that the traffic's MAC address should . Select this option and specify a VLAN ID number. VSG1432-B101 Series User's Guide 161 - ZyXEL B-101 | User Guide - Page 162
Service the ZyXEL Device replaces the DSCP field in the packets. 802.1P Mark If you select Unchange, the ZyXEL Device which the ZyXEL Device replaces the VLAN ID of the frames. If you select Remove, the ZyXEL Device deletes Index If you select Unchange, the ZyXEL Device keep the VLAN ID in the - ZyXEL B-101 | User Guide - Page 163
Chapter 10 Quality of Service (QoS) 10.6 The QoS Policer Setup Screen Use this screen to configure QoS policers that allow you to limit the Delete icon to delete an existing policer. Note that subsequent rules move up by one when you take this action. VSG1432-B101 Series User's Guide 163 - ZyXEL B-101 | User Guide - Page 164
Chapter 10 Quality of Service (QoS) 10.6.1 Add/Edit a QoS Policer Click Add new Officer in the Policer Setup screen or the Edit icon next to a to the Selected Class box. To remove a QoS classifier from the Selected Class box, select it and use the < button. 164 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 165
Service (QoS) Table 36 Policer Setup: Add/Edit LABEL DESCRIPTION Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. 10.7 The QoS Monitor Screen To view the ZyXEL entry. Name This shows the name of the queue. VSG1432-B101 Series User's Guide 165 - ZyXEL B-101 | User Guide - Page 166
Chapter 10 Quality of Service (QoS) Table 37 Network Settings > 10.8 Technical Reference The following section contains additional technical information about the ZyXEL Device features described in this chapter. IEEE 802.1Q Tag The IEEE best-effort traffic. 166 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 167
service) to give different priorities to different packet types. DiffServ (Differentiated Services) is a class of service of service desired service or give can define up to 64 service levels. The following figure Service) field in the IP header. There are eight classes of services - ZyXEL B-101 | User Guide - Page 168
Chapter 10 Quality of Service (QoS) Automatic Priority Queue Assignment If you enable QoS on the ZyXEL Device, the ZyXEL Device can automatically base on the IEEE 802.1p 5 101110 7 7 101000 6 110000 7 111000 IP PACKET LENGTH (BYTE) >1100 250~1100 - ZyXEL B-101 | User Guide - Page 169
of Service ( : • Drops it. • Transmits it but adds a DSCP mark. The ZyXEL Device may drop these marked packets if the network is overloaded. Configure the or less than the amount of the bandwidth that the interface can support. It does not help if you set it to a bucket -B101 Series User's Guide 169 - ZyXEL B-101 | User Guide - Page 170
Service are not enough tokens in the CBS bucket, the ZyXEL Device checks the EBS bucket. The packet is maximum bandwidth respectively as negotiated between a service provider and client. The trTCM evaluates If the PBS bucket has enough tokens, the ZyXEL Device checks the CBS bucket. The packet - ZyXEL B-101 | User Guide - Page 171
Policy Forwarding Screen The Policy Forwarding screens let you view and configure routing policies on the ZyXEL Device. Click Network Settings > Routing > Policy Forwarding to open the Policy Forwarding screen. entry. Policy Name This is the name of the rule. VSG1432-B101 Series User's Guide 171 - ZyXEL B-101 | User Guide - Page 172
Protocol Select the transport layer protocol (TCP or UDP). Source Port Enter the source port number. Source Mac Enter the source MAC address. 172 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 173
WAN interface(s) already configured in the Broadband screens. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VSG1432-B101 Series User's Guide 173 - ZyXEL B-101 | User Guide - Page 174
Chapter 11 Policy Forwarding 174 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 175
the ZyXEL Device. incoming service requests to service requests to the server(s) on your local network (Section 12.3 on page 179). • Use the Port Triggering screen to add and configure the ZyXEL SIP (VoIP) ALG in the ZyXEL Device (Section 12.6 on relative to the ZyXEL Device, for example - ZyXEL B-101 | User Guide - Page 176
, such as for unknown services or where one server can support more than one service (for example both FTP and web service), it might be better services are shown in Appendix E on page 381. Please refer to RFC 1700 for further information about port numbers. 176 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 177
periodically check for servers and may suspend your account if it discovers any active services at your location. If you are unsure, refer to your ISP. Configuring Servers used for particular services. Figure 63 Network Settings > NAT > Port Forwarding VSG1432-B101 Series User's Guide 177 - ZyXEL B-101 | User Guide - Page 178
bulb signifies that this rule is not active. Service Name This shows the service's name. WAN Interface This shows the WAN interface through which the service is forwarded. External Start This is the first following screen. Figure 64 Port Forwarding: Add/Edit 178 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 179
the WAN interface through which the service is forwarded. External Start Port You the port number to which you want the ZyXEL Device to translate the incoming port. For of the virtual server here. Select the protocol supported by this virtual server. Choices are TCP, B101 Series User's Guide 179 - ZyXEL B-101 | User Guide - Page 180
for the service. Modify Click the Delete icon to delete the rule. 12.3.1 Add New Application This screen lets you create new NAT application rules. Click Add new application in the Applications screen to open the following screen. Figure 66 Applications: Add 180 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 181
LAN computer, you have to manually replace the LAN computer's IP address in the forwarding port with another LAN computer's IP address. Trigger port forwarding solves this problem by allowing computers on the LAN to dynamically take turns using the service. The ZyXEL Device records the IP address - ZyXEL B-101 | User Guide - Page 182
Real Audio server responds using a port number ranging between 6970-7170. 4 The ZyXEL Device forwards the traffic to Jane's computer IP address. 5 Only Jane can connect is not active. Service Name This field displays the name of the service used by this rule. 182 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 183
range of ports) that a server on the WAN uses when it sends out a particular service. The ZyXEL Device forwards the traffic with this port (or range of ports) to the client computer on the LAN that the following screen. Figure 69 Port Triggering: Add/Edit VSG1432-B101 Series User's Guide 183 - ZyXEL B-101 | User Guide - Page 184
a range of ports) that a server on the WAN uses when it sends out a particular service. The ZyXEL Device forwards the traffic with this port (or range of ports) to the client computer on the LAN that . Click Cancel to exit this screen without saving. 184 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 185
12.5 The DMZ Screen In addition to the servers for specified services, NAT supports a default server IP address. A default server receives packets from Cancel Note: If you do not assign a Default Server Address, the ZyXEL Device discards all packets received for ports that are not specified in the - ZyXEL B-101 | User Guide - Page 186
and translating IP addresses embedded in the data stream. When the ZyXEL Device registers with the SIP register server, the SIP ALG translates the ZyXEL Device's private IP address inside the SIP data stream to a of concurrent NAT sessions all clients can use. 186 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 187
regarding NAT. 12.8.1 NAT Definitions Inside/outside denotes where a host is located relative to the ZyXEL Device, for example, the computers of your subscribers are the inside hosts, while the web servers host when the same packet is traveling in the WAN side. VSG1432-B101 Series User's Guide 187 - ZyXEL B-101 | User Guide - Page 188
(for Many-to-One and Many-toMany Overload mapping), NAT offers the additional benefit of firewall protection. With no servers defined, your ZyXEL Device filters out all incoming inquiries, thus preventing intruders from probing your network. For more information on IP address translation, refer to - ZyXEL B-101 | User Guide - Page 189
to-Many Overload NAT mapping) in each packet and then forwards it to the Internet. The ZyXEL Device keeps track of the original addresses and port numbers so incoming reply packets can have their (ILA) 192.168.1.11 192.168.1.10 Inside Global Address (IGA) VSG1432-B101 Series User's Guide 189 - ZyXEL B-101 | User Guide - Page 190
the ZyXEL Device can communicate with three distinct WAN networks. Figure 74 NAT Application With IP Alias Port Forwarding: Services to the Supporting CD for more examples and details on port forwarding and NAT. Table 52 Services and Port Numbers SERVICES ECHO FTP VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 191
