ZyXEL VSG1435-B101 User Guide
ZyXEL VSG1435-B101 Manual
 |
View all ZyXEL VSG1435-B101 manuals
Add to My Manuals
Save this manual to your list of manuals |
ZyXEL VSG1435-B101 manual content summary:
- ZyXEL VSG1435-B101 | User Guide - Page 1
VSG1435-B101 Series 802.11n Wireless VDSL2 4-port Gateway with HPNA Default Login Details IP Address http://192.168.1.1 User Name admin Password 1234 Firmware Version 1.10 Edition 1, 11/2010 www.zyxel.com www.zyxel.com Copyright © 2010 ZyXEL Communications Corporation - ZyXEL VSG1435-B101 | User Guide - Page 2
- ZyXEL VSG1435-B101 | User Guide - Page 3
, questions or suggestions to: [email protected] Thank you! The Technical Writing Team, ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 30099, Taiwan. Need More Help? More help is available at www.zyxel.com. VSG1435-B101 Series User's Guide 3 - ZyXEL VSG1435-B101 | User Guide - Page 4
this book may differ slightly from the product due to differences in operating systems, operating system versions, or if you installed updated firmware/software for your device. Every effort has been made to ensure that the information in this manual is accurate. 4 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 5
Conventions • The VSG1435-B101 may be referred to as the "ZyXEL Device", the "device", the "system" or the "product" in this User's Guide. • Product a mouse click. For example, Maintenance > Log > Log Setting means you first click Maintenance in the navigation panel, then the Log sub menu and finally - ZyXEL VSG1435-B101 | User Guide - Page 6
Document Conventions Icons Used in Figures Figures in this User's Guide may use the following generic icons. The ZyXEL Device icon is not an exact representation of your device. ZyXEL Device Computer Notebook computer Server Firewall Telephone Router Switch 6 VSG1435-B101 Series User's - ZyXEL VSG1435-B101 | User Guide - Page 7
to the correct ports. • Place connecting cables carefully so that no one will step on them or stumble over them. • Always disconnect all cables from this device before servicing or disassembling. electrical and electronic equipment should be treated separately. VSG1435-B101 Series User's Guide 7 - ZyXEL VSG1435-B101 | User Guide - Page 8
Safety Warnings 8 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 9
Logs ...273 Traffic Status ...277 IGMP Status ...283 Users Configuration ...287 Remote Management ...291 Time Settings ...295 Logs Setting ...299 Firmware Upgrade ...303 Configuration ...305 Diagnostic ...309 Troubleshooting ...311 Product Specifications ...319 VSG1435-B101 Series User's Guide 9 - ZyXEL VSG1435-B101 | User Guide - Page 10
Contents Overview 10 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 11
I: User's Guide 21 Chapter 1 Introducing the VSG1435-B101 23 1.1 Overview ...23 1.2 Ways to Manage the ZyXEL Device 23 1.3 Good Habits for Managing the ZyXEL Device 23 1.4 Applications for the ZyXEL Device 24 1.4.1 Internet Access ...24 1.4.2 HomePNA ...26 1.4.3 ZyXEL Device's USB Support 26 - ZyXEL VSG1435-B101 | User Guide - Page 12
Setting Up Multiple Wireless Groups 57 4.6 Setting Up NAT Port Forwarding 60 4.7 Configuring Static Route for Routing to Another Network 62 4.8 Configuring QoS Queue and Class Setup 64 4.9 Access the ZyXEL 90 6.3.1 Encapsulation ...90 6.3.2 Multiplexing ...91 12 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 13
Overview 115 7.9.2 Additional Wireless Terms 117 7.9.3 Wireless Security Overview 118 7.9.4 Signal Problems ...121 7.9.5 BSS ...121 7.9.6 MBSSID ...122 7.9.7 Preamble Type ...123 Need To Know 132 8.1.3 Before You Begin ...133 8.2 The LAN Setup Screen ...134 VSG1435-B101 Series User's Guide 13 - ZyXEL VSG1435-B101 | User Guide - Page 14
ZyXEL of Service Forwarding Screen 175 11.2.1 Add/Edit Policy Forwarding 176 Chapter 12 Network Address Translation (NAT 179 12.1 Overview ...179 12.1.1 What You Can Do in this Chapter 179 12.1.2 What You Need To Know 179 12.2 The Port Forwarding Screen 180 14 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 15
Port Forwarding 182 12.3 The Applications Screen 183 12.3.1 Add New Application 184 12.4 The Port Triggering Screen 185 12.4.1 Add/Edit Port 208 14.3.1 IGMP Host Limitation Edit 210 14.3.2 IGMP Service Add 211 14.3.3 IGMP Host Limitation Add 212 14.4 IGMP VSG1435-B101 Series User's Guide 15 - ZyXEL VSG1435-B101 | User Guide - Page 16
Certificate 241 20.3.4 Certificate Details 243 20.4 The Trusted CA Screen 245 20.4.1 View Trusted CA Certificate 246 20.4.2 Import Trusted CA Certificate 247 16 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 17
251 21.3 The IPSec Settings Screen 252 21.3.1 Add/Edit IPSec Setting 253 21.3.2 Configuring Manual Key 258 21.4 Hellman (DH) Key Groups 268 Chapter 22 Service Control ...269 22.1 Overview ...269 22.2 The Service Control Screen 269 Chapter 23 ARP Table ...271 VSG1435-B101 Series User's Guide 17 - ZyXEL VSG1435-B101 | User Guide - Page 18
30.1 Overview ...299 30.2 The Log Settings Screen 299 30.2.1 Example E-mail Log 301 Chapter 31 Firmware Upgrade ...303 31.1 Overview ...303 31.2 The Firmware Screen ...303 Chapter 32 Configuration ...305 32.1 Overview ...305 32.2 The Configuration Screen 305 18 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 19
