ZyXEL VSG1432-B101 User Guide
ZyXEL VSG1432-B101 Manual
 |
View all ZyXEL VSG1432-B101 manuals
Add to My Manuals
Save this manual to your list of manuals |
ZyXEL VSG1432-B101 manual content summary:
- ZyXEL VSG1432-B101 | User Guide - Page 1
VSG1432-B101 Series 802.11n Wireless VDSL2 4-port Gateway Default Login Details IP Address http://192.168.1.1 User Name admin Password 1234 Firmware Version 1.10 Edition 1, 11/2010 www.zyxel.com www.zyxel.com Copyright © 2010 ZyXEL Communications Corporation - ZyXEL VSG1432-B101 | User Guide - Page 2
- ZyXEL VSG1432-B101 | User Guide - Page 3
About This User's Guide About This User's Guide Intended Audience This manual is intended for people who want to configure the ZyXEL Device using the web configurator. You should have at least a basic knowledge of TCP/IP networking concepts and topology. Related Documentation • Quick Start Guide The - ZyXEL VSG1432-B101 | User Guide - Page 4
this book may differ slightly from the product due to differences in operating systems, operating system versions, or if you installed updated firmware/software for your device. Every effort has been made to ensure that the information in this manual is accurate. 4 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 5
(for example, other things you may need to configure or helpful tips) or recommendations. Syntax Conventions • The VSG1432-B101 may be referred to as the "ZyXEL Device", the "device", the "system" or the "product" in this User's Guide. • Product labels, screen names, field labels and field - ZyXEL VSG1432-B101 | User Guide - Page 6
Conventions Icons Used in Figures Figures in this User's Guide may use the following generic icons. The ZyXEL Device icon is not an exact representation of your device. ZyXEL Device Computer Notebook computer Server Firewall Telephone Router Switch 6 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 7
to the correct ports. • Place connecting cables carefully so that no one will step on them or stumble over them. • Always disconnect all cables from this device before servicing or disassembling. electrical and electronic equipment should be treated separately. VSG1432-B101 Series User's Guide 7 - ZyXEL VSG1432-B101 | User Guide - Page 8
Safety Warnings 8 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 9
User's Guide ...21 Introducing the VSG1432-B101 23 The Web Configurator ...33 Quick Start ...41 Tutorials ...43 Technical Reference ...67 Network Map and Status Screens 69 Broadband ...75 Wireless ...91 Home Networking ...127 Static Routing ...147 Quality of Service (QoS) ...151 Policy Forwarding - ZyXEL VSG1432-B101 | User Guide - Page 10
Contents Overview 10 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 11
for the ZyXEL Device 24 1.4.1 Internet Access ...24 1.4.2 ZyXEL Device's USB Support 25 1.5 Hardware Setup ...26 1.6 Hardware Connections ...28 1.7 LEDs (Lights) ...29 1.8 The RESET Button ...31 1.9 Wireless Access ...31 1.9.1 Using the WLAN/WPS Button 31 Chapter 2 The Web Configurator ...33 - ZyXEL VSG1432-B101 | User Guide - Page 12
WPS ...48 4.3.3 Without WPS ...52 4.4 Setting Up Multiple Wireless Groups 53 4.5 Setting Up NAT Port Forwarding 56 4.6 Configuring Static Route for Routing to Another Network 58 4.7 Configuring QoS Queue and Class Setup 60 4.8 Access the ZyXEL and VCI ...87 12 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 13
7.9.9 WiFi Protected Setup (WPS 120 Chapter 8 Home Networking ...127 8.1 Overview ...127 8.1.1 What You Can Do in this Chapter 127 8.1.2 What You Need To Know 128 8.1.3 Before You Begin ...129 8.2 The LAN Setup Screen ...130 8.3 The Static DHCP Screen 132 VSG1432-B101 Series User's Guide 13 - ZyXEL VSG1432-B101 | User Guide - Page 14
11.2.1 Add/Edit Policy Forwarding 172 Chapter 12 Network Address Translation (NAT 175 12.1 Overview ...175 12.1.1 What You Can Do in this Chapter 175 12.1.2 What You Need To Know 175 12.2 The Port Forwarding Screen 176 12.2.1 Add/Edit Port Forwarding 178 14 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 15
.4 IGMP ACL Configuration 209 14.4.1 IGMP ACL Add ...210 Chapter 15 Interface Group ...211 15.1 Overview ...211 15.1.1 What You Can Do in this Chapter 211 15.2 The Interface Group Screen 211 15.2.1 Interface Group Configuration 213 Chapter 16 Firewall...215 VSG1432-B101 Series User's Guide 15 - ZyXEL VSG1432-B101 | User Guide - Page 16
.4 The Trusted CA Screen 241 20.4.1 View Trusted CA Certificate 242 20.4.2 Import Trusted CA Certificate 243 Chapter 21 IPSec ...245 21.1 Overview ...245 16 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 17
Configuring Manual Key 254 21.4 Technical Reference ...256 21.4.1 IPSec Architecture 257 21.4.2 Encapsulation ...258 21.4.3 IKE Phases ...259 21.4.4 Negotiation Mode 260 21.4.5 IPSec and NAT ...260 21.4.6 VPN, NAT, and NAT 274 25.3 The LAN Status Screen 276 VSG1432-B101 Series User's Guide 17 - ZyXEL VSG1432-B101 | User Guide - Page 18
Log Settings Screen 295 30.2.1 Example E-mail Log 297 Chapter 31 Firmware Upgrade ...299 31.1 Overview ...299 31.2 The Firmware Screen ...299 Chapter 32 Configuration ...301 32.1 Overview ...301 32.2 The Configuration Screen 301 32.3 The Reboot Screen ...304 18 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 19
321 Appendix B IP Addresses and Subnetting 345 Appendix C Pop-up Windows, JavaScripts and Java Permissions 355 Appendix D Wireless LANs 365 Appendix E Services ...381 Appendix F Open Software Announcements 385 Appendix G Legal Information 397 Index...401 VSG1432-B101 Series User's Guide 19 - ZyXEL VSG1432-B101 | User Guide - Page 20
Table of Contents 20 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 21
PART I User's Guide 21 - ZyXEL VSG1432-B101 | User Guide - Page 22
22 - ZyXEL VSG1432-B101 | User Guide - Page 23
1 Introducing the VSG1432-B101 1.1 Overview The VSG1432-B101 is a wireless VDSL router and Gigabit Ethernet gateway. It has a DSL port and a Gigabit Ethernet port for super-fast Internet access over analog (POTS) telephone lines. The ZyXEL Device supports both Packet Transfer Mode (PTM) and - ZyXEL VSG1432-B101 | User Guide - Page 24
in ADSL, VDSL and Ethernet WAN mode at the same time. Note: The ADSL, VDSL and Ethernet WAN lines share the same five WAN (layer-2) interfaces that you configure in the ZyXEL Device. Refer to Section 6.2 on page 77 for the Network Settings> Broadband screen. 24 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 25
default unless it is initiated from your network. This means that probes from the outside to your network are not allowed, but you can safely browse the Internet and download files. 1.4.2 ZyXEL Device's USB Support The USB port of the ZyXEL Device is used for file-sharing. VSG1432-B101 Series User - ZyXEL VSG1432-B101 | User Guide - Page 26
FTP to access the files on the USB device. Figure 2 USB File Sharing Application B A 1.5 Hardware Setup Place the ZyXEL Device flat on a desk or table or on the stand for a vertical installation. Remove the ZyXEL Device's clear plastic covers before using it. 26 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 27
Chapter 1 Introducing the VSG1432-B101 To connect the stand, line up the arrow on the stand with the arrow on the bottom of the device as shown. Figure 3 Connecting the Stand VSG1432-B101 Series User's Guide 27 - ZyXEL VSG1432-B101 | User Guide - Page 28
your ZyXEL Device's DSL WAN port to a telephone jack (or the DSL or modem jack on a splitter if you have one). 2b ETHERNET WAN: If you already have a broadband router or modem, use an Ethernet cable to connect the ETHERNET WAN port to it for Internet access. 28 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 29
Chapter 1 Introducing the VSG1432-B101 3 LAN: Use an Ethernet cable to connect a computer to a LAN port for initial configuration and/or Internet access. 4 USB: Connect a USB (version 2.0 or lower) memory stick the labels of the LEDs. Figure 5 LEDs on the Device VSG1432-B101 Series User's Guide 29 - ZyXEL VSG1432-B101 | User Guide - Page 30
traffic. There is no Internet connection or the gateway is in bridged mode. The wireless network is activated. The ZyXEL Device is communicating with other wireless clients. The ZyXEL Device is setting up a WPS connection. The wireless network is not activated. 30 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 31
1 Introducing the VSG1432-B101 1.8 The RESET Button If you forget your password or cannot access the web configurator, you will need to use the RESET button at the back of the device to reload the factory-default configuration file. This means that you will lose all configurations that you had - ZyXEL VSG1432-B101 | User Guide - Page 32
device. 4 Once the connection is successfully made, the WLAN/WPS LED shines green. To turn off the wireless network, press the WLAN/WPS button on the front of the ZyXEL Device for one to five seconds. The WLAN/WPS LED turns off when the wireless network is off. 32 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 33
Start Guide). 2 Launch your web browser. If the ZyXEL Device does not automatically re-direct you to the login screen, go to http://192.168.1.1. 3 A password screen displays. To access the administrative web configurator and manage the ZyXEL Device, type the default username admin and password 1234 - ZyXEL VSG1432-B101 | User Guide - Page 34
Web Configurator enter your password and click Login. For security reasons, you will be temporarily denied access to the ZyXEL Device for a period of time (15 minutes by default) if you have entered the incorrect username and password for a certain number of times (three times by default). Figure - ZyXEL VSG1432-B101 | User Guide - Page 35
, the ZyXEL Device automatically logs you out if you do not use the web configurator for ten minutes (default). If this happens, log in again. 7 Click Status to display the Status screen, where you can view the ZyXEL Device's interface and system information. VSG1432-B101 Series User's Guide 35 - ZyXEL VSG1432-B101 | User Guide - Page 36
2.2 Web Configurator Layout Figure 11 Screen Layout A B C As illustrated above, the main screen is divided into these parts: • A - title bar • B - main window • C - navigation panel 2.2.1 Title Bar The title bar provides some icons in the upper right corner. 36 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 37
Wi-Fi Protected Setup) settings. WMM Use this screen to enable or disable Wi-Fi MultiMedia (WMM). WDS Use this screen to set up Wireless Distribution System (WDS) links to other access points. Others Use this screen to configure advanced wireless settings. VSG1432-B101 Series User's Guide 37 - ZyXEL VSG1432-B101 | User Guide - Page 38
change your ZyXEL Device's port triggering settings. DMZ Use this screen to configure a default server which receives packets from ports that are not specified in the Port Forwarding screen. ALG Use this screen to enable or disable SIP ALG. Sessions Use this screen to limit the number of NAT - ZyXEL VSG1432-B101 | User Guide - Page 39
Log Setting Use this screen to change your ZyXEL Device's log settings. Firmware Upgrade Use this screen to upload firmware to your device. Configuration Use this screen to backup and restore your device's configuration (settings) or reset the factory default settings. Reboot Use this screen - ZyXEL VSG1432-B101 | User Guide - Page 40
Chapter 2 The Web Configurator 40 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 41
on the features in this chapter. 3.2 Quick Start Setup 1 Click the Click Start icon in the top right corner of the web configurator to open the quick start screens. Select the time zone of the ZyXEL Device's location and click Next. Figure 12 Time Zone VSG1432-B101 Series User's Guide 41 - ZyXEL VSG1432-B101 | User Guide - Page 42
LAN on or off. If you keep it on, record the security settings so you can configure your wireless clients to connect to the ZyXEL Device. Click Save. Figure 14 Internet Connection 4 Your ZyXEL Device saves your settings and attempts to connect to the Internet. 42 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 43
Internet Service Provider (ISP) to configure the ZyXEL Device. Be sure to contact your service provider for any information you need to configure the Broadband screens. 1 Click Network Settings > Broadband to open the following screen. Click Add New WAN Interface. VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 44
ATM PVC Configuration VPI/VCI 36/48 Encapsulation Mode LLC/SNAP-Bridging Service Category UBR without PCR Account Information PPP User Name [email protected] PPP Password ABCDEF! PPPoE Service Name My DSL Static IP Address 192.168.1.32 Others PPPoE Passthrough: Disabled NAT: Enabled - ZyXEL VSG1432-B101 | User Guide - Page 45
6 Click Apply to save your settings. Chapter 4 Tutorials 7 You should see a summary of your new DSL connection setup in the Broadband screen as follows. VSG1432-B101 Series User's Guide 45 - ZyXEL VSG1432-B101 | User Guide - Page 46
(Section 4.3.3 on page 52). 4.3.1 Configuring the Wireless Network Settings This example uses the following parameters to set up a wireless network. SSID Security Mode Pre-Shared Key 802.11 Mode Example WPA-PSK DoNotStealMyWirelessNetwork 802.11b/g/n Mixed 46 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 47
and WPA-PSK as the security mode. Configure the screen using the provided parameters Mode field. Click Apply. Thomas can now use the WPS feature to establish a wireless connection between his notebook and the ZyXEL Device (see Section 4.3.2 on page 48). He can also VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 48
same PIN in order to download the wireless network settings from the ZyXEL Device. Push Button Configuration (PBC) 1 Make sure that your ZyXEL Device is turned on and utility, go to the WPS setting page. Enable WPS and press the WPS button (Start or WPS button). 48 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 49
the second button within two minutes of pressing the first one. The ZyXEL Device sends the proper configuration settings to the wireless client. This may take up to two minutes. The wireless client is then able to communicate with the ZyXEL Device securely. VSG1432-B101 Series User's Guide 49 - ZyXEL VSG1432-B101 | User Guide - Page 50
of how to set up a wireless network and its security by pressing a button on both ZyXEL Device and wireless client. Example WPS Process: PBC Method Wireless Client ZyXEL Device WITHIN 2 MINUTES WPS SECURITY INFO Press and hold for 5 seconds COMMUNICATION 50 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 51
screen within two minutes. The ZyXEL Device authenticates the wireless client and sends the proper configuration settings to the wireless client. This may take up to two minutes. The wireless client is then able to communicate with the ZyXEL Device securely. VSG1432-B101 Series User's Guide 51 - ZyXEL VSG1432-B101 | User Guide - Page 52
by PIN SECURITY INFO COMMUNICATION 4.3.3 Without WPS Use the wireless adapter's utility installed on the notebook to search for the "Example" SSID. Then enter the "DoNotStealMyWirelessNetwork" pre-shared key to establish an wireless Internet connection. 52 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 53
Company A will use the following parameters to set up the wireless network groups. SSID Security Level Security Mode Pre-Shared Key COMPANY Company More Secure WPA2-PSK ForCompanyOnly VIP VIP More Secure WPA2-PSK ForVIPOnly GUEST Guest Basic Static WEP Guest VSG1432-B101 Series User's Guide 53 - ZyXEL VSG1432-B101 | User Guide - Page 54
up the company's general wireless network group. Configure the screen using the provided parameters and click Apply. 2 Click Network Settings > Wireless > More AP to open the following screen. Click the Edit icon to configure the second wireless network group. 54 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 55