Chapter 12 Network Address Translation (NAT) Table 52 Services and Port Numbers SERVICES SNMP trap PPTP (Point-to-Point Tunneling Protocol) PORT NUMBER 162 1723 Port Forwarding Example B=192.168.1.34 C=192.168.1.35 D=192.168.1.36 IP address assigned by ISP VSG1432-B101 Series User's Guide 191 - ZyXEL B-101 | User Guide - Page 192
Chapter 12 Network Address Translation (NAT) 192 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 193
system DNS server(s), each WAN interface (service) is set to have its own interface to its DNS server(s). The ZyXEL Device uses a system DNS server match any DNS routing entry. After the ZyXEL Device receives a DNS reply from a for *example.com to have the ZyXEL Device forward DNS requests for the - ZyXEL B-101 | User Guide - Page 194
IP address with one or many dynamic DNS services so that anyone can contact you (in NetMeeting still like to have a domain name. The Dynamic DNS service provider will give you a password or key. 13.1.1 enable DDNS and configure the DDNS settings on the ZyXEL Device (Section 13.3 on page 196). 13.1.2 - ZyXEL B-101 | User Guide - Page 195
use Dynamic DNS. 13.2 The DNS Entry Screen Use this screen to view and configure DNS routes on the ZyXEL Device. Click Advanced > DNS Setting to open the DNS Entry screen. Figure 77 Advanced > DNS Setting > . Click the Delete icon to delete an existing rule. VSG1432-B101 Series User's Guide 195 - ZyXEL B-101 | User Guide - Page 196
Setup 13.2.1 Add/Edit DNS Entry You can manually add or edit the ZyXEL Device's DNS name and IP address entry. Click this screen without saving. 13.3 The Dynamic DNS Screen Use this screen to change your ZyXEL Device's DDNS. Click Advanced > DNS Setting > Dynamic DNS. The screen appears as shown - ZyXEL B-101 | User Guide - Page 197
field, enter the user name you used to register for this service. If you select TZO in the Service Provider field, enter the password you used to register for this service. Click Apply to save your changes. Click Cancel to exit this screen without saving. VSG1432-B101 Series User's Guide 197 - ZyXEL B-101 | User Guide - Page 198
Chapter 13 Dynamic DNS Setup 198 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 199
). IGMP Snooping A layer-2 switch can passively snoop on IGMP Query, Report and Leave (IGMP version 2) packets transferred between IP multicast routers/switches and IP VSG1432-B101 Series User's Guide 199 - ZyXEL B-101 | User Guide - Page 200
ZyXEL Device to learn multicast groups without you having to manually configure them. The ZyXEL manually configured) to ports that are members of that group. The ZyXEL tree network topology. Note: Your ZyXEL Device is an IGMP proxy. In ZyXEL Device. A downstream interface is a port that connects to a - ZyXEL B-101 | User Guide - Page 201
Device sends IGMP query messages to the hosts that are members of the query VLAN. The ZyXEL Device only sends an IGMP leave message via the upstream interface when the last host leaves a while IGMP v1 does not use it at all. See RFC 2113 for more information. VSG1432-B101 Series User's Guide 201 - ZyXEL B-101 | User Guide - Page 202
Enable this to have the ZyXEL Device reduce multicast traffic by issuing since the last query the ZyXEL Device waits before it queries host sends a report to the ZyXEL Device when the ZyXEL Device queries for the host's which types of IGMP packets the ZyXEL Device forwards. Ignore IGMP Select this - ZyXEL B-101 | User Guide - Page 203
query packets with a destination IP address other than 224.0.0.1, the all-hosts multicast address. Apply Click this button to save your settings back to the ZyXEL Device. Cancel Click Cancel to restore your previously saved settings. VSG1432-B101 Series User's Guide 203 - ZyXEL B-101 | User Guide - Page 204
this to accept IGMP packets received through the wireless LAN interface. Clear this to discard IGMP packets received through the wireless LAN interface. 204 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 205
(STB). IGMP Enabled This shows whether or not the LAN device is allowed to access IGMP services through the ZyXEL Device. Max Allowed Channel This is how many IGMP channels the LAN device is allowed to Click Cancel to restore your previously saved settings. VSG1432-B101 Series User's Guide 205 - ZyXEL B-101 | User Guide - Page 206
Use this screen to control a LAN host's access to IGMP services through the ZyXEL Device. Click Network Settings > IGMP Setting > IGMP Filter and then using the specified IP address is allowed to access IGMP services through the ZyXEL Device. Max Allowed Channels Specify to how many IGMP channels - ZyXEL B-101 | User Guide - Page 207
column lists the multicast groups and subnet masks for this IGMP service domain. Modify Click the Delete icon to delete the entry. Apply Click Apply to save your changes back to the ZyXEL Device. Cancel Click Cancel to exit this screen without saving. VSG1432-B101 Series User's Guide 207 - ZyXEL B-101 | User Guide - Page 208
host's access to an IGMP multicast service domain. Click Network Settings > DESCRIPTION Service Specify the name of the IGMP multicast service domain service domain. Max Allowed Channels This shows to how many of the IGMP multicast service to access IGMP services through the ZyXEL Device. Max - ZyXEL B-101 | User Guide - Page 209
Multicast Address Mask Black List Multicast Address Multicast Address Mask Modify Select Disabled to have the ZyXEL Device not restrict which multicast channels the multimedia devices on the LAN can access. Click . Click the Delete icon to delete the entry. VSG1432-B101 Series User's Guide 209 - ZyXEL B-101 | User Guide - Page 210
Cancel Select White List to have this entry allow access to the specified multicast IP address. Click Apply to save your changes back to the ZyXEL Device. Click Cancel to exit this screen without saving. 210 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 211
you set the ZyXEL Device to assign IP addresses based on the client's DHCP Vendor ID option information, you must enable DHCP server and configure LAN TCP/IP settings for both the default and user-defined groups. See Chapter 8 on page 127 for more information. VSG1432-B101 Series User's Guide 211 - ZyXEL B-101 | User Guide - Page 212
This shows the LAN interfaces in the group. DHCP Vendor IDs The ZyXEL Device automatically adds LAN hosts sending traffic with any of the Vendor group. Modify Add This field is blank if you do not have the ZyXEL Device automatically add clients to the interface group based on their Vendor Class - ZyXEL B-101 | User Guide - Page 213
to add the interfaces to this group. To remove a LAN or wireless LAN interface from the Grouped LAN Interfaces, use the right-facing arrow. VSG1432-B101 Series User's Guide 213 - ZyXEL B-101 | User Guide - Page 214
to the interface group by criteria such as the type of the hardware or firmware. Apply Click Apply to save your changes back to the ZyXEL Device. Cancel Click Cancel to exit this screen without saving. 214 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 215
the ZyXEL Device firewall. Use the firewall to protect your ZyXEL Device and services and configure firewall rules (Section 16.3 on page 217). • Use the Access Control screen to view and configure incoming/outgoing filtering rules (Section 16.4 on page 220). VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 216
requests, making the system unavailable for legitimate users. DoS Denials of Service (DoS) attacks are aimed at devices and networks with a so users no longer have access to network resources. The ZyXEL Device is pre-configured to automatically detect and thwart all known B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 217
Use this screen to set the security level of the firewall on the ZyXEL Device. Firewall rules are grouped based on the direction of travel of Screen You can configure customized services and port numbers in the Protocol screen. For a comprehensive list of port numbers and services, visit the IANA ( - ZyXEL B-101 | User Guide - Page 218
This is the name of your customized service. Description This is the description of your customized service. Ports/ Protocol Number This shows or range of ports that defines your customized service. Other and the protocol number displays if the service uses another IP protocol. Modify Click the - ZyXEL B-101 | User Guide - Page 219
screen to add a customized service rule that you can a span of ports that define your customized service. If you select Any, the service is applied to all ports. Protocol Number Add or the range of port numbers that define your customized service. This field is displayed if you select Other as the - ZyXEL B-101 | User Guide - Page 220
68 Security Settings > Firewall > Access Control LABEL DESCRIPTION DoS Protection DoS (Denial of Service) attacks can flood your Internet connection with invalid packets and connection requests, using so outgoing IP traffic. This displays the name of the rule. VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 221
is equivalent to Any. Protocol This displays the transport layer protocol that defines the service to which this rule applies. Direction This displays the direction of traffic to which settings. Click Cancel to restore your previously saved settings. VSG1432-B101 Series User's Guide 221 - ZyXEL B-101 | User Guide - Page 222