325 Appendix B IP Addresses and Subnetting 349 Appendix C Pop-up Windows, JavaScripts and Java Permissions 359 Appendix D Wireless LANs 369 Appendix E Services ...385 Appendix F Open Software Announcements 389 Appendix G Legal Information 401 Index...405 VSG1435-B101 Series User's Guide 19 - ZyXEL VSG1435-B101 | User Guide - Page 20
Table of Contents 20 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 21
PART I User's Guide 21 - ZyXEL VSG1435-B101 | User Guide - Page 22
22 - ZyXEL VSG1435-B101 | User Guide - Page 23
the following things regularly to make the ZyXEL Device more secure and to manage the ZyXEL Device more effectively. • Change the password. Use a password that's not easy to guess and that consists of different types of characters, such as numbers and letters. VSG1435-B101 Series User's Guide 23 - ZyXEL VSG1435-B101 | User Guide - Page 24
even crashes. If you forget your password, you will have to reset the ZyXEL Device to its factory default settings. If you backed up an earlier you configure in the ZyXEL Device. Refer to Section 6.2 on page 81 for the Network Settings> Broadband screen. 24 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 25
is on, all incoming traffic from the Internet to your network is blocked by default unless it is initiated from your network. This means that probes from the outside to your network are not allowed, but you can safely browse the Internet and download files. VSG1435-B101 Series User's Guide 25 - ZyXEL VSG1435-B101 | User Guide - Page 26
wirelessly to the ZyXEL Device. The set-up box (C) connects into a coaxial outlet in another part of the house for access to online videos. Figure 2 HomePNA Application 1.4.3 ZyXEL Device's USB Support The USB port of the ZyXEL Device is used for file-sharing. 26 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 27
FTP to access the files on the USB device. Figure 3 USB File Sharing Application B A 1.5 Hardware Setup Place the ZyXEL Device flat on a desk or table or on the stand for a vertical installation. Remove the ZyXEL Device's clear plastic covers before using it. VSG1435-B101 Series User's Guide 27 - ZyXEL VSG1435-B101 | User Guide - Page 28
Chapter 1 Introducing the VSG1435-B101 To connect the stand, line up the arrow on the stand with the arrow on the bottom of the device as shown. Figure 4 Connecting the Stand 28 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 29
your ZyXEL Device's DSL WAN port to a telephone jack (or the DSL or modem jack on a splitter if you have one). 2b ETHERNET WAN: If you already have a broadband router or modem, use an Ethernet cable to connect the ETHERNET WAN port to it for Internet access. VSG1435-B101 Series User's Guide 29 - ZyXEL VSG1435-B101 | User Guide - Page 30
Chapter 1 Introducing the VSG1435-B101 3 HPNA: (VSG1435-B101 only) Use a coaxial cable to connect to a coaxial outlet and relay Internet traffic throughout your house through coaxial cabling. 4 LAN: Use an Ethernet cable to connect a computer to a LAN port for initial configuration and/or Internet - ZyXEL VSG1435-B101 | User Guide - Page 31
. Off The ZyXEL Device is not receiving power. Blinking Firmware upgrade is in progress. ETHERNET Green On 1-4 The ZyXEL Device has a The ZyXEL Device is sending or receiving IP traffic. There is no Internet connection or the gateway is in bridged mode. VSG1435-B101 Series User's Guide 31 - ZyXEL VSG1435-B101 | User Guide - Page 32
Blinking The ZyXEL Device is setting up a WPS connection. Off The wireless network is not activated. 1.8 The RESET Button If you forget your password or cannot access the web configurator, you will need to use the RESET button at the back of the device to reload the factory-default configuration - ZyXEL VSG1435-B101 | User Guide - Page 33
network is active. You can also use the WLAN/WPS button to quickly set up a secure wireless connection between the ZyXEL Device and a WPS-compatible client by adding one device at a time. To activate WPS: 1 Make sure the POWER LED is on and not blinking. VSG1435-B101 Series User's Guide 33 - ZyXEL VSG1435-B101 | User Guide - Page 34
Chapter 1 Introducing the VSG1435-B101 2 Press the WLAN/WPS button for five seconds and release it. 3 Press the WPS button on another WPS-enabled device within range of the ZyXEL Device. The WLAN/WPS LED flashes green and orange while the ZyXEL Device sets up a WPS connection with the other - ZyXEL VSG1435-B101 | User Guide - Page 35
account security is enabled (see Section 27.2 on page 287) the number of dots that appears when you type the password changes randomly to prevent anyone watching the password field from knowing the length of your password. If you have changed the password, VSG1435-B101 Series User's Guide 35 - ZyXEL VSG1435-B101 | User Guide - Page 36
password. It is strongly recommended you change the default password. Enter a new password, retype it to confirm and click Apply; alternatively click Skip to proceed to the main menu if you do not want to change the password now. Figure 10 Change Password Screen 36 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 37
, the ZyXEL Device automatically logs you out if you do not use the web configurator for ten minutes (default). If this happens, log in again. 7 Click Status to display the Status screen, where you can view the ZyXEL Device's interface and system information. VSG1435-B101 Series User's Guide 37 - ZyXEL VSG1435-B101 | User Guide - Page 38