Chapter 4 Tutorials 3 Configure the screen using the provided parameters and click Apply. 4 In the More AP screen, click the Edit icon to configure the third wireless network group. VSG1432-B101 Series User's Guide 55 - ZyXEL VSG1432-B101 | User Guide - Page 56
Up NAT Port Forwarding Thomas manages the Doom server on a computer behind the ZyXEL Device. In order for players on the Internet (like A in the figure below) to communicate with the Doom server, Thomas needs to configure the port settings and IP address on 56 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 57
4 Tutorials the ZyXEL Device. Traffic should be forwarded to the port 666 of the Doom server computer which has an IP address of 192.168.1.34. Tutorial: NAT Port Forwarding Setup D=192.168.1.34 LAN port 666 WAN A Thomas may set up the port settings by configuring the port settings for the - ZyXEL VSG1432-B101 | User Guide - Page 58
Chapter 4 Tutorials 3 The port forwarding settings you configured appear in the table. The ZyXEL Device forwards port 666 traffic to the computer with IP address 192.168.1.34. Players on the Internet then can have access to Thomas' Doom server. 4.6 Configuring Static Route for Routing to Another - ZyXEL VSG1432-B101 | User Guide - Page 59
to route traffic from N1 to N2: 1 Log into the ZyXEL Device's Web Configurator in advanced mode. 2 Click Advanced > Routing. 3 Click Add New Static Route Entry in the Static Route screen. 4 Configure the Static Route Setup screen using the following settings: VSG1432-B101 Series User's Guide 59 - ZyXEL VSG1432-B101 | User Guide - Page 60
e-mail traffic going to the WAN interface, so that e-mail traffic would not get delayed when there is network congestion. • Note the IP address (192.168.1.23 for example) and/or MAC address (AA:FF:AA:FF:AA:FF for example) of your computer and map it to queue 7. 60 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 61
on the ZyXEL Device. QoS Example DSL 10,000 kbps Your computer IP=192. Setup > Add new Queue to create a new queue. In the screen that opens, check Active and enter or select the following values: • Name: E-mail • To Interface: WAN • Priority: 1 (High) • Weight: 8 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 62
Chapter 4 Tutorials • Rate Limit: 5,000 (kbps) Tutorial: Advanced > QoS > Queue Setup 3 Click Class Setup > Add new Classifier to create a new class. Check Active and follow the settings as shown in the screen below. Tutorial: Advanced > QoS > Class Setup 62 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 63
(DDNS) allows you to access the ZyXEL Device using a domain name. http://zyxelrouter.dyndns.org w.x.y.z A a.b.c.d To use this feature, you have to apply for DDNS service at www.dyndns.org. This tutorial covers: • Registering a DDNS Account on www.dyndns.org VSG1432-B101 Series User's Guide 63 - ZyXEL VSG1432-B101 | User Guide - Page 64
. 4.8.2 Configuring DDNS on Your ZyXEL Device Configure the following settings in the Advanced > DNS Setting > Dynamic DNS screen. • Select Enable Dynamic DNS. • Select DynDNS.org as the service provider. • Type zyxelrouter.dyndns.org in the Host Name field. 64 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 65
• Enter the user name (UserName1) and password (12345). Click Apply. 4.8.3 Testing the DDNS Setting Now you should be able to access the ZyXEL Device from the Internet. To test this: 1 Open a web browser on the computer (using the IP address a.b.c.d) that is connected to the Internet. 2 Type http - ZyXEL VSG1432-B101 | User Guide - Page 66
IP address of the ZyXEL Device (the default is 192.168.1.1), your account's user name and password and port 21 and click Quickconnect. A screen asking for password authentication appears. File Sharing via Windows Explorer Once you log in the USB device displays in the mnt folder. 66 VSG1432-B101 - ZyXEL VSG1432-B101 | User Guide - Page 67
PART II Technical Reference 67 - ZyXEL VSG1432-B101 | User Guide - Page 68
68 - ZyXEL VSG1432-B101 | User Guide - Page 69
current status of the ZyXEL Device, system resources, and interfaces (LAN, WAN, and WLAN). 5.2 The Network Map Screen Use this screen to view the network connection status of the device and its clients. A warning message appears if there is a connection problem. VSG1432-B101 Series User's Guide 69 - ZyXEL VSG1432-B101 | User Guide - Page 70
client's name and Info. Click the IP address if you want to change it. If you want to change the name or icon of the client, click Change name/icon. In List Mode, you can also view the client's information and click on the IP address if you want to change it. 70 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 71
.) MAC Address This shows the WAN Ethernet adapter MAC (Media Access Control) Address of your device. IP Address This field is available only when your WAN type is IPoE or PPPoE. This field displays the current IP address of the ZyXEL Device in the WAN. VSG1432-B101 Series User's Guide 71 - ZyXEL VSG1432-B101 | User Guide - Page 72
is using in the wireless LAN. 802.11 Mode This displays the type of 802.11 mode the ZyXEL Device is using in the wireless LAN. WPS This displays whether WPS is activated. Interface Status Interface This column displays each interface the ZyXEL Device has. 72 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 73
. For the LAN interface, this displays the port speed and duplex setting. For the DSL interface ZyXEL Device is probably becoming unstable, and you should restart the device. See Section 32.2 on page 301, or turn off the device (unplug the power) for a few seconds. VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 74
Chapter 5 Network Map and Status Screens 74 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 75
the same encapsulation method used by your ISP (Internet Service Provider). If your ISP offers a dial-up Internet connection using PPPoE (PPP over Ethernet) or PPPoA, they should also provide a username and password (and service name) for user authentication. VSG1432-B101 Series User's Guide 75 - ZyXEL VSG1432-B101 | User Guide - Page 76
in wide use. Finding Out More See Section 6.3 on page 86 for technical background information on WAN. 6.1.2 Before You Begin You need to know your Internet access settings such as encapsulation and WAN IP address. Get this information from your ISP. 76 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 77
is the service name of the Default Gateway This shows whether the ZyXEL Device use the WAN interface of this connection as the system default gateway. Modify Click the Edit icon to configure the WAN connection. Click the Delete icon to remove the WAN connection. VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 78
PPPoE directly on the ZyXEL Device (rather than individual computers), the computers on the LAN do not need PPPoE software installed, since the ZyXEL Device does that part of the task. Furthermore, with NAT, all of the LANs' computers will have access. 78 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 79
Chapter 6 Broadband This screen displays when you select the Routing mode and PPPoE encapsulation. Figure 20 Broadband: Add/Edit: ADSL, PPPoE Encapsulation VSG1432-B101 Series User's Guide 79 - ZyXEL VSG1432-B101 | User Guide - Page 80
VLAN IDs for different services. EoA supports ENET ENCAP (IPoE), PPPoE and RFC1483/2684 bridging encapsulation methods. PPPoA (PPP over ATM) allows just one PPPoA connection over a PVC. IPoA (IP over ATM) allows just one RFC 1483 routing connection over a PVC. 80 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 81
PPP Username Enter the user name exactly as your ISP assigned. If assigned a name in the form user@domain where domain identifies a service name, then enter both components exactly as given. PPP Password Enter the password associated with the user name above. VSG1432-B101 Series User's Guide 81 - ZyXEL VSG1432-B101 | User Guide - Page 82
. Apply as Default Select this option to have the ZyXEL Device use the WAN interface of Gateway this connection as the system default gateway. DNS Server This is available only when you select Apply as Default Gateway in the Routing Feature field. 82 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 83
) for traffic through this connection. Click Apply to save your changes back to the ZyXEL Device. Click Cancel to exit this screen without saving. 6.2.2.1 Bridge This screen displays when you select the Bridge mode. Figure 21 Broadband: Add/Edit: Bridge Mode VSG1432-B101 Series User's Guide 83 - ZyXEL VSG1432-B101 | User Guide - Page 84
IP address from ISP's DHCP server directly. If you select Bridge, you cannot use routing functions, such as Firewall, DHCP server and NAT on traffic from the selected LAN port(s). ATM PVC Configuration require closely controlled delay and delay variation. 84 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 85
Bridge Mode than the PCR. Note that system default is 0 cells/sec. Maximum Burst Size frame that contains bits to define class of service. 802.1Q Apply Cancel Select the IEEE changes back to the ZyXEL Device. Click Cancel to exit this screen without saving. VSG1432-B101 Series User's Guide 85 - ZyXEL VSG1432-B101 | User Guide - Page 86
and sends it through an ATM PVC (Permanent Virtual Circuit) to the Internet Service Provider's (ISP) DSLAM (Digital Subscriber Line (DSL) Access Multiplexer). Please refer to RFC 2364 for more information on PPPoA. Refer to RFC 1661 for more information on PPP. 86 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 87
. IP Assignment with PPPoA or PPPoE Encapsulation If you have a dynamic IP, then the IP Address and Gateway IP Address fields are not applicable (N/A). If you have a static IP, then you only need to fill in the IP Address field and not the Gateway IP Address field. VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 88
PCR again. If the PCR, SCR or MBS is set to the default of "0", the system will assign a maximum value that correlates to your upstream line rate. The following figure illustrates the relationship between PCR, SCR and MBS. Figure 22 Example of Traffic Shaping 88 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 89
real-time data transfers and the bandwidth requirement varies in proportion to the video image's changing dynamics. The VBR-nRT (non real-time Variable Bit Rate) type is used with that are not in the same group(s); the traffic must first go through a router. VSG1432-B101 Series User's Guide 89 - ZyXEL VSG1432-B101 | User Guide - Page 90
Information), starts after the source address field of the Ethernet frame). port has a CFI set to 1, then that frame should not be forwarded as it is to an untagged port configurations are 4,094. TPID User Priority 2 Bytes 3 Bits CFI VLAN ID 1 Bit 12 Bits 90 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 91
set up a Wireless Distribution System, in which the ZyXEL Device acts as a bridge with other ZyXEL access points (Section 7.7 on page 107). • Use the Others screen to configure wireless advanced features, such as the RTS/CTS Threshold (Section 7.8 on page 110). VSG1432-B101 Series User's Guide 91 - ZyXEL VSG1432-B101 | User Guide - Page 92
the wireless LAN and you change the ZyXEL Device's SSID, channel or security settings, you will lose your wireless connection when you press Apply to confirm. You must then change the wireless settings of your computer to match the ZyXEL Device's new settings. 92 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 93
Setup Wireless ZyXEL Device automatically determine a channel to use. If you are having problems with wireless interference, changing ZyXEL Device is currently using then displays next to this field. Click more... to show more information. Click less to hide them. VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 94
ZyXEL Device generate a password, the setting in this field determines how the ZyXEL Device generates the password. Select None to set the ZyXEL Device's password clients must also support 40 MHz. It Service Set IDentity) identifies the service ZyXEL Device. 94 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 95
the access points without any data encryption or authentication. Note: If you do not enable any wireless security on your ZyXEL Device, your network is accessible to any wireless networking device that is within range. Figure 24 Wireless > General: No Security VSG1432-B101 Series User's Guide 95 - ZyXEL VSG1432-B101 | User Guide - Page 96
128-bit WEP keys but only one key can be enabled at any one time. In order to configure and enable WEP encryption, click Network Settings > Wireless to display the General screen, then select Basic as the security level. Figure 25 Wireless > General: Basic (WEP) 96 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 97
one password can be activated at any one time. The default password is Passowrd 1. Click more... to show more fields in this section. Click less to hide them. Select 64-bits or 128-bits. This dictates the length of the security key that the network is going to use. VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 98
the two is that WPA(2)-PSK uses a simple common password, instead of user-specific credentials. more.../less Type a pre-shared key from 8 to 64 case-sensitive keyboard characters. Click more... to show more fields in this section. Click less to hide them. 98 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 99
. The WPA security mode is a security subset of WPA2. It requires the presence of a RADIUS server on your network in order to validate user credentials. This encryption standard is slightly older than WPA2 and therefore is more compatible with older devices. VSG1432-B101 Series User's Guide 99 - ZyXEL VSG1432-B101 | User Guide - Page 100
and your ZyXEL Device. The key is not sent over the network. Click more... to show more fields in this section. Click less to hide them. This field is only available for WPA2. Select this if you want the ZyXEL Device to support WPA and WPA2 simultaneously. 100 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 101
Update Timer is the rate at which the RADIUS server sends a new group key out to all clients. 7.3 The More AP Screen This screen allows you to enable and configure multiple Basic Service Sets (BSSs) on the ZyXEL gray bulb signifies that this SSID is not active. VSG1432-B101 Series User's Guide 101 - ZyXEL VSG1432-B101 | User Guide - Page 102
(Service Set IDentity) identifies the service set with which a wireless device is associated. Wireless devices associating to the access point (AP) must have the same SSID. Enter a descriptive name (up to 32 English keyboard characters) for the wireless LAN. 102 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 103
device has a unique MAC (Media Access Control) address. The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02. You need to know the MAC addresses of the devices to configure this screen. VSG1432-B101 Series User's Guide 103 - ZyXEL VSG1432-B101 | User Guide - Page 104
the index number of the entry. This is the MAC addresses of the wireless devices that are allowed or denied access to the ZyXEL Device. Click the Delete icon to delete the entry. Click Apply to save your changes. Click Cancel to exit this screen without saving. 104 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 105
the labels in this screen. Table 17 Network Settings > Wireless > WPS LABEL DESCRIPTION Enable WPS Select Enable to activate WPS on the ZyXEL Device. Method 1 Use this section to set up a WPS wireless network using Push Button Configuration (PBC). VSG1432-B101 Series User's Guide 105 - ZyXEL VSG1432-B101 | User Guide - Page 106
ZyXEL Device create a new PIN. Click Apply to save your changes. Click Cancel to restore your previously saved settings. 7.6 The WMM Screen Use this screen to enable Wi-Fi MultiMedia (WMM) and WMM Power Save in wireless networks for multimedia applications. 106 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 107