the ACL rule applies. If you select Specific IP Address, enter the destiniation IP address in the field below. Enter the destination IP address. VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 223
will bring you to the Security Settings > Scheduler Rules screen. Click Apply to save your changes. Click Cancel to exit this screen without saving. VSG1432-B101 Series User's Guide 223 - ZyXEL B-101 | User Guide - Page 224
Chapter 16 Firewall 224 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 225
you to configure the ZyXEL Device to give exclusive access to specific devices or exclude specific devices from accessing the ZyXEL Device. Every Ethernet The MAC Filter Screen Use this screen to change your ZyXEL Device's MAC filter settings. Click Security Settings > MAC Filter. The screen appears - ZyXEL B-101 | User Guide - Page 226
the MAC address of the device that is allowed access to the ZyXEL Device. Select the entry(ies) that you want to delete in the Remove column, then click the Delete icon. Click Apply to save your changes. Click Cancel to restore your previously saved settings. 226 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 227
web sites from home network computers. You can define time periods and days during which the ZyXEL Device performs parental control on a specific user in the Security Settings > Scheduler Rules screen (see screen for configurations. Figure 98 Parental Control VSG1432-B101 Series User's Guide 227 - ZyXEL B-101 | User Guide - Page 228
new parental control rule. # This is the index number of the rule. PC Name/IP/MAC The ZyXEL Device allows or prohibits the users from viewing the Web sites with the URLs listed below. Access Type the following screen. Figure 99 Parental Control: Add/Edit 228 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 229
user to the web site of this rule. If you select Block Web Site, the ZyXEL Device prohibits the users from viewing the web sites with the URLs listed below. If you select Allow Web Site Apply to save your changes. Click Cancel to exit this screen without saving. VSG1432-B101 Series User's Guide 229 - ZyXEL B-101 | User Guide - Page 230
Chapter 18 Parental Control 230 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 231
19 Scheduler Rules 19.1 Overview You can define time periods and days during which the ZyXEL Device performs scheduled rules of certain features (such as Firewall Access Control, Parental Control) This shows the period of time on which this rule is enabled. VSG1432-B101 Series User's Guide 231 - ZyXEL B-101 | User Guide - Page 232
access schedule for a specific user on your network. Figure 101 Scheduler Rules: Add/Edit The following table describes the fields schedule. Day Select check boxes for the days that you want the ZyXEL Device to perform this scheduler rule. Time if Day Range Enter the -B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 233
The ZyXEL screen lets you generate certification requests and import the ZyXEL Device's CA-signed certificates (Section 20.4 on page lets you save the certificates of trusted CAs to the ZyXEL Device (Section 20.4 on page 241). 20.2 . You can use the ZyXEL Device to generate certification requests - ZyXEL B-101 | User Guide - Page 234
save the certificate that you have enrolled from a certification authority from your computer to the ZyXEL Device. Name This field displays the name used to identify this certificate. It is recommended that that one or more features is configured to use. VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 235
owner belongs. You may use any character, including spaces, but the ZyXEL Device drops trailing spaces. State/Province Name Type up to 32 characters certificate into the ZyXEL Device. Otherwise click Back to return to the Local Certificates screen. VSG1432-B101 Series User's Guide 235 - ZyXEL B-101 | User Guide - Page 236
have it signed by a Certificate Authority, in the Local Certificates screen click the certificate request's Load Signed icon to import the signed certificate into the ZyXEL Device. 236 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 237
to the previous screen. 20.3.3 Import Certificate Click Security Settings > Local Certificates and then Import Certificate to open the Import Local Certificate screen. Follow the instructions in this screen to save an existing certificate to the ZyXEL Device. VSG1432-B101 Series User's Guide 237 - ZyXEL B-101 | User Guide - Page 238
file Click this check box to open a screen where you can save the certificate of a certification authority that you trust, from your computer to the ZyXEL Device. Certificate Type up to 63 ASCII characters (not including spaces) to identify this Name certificate. VSG1432 - ZyXEL B-101 | User Guide - Page 239
is protected by a password? Enter the private key into the text box to store it on the ZyXEL Device. The private key should not exceed 63 ASCII characters (not including spaces). Apply Click Apply to certificate information and change the certificate's name. VSG1432-B101 Series User's Guide 239 - ZyXEL B-101 | User Guide - Page 240
can copy and paste the certificate into a text editor and save the file on a management computer for later distribution (via floppy disk for example). VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 241
CA LABEL DESCRIPTION Import Certificate Click this button to open a screen where you can save the certificate of a certification authority that you trust to the ZyXEL Device. Name This field displays the name used to identify this certificate. VSG1432-B101 Series User's Guide 241 - ZyXEL B-101 | User Guide - Page 242
the identifying name of this certificate. Type This field displays general information about the certificate. ca means that a Certification Authority signed the certificate. 242 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 243
previous screen. 20.4.2 Import Trusted CA Certificate Click the Import Certificate button in the Trusted CA screen to open the following screen. The ZyXEL Device trusts any valid certificate signed by any of the imported trusted CA certificates. Figure 111 Trusted CA: Import Certificate VSG1432 - ZyXEL B-101 | User Guide - Page 244
including spaces). Certificate Copy and paste the certificate into the text box to store it on the ZyXEL Device. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without Click Cancel to exit this screen without saving. 244 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 245
.2 on page 247). • Use the Settings screen to view the configured IPSec policies and add, edit or remove a policy (Section 21.3 on page 248). VSG1432-B101 Series User's Guide 245 - ZyXEL B-101 | User Guide - Page 246
SA), a contract indicating what security parameters the ZyXEL Device and the remote IPSec router will use establish an IPSec SA through which the ZyXEL Device and remote IPSec router can send a dynamic WAN IP address and is using DDNS. The ZyXEL Device has to rebuild the VPN tunnel each time the - ZyXEL B-101 | User Guide - Page 247
WAN IP address or URL of the remote IPSec router. Local Addresses This is the IP address of computer(s) on your local network behind your ZyXEL Device. Remote Addresses This is the IP address of computer(s) on the remote network behind the remote IPSec router. Action Click Trigger to establish - ZyXEL B-101 | User Guide - Page 248
the identification name for this VPN policy. Remote Gateway This is the static WAN IP address or URL of the remote IPSec router. 248 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 249
policy's Edit icon in the IPSec > Settings screen to edit VPN policies. Note: The ZyXEL Device uses the system default gateway interface's WAN IP address as its WAN IP address to . You only configure VPN manual key when you select Auto(IKE) in the Key Exchange VSG1432-B101 Series User's Guide 249 - ZyXEL B-101 | User Guide - Page 250
the firewall. IPSec Connection Name Type up to 39 alphanumeric characters to identify this VPN policy. You may use spaces, underscores and dashes, but the ZyXEL Device drops trailing spaces. Remote IPSec Gateway Address Type the WAN IP address or the URL (up to 31 characters) of the IPSec router - ZyXEL B-101 | User Guide - Page 251
your ZyXEL Device. services offered by AH. Select Auto(IKE) or Manual from the drop-down list box. Auto(IKE) provides more protection so it is generally recommended. Manual is a useful option for troubleshooting if you have problems using Auto(IKE) key management. VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 252
Local/Remote ID Type field, type a domain name or e-mail address by which to identify this ZyXEL Device in the Local/Remote ID Content field. Use up to 31 ASCII characters including spaces, although trailing a secure gateway must have the same negotiation mode. 252 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 253