12 Screen Layout A B C As illustrated above, the main screen is divided into these parts: • A - title bar • B - main window • C - navigation panel 2.2.1 Title Bar The title bar provides some icons in the upper right corner. 38 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 39
Wi-Fi Protected Setup) settings. WMM Use this screen to enable or disable Wi-Fi MultiMedia (WMM). WDS Use this screen to set up Wireless Distribution System (WDS) links to other access points. Others Use this screen to configure advanced wireless settings. VSG1435-B101 Series User's Guide 39 - ZyXEL VSG1435-B101 | User Guide - Page 40
to configure servers behind the ZyXEL Device. Port Triggering Use this screen to change your ZyXEL Device's port triggering settings. DMZ Use this screen to configure a default server which receives packets from ports that are not specified in the Port Forwarding screen. ALG Use this screen - ZyXEL VSG1435-B101 | User Guide - Page 41
factory default settings. Reboot Use this screen to reboot the ZyXEL Device without turning the power off. Diagnostic Ping & TraceRoute & NsLookup Use this screen to identify problems with the DSL connection. You can use Ping, TraceRoute, or Nslookup to help you identify problems. VSG1435-B101 - ZyXEL VSG1435-B101 | User Guide - Page 42
Chapter 2 The Web Configurator 42 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 43
Overview Use the Quick Start screens to configure the ZyXEL Device's time zone and basic Internet access and wireless settings. Note: See the technical reference chapters (starting the time zone of the ZyXEL Device's location and click Next. Figure 13 Time Zone VSG1435-B101 Series User's Guide 43 - ZyXEL VSG1435-B101 | User Guide - Page 44
LAN on or off. If you keep it on, record the security settings so you can configure your wireless clients to connect to the ZyXEL Device. Click Save. Figure 15 Internet Connection 4 Your ZyXEL Device saves your settings and attempts to connect to the Internet. 44 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 45
. If you connect to the Internet through an ADSL connection, use the information from your Internet Service Provider (ISP) to configure the ZyXEL Device. Be sure to contact your service provider for any information you need to configure the Broadband screens. VSG1435-B101 Series User's Guide 45 - ZyXEL VSG1435-B101 | User Guide - Page 46
DSL service provider. For this example, the service provider requires a username and password to establish Internet connection. Therefore, select PPPoE as the WAN encapsulation type. 4 Enter the account information provided to you by your DSL service provider. 46 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 47
your default Internet connection by selecting the Apply as Default Gateway check box. Then select DNS as Static and enter the DNS server addresses provided to you, such as 192.168.5.2 (DNS server1)/192.168.5.1 (DNS server2). 6 Click Apply to save your settings. VSG1435-B101 Series User's Guide 47 - ZyXEL VSG1435-B101 | User Guide - Page 48
to connect a television in another part of the house to the Internet through the coaxial port. You will need: • a Set-Top Box (STB) • HomePNA Ethernet Bridge • a television; and • an active Video On Demand (VOD)/Internet Protocol Television (IPTV) subscription 48 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 49
to the STB. 5 Refer to the user's guide of your STB for information on how to connect it to your television, as well as configure your account settings on it. You should now be able to watch online videos in your television using your VOD or IPTV subscription. VSG1435-B101 Series User's Guide 49 - ZyXEL VSG1435-B101 | User Guide - Page 50
manual configuration (Section 4.4.3 on page 56). 4.4.1 Configuring the Wireless Network Settings This example uses the following parameters to set up a wireless network. SSID Security Mode Pre-Shared Key 802.11 Mode Example WPA-PSK DoNotStealMyWirelessNetwork 802.11b/g/n Mixed 50 VSG1435-B101 - ZyXEL VSG1435-B101 | User Guide - Page 51
Network Settings > Wireless to open the General screen. Select More Secure as the security level and WPA-PSK as the security mode. Configure the screen using the provided parameters his notebook and the ZyXEL Device (see Section 4.4.2 on page 52). He can also VSG1435-B101 Series User's Guide 51 - ZyXEL VSG1435-B101 | User Guide - Page 52
in order to download the wireless network settings from the ZyXEL Device. Push Button Configuration (PBC) 1 Make sure that your ZyXEL Device is turned on and your notebook , go to the WPS setting page. Enable WPS and press the WPS button (Start or WPS button). 52 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 53
the second button within two minutes of pressing the first one. The ZyXEL Device sends the proper configuration settings to the wireless client. This may take up to two minutes. The wireless client is then able to communicate with the ZyXEL Device securely. VSG1435-B101 Series User's Guide 53 - ZyXEL VSG1435-B101 | User Guide - Page 54