made. Note: WDS security is independent of the security settings between the ZyXEL Device and any wireless clients. Note: At the time of writing, WDS is compatible with other ZyXEL APs only. Not all models support WDS links. Check your other AP's documentation. VSG1432-B101 Series User's Guide 107 - ZyXEL VSG1432-B101 | User Guide - Page 108
device. Modify You can connect to up to 4 peer devices. Click the Edit icon and type the MAC address of the peer device in a valid MAC address format (six hexadecimal character pairs, for example 12:34:56:78:9a:bc). Click the Delete icon to remove this entry. VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 109
SSID This shows the SSID of the available wireless device within range. BSSID This shows the MAC address of the available wireless device within range. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VSG1432-B101 Series User's Guide 109 - ZyXEL VSG1432-B101 | User Guide - Page 110
screen to configure advanced wireless for how often the ZyXEL Device scans for the best channel. Enter 0 to mode before waking up to handle the beacon. This value can be set from20ms to 1000ms. A high value helps save current consumption of the access point. 110 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 111
The transmission rate of your ZyXEL Device might be reduced in a mixed-mode network. Preamble This field displays Off and is not configurable when you set 802.11 Mode to 802.11b Only. Select networks consist of wireless clients, access points and bridges. VSG1432-B101 Series User's Guide 111 - ZyXEL VSG1432-B101 | User Guide - Page 112
or with the Internet. Your ZyXEL Device is the AP. Every wireless network must follow these basic guidelines. • Every device in the same wireless network must use the same SSID. The SSID is the name of the wireless network. It stands for Service Set IDentifier. 112 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 113
the ZyXEL Device. The process of verifying whether a wireless device is allowed to use the wireless network. A small fragmentation threshold is recommended for busy networks, while a larger threshold provides faster performance if the network is not very busy. VSG1432-B101 Series User's Guide 113 - ZyXEL VSG1432-B101 | User Guide - Page 114
that only people presenting the right credentials (often a username and password, or a "key" phrase) can access the ZyXEL Device acts like a beacon and regularly broadcasts the SSID in the area. You can hide the SSID instead, in which case the ZyXEL Device does 114 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 115
the wireless network has to support IEEE 802.1x to do this. For wireless networks, you can store the user names and passwords for each user in a RADIUS server. This MAC addresses. 2. Hexadecimal characters are 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, A, B, C, D, E, and F. VSG1432-B101 Series User's Guide 115 - ZyXEL VSG1432-B101 | User Guide - Page 116
login) and select the WPA compatible option in the ZyXEL Device. Many types of encryption use a key to protect the information in the wireless network. The longer the key, the stronger the encryption. Every device in the wireless network must have the same key. 116 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 117
are coincidental emitters such as electric motors or microwaves. Problems with absorption occur when physical objects (such as thick two radios, muffling the signal. 7.9.5 BSS A Basic Service Set (BSS) exists when all communications between wireless stations , VSG1432-B101 Series User's Guide 117 - ZyXEL VSG1432-B101 | User Guide - Page 118
to configure different Basic Service Sets (BSSs). As well as the cost of buying extra APs, there is also the possibility of channel interference. The ZyXEL Device's MBSSID (Multiple Basic Service Set but rather be used in conjunction with 802.1x security. 118 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 119
wired Internet connection, but it can establish a WDS link with access point AP 2, which has a wired Internet connection. When AP 1 has a WDS link with AP 2, the notebook computer can access the Internet through AP 2. Figure 38 WDS Link Example A WDS AP 1 AP 2 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 120
name (SSID) and security key through an secure connection to the enrollee. If you need to make sure that WPS worked, check the list of associated wireless clients in the AP's configuration utility. If you see the wireless client in the list, WPS was successful. 120 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 121
the wireless client, try to connect to the Internet. If you can connect, WPS was successful. If you cannot connect, check the list of associated wireless clients in the AP's configuration utility. If you see the wireless client in the list, WPS was successful. VSG1432-B101 Series User's Guide 121 - ZyXEL VSG1432-B101 | User Guide - Page 122
-PSK pre-shared key to the enrollee. Whether WPA-PSK or WPA2-PSK is used depends on the standards supported by the devices. If the registrar is already part of a network, it sends the existing information. If not, it generates the SSID and WPA(2)-PSK randomly. 122 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 123
subsequent WPS connections, but a configured access point can no longer act as enrollee. It will be the registrar in all subsequent WPS connections in which it is involved. If you want a configured AP to act as an enrollee, you must reset it to its factory defaults. VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 124
Client 1 supports registrar mode, but it is better to use AP1 for the WPS handshake with configured (it already has security information for the network). AP1 supplies the existing security information to Client 2. Figure 42 WPS WPS handshake with the new access 124 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 125
the configuration interface of the registrar device to discover the key the network is using (if the device supports this feature). Then, you can enter the key into the non-WPS device and join the network as normal (the non-WPS device must also support WPA-PSK or WPA2-PSK). VSG1432-B101 Series User - ZyXEL VSG1432-B101 | User Guide - Page 126
device must still associate with the access point to gain access to the network. Check the MAC addresses of your wireless clients (usually printed on a label on the bottom of the device). If there is an unknown MAC address you can remove it or reset the AP. 126 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 127
). • Use the Static DHCP screen to assign IP addresses on the LAN to specific individual computers based on their MAC Addresses (Section 8.3 on page 132). • Use the UPnP screen to enable UPnP and UPnP NAT traversal on the ZyXEL Device (Section 8.4 on page 133). VSG1432-B101 Series User's Guide 127 - ZyXEL VSG1432-B101 | User Guide - Page 128
to operate through NAT. UPnP network devices can automatically configure network addressing, announce their presence in the network to other UPnP devices and enable exchange of simple product and service descriptions. NAT traversal allows the following: 128 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 129
installing and using UPnP. Finding Out More See Section 8.7 on page 142 for technical background information on LANs. 8.1.3 Before You Begin Find out the MAC addresses of your network devices if you intend to add them to the DHCP Client List screen. VSG1432-B101 Series User's Guide 129 - ZyXEL VSG1432-B101 | User Guide - Page 130
field. Unless instructed otherwise it is best to leave this alone, the configurator will automatically compute a subnet mask based upon the IP address you entered. 3 Click Apply to save your settings. Figure 44 Network Settings > Home Networking > LAN Setup 130 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 131
service provider. Select Dynamic if you have the Dynamic DNS service. DNS Server 1 DNS Server 2 Select Static if you have the Static DNS service. Enter the first and second DNS (Domain Name System) server IP address the ZyXEL Device passes to the DHCP clients. VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 132
IP address relative to the # field listed above. Click the Edit icon to have the IP address field editable and change it. Click the Delete icon to delete a static DHCP entry. A window displays asking you to confirm that you want to delete the selected entry. 132 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 133
can dynamically join a network, obtain an IP address, convey its capabilities and learn about other devices on the network. In turn, a device can leave a network smoothly and automatically when it is no longer in use. See page 128 for more information on UPnP. VSG1432-B101 Series User's Guide 133 - ZyXEL VSG1432-B101 | User Guide - Page 134
aware that anyone could use a UPnP application to open the web configurator's login screen without entering the ZyXEL Device's IP address (although you must still enter the password to access the web configurator). UPnP NAT-T State Select Enable to allow UPnP-enabled applications to automatically - ZyXEL VSG1432-B101 | User Guide - Page 135
selection box. Click Details. Add/Remove Programs: Windows Setup: Communication 3 In the Communications window, select the Universal Plug and Play check box in the Components selection box. Add/Remove Programs: Windows Setup: Communication: Components VSG1432-B101 Series User's Guide 135 - ZyXEL VSG1432-B101 | User Guide - Page 136
and select Optional Networking Components .... Network Connections 4 The Windows Optional Networking Components Wizard window displays. Select Networking Service in the Components selection box and click Details. Windows Optional Networking Components Wizard 136 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 137
the computer is connected to a LAN port of the ZyXEL Device. Turn on your computer and the ZyXEL Device. Auto-discover Your UPnP-enabled Network Device 1 Click Start and Control Panel. Double-click Network Connections. An icon displays under Internet Gateway. VSG1432-B101 Series User's Guide 137 - ZyXEL VSG1432-B101 | User Guide - Page 138
Chapter 8 Home Networking 2 Right-click the icon and select Properties. Network Connections 3 In the Internet Connection Properties window, click Settings to see the port mappings there were automatically created. Internet Connection Properties 138 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 139
Settings: Add 5 When the UPnP-enabled device is disconnected from your computer, all port mappings will be deleted automatically. 6 Select Show icon in notification area when connected option and click OK. An icon displays in the system tray. System Tray Icon VSG1432-B101 Series User's Guide 139 - ZyXEL VSG1432-B101 | User Guide - Page 140
finding out the IP address of the ZyXEL Device first. This comes helpful if you do not know the IP address of the ZyXEL Device. Follow the steps below to access the web configurator. 1 Click Start and then Control Panel. 2 Double-click Network Connections. 140 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 141
8 Home Networking 4 An icon with the description for each UPnP-enabled device displays under Local Network. 5 Right-click on the icon for your ZyXEL Device and select Invoke. The web configurator login screen displays. Network Connections: My Network Places VSG1432-B101 Series User's Guide 141 - ZyXEL VSG1432-B101 | User Guide - Page 142
properties window displays with basic information about the ZyXEL Device. Network Connections: My Network Places: Properties: Example 8.7 Technical Reference This section provides some technical background information about the topics covered in this chapter. 142 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 143
the IP address of a computer before you can access it. The DNS server addresses you enter when you set up DHCP are passed to the client machines along with the assigned IP address and subnet mask. There are two ways that an ISP disseminates the DNS server addresses. VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 144
an individual computer on that network. Once you have decided on the network number, pick an IP address that is easy to remember, for instance, 192.168.1.1, for your ZyXEL Device, but make sure that no other device on your network is using that IP address. 144 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 145
situation, do not create an arbitrary IP address; always follow the guidelines above. For more information on address assignment, please refer to RFC 1597, "Address Allocation for Private Internets" and RFC 1466, "Guidelines for Management of IP Address Space". VSG1432-B101 Series User's Guide 145 - ZyXEL VSG1432-B101 | User Guide - Page 146
Chapter 8 Home Networking 146 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 147
one static route to connect to services offered by your ISP behind router R2. You create another static route to communicate with a separate network behind a router R3 connected to the LAN. Figure 49 Example of Static Routing Topology A R1 LAN R3 WAN R2 VSG1432-B101 Series User's Guide 147 - ZyXEL VSG1432-B101 | User Guide - Page 148
forward packets to their destinations. Modify Click the Edit icon to edit the static route on the ZyXEL Device. Click the Delete icon to remove a static route from the ZyXEL Device. A window displays asking you to confirm that you want to delete the route. 148 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 149
the IP address of the gateway. The gateway is a router or switch on the same network segment as the device's LAN or WAN port. The gateway helps forward packets to their destinations. Click Apply to save your changes. Click Cancel to exit this screen without saving. VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 150
Chapter 9 Static Routing 150 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 151
you configure QoS queue assignment (Section 10.4 on page 154). • The Class Setup screen lets you add, edit or delete QoS classifiers (Section 10.5 on page 157). • The Policer Setup screen lets you add, edit or delete QoS policers (Section 10.5 on page 157). VSG1432-B101 Series User's Guide 151 - ZyXEL VSG1432-B101 | User Guide - Page 152
buffers (or queues). Your ZyXEL Device uses the Token Bucket algorithm to allow a certain amount of large bursts while keeping a limit at the average rate. Traffic Rate Traffic Rate Traffic Traffic 152 Time (Before Traffic Shaping) Time (After Traffic Shaping) VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 153
of Service General Screen Click Network Settings > QoS > General to open the screen as shown next. Use this screen to enable or disable QoS and set the upstream bandwidth. See Section 10.1 on page 151 for more information. Figure 52 Network Settings > QoS > General VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 154
this to the LAN interfaces' maximum supported connection speed. Click Apply to save your changes. Click Cancel to restore your previously saved settings. 10.4 The Queue Setup Screen Click Network Settings > QoS > Queue Setup to open the screen as shown next. 154 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 155
Service (QoS) Use this screen to configure QoS queue assignment. Figure 53 Network Settings > QoS > Queue Setup The following table describes the labels in this screen. Table 31 Network Settings > QoS > Queue Setup name of the ZyXEL Device's interface through VSG1432-B101 Series User's Guide 155 - ZyXEL VSG1432-B101 | User Guide - Page 156
again (packets are transmitted out of it). Specify the maximum transmission rate (in Kbps) allowed for traffic on this queue. Click Apply to save your changes. Click Cancel to exit this screen without saving. 156 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 157