IPSec screen. Click Cancel to exit this screen without saving. 21.3.1.2 Manual Key Setup Manual key management is useful if you have problems with Auto(IKE) key management. 21.3.1.3 Security Parameter Index (SPI associated with the SPI to establish the tunnel. VSG1432-B101 Series User's Guide 253 - ZyXEL B-101 | User Guide - Page 254
ZyXEL implementation assumes identical outgoing and incoming SPIs. 21.3.2 Configuring Manual Key You only configure VPN manual key when you select Manual in the Key Exchange Method field on the IPSec > Setting: Add/Edit screen. The following is the IPSec Setting - Manual but the ZyXEL Device drops - ZyXEL B-101 | User Guide - Page 255
your ZyXEL Device. services offered by AH. Select Auto(IKE) or Manual from the drop-down list box. Auto(IKE) provides more protection so it is generally recommended. Manual is a useful option for troubleshooting if you have problems using Auto(IKE) key management. VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 256
Chapter 21 IPSec Table 88 IPSec Settings > Add/Edit: Manual LABEL DESCRIPTION Encryption Algorithm Select DES, 3DES, AES(aes-cbc) or ESP_NULL from the drop This section provides some technical background information about the topics covered in this chapter. 256 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 257
2404, provide an authentication mechanism for the AH and ESP protocols. Key Management Key management allows you to determine whether to use IKE (ISAKMP) or manual key configuration in order to set up a VPN. VSG1432-B101 Series User's Guide 257 - ZyXEL B-101 | User Guide - Page 258
mode and Tunnel mode. At the time of writing, the ZyXEL Device supports Tunnel mode only. Figure 121 Transport and Tunnel Mode IPSec to transmit it securely. A Tunnel mode is required for gateway services to provide access to internal systems. Tunnel mode is fundamentally an -B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 259
group. • Set the IPSec SA lifetime. This field allows you to determine how long the IPSec SA should stay up before it times out. The ZyXEL Device automatically renegotiates the IPSec SA if there is traffic when the IPSec SA lifetime period expires. If an IPSec SA times out, then the - ZyXEL B-101 | User Guide - Page 260
21.4.5 IPSec and NAT Read this section if you are running IPSec on a host computer behind the ZyXEL Device. NAT is incompatible with the AH protocol in both Transport and Tunnel mode. An IPSec VPN using original payload," which is unchanged by a NAT device. 260 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 261
not normally compatible with ESP in transport mode either, but the ZyXEL Device's NAT Traversal feature provides a way to handle this. changes the header of the IPSec packet. NAT traversal solves the problem by adding a UDP port 500 header to the IPSec packet. VSG1432-B101 Series User's Guide 261 - ZyXEL B-101 | User Guide - Page 262
Transport AH Tunnel ESP Transport ESP Tunnel NAT N N Y* Y Y* - This is supported in the ZyXEL Device if you enable NAT traversal. 21.4.7 ID Type and Content With aggressive negotiation mode (up to 31 characters) by which to identify this ZyXEL Device. 262 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 263
TYPE= CONTENT= E-mail Type an e-mail address (up to 31 characters) by which to identify this ZyXEL Device. The domain name or e-mail address that you use in the Local ID Content field is used before you can communicate with them over a secure connection. VSG1432-B101 Series User's Guide 263 - ZyXEL B-101 | User Guide - Page 264
is used within IKE SA setup to establish session keys. 768-bit, 1024-bit 1536-bit, 2048-bit, and 3072-bit Diffie-Hellman groups are supported. Upon completion of the Diffie-Hellman exchange, the two peers have a shared secret, but the IKE SA is not authenticated. For authentication, use pre-shared - ZyXEL B-101 | User Guide - Page 265
through the following interfaces: • LAN • WAN Note: The ZyXEL Device is managed using the Web Configurator. 22.2 The Service Control Screen Use this screen to configure through which interface(s) users can use which service(s) to manage the ZyXEL Device. VSG1432-B101 Series User's Guide 265 - ZyXEL B-101 | User Guide - Page 266
in order to use that service for remote management. Certificate HTTPS Certificate Select a certificate the HTTPS server (the ZyXEL Device) uses to authenticate itself back to the ZyXEL Device. Cancel Click Cancel to restore your previously saved settings. 266 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 267
back to the requesting machine. ARP updates the ARP Table for future reference and then sends the packet to the MAC address that replied. VSG1432-B101 Series User's Guide 267 - ZyXEL B-101 | User Guide - Page 268
This is the type of interface used by the device. You can click on the device type to go to its configuration screen. 268 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 269
allows you to choose which categories of events and/or alerts to have the ZyXEL Device log and then display the logs or have the ZyXEL Device send them to an administrator (as e-mail) or to a syslog . The syslog facility identifies a file in the syslog server. VSG1432-B101 Series User's Guide 269 - ZyXEL B-101 | User Guide - Page 270
you select in Maintenance > Log Setting. Click System Monitor > Log to open the System Log screen. Figure 126 System Monitor > Log > System Log 270 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 271
search results according to the severity level you have selected. When you select a severity, the ZyXEL Device searches through all logs of that severity or higher. Category Select the type of logs to screen. Figure 127 System Monitor > Log > Security Log VSG1432-B101 Series User's Guide 271 - ZyXEL B-101 | User Guide - Page 272
filters search results according to the severity level you have selected. When you select a severity, the ZyXEL Device searches through all logs of that severity or higher. Category Select the type of logs to display This field states the reason for the log. 272 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 273
the WAN traffic statistics (Section 25.2 on page 274). • Use the LAN screen to view the LAN traffic statistics (Section 25.3 on page 276). VSG1432-B101 Series User's Guide 273 - ZyXEL B-101 | User Guide - Page 274
WAN screen. The figure in this screen shows the number of bytes received and sent on the ZyXEL Device. Figure 128 System Monitor > Traffic Status > WAN The following table describes the fields in this name of the WAN interface that is currently disconnected. 274 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 275
This indicates the number of frames with errors received on this interface. Drop This indicates the number of received packets dropped on this interface. VSG1432-B101 Series User's Guide 275 - ZyXEL B-101 | User Guide - Page 276
the following screen. The figure in this screen shows the interface that is currently connected on the ZyXEL Device. Figure 129 System Monitor > Traffic Status > LAN 276 The following table describes the them. Interface This shows the LAN or WLAN interface. VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 277
This indicates the number of frames with errors received on this interface. Drop This indicates the number of received packets dropped on this interface. VSG1432-B101 Series User's Guide 277 - ZyXEL B-101 | User Guide - Page 278
Chapter 25 Traffic Status 278 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 279
the current list of multicast groups the ZyXEL Device has joined and which ports have at the current list of multicast groups the ZyXEL Device has joined and which ports have joined labels in this screen. Table 101 System Monitor > IGMP Group Status an interface on the ZyXEL Device that belongs to - ZyXEL B-101 | User Guide - Page 280
101 ZyXEL Device received IGMP-related packets. Last Report Time This field displays when the ZyXEL Device received the latest packet for this IGMP multicast group. Total Time (sec) This field displays the total amount of time the ZyXEL of Leave packets the ZyXEL Device has received for this - ZyXEL B-101 | User Guide - Page 281
when it left. Total Joins This field displays the total number of Join packets the ZyXEL Device has received from this LAN IP address. Total Leaves This field displays the total number of Leave packets the ZyXEL Device has received from this LAN IP address. VSG1432-B101 Series User's Guide 281 - ZyXEL B-101 | User Guide - Page 282
Chapter 26 IGMP Status 282 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 283
CHAPTER 27 Users Configuration 27.1 Overview In the Users Configuration screen, you can view, add, and configure user accounts of the ZyXEL Device. 27.2 The Users Configuration Screen Click Maintenance > Users Configuration to open the following screen. Figure 132 Maintenance > Users Configuration - ZyXEL B-101 | User Guide - Page 284
Times This field indicates how many times a user can re-enter his/her account information before the ZyXEL Device locks the user out. Idle Timeout This field indicates the number of minutes that the system can Click the Edit icon to edit this user account. 284 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 285