of how to set up a wireless network and its security by pressing a button on both ZyXEL Device and wireless client. Example WPS Process: PBC Method Wireless Client ZyXEL Device WITHIN 2 MINUTES WPS SECURITY INFO Press and hold for 5 seconds COMMUNICATION 54 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 55
screen within two minutes. The ZyXEL Device authenticates the wireless client and sends the proper configuration settings to the wireless client. This may take up to two minutes. The wireless client is then able to communicate with the ZyXEL Device securely. VSG1435-B101 Series User's Guide 55 - ZyXEL VSG1435-B101 | User Guide - Page 56
to set up a wireless network and its security on a ZyXEL Device and a wireless client by using PIN method. Example WPS Process: PIN Method Wireless Client ZyXEL Device DoNotStealMyWirelessNetwork" pre-shared key to establish an wireless Internet connection. 56 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 57
Company A will use the following parameters to set up the wireless network groups. SSID Security Level Security Mode Pre-Shared Key COMPANY Company More Secure WPA2-PSK ForCompanyOnly VIP VIP More Secure WPA2-PSK ForVIPOnly GUEST Guest Basic Static WEP Guest VSG1435-B101 Series User's Guide 57 - ZyXEL VSG1435-B101 | User Guide - Page 58
up the company's general wireless network group. Configure the screen using the provided parameters and click Apply. 2 Click Network Settings > Wireless > More AP to open the following screen. Click the Edit icon to configure the second wireless network group. 58 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 59
Chapter 4 Tutorials 3 Configure the screen using the provided parameters and click Apply. 4 In the More AP screen, click the Edit icon to configure the third wireless network group. VSG1435-B101 Series User's Guide 59 - ZyXEL VSG1435-B101 | User Guide - Page 60
Up NAT Port Forwarding Thomas manages the Doom server on a computer behind the ZyXEL Device. In order for players on the Internet (like A in the figure below) to communicate with the Doom server, Thomas needs to configure the port settings and IP address on 60 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 61
MyDSLConnection. Enter 666 as the Start and End port. Enter the IP address of the Doom server. This is 192.168.1.34 for this example. Select TCP/UDP. This should be the protocol supported by the Doom server. 2 The screen should look as follows. Click Apply. VSG1435-B101 Series User's Guide 61 - ZyXEL VSG1435-B101 | User Guide - Page 62
4 Tutorials 3 The port forwarding settings you configured appear in the table. The ZyXEL Device forwards port 666 traffic to the traffic is sent to the ZyXEL Device's WAN default gateway by default. In this case, B will never receive the traffic. N1 A R N2 B 62 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 63
to route traffic from N1 to N2: 1 Log into the ZyXEL Device's Web Configurator in advanced mode. 2 Click Advanced > Routing. 3 Click Add New Static Route Entry in the Static Route screen. 4 Configure the Static Route Setup screen using the following settings: VSG1435-B101 Series User's Guide 63 - ZyXEL VSG1435-B101 | User Guide - Page 64
B should be able to receive traffic from A. You may need to additionally configure B's firewall settings to allow specific traffic to pass through. 4.8 Configuring QoS Queue and Class Setup This section contains example) of your computer and map it to queue 7. 64 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 65
Click Network Settings > QoS > General and select Active. Set your WAN Managed Upstream Bandwidth to 10,000 kbps (or leave this blank to have the ZyXEL Device automatically following values: • Name: E-mail • To Interface: WAN • Priority: 1 (High) • Weight: 8 VSG1435-B101 Series User's Guide 65 - ZyXEL VSG1435-B101 | User Guide - Page 66
Chapter 4 Tutorials • Rate Limit: 5,000 (kbps) Tutorial: Advanced > QoS > Queue Setup 3 Click Class Setup > Add new Classifier to create a new class. Check Active and follow the settings as shown in the screen below. Tutorial: Advanced > QoS > Class Setup 66 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 67
(DDNS) allows you to access the ZyXEL Device using a domain name. http://zyxelrouter.dyndns.org w.x.y.z A a.b.c.d To use this feature, you have to apply for DDNS service at www.dyndns.org. This tutorial covers: • Registering a DDNS Account on www.dyndns.org VSG1435-B101 Series User's Guide 67 - ZyXEL VSG1435-B101 | User Guide - Page 68
. 4.9.2 Configuring DDNS on Your ZyXEL Device Configure the following settings in the Advanced > DNS Setting > Dynamic DNS screen. • Select Enable Dynamic DNS. • Select DynDNS.org as the service provider. • Type zyxelrouter.dyndns.org in the Host Name field. 68 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 69
the ZyXEL Device and manage it. 4.10 Access Your Shared Files From a Computer Here is how to use an FTP program to access a file storage device connected to the ZyXEL Device's USB port. Note: This example uses the FileZilla FTP program to browse your shared files. VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 70
ZyXEL Device (the default is 192.168.1.1), your account's user name and password and port 21 and click Quickconnect. A screen asking for password authentication appears. File Sharing via Windows Explorer Once you log in the USB device displays in the mnt folder. 70 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 71