address, destination address, source port number, destination port number or incoming interface. For example, you can configure a classifier to select traffic from the same protocol port (such as Telnet) to form a flow. You can give different priorities to traffic that the ZyXEL Device forwards - ZyXEL VSG1432-B101 | User Guide - Page 158
Chapter 10 Quality of Service (QoS) Table 33 Network Settings > QoS > Class Setup LABEL DESCRIPTION To Queue This is the name of the queue in which traffic of this an existing classifier. Note that subsequent rules move up by one when you take this action. 158 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 159
Chapter 10 Quality of Service (QoS) 10.5.1 Add/Edit QoS Class Click Add new Classifier in the Class Setup screen or the Edit icon next to a classifier to open the following screen. Figure 56 Class Setup: Add/Edit VSG1432-B101 Series User's Guide 159 - ZyXEL VSG1432-B101 | User Guide - Page 160
source IP address means any source IP address. Enter the source subnet mask. If you select TCP or UDP in the IP Protocol field, select the check box and enter the port number(s) of the source. Select the check box and enter the source MAC address of the packet. 160 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 161
the highest. This field is available only when you select 802.1Q in the Ether Type field. Select this option and specify a VLAN ID number. VSG1432-B101 Series User's Guide 161 - ZyXEL VSG1432-B101 | User Guide - Page 162
the ZyXEL Device keep the VLAN ID in the packets. Select a queue that applies to this class. Apply Cancel You should have configured a queue in the Queue Setup screen already. Click Apply to save your changes. Click Cancel to exit this screen without saving. 162 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 163
This field displays the burst size configured for the metering algorithm in the policer. Modify Click the Edit icon to edit the policer. Click the Delete icon to delete an existing policer. Note that subsequent rules move up by one when you take this action. VSG1432-B101 Series User's Guide 163 - ZyXEL VSG1432-B101 | User Guide - Page 164
> button to move it to the Selected Class box. To remove a QoS classifier from the Selected Class box, select it and use the < button. 164 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 165
shows how many packets forwarded to this interface are transmitted successfully. Drop Rate This shows how many packets forwarded to this interface are dropped. Queue Monitor # This is the index number of the entry. Name This shows the name of the queue. VSG1432-B101 Series User's Guide 165 - ZyXEL VSG1432-B101 | User Guide - Page 166
Service information about the ZyXEL Device features described in across bridges. A VLAN tag includes the 12-bit VLAN ID and 3-bit user priority. traffic such as router configuration messages. Level users. Level 0 Typically used for best-effort traffic. 166 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 167
in a layer-3 network. IP precedence uses three bits of the eightbit ToS (Type of Service) field in the IP header. There are eight classes of services (ranging from zero to seven) in IP precedence. Zero is the lowest priority level and seven is the highest. VSG1432-B101 Series User's Guide 167 - ZyXEL VSG1432-B101 | User Guide - Page 168
Service (QoS) Automatic Priority Queue Assignment If you enable QoS on the ZyXEL Device, the ZyXEL Device can automatically base on the IEEE 802.1p priority level, IP 5 101110 7 7 101000 6 110000 7 111000 IP PACKET LENGTH (BYTE) >1100 250~1100 - ZyXEL VSG1432-B101 | User Guide - Page 169
Chapter 10 Quality of Service (QoS) Token The ZyXEL Device may drop these marked packets if the network is overloaded. Configure the bucket size to be equal to or less than the amount of the bandwidth that the interface can support. into the second bucket (EBS). VSG1432-B101 Series User's Guide 169 - ZyXEL VSG1432-B101 | User Guide - Page 170
between a service provider and ZyXEL Device checks the CBS bucket. The packet is marked green and can be transmitted if the number of tokens in the CBS bucket is equal to or greater than the size of the packet (in bytes). Otherwise, the packet is marked yellow. 170 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 171
in this screen. Table 40 Network Settings > Routing > Policy Forwarding LABEL DESCRIPTION Add new Click this to create a new policy forwarding rule. Policy Forward Rule # This is the index number of the entry. Policy Name This is the name of the rule. VSG1432-B101 Series User's Guide 171 - ZyXEL VSG1432-B101 | User Guide - Page 172
spaces. Source IP Address Enter the source IP address. Source Subnet Enter the source subnet mask address. Mask Protocol Select the transport layer protocol (TCP or UDP). Source Port Enter the source port number. Source Mac Enter the source MAC address. 172 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 173
Forwarding: Add/Edit LABEL DESCRIPTION WAN Select a WAN interface through which the traffic is sent. You must have the WAN interface(s) already configured in the Broadband screens. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VSG1432-B101 - ZyXEL VSG1432-B101 | User Guide - Page 174
Chapter 11 Policy Forwarding 174 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 175
page 186). 12.1.2 What You Need To Know Inside/Outside Inside/outside denotes where a host is located relative to the ZyXEL Device, for example, the computers of your subscribers are the inside hosts, while the web servers on the Internet are the outside hosts. VSG1432-B101 Series User's Guide 175 - ZyXEL VSG1432-B101 | User Guide - Page 176
a range of port numbers. You can allocate a server IP address that corresponds to a port or a range of ports. The most often used port numbers and services are shown in Appendix E on page 381. Please refer to RFC 1700 for further information about port numbers. 176 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 177
Address assigned by ISP C=192.168.1.3 D=192.168.1.36 Click Network Settings > NAT > Port Forwarding to open the following screen. See Appendix E on page 381 for port numbers commonly used for particular services. Figure 63 Network Settings > NAT > Port Forwarding VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 178
this rule. Click the Delete icon to delete an existing rule. 12.2.1 Add/Edit Port Forwarding Click Add new rule in the Port Forwarding screen or click the Edit icon next to an existing rule to open the following screen. Figure 64 Port Forwarding: Add/Edit 178 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 179
Address Translation (NAT) The following table describes the labels in this screen. Table 43 Port Forwarding: Add/Edit LABEL DESCRIPTION Active Clear the check box to disable the rule. Select the check box to enable it. Service Name This field is read-only in the Port Forwarding Configuration - ZyXEL VSG1432-B101 | User Guide - Page 180
address for the service. Modify Click the Delete icon to delete the rule. 12.3.1 Add New Application This screen lets you create new NAT application rules. Click Add new application in the Applications screen to open the following screen. Figure 66 Applications: Add 180 VSG1432-B101 Series User - ZyXEL VSG1432-B101 | User Guide - Page 181
port in NAT to forward a service (coming in from the server on the WAN) to the IP address of a computer on the client side (LAN). The problem is that port forwarding only forwards a service to a single LAN IP address. In order to use the same service on a different LAN computer, you have to manually - ZyXEL VSG1432-B101 | User Guide - Page 182
computer IP address. 5 Only Jane can connect to the Real Audio server until the connection is closed or times out. The ZyXEL Device times out in three minutes with UDP (User Datagram Protocol) or two hours with TCP/IP (Transfer Control Protocol/Internet Protocol). Click Network Settings > NAT > Port - ZyXEL VSG1432-B101 | User Guide - Page 183
Settings > NAT > Port Triggering (continued) LABEL DESCRIPTION WAN Interface This field shows the WAN interface through which the service is forwarded. Trigger Port The trigger port is a port (or a range of ports) that causes (or triggers) the ZyXEL Device to record the IP address of the - ZyXEL VSG1432-B101 | User Guide - Page 184
port number in a range of port numbers. Type a port number or the ending port number in a range of port numbers. Select the transport layer protocol from TCP, UDP, or TCP/UDP. Click Apply to save your changes. Click Cancel to exit this screen without saving. 184 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 185
Note: If you do not assign a Default Server Address, the ZyXEL Device discards all packets received for ports that are not specified in the NAT Port Forwarding screen. Click Apply to save your changes. Click Cancel to restore your previously saved settings. VSG1432-B101 Series User's Guide 185 - ZyXEL VSG1432-B101 | User Guide - Page 186
and address-mapping rules. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. 12.7 The Sessions Screen Use the Sessions screen to limit the number of concurrent NAT sessions all clients can use. 186 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 187
packet as the packet traverses a router, for example, the local address refers to the IP address of a host when the packet is in the local network, while the global address refers to the IP address of the host when the same packet is traveling in the WAN side. VSG1432-B101 Series User's Guide 187 - ZyXEL VSG1432-B101 | User Guide - Page 188
firewall protection. With no servers defined, your ZyXEL Device filters out all incoming inquiries, thus preventing intruders from probing your network. For more information on IP address translation, refer to RFC 1631, The IP Network Address Translator (NAT). 188 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 189
.168.1.12 SA 192.168.1.10 NAT Table Inside Local IP Address 192.168.1.10 192.168.1.11 192.168.1.12 192.168.1.13 Inside Global IP Address IGA 1 IGA 2 IGA 3 IGA 4 SA IGA1 WAN Inside Local Address (ILA) 192.168.1.11 192.168.1.10 Inside Global Address (IGA) VSG1432-B101 Series User's Guide 189 - ZyXEL VSG1432-B101 | User Guide - Page 190
application, where three inside LANs (logical LANs using IP alias) behind the ZyXEL Device can communicate with three distinct WAN networks. Figure 74 NAT Application With IP Alias Port Forwarding: Services and Port Numbers The most often used port numbers are shown in the following table. Please - ZyXEL VSG1432-B101 | User Guide - Page 191
LAN IP addresses and the ISP assigns the WAN IP address. The NAT network appears as a single host on the Internet. Figure 75 Multiple Servers Behind NAT Example A=192.168.1.33 192.168.1.1 B=192.168.1.34 C=192.168.1.35 D=192.168.1.36 IP address assigned by ISP VSG1432-B101 Series User's Guide 191 - ZyXEL VSG1432-B101 | User Guide - Page 192
Chapter 12 Network Address Translation (NAT) 192 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 193
10.10.23.7 is obtained from the WAN interface VDSL_PoE/ppp0.1. You configure a DNS route for *example.com to have the ZyXEL Device forward DNS requests for the domain name mail.example.com through the WAN interface VDSL_PoE/ppp0.1 to the DNS server 10.10.23.7. VSG1432-B101 Series User's Guide 193 - ZyXEL VSG1432-B101 | User Guide - Page 194
settings on the ZyXEL Device (Section 13.3 on page 196). 13.1.2 What You Need To Know DYNDNS Wildcard Enabling the wildcard feature for your host causes *.yourhost.dyndns.org to be aliased to the same IP address as yourhost.dyndns.org. This feature is useful if 194 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 195
indicates the host name or domain name. IP Address This indicates the IP address assigned to this computer. Source This indicates the source of the IP address. Modify Click the Edit icon to edit the rule. Click the Delete icon to delete an existing rule. VSG1432-B101 Series User's Guide 195 - ZyXEL VSG1432-B101 | User Guide - Page 196
changes. Cancel Click Cancel to exit this screen without saving. 13.3 The Dynamic DNS Screen Use this screen to change your ZyXEL Device's DDNS. Click Advanced > DNS Setting > Dynamic DNS. The screen appears as shown. Figure 79 Advanced > DNS Setting > Dynamic DNS 196 VSG1432-B101 Series User - ZyXEL VSG1432-B101 | User Guide - Page 197
field, enter the user name you used to register for this service. If you select TZO in the Service Provider field, enter the password you used to register for this service. Click Apply to save your changes. Click Cancel to exit this screen without saving. VSG1432-B101 Series User's Guide 197 - ZyXEL VSG1432-B101 | User Guide - Page 198
Chapter 13 Dynamic DNS Setup 198 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 199
to Know IP Multicast Addresses In IPv4, a multicast address allows a web site for more information). IGMP Snooping A layer-2 switch can passively snoop on IGMP Query, Report and Leave (IGMP version 2) packets transferred between IP multicast routers/switches and IP VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 200
of the multicast tree) and is able to receive multicast traffic. There should only be one upstream interface (also known as the query port) for one query VLAN on the ZyXEL Device. A downstream interface is a port that connects to a host (such as a computer). 200 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 201
information. Regular data packets do not receive the extra checking and are forwarded with little or no performance penalty. IGMP v2 and IGMP v3 both require the router alert option while IGMP v1 does not use it at all. See RFC 2113 for more information. VSG1432-B101 Series User's Guide 201 - ZyXEL VSG1432-B101 | User Guide - Page 202
to configure general IGMP ZyXEL Device reduce multicast traffic by issuing IGMP host messages to a multicast router ZyXEL Device forwards. Ignore IGMP Select this to discard IGMP packets from IP addresses other than the packets not from LAN subnet. LAN subnet VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 203
this to discard IGMP query packets with a destination IP address other than 224.0.0.1, the all-hosts multicast address. Apply Click this button to save your settings back to the ZyXEL Device. Cancel Click Cancel to restore your previously saved settings. VSG1432-B101 Series User's Guide 203 - ZyXEL VSG1432-B101 | User Guide - Page 204
IGMP 14.3 IGMP Filter Configuration Use this screen to ports. Allow IGMP packets from WiFi interface Select this to accept IGMP packets received through the wireless LAN interface. Clear this to discard IGMP packets received through the wireless LAN interface. 204 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 205
multicast service domain's channels the LAN device using the specified IP address can subscribe. Click the Edit icon to change the entry. Apply Cancel Click the Delete icon to delete the entry. Click Apply to save your changes. Click Cancel to restore your previously saved settings. VSG1432-B101 - ZyXEL VSG1432-B101 | User Guide - Page 206
IGMP services through the ZyXEL Device. Max Allowed Channels Specify to how many IGMP channels the LAN device is allowed to subscribe. Apply Click Apply to save your changes back to the ZyXEL Device. Cancel Click Cancel to exit this screen without saving. 206 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 207
column lists the multicast groups and subnet masks for this IGMP service domain. Modify Click the Delete icon to delete the entry. Apply Click Apply to save your changes back to the ZyXEL Device. Cancel Click Cancel to exit this screen without saving. VSG1432-B101 Series User's Guide 207 - ZyXEL VSG1432-B101 | User Guide - Page 208