field is displayed only when you are editing the user account. Enter the exact same password that you just entered in the above field. VSG1432-B101 Series User's Guide 285 - ZyXEL B-101 | User Guide - Page 286
ZyXEL Device can lock a user out if you use a wrong user name or password to log in the ZyXEL her account information before the ZyXEL Device locks the user out period. A user cannot log into the ZyXEL Device during the lockout period, even accounts can configure the ZyXEL Device while User accounts - ZyXEL B-101 | User Guide - Page 287
ZyXEL Device's TR-069 autoconfiguration settings (Section 28.2 on page 287). • The TR-064 screen lets you enable management via TR-064 on the ZyXEL (CPE), for example your ZyXEL Device, can be managed ZyXEL Device, modify settings, perform firmware upgrades as well as monitor and diagnose the ZyXEL - ZyXEL B-101 | User Guide - Page 288
Disable. Inform Interval Enter the time interval (in seconds) at which the ZyXEL Device sends information to the auto-configuration server. ACS URL Enter the URL or connection request to the ZyXEL Device, this user name is used to authenticate the ACS. 288 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 289
shows the connection request URL. The ACS can use this URL to make a connection request to the ZyXEL Device. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. Click Cancel to exit this screen without saving. VSG1432-B101 Series User's Guide 289 - ZyXEL B-101 | User Guide - Page 290
Chapter 28 Remote Management 290 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 291
system related settings, such as system time, password, name, the domain name and the inactivity timeout interval. 29.2 The Time Setting Screen To change your ZyXEL Device's time and date, click Maintenance > Time Setting. The screen appears as shown. Use this screen to configure the - ZyXEL B-101 | User Guide - Page 292
Date/Time System Time This field displays the time and fate of your ZyXEL Device. Each time you reload this page, the ZyXEL Device synchronizes the time and date with the time server. NTP Time Server 's time zone is one hour ahead of GMT or UTC (GMT+1). 292 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 293
zone is one hour ahead of GMT or UTC (GMT+1). Click Apply to save your changes. Click Cancel to exit this screen without saving. VSG1432-B101 Series User's Guide 293 - ZyXEL B-101 | User Guide - Page 294
Chapter 29 Time Settings 294 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 295
which logs and/or immediate alerts the ZyXEL Device records in the Logs Setting screen. 30.2 The Log Settings Screen To change your ZyXEL Device's log settings, click Maintenance > Logs Setting. The screen appears as shown. Figure 137 Maintenance > Logs Setting VSG1432-B101 Series User's Guide 295 - ZyXEL B-101 | User Guide - Page 296
The ZyXEL Device email message that the ZyXEL Device sends. Security Log ZyXEL Device sends. From Specify where the logs are sent from. Send Log to The ZyXEL ZyXEL ZyXEL Device's log storage space can be filled before the ZyXEL ZyXEL Device sends an E-mail of sending mail the logs. Active - ZyXEL B-101 | User Guide - Page 297
mail Log Example Subject: Firewall Alert From Date: Fri, 07 Apr 2000 10:05:42 From: [email protected] To: [email protected] 1|Apr 7 00 |From:192.168.1.1 To:192.168.1.255 |default policy |forward | 09: :00520 dest port:00520 | | End of Firewall Log VSG1432-B101 Series User's Guide 297 - ZyXEL B-101 | User Guide - Page 298
Chapter 30 Logs Setting 298 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 299
to two minutes. After a successful upload, the system will reboot. Do NOT turn off the ZyXEL Device while firmware upload is in progress! Figure 139 Maintenance > Firmware Upgrade The following table describes the in this field or click Browse ... to find it. VSG1432-B101 Series User's Guide 299 - ZyXEL B-101 | User Guide - Page 300
the firmware updating screen, wait two minutes before logging into the ZyXEL Device again. Figure 140 Firmware Uploading The ZyXEL Device automatically restarts in this time causing a temporary network disconnect Upgrade screen. Figure 142 Error Message 300 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 301
your ZyXEL Device is configured and functioning properly, it is highly recommended that you back up your configuration file before making configuration changes. The backup configuration file will be useful in case you need to return to your previous settings. VSG1432-B101 Series User's Guide 301 - ZyXEL B-101 | User Guide - Page 302
allows you to upload a new or previously saved configuration file from your computer to your ZyXEL Device. Table 110 Restore Configuration LABEL DESCRIPTION File Path Type in the location of the file for details on how to set up your computer's IP address. 302 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 303
the Reset button to clear all user-entered configuration information and return the ZyXEL Device to its factory defaults. The following warning screen appears. Figure 146 reset the factory defaults of your ZyXEL Device. Refer to Section 1.8 on page 31 for more information on the RESET button. - ZyXEL B-101 | User Guide - Page 304
without turning the power off. You may need to do this if the ZyXEL Device hangs, for example. Click Maintenance > Reboot. Click Reboot to have the ZyXEL Device reboot. This does not affect the ZyXEL Device's configuration. Figure 148 Maintenance > Reboot 304 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 305
ZyXEL Device. 33.2 The Diagnostic Screen Use this screen to ping, traceroute, or nslookup an IP address. Click Maintenance > Diagnostic > Ping & TraceRoute & NsLookup to open the screen shown next. Figure 149 Maintenance > Diagnostic > Ping & TraceRoute & NsLookup VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 306
path a packet takes to the specified computer. Nslookup Click this button to perform a DNS lookup on the IP address of a computer you enter. 306 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 307
Troubleshooting This chapter offers some suggestions to solve problems you might encounter. The potential problems are divided into the following categories. • Power, Hardware Connections, and LEDs • ZyXEL turned on. 4 Turn the ZyXEL Device off and on. 5 If the problem continues, contact the vendor. - ZyXEL B-101 | User Guide - Page 308
34 Troubleshooting 2 Check the hardware connections. 3 Inspect your cables for damage. Contact the vendor to replace any damaged cables. 4 Turn the ZyXEL Device off and on. 5 If the problem continues, contact the vendor. 34.2 ZyXEL Device Access and Login I forgot the IP address for the ZyXEL - ZyXEL B-101 | User Guide - Page 309
control settings for HTTP and HTTPS (Security Settings > Service Control). 5 Reset the device to its factory defaults, and try to access the ZyXEL Device with the default IP address. See Section 1.8 on page 31. 6 If the problem continues, contact the network administrator or vendor, or try one - ZyXEL B-101 | User Guide - Page 310
client and that the wireless settings in the wireless client are the same as the settings in the ZyXEL Device. 4 Disconnect all the cables from your device, and follow the directions in Section 1.6 on page 28 again. 5 If the problem continues, contact your ISP. 310 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 311
Chapter 34 Troubleshooting I cannot access the Internet through a DSL (Network Settings > Interface Group). 4 If you set up a WAN connection using bridging service, make sure you turn off the DHCP feature in the LAN screen to have the clients at one time. VSG1432-B101 Series User's Guide 311 - ZyXEL B-101 | User Guide - Page 312
See Section 1.6 on page 28 and Section 1.7 on page 29. 3 Turn the ZyXEL Device off and on. 4 If the problem continues, contact your ISP. 34.4 Wireless Internet Access What factors may cause intermittent or may have too many programs open that use the Internet. 312 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 313
Troubleshooting What is a Server Set ID (SSID)? An SSID is a name that uniquely identifies a wireless network. The AP and all the clients within a wireless network must use the same SSID. What wireless security modes does my ZyXEL Device support private. VSG1432-B101 Series User's Guide 313 - ZyXEL B-101 | User Guide - Page 314
Chapter 34 Troubleshooting 314 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 315
Setup). To turn off the wireless network, press the WLAN/WPS button on the front of the ZyXEL Device for one to five seconds. The WLAN/ WPS LED turns off when the wireless network is Operation Temperature 0º C ~ 40º C Storage Temperature -20º ~ 60º C VSG1432-B101 Series User's Guide 315 - ZyXEL B-101 | User Guide - Page 316
Support With Dynamic DNS (Domain Name System) support, you can use a fixed URL with a dynamic IP address. You must register for this service with a Dynamic DNS service ZyXEL Device. You can also set the time manually. These dates and times are then used in logs. VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 317