PART II Technical Reference 71 - ZyXEL VSG1435-B101 | User Guide - Page 72
72 - ZyXEL VSG1435-B101 | User Guide - Page 73
current status of the ZyXEL Device, system resources, and interfaces (LAN, WAN, and WLAN). 5.2 The Network Map Screen Use this screen to view the network connection status of the device and its clients. A warning message appears if there is a connection problem. VSG1435-B101 Series User's Guide 73 - ZyXEL VSG1435-B101 | User Guide - Page 74
a list, click List View in the Viewing Mode selection box. You can configure how often you want the ZyXEL Device to update this screen in Refresh Interval. Figure 16 Network Map: Icon Mode Figure 17 Network Map: click on the IP address if you want to change it. 74 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 75
. Model Number This shows the model number of your ZyXEL Device. Firmware Version This is the current version of the firmware inside the device. WAN Information (These fields display when field displays the current IP address of the ZyXEL Device in the WAN. VSG1435-B101 Series User's Guide 75 - ZyXEL VSG1435-B101 | User Guide - Page 76
services the ZyXEL Device is providing to the LAN. Choices are: Server - The ZyXEL ZyXEL Device is using in the wireless LAN. WPS This displays whether WPS is activated. Interface Status Interface This column displays each interface the ZyXEL Device has. 76 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 77
the LAN interface, this displays the port speed and duplex setting. For the DSL interface, it ZyXEL Device is probably becoming unstable, and you should restart the device. See Section 32.2 on page 305, or turn off the device (unplug the power) for a few seconds. VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 78
Chapter 5 Network Map and Status Screens 78 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 79
the same encapsulation method used by your ISP (Internet Service Provider). If your ISP offers a dial-up Internet connection using PPPoE (PPP over Ethernet) or PPPoA, they should also provide a username and password (and service name) for user authentication. VSG1435-B101 Series User's Guide 79 - ZyXEL VSG1435-B101 | User Guide - Page 80
can be static (fixed) or dynamically assigned by the ISP each time the ZyXEL Device tries to access the Internet. If your ISP assigns you a static to know your Internet access settings such as encapsulation and WAN IP address. Get this information from your ISP. 80 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 81
for this connection. Default Gateway This shows whether the ZyXEL Device use the WAN interface of this connection as the system default gateway. Modify Click the Edit icon to configure the WAN connection. Click the Delete icon to remove the WAN connection. VSG1435-B101 Series User's Guide 81 - ZyXEL VSG1435-B101 | User Guide - Page 82
PPPoE directly on the ZyXEL Device (rather than individual computers), the computers on the LAN do not need PPPoE software installed, since the ZyXEL Device does that part of the task. Furthermore, with NAT, all of the LANs' computers will have access. 82 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 83
Chapter 6 Broadband This screen displays when you select the Routing mode and PPPoE encapsulation. Figure 21 Broadband: Add/Edit: ADSL, PPPoE Encapsulation VSG1435-B101 Series User's Guide 83 - ZyXEL VSG1435-B101 | User Guide - Page 84
default provides port set services. EoA supports ENET ENCAP (IPoE), PPPoE and RFC1483/2684 bridging encapsulation methods. PPPoA (PPP over ATM) allows just one PPPoA connection over a PVC. IPoA (IP over ATM) allows just one RFC 1483 routing connection over a PVC. 84 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 85
transport multiple protocols, the ZyXEL Device needs separate VCs. (SCR) sets the average cell rate Note that system default is 0 cells/ service name, then enter both components exactly as given. PPP Password Enter the password associated with the user name above. VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 86
. Apply as Default Select this option to have the ZyXEL Device use the WAN interface of Gateway this connection as the system default gateway. DNS Server This is available only when you select Apply as Default Gateway in the Routing Feature field. 86 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 87
) for traffic through this connection. Click Apply to save your changes back to the ZyXEL Device. Click Cancel to exit this screen without saving. 6.2.2.1 Bridge This screen displays when you select the Bridge mode. Figure 22 Broadband: Add/Edit: Bridge Mode VSG1435-B101 Series User's Guide 87 - ZyXEL VSG1435-B101 | User Guide - Page 88
connection. Mode Select Routing (default) from the drop-down list Bridge when your ISP provides you more than one on traffic from the selected LAN port(s). ATM PVC Configuration VPI The valid have multiple services/ connections over one PVC. You can set each VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 89
the PCR. Note that system default is 0 cells/sec. appear when the Type is set to VDSL or Ethernet) Active frame that contains bits to define class of service. 802.1Q Apply Cancel Select the IEEE ZyXEL Device. Click Cancel to exit this screen without saving. VSG1435-B101 Series User's Guide 89 - ZyXEL VSG1435-B101 | User Guide - Page 90