IGMP services through the ZyXEL Device. Max Allowed Channels Specify to how many IGMP channels the LAN device is allowed to subscribe. Apply Click Apply to save your changes back to the ZyXEL Device. Cancel Click Cancel to exit this screen without saving. 208 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 209
multicast IP addresses. This is the multicast IP address of a multicast media channel to which you want to block access. This is the subnet mask of the multicast IP address. Click the Edit icon to change the entry. Click the Delete icon to delete the entry. VSG1432-B101 Series User's Guide 209 - ZyXEL VSG1432-B101 | User Guide - Page 210
access to the specified multicast IP address. Apply Cancel Select White List to have this entry allow access to the specified multicast IP address. Click Apply to save your changes back to the ZyXEL Device. Click Cancel to exit this screen without saving. 210 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 211
you set the ZyXEL Device to assign IP addresses based on the client's DHCP Vendor ID option information, you must enable DHCP server and configure LAN TCP/IP settings for both the default and user-defined groups. See Chapter 8 on page 127 for more information. VSG1432-B101 Series User's Guide 211 - ZyXEL VSG1432-B101 | User Guide - Page 212
interface group. Modify Add This field is blank if you do not have the ZyXEL Device automatically add clients to the interface group based on their Vendor Class Identifiers. Click the Delete icon to remove the group. Click this button to create a new group. 212 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 213
group at a time. Figure 90 Interface Group Configuration The following table describes the fields in this screen. Table 64 Interface Group Configuration LABEL DESCRIPTION Group Name Enter a name to Grouped LAN Interfaces, use the right-facing arrow. VSG1432-B101 Series User's Guide 213 - ZyXEL VSG1432-B101 | User Guide - Page 214
(DHCP Option 60) to identify LAN hosts to add to the interface group by criteria such as the type of the hardware or firmware. Apply Click Apply to save your changes back to the ZyXEL Device. Cancel Click Cancel to exit this screen without saving. 214 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 215
.2 on page 217). • Use the Protocol screen to add or remove predefined Internet services and configure firewall rules (Section 16.3 on page 217). • Use the Access Control screen to view and configure incoming/outgoing filtering rules (Section 16.4 on page 220). VSG1432-B101 Series User's Guide 215 - ZyXEL VSG1432-B101 | User Guide - Page 216
to the Internet. Their goal is not to steal information, but to disable a device or network so users no longer have access to network resources. The ZyXEL Device is pre-configured to automatically detect the firewall in response to a request from the LAN. 216 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 217
on the ZyXEL Device. Firewall configure customized services and port numbers in the Protocol screen. For a comprehensive list of port numbers and services, visit the IANA (Internet Assigned Number Authority) website. See Appendix E on page 381 for some examples. VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 218
or TCP/UDP) and the port number or range of ports that defines your customized service. Other and the protocol number displays if the service uses another IP protocol. Modify Click the Edit icon to edit the entry. Click the Delete icon to remove this entry. 218 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 219
service. This field is displayed if you select Other as the protocol. Enter the protocol number of your customized port. Click this to add the protocol to the Rule List below. This is the IP port (TCP, UDP, ICMP, or Other) that defines your customized port. VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 220
so many resources that Internet access becomes unavailable. Add New ACL Rule Name Select the Enable check box to enable protection against DoS attacks. Click this to go to add a filter rule for incoming or outgoing IP traffic. This displays the name of the rule. VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 221
address is equivalent to Any. Dst IP This displays the destination IP addresses to which this rule applies. Please note that a blank destination address is equivalent to Any. Protocol This displays the transport layer protocol that defines the service . VSG1432-B101 Series User's Guide 221 - ZyXEL VSG1432-B101 | User Guide - Page 222
, enter the source IP address in the field below. Enter the source IP address. Select the destination device to which the ACL rule applies. If you select Specific IP Address, enter the destiniation IP address in the field below. Enter the destination IP address. VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 223
for this ACL rule form the drop-down list box. You can configure a new schedule rule by click Add new rule. This will bring you to the Security Settings > Scheduler Rules screen. Click Apply to save your changes. Click Cancel to exit this screen without saving. VSG1432-B101 Series User's Guide 223 - ZyXEL VSG1432-B101 | User Guide - Page 224
Chapter 16 Firewall 224 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 225
the MAC addresses of the devices to configure this screen. 17.2 The MAC Filter Screen Use this screen to change your ZyXEL Device's MAC filter settings. Click Security Settings > MAC Filter. The screen appears as shown. Figure 97 Security Settings > MAC Filter VSG1432-B101 Series User's Guide 225 - ZyXEL VSG1432-B101 | User Guide - Page 226
Setup address of the device that is allowed access to the ZyXEL Device. Select the entry(ies) that you want to delete in the Remove column, then click the Delete icon. Click Apply to save your changes. Click Cancel to restore your previously saved settings. 226 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 227
must configure a scheduler rule in the Advanced > Scheduler Rule screen (Section 19.2 on page 231) before the parental control function can be enabled. Click Scheduler Rule in the note to go to the Scheduler Rule screen for configurations. Figure 98 Parental Control VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 228
changes. Click Cancel to restore your previously saved settings. 18.2.1 Add/Edit Parental Control Rule Click Add new rule in the Parental Control screen or click the Edit icon next to a rule to open the following screen. Figure 99 Parental Control: Add/Edit 228 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 229
have not configured a scheduler rule or want to add a new one, click the Add New Rule button to go to the Scheduler Rule screen. See Chapter 19 on page 231 for more information. Click Apply to save your changes. Click Cancel to exit this screen without saving. VSG1432-B101 Series User's Guide 229 - ZyXEL VSG1432-B101 | User Guide - Page 230
Chapter 18 Parental Control 230 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 231
time periods and days during which the ZyXEL Device performs scheduled rules of certain features (such as Firewall Access Control, Parental Control) on a specific user in the Scheduler Rules screen. 19.2 shows the period of time on which this rule is enabled. VSG1432-B101 Series User's Guide 231 - ZyXEL VSG1432-B101 | User Guide - Page 232
Use this screen to configure a restricted access schedule for a specific user on your network. Figure boxes for the days that you want the ZyXEL Device to perform this scheduler rule. Time if changes. Cancel Click Cancel to exit this screen without saving. 232 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 233
use the certification authority's public key to verify the certificates. You can use the ZyXEL Device to generate certification requests that contain identifying information and public keys and then send the certification requests to a certification authority. VSG1432-B101 Series User's Guide 233 - ZyXEL VSG1432-B101 | User Guide - Page 234
the certificate that you have enrolled from a certification authority from your computer to the ZyXEL Device. Name This field displays the name used to identify this certificate. It is recommended a certificate that one or more features is configured to use. VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 235
Common Name Type the IP address (in dotted decimal notation), domain name or email address in the field provided. The domain name or e-mail address can be up to certificate into the ZyXEL Device. Otherwise click Back to return to the Local Certificates screen. VSG1432-B101 Series User's Guide 235 - ZyXEL VSG1432-B101 | User Guide - Page 236
have it signed by a Certificate Authority, in the Local Certificates screen click the certificate request's Load Signed icon to import the signed certificate into the ZyXEL Device. 236 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 237
to the previous screen. 20.3.3 Import Certificate Click Security Settings > Local Certificates and then Import Certificate to open the Import Local Certificate screen. Follow the instructions in this screen to save an existing certificate to the ZyXEL Device. VSG1432-B101 Series User's Guide 237 - ZyXEL VSG1432-B101 | User Guide - Page 238
Click this check box to open a screen where you can save the certificate of a certification authority that you trust, from your computer to the ZyXEL Device. Certificate Type up to 63 ASCII characters (not including spaces) to identify this Name certificate. VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 239
... to find it. Private Key is protected by a password? Enter the private key into the text box to store it on the ZyXEL Device. The private key should not exceed 63 ASCII characters to view in-depth certificate information and change the certificate's name. VSG1432-B101 Series User's Guide 239 - ZyXEL VSG1432-B101 | User Guide - Page 240
LABEL DESCRIPTION Name This field displays the identifying name of this certificate. If you want to change the name, type up to 63 characters to identify this certificate. You may use any a management computer for later distribution (via floppy disk for example). VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 241
CA LABEL DESCRIPTION Import Certificate Click this button to open a screen where you can save the certificate of a certification authority that you trust to the ZyXEL Device. Name This field displays the name used to identify this certificate. VSG1432-B101 Series User's Guide 241 - ZyXEL VSG1432-B101 | User Guide - Page 242
certificate (or certification request). You cannot delete a certificate that one or more features is configured to use. 20.4.1 View Trusted CA Certificate Click the View icon in the Trusted CA . ca means that a Certification Authority signed the certificate. 242 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 243
Trusted CA Certificate Click the Import Certificate button in the Trusted CA screen to open the following screen. The ZyXEL Device trusts any valid certificate signed by any of the imported trusted CA certificates. Figure 111 Trusted CA: Import Certificate VSG1432-B101 Series User's Guide 243 - ZyXEL VSG1432-B101 | User Guide - Page 244
of a certification authority that you trust, from your computer to the ZyXEL Device. Certificate Name Enter the name that identifies this certificate. The certificate Apply to save your changes. Cancel Click Cancel to exit this screen without saving. 244 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 245
used to transport traffic over the Internet or any insecure network that uses TCP/IP for communication. Internet Protocol Security (IPSec) is the Settings screen to view the configured IPSec policies and add, edit or remove a policy (Section 21.3 on page 248). VSG1432-B101 Series User's Guide 245 - ZyXEL VSG1432-B101 | User Guide - Page 246
has a dynamic WAN IP address and is using DDNS. The ZyXEL Device has to rebuild the VPN tunnel each time the remote secure gateway's WAN IP address changes (there may be a delay until the DDNS servers are updated with the remote gateway's new WAN IP address). VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 247
the IP address of computer(s) on your local network behind your ZyXEL Device. Remote Addresses This is the IP address of computer(s) on the remote network behind the remote IPSec router. Action Click Trigger to establish a VPN connection with the remote network. VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 248
this VPN policy is not active. Connection Name This field displays the identification name for this VPN policy. Remote Gateway This is the static WAN IP address or URL of the remote IPSec router. 248 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 249
default gateway interface's WAN IP address as its WAN IP address to set up a VPN tunnel. 21.3.1.1 Auto(IKE) Key Setup Auto(IKE) provides more protection so it is generally recommended. You only configure VPN manual key when you select Auto(IKE) in the Key Exchange VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 250
this VPN policy. You may use spaces, underscores and dashes, but the ZyXEL Device drops trailing spaces. Remote IPSec Gateway Address Type the WAN IP address or the URL (up to 31 characters) of the IPSec router with which you're making the VPN connection. 250 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 251
as some of the services offered by AH. Select Auto(IKE) or Manual from the drop-down list box. Auto(IKE) provides more protection so it is generally recommended. Manual is a useful option for troubleshooting if you have problems using Auto(IKE) key management. VSG1432-B101 Series User's Guide 251 - ZyXEL VSG1432-B101 | User Guide - Page 252
port 500 packets to the remote IPSec router behind the NAT router. Otherwise, select Disable. Phase 1/Phase 2 Mode Select Main or Aggressive from the drop-down list box. Multiple SAs connecting through a secure gateway must have the same negotiation mode. 252 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 253
of SAs to a single gateway. The SPI (Security Parameter Index) along with a destination IP address uniquely identify a particular Security Association (SA). The SPI is transmitted from the remote VPN administrator associated with the SPI to establish the tunnel. VSG1432-B101 Series User's Guide 253 - ZyXEL VSG1432-B101 | User Guide - Page 254
this VPN policy. You may use spaces, underscores and dashes, but the ZyXEL Device drops trailing spaces. Remote IPSec Gateway Address Type the WAN IP address or the URL (up to 31 characters) of the IPSec router with which you're making the VPN connection. 254 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 255
as some of the services offered by AH. Select Auto(IKE) or Manual from the drop-down list box. Auto(IKE) provides more protection so it is generally recommended. Manual is a useful option for troubleshooting if you have problems using Auto(IKE) key management. VSG1432-B101 Series User's Guide 255 - ZyXEL VSG1432-B101 | User Guide - Page 256
Manual Chaining (CBC) mode uses a 128-bit changes and return to the IPSec screen. Click Cancel to exit this screen without saving. 21.4 Technical Reference This section provides some technical background information about the topics covered in this chapter. 256 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 257
Header) protocol (RFC 2402) describe the packet formats and the default standards for packet structure (including implementation algorithms). The Encryption Algorithm describes whether to use IKE (ISAKMP) or manual key configuration in order to set up a VPN. VSG1432-B101 Series User's Guide 257 - ZyXEL VSG1432-B101 | User Guide - Page 258
the destination IP address of the VPN gateway. • Inside header: The inside IP header contains the destination IP address of the final system behind the VPN gateway. The security protocol appears after the outer IP header and before the inside IP header. 258 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 259