(continued) Logs Use logs for troubleshooting. You can send logs from the ZyXEL Device to an external syslog server. service (HTTPS or FTP traffic for example) from a computer on a network (LAN or WAN for example) can access the ZyXEL Device. PPPoE Support B101 Series User's Guide 317 - ZyXEL B-101 | User Guide - Page 318
support Modulation: Multi-Carrier-Modulation (MCM) Interleaving: General Convolution Support of maximum SNRM configuration (directed by the central office) Seamless Rate Adaptation (SRA) as described in Amendment 1 of G.993.2 Tone Spacing: 4.3KHz/8.6KHz 318 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 319
Standards ADSL ITU-T G.992.1 (G.dmt), Annex A and ETSI TS 101 388 V1.3.1 (05/2002) 1TR112 (U-R2 Deutsche Telekom AG) Version 7.0 including support of Dying Gasp and report of Self-Test-Result (ATU-T Register#3) file backup and restore Syslog TR-069 TR-064 VSG1432-B101 Series User's Guide 319 - ZyXEL B-101 | User Guide - Page 320
exhaustive, illustrates the standards supported in the ZyXEL Device. Table 114 Standards Supported STANDARD DESCRIPTION RFC 1058 IEEE 802.11e QoS IEEE 802.11 e Wireless LAN for Quality of Service ANSI T1.413, Issue 2 Asymmetric Digital Subscriber Line (ADSL) standard. -B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 321
IP Address All computers must have a 10M or 100M Ethernet adapter card and TCP/IP installed. Windows 95/98/Me/NT/2000/XP/Vista the TCP/IP settings in order to "communicate" with your network. If you manually assign IP information instead of using dynamic assignment, make sure that your computers have - ZyXEL B-101 | User Guide - Page 322
network adapter and then click OK. If you need TCP/IP: 1 In the Network window, click Add. 2 Select Protocol and then click Add. 322 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 323
address and type your information into the IP Address and Subnet Mask fields. Figure 151 Windows 95/98/Me: TCP/IP Properties: IP Address VSG1432-B101 Series User's Guide 323 - ZyXEL B-101 | User Guide - Page 324
window. 6 Click OK to close the Network window. Insert the Windows CD if prompted. 7 Turn on your ZyXEL Device and restart your computer when prompted. Verifying Settings 1 Click Start and then Run. 2 In the Run 's IP address, subnet mask and default gateway. 324 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 325
: Start Menu 2 In the Control Panel, double-click Network Connections (Network and Dialup Connections in Windows 2000/NT). Figure 154 Windows XP: Control Panel VSG1432-B101 Series User's Guide 325 - ZyXEL B-101 | User Guide - Page 326
Properties. Figure 156 Windows XP: Local Area Connection Properties 5 The Internet Protocol TCP/IP Properties window opens (the General tab in Windows XP). 326 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 327
Settings tab by clicking Add in Default gateways. • In TCP/IP Gateway Address, type the IP address of the default gateway in Gateway. To manually configure a default metric (the number of transmission hops), clear the Automatic metric check box and type a metric in Metric. • Click Add. • Repeat the - ZyXEL B-101 | User Guide - Page 328
IP address(es), click Use the following DNS server addresses, and type them in the Preferred DNS server and Alternate DNS server fields. 328 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 329
and Dial-up Connections in Windows 2000/NT). 11 Turn on your ZyXEL Device and restart your computer (if prompted). Verifying Settings 1 Click and then click the Support tab. Windows Vista This section shows screens from Windows Vista Enterprise Version 6.0. VSG1432-B101 Series User's Guide 329 - ZyXEL B-101 | User Guide - Page 330
, double-click Network and Internet. Figure 161 Windows Vista: Control Panel 3 Click Network and Sharing Center. Figure 162 Windows Vista: Network And Internet 330 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 331
this procedure, click Continue whenever Windows displays a screen saying that it needs your permission to continue. Figure 164 Windows Vista: Network and Sharing Center VSG1432-B101 Series User's Guide 331 - ZyXEL B-101 | User Guide - Page 332
you have a static IP address click Use the following IP address and fill in the IP address, Subnet mask, and Default gateway fields. 332 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 333
Settings tab by clicking Add in Default gateways. • In TCP/IP Gateway Address, type the IP address of the default gateway in Gateway. To manually configure a default metric (the number of transmission hops), clear the Automatic metric check box and type a metric in Metric. • Click Add. • Repeat the - ZyXEL B-101 | User Guide - Page 334
IP address(es), click Use the following DNS server addresses, and type them in the Preferred DNS server and Alternate DNS server fields. 334 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 335
Area Connection Properties window. 12 Close the Network Connections window. 13 Turn on your ZyXEL Device and restart your computer (if prompted). Verifying Settings 1 Click Start, All Programs a network connection, click Status and then click the Support tab. VSG1432-B101 Series User's Guide 335 - ZyXEL B-101 | User Guide - Page 336
Appendix A Setting up Your Computer's IP Address Macintosh OS 8/9 1 Click the Apple menu, Control Panel and double-click TCP/IP to open the TCP/ IP Control Panel. Figure 169 Macintosh OS 8/9: Apple Menu 336 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 337
assigned settings, do the following: • From the Configure box, select Manually. • Type your IP address in the IP Address box. • ZyXEL Device and restart your computer (if prompted). Verifying Settings Check your TCP/IP properties in the TCP/IP Control Panel window. VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 338
. 3 For dynamically assigned settings, select Using DHCP from the Configure list. Figure 172 Macintosh OS X: Network 4 For statically assigned settings, do the following: 338 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 339
• From the Configure box, select Manually. • Type your IP address in the IP Address box. • Type your subnet mask in the Subnet mask box. • Type the IP address of your ZyXEL Device in the Router address box. 173 Red Hat 9.0: KDE: Network Configuration: Devices VSG1432-B101 Series User's Guide 339 - ZyXEL B-101 | User Guide - Page 340
A Setting up Your Computer's IP Address 2 Double-click on the profile of the network card you wish to configure. The Ethernet Device General screen displays as shown. Figure 174 Red Hat 175 Red Hat 9.0: KDE: Network Configuration: DNS 5 Click the Devices tab. 340 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 341
all screens. Figure 176 Red Hat 9.0: KDE: Network Configuration: Activate 7 After the network card restart process is complete, make sure the Status is Active in the Network Configuration screen. Using =yes BOOTPROTO=dhcp USERCTL=no PEERDNS=yes TYPE=Ethernet VSG1432-B101 Series User's Guide 341 - ZyXEL B-101 | User Guide - Page 342
After you edit and save the configuration files, you must restart the network card. Enter ./network restart in the /etc/rc.d/init.d directory. The following figure shows an example. Figure 180 Red Hat 9.0: Restart Ethernet Card [root@localhost init.d]# network restart Shutting down interface eth0: - ZyXEL B-101 | User Guide - Page 343
:13 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:100 RX bytes:730412 (713.2 Kb) TX bytes:1570 (1.5 Kb) Interrupt:10 Base address:0x1000 [root@localhost]# VSG1432-B101 Series User's Guide 343 - ZyXEL B-101 | User Guide - Page 344
Appendix A Setting up Your Computer's IP Address 344 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 345
11000000, which is 192 in decimal notation). Therefore, each octet has a possible range of 00000000 to 11111111 in binary, or 0 to 255 in decimal. VSG1432-B101 Series User's Guide 345 - ZyXEL B-101 | User Guide - Page 346
Address (Binary) Subnet Mask (Binary) Network Number Host ID (192) (168) (1) (2) 11000000 10101000 00000001 00000010 11111111 11111111 11111111 00000000 11000000 10101000 00000001 00000010 346 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 347
24 bits 255.255.255.0 8 bits 29 bits 255.255.255.2 3 bits 48 224 - 2 216 - 2 28 - 2 23 - 2 MAXIMUM NUMBER OF HOSTS 16777214 65534 254 6 VSG1432-B101 Series User's Guide 347 - ZyXEL B-101 | User Guide - Page 348
MASK ALTERNATIVE LAST OCTET NOTATION (BINARY) 255.255.255.0 /24 0000 0000 255.255.255.128 /25 1000 0000 255.255.255.192 /26 1100 0000 255.255.255.224 /27 1110 0000 255.255.255.240 host ID, allowing a maximum of 28 - 2 or 254 possible hosts. 348 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 349
.1.128 /25. The following figure shows the company network after subnetting. There are now two sub-networks, A and B. Figure 184 Subnetting Example: After Subnetting VSG1432-B101 Series User's Guide 349 - ZyXEL B-101 | User Guide - Page 350
192.168.1. 64 11000000.10101000.00000001. 01000000 11111111.11111111.11111111. 11000000 Lowest Host ID: 192.168.1.65 Highest Host ID: 192.168.1.126 350 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 351