and sends it through an ATM PVC (Permanent Virtual Circuit) to the Internet Service Provider's (ISP) DSLAM (Digital Subscriber Line (DSL) Access Multiplexer). Please refer to RFC 2364 for more information on PPPoA. Refer to RFC 1661 for more information on PPP. 90 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 91
not applicable (N/A). If you have a static IP, then you only need to fill in the IP Address field and not the Gateway IP Address field. VSG1435-B101 Series User's Guide 91 - ZyXEL VSG1435-B101 | User Guide - Page 92
PCR again. If the PCR, SCR or MBS is set to the default of "0", the system will assign a maximum value that correlates to your upstream line rate. The following figure illustrates the relationship between PCR, SCR and MBS. Figure 23 Example of Traffic Shaping 92 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 93
) type is used with bursty connections that require closely controlled delay and delay variation. It also provides a fixed amount of bandwidth (a PCR is specified) but is only available when data is being same group(s); the traffic must first go through a router. VSG1435-B101 Series User's Guide 93 - ZyXEL VSG1435-B101 | User Guide - Page 94
VLAN and provides the information set to zero for Ethernet switches. If a frame received at an Ethernet port has a CFI set to 1, then that frame should not be forwarded as it is to an untagged port is significant and the default VID of the ingress port is given as VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 95
to set up a Wireless Distribution System, in which the ZyXEL Device acts as a bridge with other ZyXEL access points (Section 7.7 on page 111). • Use the Others screen to configure wireless advanced features, such as the RTS/CTS Threshold (Section 7.8 on page 114). VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 96
traditional radio communications in ZyXEL Device's SSID, channel or security settings, you will lose your wireless connection when you press Apply to confirm. You must then change the wireless settings of your computer to match the ZyXEL Device's new settings. 96 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 97
to use a channel that is as many channels away from any channels used by neighboring APs as possible. The channel number which the ZyXEL Device is currently using then displays next to this field. Click more... to show more information. Click less to hide them. VSG1435-B101 Series User's Guide 97 - ZyXEL VSG1435-B101 | User Guide - Page 98
Select this check box to hide the SSID in the outgoing beacon frame so a station cannot obtain the SSID through scanning using a site survey tool. Select this to keep the wireless clients in this SSID from communicating with each other through the ZyXEL Device. 98 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 99
restore your previously saved settings. 7.2.1 No Security Select No Security to allow wireless stations to communicate with the ZyXEL Device, your network is accessible to any wireless networking device that is within range. Figure 25 Wireless > General: No Security VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 100
-bit WEP keys but only one key can be enabled at any one time. In order to configure and enable WEP encryption, click Network Settings > Wireless to display the General screen, then select Basic as the security level. Figure 26 Wireless > General: Basic (WEP) 100 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 101
one password can be activated at any one time. The default password is Passowrd 1. Click more... to show more fields in this section. Click less to hide them. Select 64-bits or 128-bits. This dictates the length of the security key that the network is going to use. VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 102
the two is that WPA(2)-PSK uses a simple common password, instead of user-specific credentials. more.../less Type a pre-shared key from 8 to 64 case-sensitive keyboard characters. Click more... to show more fields in this section. Click less to hide them. 102 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 103
field to allow wireless devices using WPA-PSK security mode to connect to your ZyXEL Device. The ZyXEL Device supports WPA-PSK and WPA2-PSK simultaneously. Encryption Select the encryption type (AES or and therefore is more compatible with older devices. VSG1435-B101 Series User's Guide 103 - ZyXEL VSG1435-B101 | User Guide - Page 104
and your ZyXEL Device. The key is not sent over the network. Click more... to show more fields in this section. Click less to hide them. This field is only available for WPA2. Select this if you want the ZyXEL Device to support WPA and WPA2 simultaneously. 104 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 105
Network Settings > Wireless > More AP LABEL DESCRIPTION # This is the index number of the entry. Status This field indicates whether this SSID is active. A yellow bulb signifies that this SSID is active. A gray bulb signifies that this SSID is not active. VSG1435-B101 Series User's Guide 105 - ZyXEL VSG1435-B101 | User Guide - Page 106