Internet a negotiation mode. • ZyXEL Device automatically renegotiates the IPSec SA if there is traffic when the IPSec SA lifetime period expires. If an IPSec SA times out, then the IPSec router must renegotiate the SA the next time someone attempts to send traffic. VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 260
, are signed with a hash value appended to the packet. Tunnel mode ESP with authentication is compatible with NAT because integrity checks are performed over the combination of the "original header plus original payload," which is unchanged by a NAT device. 260 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 261
B build the IKE SA. For NAT traversal to work, you must: • Use ESP security protocol (in either transport or tunnel mode). • Use IKE keying mode. • Enable NAT traversal on both IPSec endpoints. • Set the NAT router to forward UDP port 500 to IPSec router A. VSG1432-B101 Series User's Guide 261 - ZyXEL VSG1432-B101 | User Guide - Page 262
The content is the IP address, domain name, or e-mail address. Table 91 Local ID Type and Content Fields LOCAL ID TYPE= CONTENT= IP Type the IP address of your computer. DNS Type a domain name (up to 31 characters) by which to identify this ZyXEL Device. 262 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 263
address. 21.4.7.1 ID Type and Content Examples Two IPSec routers must have matching ID type and content configuration in order to set up a VPN tunnel. The two ZyXEL Configuration Example ZYXEL DEVICE A ZYXEL DEVICE B Local ID type: IP Local ID type: IP VSG1432-B101 Series User's Guide 263 - ZyXEL VSG1432-B101 | User Guide - Page 264
keys. 768-bit, 1024-bit 1536-bit, 2048-bit, and 3072-bit Diffie-Hellman groups are supported. Upon completion of the Diffie-Hellman exchange, the two peers have a shared secret, but the IKE SA is not authenticated. For authentication, use pre-shared keys. 264 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 265
through the following interfaces: • LAN • WAN Note: The ZyXEL Device is managed using the Web Configurator. 22.2 The Service Control Screen Use this screen to configure through which interface(s) users can use which service(s) to manage the ZyXEL Device. VSG1432-B101 Series User's Guide 265 - ZyXEL VSG1432-B101 | User Guide - Page 266
ZyXEL Device) uses to authenticate itself to the HTTPS client. You must have certificates already configured in the Certificates screen. Apply Click Apply to save your changes back to the ZyXEL Device. Cancel Click Cancel to restore your previously saved settings. 266 VSG1432-B101 Series User - ZyXEL VSG1432-B101 | User Guide - Page 267
the broadcast address with the target's MAC address, swaps the sender and target pairs, and unicasts the answer directly back to the requesting machine. ARP updates the ARP Table for future reference and then sends the packet to the MAC address that replied. VSG1432-B101 Series User's Guide 267 - ZyXEL VSG1432-B101 | User Guide - Page 268
learned IP address of a device connected to a port. MAC Address This is the MAC address of the device with the listed IP address. Device This is the type of interface used by the device. You can click on the device type to go to its configuration screen. 268 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 269
web configurator allows you to choose which categories of events and/or alerts to have the ZyXEL Device log and then display the logs or have the ZyXEL devices to send event notification messages across an IP network to syslog servers that collect the event VSG1432-B101 Series User's Guide 269 - ZyXEL VSG1432-B101 | User Guide - Page 270
that you select in Maintenance > Log Setting. Click System Monitor > Log to open the System Log screen. Figure 126 System Monitor > Log > System Log 270 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 271
level you have selected. When you select a severity, the ZyXEL Device searches through all logs of that severity or higher. Category Now Click this to send the log file(s) to the E-mail address you specify in the Maintenance > Logs Setting screen. System Log # VSG1432-B101 Series User's Guide 271 - ZyXEL VSG1432-B101 | User Guide - Page 272
level you have selected. When you select a severity, the ZyXEL Device searches through all logs of that severity or higher. Category Log Now Click this to send the log file(s) to the E-mail address you specify in the Maintenance > Logs Setting screen. # This field VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 273
view the WAN traffic statistics (Section 25.2 on page 274). • Use the LAN screen to view the LAN traffic statistics (Section 25.3 on page 276). VSG1432-B101 Series User's Guide 273 - ZyXEL VSG1432-B101 | User Guide - Page 274
WAN screen. The figure in this screen shows the number of bytes received and sent on the ZyXEL Device. Figure 128 System Monitor > Traffic Status > WAN The following table describes the fields in this name of the WAN interface that is currently disconnected. 274 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 275
. Error This indicates the number of frames with errors received on this interface. Drop This indicates the number of received packets dropped on this interface. VSG1432-B101 Series User's Guide 275 - ZyXEL VSG1432-B101 | User Guide - Page 276
> Traffic Status > LAN LABEL DESCRIPTION Polls Interval(s) Select how often you want the ZyXEL Device to update this screen. Interface This shows the LAN or WLAN interface. Bytes Sent This indicates hide them. Interface This shows the LAN or WLAN interface. VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 277
. Error This indicates the number of frames with errors received on this interface. Drop This indicates the number of received packets dropped on this interface. VSG1432-B101 Series User's Guide 277 - ZyXEL VSG1432-B101 | User Guide - Page 278
Chapter 25 Traffic Status 278 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 279
current list of multicast groups the ZyXEL Device has joined and which ports have joined it. To open this ZyXEL Device that belongs to an IGMP multicast group. Multicast Group This field displays the name of the IGMP multicast group to which the interface belongs. VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 280
group. Total Leaves This field displays the total number of Leave packets the ZyXEL Device has received for this IGMP multicast group. IGMP LAN Host Statistics This section shows statistics about the number of IGMP-related packets received from each LAN host. VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 281
when it left. Total Joins This field displays the total number of Join packets the ZyXEL Device has received from this LAN IP address. Total Leaves This field displays the total number of Leave packets the ZyXEL Device has received from this LAN IP address. VSG1432-B101 Series User's Guide 281 - ZyXEL VSG1432-B101 | User Guide - Page 282
Chapter 26 IGMP Status 282 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 283
In the Users Configuration screen, you can view, add, and configure user accounts of the ZyXEL Device. 27.2 The Users Configuration Screen Click Maintenance > Users Configuration to open the following screen. Figure 132 Maintenance > Users Configuration VSG1432-B101 Series User's Guide 283 - ZyXEL VSG1432-B101 | User Guide - Page 284
the login account type of the user. Modify Different login account types have different privilege levels. The web configurator screens and privileges vary depending on which account type you use to log in. Click the Edit icon to edit this user account. 284 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 285
new system password (6 to 15 alphanumeric characters (0-9, A-Z, a-z, -, _ with no spaces), not containing the user name). This field is displayed only when you are editing the user account. Enter the exact same password that you just entered in the above field. VSG1432-B101 Series User's Guide 285 - ZyXEL VSG1432-B101 | User Guide - Page 286
can configure the ZyXEL Device while User accounts can only view some status information. Apply Cancel Users logged in with either type of account can access the Internet. Click Apply to save your changes. Click Cancel to exit this screen without saving. 286 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 287
ACS to remotely set up the ZyXEL Device, modify settings, perform firmware upgrades as well as monitor and diagnose the ZyXEL Device. You have to enable the device to be managed by the ACS and specify the ACS IP address or domain name and username and password. VSG1432-B101 Series User's Guide 287 - ZyXEL VSG1432-B101 | User Guide - Page 288
interval (in seconds) at which the ZyXEL Device sends information to the auto-configuration server. ACS URL Enter the URL or IP address of the auto-configuration server. ACS User Name Enter the TR-069 user name for authentication with the autoconfiguration server. ACS Password Enter the TR-069 - ZyXEL VSG1432-B101 | User Guide - Page 289
Password Enter the connection request password. When the ACS makes a connection request to the ZyXEL Device, this password configure user-specific parameters, such as the username and password. changes. Cancel Click Cancel to exit this screen without saving. VSG1432-B101 Series User's Guide 289 - ZyXEL VSG1432-B101 | User Guide - Page 290
Chapter 28 Remote Management 290 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 291
. 29.2 The Time Setting Screen To change your ZyXEL Device's time and date, click Maintenance > Time Setting. The screen appears as shown. Use this screen to configure the ZyXEL Device's time based on your local time zone. Figure 136 Maintenance > Time Setting VSG1432-B101 Series User's Guide 291 - ZyXEL VSG1432-B101 | User Guide - Page 292
the time and fate of your ZyXEL Device. Each time you reload this page, the ZyXEL Device synchronizes the time and date the IP address or URL (up to 29 extended ASCII characters in length) of your time server. Select None if you don't want to configure the 292 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 293
Time Settings Table 107 Maintenance > Time Setting LABEL DESCRIPTION End rule Configure the day and time when Daylight Saving Time ends if you enabled GMT or UTC (GMT+1). Click Apply to save your changes. Click Cancel to exit this screen without saving. VSG1432-B101 Series User's Guide 293 - ZyXEL VSG1432-B101 | User Guide - Page 294
Chapter 29 Time Settings 294 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 295
which logs and/or immediate alerts the ZyXEL Device records in the Logs Setting screen. 30.2 The Log Settings Screen To change your ZyXEL Device's log settings, click Maintenance > Logs Setting. The screen appears as shown. Figure 137 Maintenance > Logs Setting VSG1432-B101 Series User's Guide 295 - ZyXEL VSG1432-B101 | User Guide - Page 296
characters) (usually the user name of a mail account). Password Enter the password associated with the user name above. Clear log after Select this to delete all the logs after the ZyXEL Device sends an E-mail of sending mail the logs. Active Log and Alert 296 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 297
|From:192.168.1.131 To:192.168.1.255 |match |forward | 10:05:17 |UDP src port:00520 dest port:00520 | | 128|Apr 7 00 |From:192.168.1.1 To:192.168.1.255 |match |forward | 10:05:30 |UDP src port:00520 dest port:00520 | | End of Firewall Log VSG1432-B101 Series User's Guide 297 - ZyXEL VSG1432-B101 | User Guide - Page 298
Chapter 30 Logs Setting 298 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 299
. Table 109 Maintenance > Firmware Upgrade LABEL DESCRIPTION Current Firmware Version This is the present Firmware version and the date created. File Path Type in the location of the file you want to upload in this field or click Browse ... to find it. VSG1432-B101 Series User's Guide 299 - ZyXEL VSG1432-B101 | User Guide - Page 300
Temporarily Disconnected After two minutes, log in again and check your new firmware version in the Status screen. If the upload was not successful, the following screen will appear. Click OK to go back to the Firmware Upgrade screen. Figure 142 Error Message 300 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 301
your ZyXEL Device is configured and functioning properly, it is highly recommended that you back up your configuration file before making configuration changes. The backup configuration file will be useful in case you need to return to your previous settings. VSG1432-B101 Series User's Guide 301 - ZyXEL VSG1432-B101 | User Guide - Page 302
uploaded the default configuration file you may need to change the IP address of your computer to be in the same subnet as that of the default device IP address (192.168.1.1). See Appendix A on page 321 for details on how to set up your computer's IP address. 302 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 303
appears. Figure 146 Reset Warning Message Figure 147 Reset In Process Message You can also press the RESET button on the rear panel to reset the factory defaults of your ZyXEL Device. Refer to Section 1.8 on page 31 for more information on the RESET button. VSG1432-B101 Series User's Guide 303 - ZyXEL VSG1432-B101 | User Guide - Page 304
without turning the power off. You may need to do this if the ZyXEL Device hangs, for example. Click Maintenance > Reboot. Click Reboot to have the ZyXEL Device reboot. This does not affect the ZyXEL Device's configuration. Figure 148 Maintenance > Reboot 304 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 305
ZyXEL Device. 33.2 The Diagnostic Screen Use this screen to ping, traceroute, or nslookup an IP address. Click Maintenance > Diagnostic > Ping & TraceRoute & NsLookup to open the screen shown next. Figure 149 Maintenance > Diagnostic > Ping & TraceRoute & NsLookup VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 306
the IP address that you entered. TraceRoute Click this button to perform the traceroute function. This determines the path a packet takes to the specified computer. Nslookup Click this button to perform a DNS lookup on the IP address of a computer you enter. 306 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 307
. Make sure the power source is turned on. 4 Turn the ZyXEL Device off and on. 5 If the problem continues, contact the vendor. One of the LEDs does not behave as expected. 1 Make sure you understand the normal behavior of the LED. See Section 1.7 on page 29. VSG1432-B101 Series User's Guide 307 - ZyXEL VSG1432-B101 | User Guide - Page 308
If this does not work, you have to reset the device to its factory defaults. See Section 1.8 on page 31. I cannot see or access the Login screen in the web configurator. 1 Make sure you are using the correct IP address. • The default IP address is 192.168.1.1. 308 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 309
an ETHERNET port.\ I can see the Login screen, but I cannot log in to the ZyXEL Device. 1 Make sure you have entered the password correctly. The default admin password is 1234. The field is case-sensitive, so make sure [Caps Lock] is not on. 2 You cannot log in to the web configurator while someone - ZyXEL VSG1432-B101 | User Guide - Page 310
use FTP to upload / download the configuration file. / I cannot use FTP to upload new firmware. 1 See the troubleshooting suggestions for I cannot see or access the Login screen in the web configurator. Ignore the suggestions about your browser. 2 Check the service control settings for FTP. See - ZyXEL VSG1432-B101 | User Guide - Page 311
WAN IP addresses directly from your ISP's DHCP server. I cannot connect to the Internet using a second DSL connection. ADSL and VDSL connections cannot work at the same time. You can only use one type of DSL connection, either ADSL or VDSL connection at one time. VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 312