Eight Subnets Similarly, use a 27-bit mask to create eight subnets (000, 001, 010, 011, 100, 101, 110 and 111). The following table shows IP address last octet values for each subnet. Table 123 Eight Subnets BROADCAST ADDRESS 31 63 95 127 159 191 223 255 VSG1432-B101 Series User's Guide 351 - ZyXEL B-101 | User Guide - Page 352
you obtain your network number depends on your particular situation. If the ISP or your network administrator assigns you a block of registered IP 352 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 353
that you entered. You don't need to change the subnet mask computed by the ZyXEL Device unless you are instructed to do otherwise. Private IP Addresses Every machine on the Internet must have a unique RFC 1466, Guidelines for Management of IP Address Space. VSG1432-B101 Series User's Guide 353 - ZyXEL B-101 | User Guide - Page 354
Appendix B IP Addresses and Subnetting 354 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 355
up blocking to log into your device. Either disable pop-up blocking (enabled by default in Windows XP SP (Service Pack) 2) or allow pop-up blocking and create an exception for your device's IP address. Disable Pop- the Pop-up Blocker section in the Privacy tab. VSG1432-B101 Series User's Guide 355 - ZyXEL B-101 | User Guide - Page 356
allow pop-up windows from your device, see the following steps. 1 In Internet Explorer, select Tools, Internet Options and then the Privacy tab. 356 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 357
of your device (the web page that you do not want to have blocked) with the prefix "http://". For example, http://192.168.167.1. VSG1432-B101 Series User's Guide 357 - ZyXEL B-101 | User Guide - Page 358
to save this setting. JavaScripts If pages of the web configurator do not display properly in Internet Explorer, check that JavaScripts are allowed. 358 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 359
. 4 Under Active scripting make sure that Enable is selected (the default). 5 Under Scripting of Java applets make sure that Enable is selected (the default). VSG1432-B101 Series User's Guide 359 - ZyXEL B-101 | User Guide - Page 360
the Security tab. 2 Click the Custom Level... button. 3 Scroll down to Microsoft VM. 4 Under Java permissions make sure that a safety level is selected. 360 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 361
) 1 From Internet Explorer, click Tools, Internet Options and then the Advanced tab. 2 Make sure that Use Java 2 for under Java (Sun) is selected. VSG1432-B101 Series User's Guide 361 - ZyXEL B-101 | User Guide - Page 362
, Javascripts and pop-ups in one screen. Click Tools, then click Options in the screen that appears. Figure 193 Mozilla Firefox: Tools > Options 362 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 363
Appendix C Pop-up Windows, JavaScripts and Java Permissions Click Content.to show the screen below. Select the check boxes as shown in the following screen. Figure 194 Mozilla Firefox Content Security VSG1432-B101 Series User's Guide 363 - ZyXEL B-101 | User Guide - Page 364
Appendix C Pop-up Windows, JavaScripts and Java Permissions 364 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 365
up an independent network, which is commonly referred to as an ad-hoc network or Independent Basic Service Set (IBSS). The following diagram shows an example of notebook computers using wireless adapters to form and B can access the wired network and communicate VSG1432-B101 Series User's Guide 365 - ZyXEL B-101 | User Guide - Page 366
still access the wired network but cannot communicate with each other. Figure 196 Basic Service Set ESS An Extended Service Set (ESS) consists of a series of overlapping BSSs, each containing an access wireless network traffic in the immediate neighborhood. 366 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 367
occurs when two stations are within range of the same access point, but are not within range of each other. The following figure illustrates a VSG1432-B101 Series User's Guide 367 - ZyXEL B-101 | User Guide - Page 368
RTS/CTS size. Note: Enabling the RTS Threshold causes redundant network overhead that could negatively affect the throughput performance instead of providing a remedy. 368 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 369
security is vital to your network to protect wireless communication between wireless clients, access points and the wired network. Wireless security methods available on the ZyXEL Device are data encryption, wireless client authentication, restricting access by device MAC address and hiding the - ZyXEL B-101 | User Guide - Page 370
ZyXEL security settings on the ZyXEL Device and on all wireless support extended authentication as well as providing additional accounting and control features. It is supported Support for RADIUS (Remote Authentication Dial In User Service server model that supports authentication, authorization and - ZyXEL B-101 | User Guide - Page 371
Appendix D Wireless LANs • Authorization Determines the network services available to authenticated users once they are connected to the network. • Accounting Keeps -TLS, EAP-TTLS, PEAP and LEAP. Your wireless LAN device may not support all authentication types. VSG1432-B101 Series User's Guide 371 - ZyXEL B-101 | User Guide - Page 372
802.1x transport mechanism in order to support multiple types of user authentication. By using A digital certificate is an electronic ID card that authenticates the sender's identity. However, overhead. EAP-TTLS (Tunneled Transport Layer Service) EAP-TTLS is an extension of B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 373
clients, thus hiding client identity. However, PEAP only supports EAP methods, such as EAP-MD5, EAP-MSCHAPv2 and EAP-GTC (EAP-Generic Token Card), for client authentication. EAP-GTC is implemented only by Moderate Yes LEAP Yes No No Yes Moderate Moderate No VSG1432-B101 Series User's Guide 373 - ZyXEL B-101 | User Guide - Page 374
WPA2 and WEP are improved data encryption and user authentication. If both an AP and the wireless clients support WPA2 and you have an external RADIUS server, use WPA2 for stronger data encryption. If you don't . This all happens in the background automatically. 374 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 375
and preauthentication. These two features are optional and may not be supported in all wireless devices. Key caching allows a wireless client to A wireless client supplicant is the software that runs on an operating system instructing the wireless client how to use WPA. At the time of writing, - ZyXEL B-101 | User Guide - Page 376
wireless clients. The Pre-Shared Key (PSK) must consist of between 8 and 63 ASCII characters or 64 hexadecimal characters (including spaces and symbols). 376 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 377
Table 129 Wireless Security Relational Matrix AUTHENTICATION METHOD/ KEY MANAGEMENT PROTOCOL ENCRYPTIO N METHOD ENTER MANUAL KEY IEEE 802.1X Open None No Disable Enable without Dynamic WEP Key Open WEP /AES No Enable WPA-PSK TKIP/AES Yes Disable VSG1432-B101 Series User's Guide 377 - ZyXEL B-101 | User Guide - Page 378
Security Relational Matrix (continued) AUTHENTICATION METHOD/ KEY MANAGEMENT PROTOCOL ENCRYPTIO N METHOD ENTER MANUAL KEY IEEE 802.1X WPA2 TKIP/AES No Enable WPA2-PSK TKIP/AES Yes Disable . dBi represents the true gain that the antenna provides. 378 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 379
close to the center of the coverage area as possible. For directional antennas, point the antenna in the direction of the desired coverage area. VSG1432-B101 Series User's Guide 379 - ZyXEL B-101 | User Guide - Page 380
Appendix D Wireless LANs 380 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 381
• Protocol: This is the type of IP protocol used by the service. If this is TCP/ UDP, then the service uses the same port number with TCP and UDP. If this is explanation of the applications that use this service or the situations in which this service is used. VSG1432-B101 Series User's Guide 381 - ZyXEL B-101 | User Guide - Page 382
popular videoconferencing solution from White Pines Software. Domain Name Server, a service that matches web names (for instance www.zyxel.com) to IP numbers. The IPSEC ESP (Encapsulation Security Protocol over SSL. This is another popular Internet chat program. 382 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 383
real time sound over the web. Remote Execution Daemon. Remote Login. This is an ISP that provides services mainly for cable modems. Remote Telnet. The Real Time Streaming (media control) Protocol (RTSP) is a remote control for multimedia on the Internet. VSG1432-B101 Series User's Guide 383 - ZyXEL B-101 | User Guide - Page 384
, including mainframes, midrange systems, UNIX systems and network servers. The Simple Service Discovery Protocol supports Universal Plug-and-Play (UPnP). Secure Shell Remote Login Program. Stream Works The UDP port number is specified in the application. 384 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 385