(Service Set IDentity) identifies the service set with which a wireless device is associated. Wireless devices associating to the access point (AP) must have the same SSID. Enter a descriptive name (up to 32 English keyboard characters) for the wireless LAN. 106 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 107
in the outgoing beacon frame so a station cannot obtain the SSID through scanning using to allow the ZyXEL Device to convert wireless Forwarding multicast traffic into network must have same wireless security settings as the ZyXEL Device. After you select to use VSG1435-B101 Series User's Guide 107 - ZyXEL VSG1435-B101 | User Guide - Page 108
the SSID for which you want to configure MAC filter settings. MAC Restrict Define the filter action for the list of ZyXEL Device. Click the Delete icon to delete the entry. Click Apply to save your changes. Click Cancel to exit this screen without saving. 108 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 109
the labels in this screen. Table 17 Network Settings > Wireless > WPS LABEL DESCRIPTION Enable WPS Select Enable to activate WPS on the ZyXEL Device. Method 1 Use this section to set up a WPS wireless network using Push Button Configuration (PBC). VSG1435-B101 Series User's Guide 109 - ZyXEL VSG1435-B101 | User Guide - Page 110
ZyXEL Device create a new PIN. Click Apply to save your changes. Click Cancel to restore your previously saved settings. 7.6 The WMM Screen Use this screen to enable Wi-Fi MultiMedia (WMM) and WMM Power Save in wireless networks for multimedia applications. 110 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 111
made. Note: WDS security is independent of the security settings between the ZyXEL Device and any wireless clients. Note: At the time of writing, WDS is compatible with other ZyXEL APs only. Not all models support WDS links. Check your other AP's documentation. VSG1435-B101 Series User's Guide 111 - ZyXEL VSG1435-B101 | User Guide - Page 112
cannot connect to the ZyXEL Device wirelessly. This field is available only when you set operating mode to Access Point. Remote Bridge MAC Address # MAC Address Select Enabled to turn on WDS and enter the peer device's MAC address manually VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 113
display the available APs within range. Select an AP and click Apply to have the ZyXEL Device establish a wireless link with the selected wireless device. Figure 35 WDS: Scan The your changes. Cancel Click Cancel to restore your previously saved settings. VSG1435-B101 Series User's Guide 113 - ZyXEL VSG1435-B101 | User Guide - Page 114
Timer If you set the channel to Auto in the Network Settings > Wireless > General screen, specify the interval in minutes for how often the ZyXEL Device scans for can be set from20ms to 1000ms. A high value helps save current consumption of the access point. 114 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 115
to restore your previously saved settings. 7.9 Technical Reference This section discusses wireless LANs in depth. For more information, see the appendix. 7.9.1 Wireless Network Overview Wireless networks consist of wireless clients, access points and bridges. VSG1435-B101 Series User's Guide 115 - ZyXEL VSG1435-B101 | User Guide - Page 116
radio figure provides an ZyXEL Device is the AP. Every wireless network must follow these basic guidelines. • Every device in the same wireless network must use the same SSID. The SSID is the name of the wireless network. It stands for Service Set IDentifier. 116 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 117
the ZyXEL Device. The process of verifying whether a wireless device is allowed to use the wireless network. A small fragmentation threshold is recommended for busy networks, while a larger threshold provides faster performance if the network is not very busy. VSG1435-B101 Series User's Guide 117 - ZyXEL VSG1435-B101 | User Guide - Page 118
radio with effective security keys, passwords and so on is set up in the wireless network. 7.9.3.1 SSID Normally, the ZyXEL Device acts like a beacon and regularly broadcasts the SSID in the area. You can hide the SSID instead, in which case the ZyXEL Device does 118 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 119
default Guide or other documentation. You can use the MAC address filter to tell the ZyXEL support IEEE 802.1x to do this. For wireless networks, you can store the user names and passwords server, you cannot set up user names and passwords for your users. VSG1435-B101 Series User's Guide 119 - ZyXEL VSG1435-B101 | User Guide - Page 120
login) and select the WPA compatible option in the ZyXEL Device. Many types of encryption use a key to protect the information in the wireless network. The longer the key, the stronger the encryption. Every device in the wireless network must have the same key. 120 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 121
as electric motors or microwaves. Problems with absorption occur when physical objects (such as thick walls) are between the two radios, muffling the signal. 7.9.5 BSS A Basic Service Set (BSS) exists when all communications between wireless stations or between a wireless station and a wired network - ZyXEL VSG1435-B101 | User Guide - Page 122