, or add additional APs if necessary. • Try closing some programs that use the Internet, especially peer-to-peer applications. If the wireless client is sending or receiving a lot of information, it may have too many programs open that use the Internet. 312 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 313
Troubleshooting What is a Server Set ID (SSID)? An SSID is a name that uniquely identifies a wireless network. The AP and all the clients within a wireless network must use the same SSID. What wireless security modes does my ZyXEL Device support private. VSG1432-B101 Series User's Guide 313 - ZyXEL VSG1432-B101 | User Guide - Page 314
Chapter 34 Troubleshooting 314 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 315
the ZyXEL Device's hardware and firmware features. 35.1 Hardware Specifications Table 112 Hardware Specifications Dimensions 210 (L) x 153 (W) x 40 (H) mm Weight 471 g Power Adaptor Output 12 V 1.5 A Power Adaptor Input 100 ~ 240 VAC 50~60HZ RESET Button Restores factory defaults WLAN/WPS - ZyXEL VSG1432-B101 | User Guide - Page 316
Table 113 Firmware Specifications Default IP Address 192.168.1.1 Default Subnet Mask 255.255.255.0 (24 bits) Default User Name admin Default Password 1234 DHCP Server IP Pool 192.168.1.33 to 192.168.1.132 Static Routes 16 Device Management Use the web configurator to easily configure the - ZyXEL VSG1432-B101 | User Guide - Page 317
Firmware Specifications (continued) Logs Use logs for troubleshooting. You can send logs from the ZyXEL Device to an external syslog server. Universal Plug and Play (UPnP) A UPnP-enabled device can dynamically join a network, obtain an IP address management. VSG1432-B101 Series User's Guide 317 - ZyXEL VSG1432-B101 | User Guide - Page 318
support Modulation: Multi-Carrier-Modulation (MCM) Interleaving: General Convolution Support of maximum SNRM configuration (directed by the central office) Seamless Rate Adaptation (SRA) as described in Amendment 1 of G.993.2 Tone Spacing: 4.3KHz/8.6KHz 318 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 319
protocols RIP I/RIP II ICMP ATM QoS IP Multicasting IGMP v2 and v3 Management IGMP Proxy Embedded Web Configurator Remote Firmware Upgrade Embedded FTP/TFTP Server for firmware upgrade and configuration file backup and restore Syslog TR-069 TR-064 VSG1432-B101 Series User's Guide 319 - ZyXEL VSG1432-B101 | User Guide - Page 320
5 RFC 1631 IP Network Address Translator (NAT) RFC 1661 The Point-to-Point Protocol (PPP) RFC 1723 RIP-2 (Routing Information Protocol) RFC 2236 Internet Group Management Protocol, CPE Wan Management. TR-064 DSL Forum LAN-Side DSL CPE Configuration 320 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 321
, configure the TCP/IP settings in order to "communicate" with your network. If you manually assign IP information instead of using dynamic assignment, make sure that your computers have IP addresses that place them in the same subnet as the ZyXEL Device's LAN port. VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 322
, click Add. 2 Select Adapter and then click Add. 3 Select the manufacturer and model of your network adapter and then click OK. If you need TCP/IP: 1 In the Network window, click Add. 2 Select Protocol and then click Add. 322 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 323
IP address is dynamic, select Obtain an IP address automatically. • If you have a static IP address, select Specify an IP address and type your information into the IP Address and Subnet Mask fields. Figure 151 Windows 95/98/Me: TCP/IP Properties: IP Address VSG1432-B101 Series User's Guide 323 - ZyXEL VSG1432-B101 | User Guide - Page 324
when prompted. Verifying Settings 1 Click Start and then Run. 2 In the Run window, type "winipcfg" and then click OK to open the IP Configuration window. 3 Select your network adapter. You should see your computer's IP address, subnet mask and default gateway. 324 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 325
Appendix A Setting up Your Computer's IP Address Windows 2000/NT/XP The following example figures use the default Windows XP GUI theme. 1 Click start (Start in Windows 2000/NT), Settings Connections in Windows 2000/NT). Figure 154 Windows XP: Control Panel VSG1432-B101 Series User's Guide 325 - ZyXEL VSG1432-B101 | User Guide - Page 326
: Properties 4 Select Internet Protocol (TCP/IP) (under the General tab in Win XP) and then click Properties. Figure 156 Windows XP: Local Area Connection Properties 5 The Internet Protocol TCP/IP Properties window opens (the General tab in Windows XP). 326 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 327
IP address of the default gateway in Gateway. To manually configure a default metric (the number of transmission hops), clear the Automatic metric check box and type a metric in Metric. • Click Add. • Repeat the previous three steps for each default gateway you want to add. VSG1432-B101 Series User - ZyXEL VSG1432-B101 | User Guide - Page 328
Obtain DNS server address automatically if you do not know your DNS server IP address(es). • If you know your DNS server IP address(es), click Use the following DNS server addresses, and type them in the Preferred DNS server and Alternate DNS server fields. 328 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 329
Prompt window, type "ipconfig" and then press [ENTER]. You can also open Network Connections, right-click a network connection, click Status and then click the Support tab. Windows Vista This section shows screens from Windows Vista Enterprise Version 6.0. VSG1432-B101 Series User's Guide 329 - ZyXEL VSG1432-B101 | User Guide - Page 330
IP Address 1 Click the Start icon, Control Panel. Figure 160 Windows Vista: Start Menu 2 In the Control Panel, double-click Network and Internet. Figure 161 Windows Vista: Control Panel 3 Click Network and Sharing Center. Figure 162 Windows Vista: Network And Internet 330 VSG1432-B101 Series User - ZyXEL VSG1432-B101 | User Guide - Page 331
Appendix A Setting up Your Computer's IP Address 4 Click Manage network connections. Figure 163 Windows Vista: Network and Sharing Center 5 Right-click Local saying that it needs your permission to continue. Figure 164 Windows Vista: Network and Sharing Center VSG1432-B101 Series User's Guide 331 - ZyXEL VSG1432-B101 | User Guide - Page 332
) Properties window opens (the General tab). • If you have a dynamic IP address click Obtain an IP address automatically. • If you have a static IP address click Use the following IP address and fill in the IP address, Subnet mask, and Default gateway fields. 332 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 333
IP address of the default gateway in Gateway. To manually configure a default metric (the number of transmission hops), clear the Automatic metric check box and type a metric in Metric. • Click Add. • Repeat the previous three steps for each default gateway you want to add. VSG1432-B101 Series User - ZyXEL VSG1432-B101 | User Guide - Page 334
Obtain DNS server address automatically if you do not know your DNS server IP address(es). • If you know your DNS server IP address(es), click Use the following DNS server addresses, and type them in the Preferred DNS server and Alternate DNS server fields. 334 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 335
IP Address If you have previously configured DNS servers, click Advanced and then the DNS tab to order them. Figure 168 Windows Vista: Internet Protocol Version 4 (TCP/IPv4) Properties 10 Click OK to close the Internet Status and then click the Support tab. VSG1432-B101 Series User's Guide 335 - ZyXEL VSG1432-B101 | User Guide - Page 336
Appendix A Setting up Your Computer's IP Address Macintosh OS 8/9 1 Click the Apple menu, Control Panel and double-click TCP/IP to open the TCP/ IP Control Panel. Figure 169 Macintosh OS 8/9: Apple Menu 336 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 337
Router address box. 5 Close the TCP/IP Control Panel. 6 Click Save if prompted, to save changes to your configuration. 7 Turn on your ZyXEL Device and restart your computer (if prompted). Verifying Settings Check your TCP/IP properties in the TCP/IP Control Panel window. VSG1432-B101 Series User - ZyXEL VSG1432-B101 | User Guide - Page 338
Appendix A Setting up Your Computer's IP Address Macintosh OS X 1 Click the Apple IP tab. 3 For dynamically assigned settings, select Using DHCP from the Configure list. Figure 172 Macintosh OS X: Network 4 For statically assigned settings, do the following: 338 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 339
Environment (KDE) Follow the steps below to configure your computer IP address using the KDE. 1 Click the Red Hat button (located on the bottom left corner), select System Setting and click Network. Figure 173 Red Hat 9.0: KDE: Network Configuration: Devices VSG1432-B101 Series User's Guide 339 - ZyXEL VSG1432-B101 | User Guide - Page 340
Device General screen. 4 If you know your DNS server IP address(es), click the DNS tab in the Network Configuration screen. Enter the DNS server information in the fields provided. Figure 175 Red Hat 9.0: KDE: Network Configuration: DNS 5 Click the Devices tab. 340 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 341
editor. • If you have a dynamic IP address, enter dhcp in the BOOTPROTO= field. The following figure shows an example. Figure 177 Red Hat 9.0: Dynamic IP Address Setting in ifconfig-eth0 DEVICE=eth0 ONBOOT=yes BOOTPROTO=dhcp USERCTL=no PEERDNS=yes TYPE=Ethernet VSG1432-B101 Series User's Guide 341 - ZyXEL VSG1432-B101 | User Guide - Page 342
two DNS server IP addresses are specified. Figure 179 Red Hat 9.0: DNS Settings in resolv.conf nameserver 172.23.5.1 nameserver 172.23.5.2 3 After you edit and save the configuration files, you interface: Bringing up interface eth0: [OK] [OK] [OK] [OK] [OK] 342 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 343
Your Computer's IP Address Verifying Settings Enter ifconfig in a terminal screen to check your TCP/IP properties. Figure 181 Red Hat 9.0: Checking TCP/IP Properties [root@localhost ) TX bytes:1570 (1.5 Kb) Interrupt:10 Base address:0x1000 [root@localhost]# VSG1432-B101 Series User's Guide 343 - ZyXEL VSG1432-B101 | User Guide - Page 344
Appendix A Setting up Your Computer's IP Address 344 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 345
IP addresses and subnet masks. IP addresses identify individual devices on a network. Every networking device (including computers, servers, routers, printers, etc.) needs an IP address possible range of 00000000 to 11111111 in binary, or 0 to 255 in decimal. VSG1432-B101 Series User's Guide 345 - ZyXEL VSG1432-B101 | User Guide - Page 346
Subnet Masks 1ST OCTET: 2ND OCTET: 3RD OCTET: 4TH OCTET IP Address (Binary) Subnet Mask (Binary) Network Number Host ID (192) (168) (1) (2) 11000000 10101000 00000001 00000010 11111111 11111111 11111111 00000000 11000000 10101000 00000001 00000010 346 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 347
the remaining 24 bits are zeroes. Subnet masks are expressed in dotted decimal notation just like IP addresses. The following examples show the binary and decimal notation for 8-bit, 16-bit, 24- - 2 28 - 2 23 - 2 MAXIMUM NUMBER OF HOSTS 16777214 65534 254 6 VSG1432-B101 Series User's Guide 347 - ZyXEL VSG1432-B101 | User Guide - Page 348
Appendix B IP Addresses and Subnetting Notation Since the mask is address is 192.168.1.0. The first three octets of the address (192.168.1) are the network number, and the remaining octet is the host ID, allowing a maximum of 28 - 2 or 254 possible hosts. 348 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 349
Appendix B IP Addresses and Subnetting The following figure shows the company network before subnetting. Figure 183 Subnetting Example: Before network after subnetting. There are now two sub-networks, A and B. Figure 184 Subnetting Example: After Subnetting VSG1432-B101 Series User's Guide 349 - ZyXEL VSG1432-B101 | User Guide - Page 350
Binary) Subnet Address: 192.168.1.64 Broadcast Address: 192.168.1.127 NETWORK NUMBER LAST OCTET BIT VALUE 192.168.1. 64 11000000.10101000.00000001. 01000000 11111111.11111111.11111111. 11000000 Lowest Host ID: 192.168.1.65 Highest Host ID: 192.168.1.126 350 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 351
. Table 123 Eight Subnets SUBNET SUBNET ADDRESS 1 0 2 32 3 64 4 96 5 128 6 160 7 192 8 224 FIRST ADDRESS LAST ADDRESS 1 30 33 62 65 94 97 126 129 158 161 190 193 222 225 254 BROADCAST ADDRESS 31 63 95 127 159 191 223 255 VSG1432-B101 Series User's Guide 351 - ZyXEL VSG1432-B101 | User Guide - Page 352
) 8192 6 14 255.255.255.252 (/30) 16384 2 15 255.255.255.254 (/31) 32768 1 Configuring IP Addresses Where you obtain your network number depends on your particular situation. If the ISP or your network administrator assigns you a block of registered IP 352 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 353
situation, do not create an arbitrary IP address; always follow the guidelines above. For more information on address assignment, please refer to RFC 1597, Address Allocation for Private Internets and RFC 1466, Guidelines for Management of IP Address Space. VSG1432-B101 Series User's Guide 353 - ZyXEL VSG1432-B101 | User Guide - Page 354
Appendix B IP Addresses and Subnetting 354 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 355
's IP address. Disable Pop-up Blockers 1 In Internet Explorer, select Tools, Pop-up Blocker and then select Turn Off Pop-up Blocker. Figure 185 Pop-up Blocker You can also check if pop-up blocking is disabled in the Pop-up Blocker section in the Privacy tab. VSG1432-B101 Series User's Guide 355 - ZyXEL VSG1432-B101 | User Guide - Page 356
Pop-up Blocker section of the screen. This disables any web pop-up blockers you may have enabled. Figure 186 Internet Options: Privacy 3 Click Apply to save this setting. steps. 1 In Internet Explorer, select Tools, Internet Options and then the Privacy tab. 356 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 357
2 Select Settings...to open the Pop-up Blocker Settings screen. Figure 187 Internet Options: Privacy 3 Type the IP address of your device (the web page that you do not want to have blocked) with the prefix "http://". For example, http://192.168.167.1. VSG1432-B101 Series User's Guide 357 - ZyXEL VSG1432-B101 | User Guide - Page 358
. Figure 188 Pop-up Blocker Settings 5 Click Close to return to the Privacy screen. 6 Click Apply to save this setting. JavaScripts If pages of the web configurator do not display properly in Internet Explorer, check that JavaScripts are allowed. 358 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 359
. Figure 189 Internet Options: Security 2 Click the Custom Level... button. 3 Scroll down to Scripting. 4 Under Active scripting make sure that Enable is selected (the default). 5 Under Scripting of Java applets make sure that Enable is selected (the default). VSG1432-B101 Series User's Guide 359 - ZyXEL VSG1432-B101 | User Guide - Page 360
Settings - Java Scripting Java Permissions 1 From Internet Explorer, click Tools, Internet Options and then the Security tab. 2 Click the Custom Level... button. 3 Scroll down to Microsoft VM. 4 Under Java permissions make sure that a safety level is selected. 360 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 361
and Java Permissions 5 Click OK to close the window. Figure 191 Security Settings - Java JAVA (Sun) 1 From Internet Explorer, click Tools, Internet Options and then the Advanced tab. 2 Make sure that Use Java 2 for under Java (Sun) is selected. VSG1432-B101 Series User's Guide 361 - ZyXEL VSG1432-B101 | User Guide - Page 362
Java, Javascripts and pop-ups in one screen. Click Tools, then click Options in the screen that appears. Figure 193 Mozilla Firefox: Tools > Options 362 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 363