APPENDIX F Open Software Announcements End-User License Agreement for "VSG1432-B101" WARNING: ZyXEL Communications Corp. IS WILLING TO LICENSE THE SOFTWARE TO YOU ONLY UPON THE CONDITION specified in sales order and invoice. You have the right to make one VSG1432-B101 Series User's Guide 385 - ZyXEL B-101 | User Guide - Page 386
operation of a service bureau or for terms. ZyXEL has provided support for such software other than compliance with the applicable license terms of such third party, and makes no warranty (express, implied or statutory) whatsoever with respect thereto. Please 386 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 387
directly for technical support and customer service related to its software and products. 5.Confidentiality You acknowledge that the Software contains proprietary trade secrets of ZyXEL and you SOME STATES/COUNTRIES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF VSG1432-B101 Series User's Guide 387 - ZyXEL B-101 | User Guide - Page 388
ZyXEL 9.Audit Rights ZyXEL SHALL HAVE ZyXEL all copies of the Software and Documentation in your possession or under your control. ZyXEL may terminate this License Agreement for any reason, including, but not limited to, if ZyXEL to ZyXEL all copies ZyXEL. Any waiver or modification of - ZyXEL B-101 | User Guide - Page 389
the applicable product or software, we will give to anyone who contacts us at the ZyXEL Technical Support ([email protected]), for a charge of no more than our cost of physically performing source Inc. 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA VSG1432-B101 Series User's Guide 389 - ZyXEL B-101 | User Guide - Page 390
the freedom to distribute copies of free software (and charge for this service if you wish), that you receive source code or can get know that what they have is not the original, so that any problems introduced by others will not reflect on the original authors' reputations. B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 391
itself is interactive but does not normally print such an announcement, your work based on the Program is not required to print an announcement.) VSG1432-B101 Series User's Guide 391 - ZyXEL B-101 | User Guide - Page 392
counts as distribution of the source code, even though third parties are not compelled to copy the source along with the object code. 392 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 393
distribution and/or use of the Program is restricted in certain countries either by patents or by copyrighted interfaces, the original copyright holder who VSG1432-B101 Series User's Guide 393 - ZyXEL B-101 | User Guide - Page 394
the present version, but may differ in detail to address new problems or concerns. Each version is given a distinguishing version number. If THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION. 12. IN NO EVENT UNLESS REQUIRED BY B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 395
-to-Point Protocol (PPP) to provide Internet connections over serial lines. ppp-2.4 currently supports Linux and Solaris. All of the code here can be freely used and redistributed. Theindividual , INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, VSG1432-B101 Series User's Guide 395 - ZyXEL B-101 | User Guide - Page 396
, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 397
photocopying, manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation. All rights reserved. Disclaimer ZyXEL does conditions: • This device may not cause harmful interference. VSG1432-B101 Series User's Guide 397 - ZyXEL B-101 | User Guide - Page 398
radiate radio frequency energy, and if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that maintained between the antenna of this device and all persons. 注意 ! VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 399
Go to http://www.zyxel.com. 2 Select your product on the ZyXEL home page to go to from this page. ZyXEL Limited Warranty ZyXEL warrants to the original faulty workmanship and/or materials, ZyXEL will, at its discretion, will be solely at the discretion of ZyXEL. This warranty shall not apply if - ZyXEL B-101 | User Guide - Page 400
of any kind to the purchaser. To obtain the services of this warranty, contact ZyXEL's Service Center for your Return Material Authorization number (RMA). information at www.zyxel.com for global products, or at www.us.zyxel.com for North American products. 400 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 401
287 activation firewalls 217 SIP ALG 186 SSID 101 Address Resolution Protocol 267 administrator password 34 ADSL Server, see ACS 287 B backup configuration 301 VSG1432-B101 Series User's Guide Index Index Basic Service Set, See BSS 365 Basic Service Set, see BSS blinking LEDs 30 broadcast 76 BSS - ZyXEL B-101 | User Guide - Page 402
143 Domain Name 190 Domain Name System, see DNS DoS 216 DS field 167 DS, dee differentiated services DSCP 167 dynamic DNS 194 wildcard 194 Dynamic Host Configuration Protocol, see DHCP dynamic WEP key exchange 373 FTP 176, 190 G General wireless LAN screen 92 402 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 403
v2 319 IKE phases 259 ILA 188 importing certificates 237 Independent Basic Service Set See IBSS 365 initialization vector (IV) 374 Inside Global Group Multicast Protocol, see IGMP Internet Key Exchange 259 VSG1432-B101 Series User's Guide Index Internet Protocol Security, see IPSec IP address 76, - ZyXEL B-101 | User Guide - Page 404
ILA 188 inside 188 IPSec 260 local 188 outside 188 port forwarding 176 port number 190 services 190 SIP ALG 186 activation 186 traversal 261 NAT example 191 negotiation mode 260 Network Address Translation see 151, 167 marking 152 setup 151 tagging 152 versus CoS 152 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 405
94, 102 Services 190 setup VSG1432-B101 Series User's Guide Index firewalls 217 static route 149, 196, 285 shaping traffic 88 Single Rate Three Color Marker, see srTCM SIP ALG 186 activation 186 SMTP 190 SNMP 190, 319 SNMP trap 191 SPI 216, 253 srTCM 169 SSID 114 activation 101 MBSSID 118 static - ZyXEL B-101 | User Guide - Page 406
75 IGMP 76 IP address 76, 87 multicast 76 multiplexing 87 status 71 traffic shaping 88 example 88 VCI 87 VPI 87 warranty 399 VSG1432-B101 Series User's Guide - ZyXEL B-101 | User Guide - Page 407
RADIUS server 115 RTS/CTS threshold 110, 113 security 114 SSID 114 activation 101 status 72 WDS 107, 119 compatibility 107 example 119 WEP 116 WPA 116 369 Wireless tutorial 48 wizard setup Internet 41 VSG1432-B101 Series User's Guide Index WLAN interference 367 security parameters 377 WPA 116, - ZyXEL B-101 | User Guide - Page 408
Index 408 VSG1432-B101 Series User's Guide
-
1 -
2 -
3 -
4 -
5 -
6 -
7 -
8
-
9
-
10
-
11
-
12
-
13
-
14
-
15
-
16
-
17
-
18
-
19
-
20
-
21
-
22
-
23
-
24
-
25
-
26
-
27
-
28
-
29
-
30
-
31
-
32
-
33
-
34
-
35
-
36
-
37
-
38
-
39
-
40
-
41
-
42
-
43
-
44
-
45
-
46
-
47
-
48
-
49
-
50
-
51
-
52
-
53
-
54
-
55
-
56
-
57
-
58
-
59
-
60
-
61
-
62
-
63
-
64
-
65
-
66
-
67
-
68
-
69
-
70
-
71
-
72
-
73
-
74
-
75
-
76
-
77
-
78
-
79
-
80
-
81
-
82
-
83
-
84
-
85
-
86
-
87
-
88
-
89
-
90
-
91
-
92
-
93
-
94
-
95
-
96
-
97
-
98
-
99
-
100
-
101
-
102
-
103
-
104
-
105
-
106
-
107
-
108
-
109
-
110
-
111
-
112
-
113
-
114
-
115
-
116
-
117
-
118
-
119
-
120
-
121
-
122
-
123
-
124
-
125
-
126
-
127
-
128
-
129
-
130
-
131
-
132
-
133
-
134
-
135
-
136
-
137
-
138
-
139
-
140
-
141
-
142
-
143
-
144
-
145
-
146
-
147
-
148
-
149
-
150
-
151
-
152
-
153
-
154
-
155
-
156
-
157
-
158
-
159
-
160
-
161
-
162
-
163
-
164
-
165
-
166
-
167
-
168
-
169
-
170
-
171
-
172
-
173
-
174
-
175
-
176
-
177
-
178
-
179
-
180
-
181
-
182
-
183
-
184
-
185
-
186
-
187
-
188
-
189
-
190
-
191
-
192
-
193
-
194
-
195
-
196
-
197
-
198
-
199
-
200
-
201
-
202
-
203
-
204
-
205
-
206
-
207
-
208
-
209
-
210
-
211
-
212
-
213
-
214
-
215
-
216
-
217
-
218
-
219
-
220
-
221
-
222
-
223
-
224
-
225
-
226
-
227
-
228
-
229
-
230
-
231
-
232
-
233
-
234
-
235
-
236
-
237
-
238
-
239
-
240
-
241
-
242
-
243
-
244
-
245
-
246
-
247
-
248
-
249
-
250
-
251
-
252
-
253
-
254
-
255
-
256
-
257
-
258
-
259
-
260
-
261
-
262
-
263
-
264
-
265
-
266
-
267
-
268
-
269
-
270
-
271
-
272
-
273
-
274
-
275
-
276
-
277
-
278
-
279
-
280
-
281
-
282
-
283
-
284
-
285
-
286
-
287
-
288
-
289
-
290
-
291
-
292
-
293
-
294
-
295
-
296
-
297
-
298
-
299
-
300
-
301
-
302
-
303
-
304
-
305
-
306
-
307
-
308
-
309
-
310
-
311
-
312
-
313
-
314
-
315
-
316
-
317
-
318
-
319
-
320
-
321
-
322
-
323
-
324
-
325
-
326
-
327
-
328
-
329
-
330
-
331
-
332
-
333
-
334
-
335
-
336
-
337
-
338
-
339
-
340
-
341
-
342
-
343
-
344
-
345
-
346
-
347
-
348
-
349
-
350
-
351
-
352
-
353
-
354
-
355
-
356
-
357
-
358
-
359
-
360
-
361
-
362
-
363
-
364
-
365
-
366
-
367
-
368
-
369
-
370
-
371
-
372
-
373
-
374
-
375
-
376
-
377
-
378
-
379
-
380
-
381
-
382
-
383
-
384
-
385
-
386
-
387
-
388
-
389
-
390
-
391
-
392
-
393
-
394
-
395
-
396
-
397
-
398
-
399
-
400
-
401
-
402
-
403
-
404
-
405
-
406
-
407
-
408
 |
 |
www.zyxel.com
www.zyxel.com
VSG1432-B101 Series
802.11n Wireless VDSL2 4-port Gateway
Copyright © 2010
ZyXEL Communications Corporation
Firmware Version 1.10
Edition 1, 11/2010
Default Login Details
IP Address
User Name
admin
Password
1234