Appendix C Pop-up Windows, JavaScripts and Java Permissions Click Content.to show the screen below. Select the check boxes as shown in the following screen. Figure 194 Mozilla Firefox Content Security VSG1432-B101 Series User's Guide 363 - ZyXEL VSG1432-B101 | User Guide - Page 364
Appendix C Pop-up Windows, JavaScripts and Java Permissions 364 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 365
wireless LAN topologies. Ad-hoc Wireless LAN Configuration The simplest WLAN configuration is an independent (Ad-hoc) WLAN that commonly referred to as an ad-hoc network or Independent Basic Service Set (IBSS). The following diagram shows an example of notebook VSG1432-B101 Series User's Guide 365 - ZyXEL VSG1432-B101 | User Guide - Page 366
still access the wired network but cannot communicate with each other. Figure 196 Basic Service Set ESS An Extended Service Set (ESS) consists of a series of overlapping BSSs, each containing an access wireless network traffic in the immediate neighborhood. 366 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 367
node occurs when two stations are within range of the same access point, but are not within range of each other. The following figure illustrates a VSG1432-B101 Series User's Guide 367 - ZyXEL VSG1432-B101 | User Guide - Page 368
the AP without the RTS (Request To Send)/CTS (Clear to Send) handshake. You should only configure RTS/CTS if the possibility of hidden nodes exists on your network and the "cost" of resending affect the throughput performance instead of providing a remedy. 368 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 369
between wireless clients, access points and the wired network. Wireless security methods available on the ZyXEL Device are data encryption, wireless client authentication, restricting access by device MAC address and hiding the ZyXEL Device identity. VSG1432-B101 Series User's Guide 369 - ZyXEL VSG1432-B101 | User Guide - Page 370
based on a client-server model that supports authentication, authorization and accounting. The access point is the client and the server is the RADIUS server. The RADIUS server handles the following tasks: • Authentication Determines the identity of the users. 370 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 371
Determines the network services available to authenticated users once they are connected is a password, they both know. The key is not sent over the network. In addition to the shared key, password information exchanged support all authentication types. VSG1432-B101 Series User's Guide 371 - ZyXEL VSG1432-B101 | User Guide - Page 372
uses certificates for only the server-side authentications to establish a secure connection. Client authentication is then done by sending username and password through the secure connection, thus client identity is protected. For client authentication, EAP- 372 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 373
username and password methods through the secured connection to authenticate the clients, thus hiding client identity. However, PEAP only supports to configure a default encryption key in the wireless security configuration screen. You may still configure and VSG1432-B101 Series User's Guide 373 - ZyXEL VSG1432-B101 | User Guide - Page 374
long as the passwords match, a wireless client will be granted access to a WLAN. If the AP or the wireless clients do not support WPA2, just use with Advanced Encryption Standard (AES) in the Counter mode with Cipher block chaining Message authentication code Protocol VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 375
features are optional and may not be supported in all wireless devices. Key caching allows instructing the wireless client how to use WPA. At the time of writing, the most widely available supplicant is the WPA patch for Windows XP, Funk Software's Odyssey client. VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 376
patch is a free download that adds WPA capability to Windows XP's built-in "Zero Configuration" wireless client. However, you must run Windows XP to use it. WPA(2) with RADIUS Application Example To set up WPA(2), you need the IP address of the RADIUS server, its port number (default is 1812), and - ZyXEL VSG1432-B101 | User Guide - Page 377
address filters are not dependent on how you configure these security features. Table 129 Wireless Security Relational Matrix AUTHENTICATION METHOD/ KEY MANAGEMENT PROTOCOL ENCRYPTIO N METHOD ENTER MANUAL TKIP/AES No Enable WPA-PSK TKIP/AES Yes Disable VSG1432-B101 Series User's Guide 377 - ZyXEL VSG1432-B101 | User Guide - Page 378
Security Relational Matrix (continued) AUTHENTICATION METHOD/ KEY MANAGEMENT PROTOCOL ENCRYPTIO N METHOD ENTER MANUAL KEY IEEE 802.1X WPA2 TKIP/AES No Enable WPA2-PSK TKIP/AES Yes directions. dBi represents the true gain that the antenna provides. 378 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 379
as close to the center of the coverage area as possible. For directional antennas, point the antenna in the direction of the desired coverage area. VSG1432-B101 Series User's Guide 379 - ZyXEL VSG1432-B101 | User Guide - Page 380
Appendix D Wireless LANs 380 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 381
If the Protocol is TCP, UDP, or TCP/UDP, this is the IP port number. • If the Protocol is USER, this is the IP protocol number. • Description: This is a brief explanation of the applications that use this service or the situations in which this service is used. VSG1432-B101 Series User's Guide 381 - ZyXEL VSG1432-B101 | User Guide - Page 382
group of hosts. The Internet Key Exchange algorithm is used for key distribution and management. The Internet Message Access Protocol is used for e-mail. This is a more secure version of IMAP4 that runs over SSL. This is another popular Internet chat program. 382 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 383
real time sound over the web. Remote Execution Daemon. Remote Login. This is an ISP that provides services mainly for cable modems. Remote Telnet. The Real Time Streaming (media control) Protocol (RTSP) is a remote control for multimedia on the Internet. VSG1432-B101 Series User's Guide 383 - ZyXEL VSG1432-B101 | User Guide - Page 384
emulation protocol common on the Internet and in UNIX environments. It operates over TCP/IP networks. Its primary function is to allow users to log into remote host systems. A videoconferencing solution. The UDP port number is specified in the application. 384 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 385
-User License Agreement for "VSG1432-B101" WARNING: ZyXEL Communications BELOW. ZYXEL MAY HAVE DISTRIBUTED TO YOU HARDWARE AND/OR SOFTWARE, OR MADE AVAILABLE FOR ELECTRONIC DOWNLOADS THESE users specified in sales order and invoice. You have the right to make one VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 386
operation of a service bureau or for terms. ZyXEL has provided support for such software other than compliance with the applicable license terms of such third party, and makes no warranty (express, implied or statutory) whatsoever with respect thereto. Please 386 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 387
UNDER THIS AGREEMENT OR OTHERWISE WITH RESPECT TO THE SOFTWARE AND DOCUMENTATION OR OTHERWISE SHALL BE EQUAL TO THE PURCHASE PRICE, BUT SHALL IN NO EVENT EXCEED THE PRODUCT'S PRICE. BECAUSE SOME STATES/COUNTRIES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF VSG1432-B101 Series User's Guide 387 - ZyXEL VSG1432-B101 | User Guide - Page 388
Agreement. Upon notification of termination, you agree to destroy or return to ZyXEL all copies of the Software and Documentation and to certify in writing that prior written consent of ZyXEL. Any waiver or modification of this License Agreement shall only be 388 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 389
will give to anyone who contacts us at the ZyXEL Technical Support ([email protected]), for a charge of no more express written permission of ZyXEL Communications Corporation. This Product includes MIPS Linux kernel , Bridge-Utils, BusyBox 1.0.0 -1307, USA VSG1432-B101 Series User's Guide 389 - ZyXEL VSG1432-B101 | User Guide - Page 390
we are referring to freedom, not price. Our General Public Licenses are designed to service if you wish), that you receive source code or can get it if you want it, that you can change is not the original, so that any problems introduced by others will not reflect on VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 391
".) Each licensee is addressed as "you". Activities user how to view a copy of this License. (Exception: if the Program itself is interactive but does not normally print such an announcement, your work based on the Program is not required to print an announcement.) VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 392
place counts as distribution of the source code, even though third parties are not compelled to copy the source along with the object code. 392 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 393
the distribution and/or use of the Program is restricted in certain countries either by patents or by copyrighted interfaces, the original copyright holder who VSG1432-B101 Series User's Guide 393 - ZyXEL VSG1432-B101 | User Guide - Page 394
the present version, but may differ in detail to address new problems or concerns. Each version is given a distinguishing version number THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION. 12. IN NO EVENT UNLESS REQUIRED VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 395
which implements the Point-to-Point Protocol (PPP) to provide Internet connections over serial lines. ppp-2.4 currently supports Linux and Solaris. All of the code here can be freely OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, VSG1432-B101 Series User's Guide 395 - ZyXEL VSG1432-B101 | User Guide - Page 396
, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 397
, manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation. All rights reserved. Disclaimer ZyXEL does two conditions: • This device may not cause harmful interference. VSG1432-B101 Series User's Guide 397 - ZyXEL VSG1432-B101 | User Guide - Page 398
radiate radio frequency energy, and if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that maintained between the antenna of this device and all persons. 注意 ! VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 399
equivalent product of equal or higher value, and will be solely at the discretion of ZyXEL. This warranty shall not apply if the product has been modified, misused, tampered with, damaged by an act of God, or subjected to abnormal working conditions. VSG1432-B101 Series User's Guide 399 - ZyXEL VSG1432-B101 | User Guide - Page 400
the services of this warranty, contact ZyXEL's Service Center for be shipped by ZyXEL to the corresponding return address, Postage Paid firmware upgrades and information at www.zyxel.com for global products, or at www.us.zyxel.com for North American products. 400 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 401
B backup configuration 301 VSG1432-B101 Series User's Guide Index Index Basic Service Set, See BSS 365 Basic Service Set, see BSS blinking LEDs 30 broadcast 76 BSS 117, 365 example 118 C CA 233, 372 Canonical Format Indicator See CFI CBR 89 certificate details 239 factory default 234 Certificate - ZyXEL VSG1432-B101 | User Guide - Page 402
, 115 Finger 190 firewalls 215 add protocols 217 configuration 217 DDoS 216 DoS 216 LAND attack 216 Ping of Death 216 SYN attack 216 firmware 299 version 71 forwarding ports 176 fragmentation threshold 110, 113, 369 FTP 176, 190 G General wireless LAN screen 92 402 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 403
wizard setup 41 Internet access 24 wizard setup 41 Internet Group Multicast Protocol, see IGMP Internet Key Exchange 259 VSG1432-B101 Series User's Guide Index Internet Protocol Security, see IPSec IP address 76, 87, 128, 144 ping 305 private 145 IP alias NAT applications 190 IP multicasting 319 IP - ZyXEL VSG1432-B101 | User Guide - Page 404
) 317 PPTP 191 preamble 111, 113 preamble mode 119 pre-shared key 263 private IP address 145 product registration 400 PSK 375 push button 31 Push Button Configuration, see PBC push button, WPS 120 Q QoS 151, 167 marking 152 setup 151 tagging 152 versus CoS 152 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 405
7 SCR 88 secure gateway address 246 security wireless LAN 114 security associations, see VPN Security Log 271 Security Parameter Index 253 Security Parameter Index, see SPI service access control 265 Service Set 94, 102 Services 190 setup VSG1432-B101 Series User's Guide Index firewalls 217 static - ZyXEL VSG1432-B101 | User Guide - Page 406
in two phases 246 IPSec 245 security associations (SA) 246 see also IKE SA, IPSec SA W WAN 75 ATM QoS 89 encapsulation 75 IGMP 76 IP address 76, 87 multicast 76 multiplexing 87 status 71 traffic shaping 88 example 88 VCI 87 VPI 87 warranty 399 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 407
web configurator 33 login 33 passwords threshold 110, 113 limitations 117 MAC address filter 103, 115 MBSSID 118 preamble WPS 120, 122 example 124 limitations 125 PIN 121 push button 31, 120 wireless security 369 Wireless tutorial 48 wizard setup Internet 41 VSG1432-B101 Series User's Guide - ZyXEL VSG1432-B101 | User Guide - Page 408
Index 408 VSG1432-B101 Series User's Guide
-
1 -
2 -
3 -
4 -
5 -
6 -
7 -
8
-
9
-
10
-
11
-
12
-
13
-
14
-
15
-
16
-
17
-
18
-
19
-
20
-
21
-
22
-
23
-
24
-
25
-
26
-
27
-
28
-
29
-
30
-
31
-
32
-
33
-
34
-
35
-
36
-
37
-
38
-
39
-
40
-
41
-
42
-
43
-
44
-
45
-
46
-
47
-
48
-
49
-
50
-
51
-
52
-
53
-
54
-
55
-
56
-
57
-
58
-
59
-
60
-
61
-
62
-
63
-
64
-
65
-
66
-
67
-
68
-
69
-
70
-
71
-
72
-
73
-
74
-
75
-
76
-
77
-
78
-
79
-
80
-
81
-
82
-
83
-
84
-
85
-
86
-
87
-
88
-
89
-
90
-
91
-
92
-
93
-
94
-
95
-
96
-
97
-
98
-
99
-
100
-
101
-
102
-
103
-
104
-
105
-
106
-
107
-
108
-
109
-
110
-
111
-
112
-
113
-
114
-
115
-
116
-
117
-
118
-
119
-
120
-
121
-
122
-
123
-
124
-
125
-
126
-
127
-
128
-
129
-
130
-
131
-
132
-
133
-
134
-
135
-
136
-
137
-
138
-
139
-
140
-
141
-
142
-
143
-
144
-
145
-
146
-
147
-
148
-
149
-
150
-
151
-
152
-
153
-
154
-
155
-
156
-
157
-
158
-
159
-
160
-
161
-
162
-
163
-
164
-
165
-
166
-
167
-
168
-
169
-
170
-
171
-
172
-
173
-
174
-
175
-
176
-
177
-
178
-
179
-
180
-
181
-
182
-
183
-
184
-
185
-
186
-
187
-
188
-
189
-
190
-
191
-
192
-
193
-
194
-
195
-
196
-
197
-
198
-
199
-
200
-
201
-
202
-
203
-
204
-
205
-
206
-
207
-
208
-
209
-
210
-
211
-
212
-
213
-
214
-
215
-
216
-
217
-
218
-
219
-
220
-
221
-
222
-
223
-
224
-
225
-
226
-
227
-
228
-
229
-
230
-
231
-
232
-
233
-
234
-
235
-
236
-
237
-
238
-
239
-
240
-
241
-
242
-
243
-
244
-
245
-
246
-
247
-
248
-
249
-
250
-
251
-
252
-
253
-
254
-
255
-
256
-
257
-
258
-
259
-
260
-
261
-
262
-
263
-
264
-
265
-
266
-
267
-
268
-
269
-
270
-
271
-
272
-
273
-
274
-
275
-
276
-
277
-
278
-
279
-
280
-
281
-
282
-
283
-
284
-
285
-
286
-
287
-
288
-
289
-
290
-
291
-
292
-
293
-
294
-
295
-
296
-
297
-
298
-
299
-
300
-
301
-
302
-
303
-
304
-
305
-
306
-
307
-
308
-
309
-
310
-
311
-
312
-
313
-
314
-
315
-
316
-
317
-
318
-
319
-
320
-
321
-
322
-
323
-
324
-
325
-
326
-
327
-
328
-
329
-
330
-
331
-
332
-
333
-
334
-
335
-
336
-
337
-
338
-
339
-
340
-
341
-
342
-
343
-
344
-
345
-
346
-
347
-
348
-
349
-
350
-
351
-
352
-
353
-
354
-
355
-
356
-
357
-
358
-
359
-
360
-
361
-
362
-
363
-
364
-
365
-
366
-
367
-
368
-
369
-
370
-
371
-
372
-
373
-
374
-
375
-
376
-
377
-
378
-
379
-
380
-
381
-
382
-
383
-
384
-
385
-
386
-
387
-
388
-
389
-
390
-
391
-
392
-
393
-
394
-
395
-
396
-
397
-
398
-
399
-
400
-
401
-
402
-
403
-
404
-
405
-
406
-
407
-
408
 |
 |
www.zyxel.com
www.zyxel.com
VSG1432-B101 Series
802.11n Wireless VDSL2 4-port Gateway
Copyright © 2010
ZyXEL Communications Corporation
Firmware Version 1.10
Edition 1, 11/2010
Default Login Details
IP Address
User Name
admin
Password
1234