the possibility of channel interference. The ZyXEL Device's MBSSID (Multiple Basic Service Set IDentifier) function allows you to use one access point to provide several BSSs simultaneously. You can then but rather be used in conjunction with 802.1x security. 122 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 123
network support it, and to provide more efficient communications. Use the dynamic setting to automatically use short preamble when all wireless devices on the network support it, otherwise the ZyXEL through AP 2. Figure 39 WDS Link Example A WDS AP 1 AP 2 VSG1435-B101 Series User's Guide 123 - ZyXEL VSG1435-B101 | User Guide - Page 124
you to quickly set up a wireless network with strong security, without having to configure security settings manually. Each WPS connection works between two devices. Both devices must support WPS (check see the wireless client in the list, WPS was successful. 124 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 125
allowing it to join the network. Take the following steps to set up a WPS connection between an access point or wireless router configuration interface (see the device's User's Guide for how to find the WPS PIN - for the ZyXEL Device, see Section 7.5 on page 109 VSG1435-B101 Series User's Guide 125 - ZyXEL VSG1435-B101 | User Guide - Page 126
-PSK pre-shared key to the enrollee. Whether WPA-PSK or WPA2-PSK is used depends on the standards supported by the devices. If the registrar is already part of a network, it sends the existing information. If not, it generates the SSID and WPA(2)-PSK randomly. 126 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 127
and can act as either enrollee or registrar (if it supports both functions). If the registrar is unconfigured, the security settings it transmits to the enrollee are randomly-generated. Once a AP to act as an enrollee, you must reset it to its factory defaults. VSG1435-B101 Series User's Guide 127 - ZyXEL VSG1435-B101 | User Guide - Page 128
the enrollee. The registrar randomly generates the security information to set up the network, since it is unconfigured and has no add another wireless client to the network. You know that Client 1 supports registrar mode, but it is better to use AP1 for the WPS VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 129
add non-WPS devices to a network you already set up using WPS. WPS works by automatically issuing a supports this feature). Then, you can enter the key into the non-WPS device and join the network as normal (the non-WPS device must also support WPA-PSK or WPA2-PSK). VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 130
your wireless clients (usually printed on a label on the bottom of the device). If there is an unknown MAC address you can remove it or reset the AP. 130 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 131
Can Do in this Chapter • Use the LAN Setup screen to set the LAN IP address, subnet mask, and DHCP settings of your ZyXEL device (Section 8.2 on page 134). • Use the Static DHCP enable UPnP and UPnP NAT traversal on the ZyXEL Device (Section 8.4 on page 137). VSG1435-B101 Series User's Guide 131 - ZyXEL VSG1435-B101 | User Guide - Page 132
multiple sub-networks. DHCP A DHCP (Dynamic Host Configuration Protocol) server can assign your ZyXEL Device an IP address, subnet mask, DNS and other routing information when it's of simple product and service descriptions. NAT traversal allows the following: 132 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 133
supports NAT traversal and UPnP. See the Chapter 12 on page 179 for more information on NAT. Cautions with UPnP The automated nature of NAT traversal applications in establishing their own services and opening firewall ports them to the DHCP Client List screen. VSG1435-B101 Series User's Guide 133 - ZyXEL VSG1435-B101 | User Guide - Page 134
field. Unless instructed otherwise it is best to leave this alone, the configurator will automatically compute a subnet mask based upon the IP address you entered. 3 Click Apply to save your settings. Figure 45 Network Settings > Home Networking > LAN Setup 134 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 135
service provider. Select Dynamic if you have the Dynamic DNS service. DNS Server 1 DNS Server 2 Select Static if you have the Static DNS service. Enter the first and second DNS (Domain Name System) server IP address the ZyXEL Device passes to the DHCP clients. VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 136
this screen to change your ZyXEL Device's static DHCP settings. Click Network Settings > Home Networking > Static DHCP to open the following screen. Figure 46 Network Settings > Home Networking > Static DHCP confirm that you want to delete the selected entry. 136 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 137
Static DHCP: Add/Edit LABEL DESCRIPTION Active This field displays whether the client is connected to the ZyXEL Device. MAC Address Enter the MAC address of a computer on your LAN. IP Address Enter the in use. See page 132 for more information on UPnP. VSG1435-B101 Series User's Guide 137 - ZyXEL VSG1435-B101 | User Guide - Page 138
ZyXEL Device by using NAT traversal. UPnP applications automatically reserve a NAT forwarding port in order to communicate with another UPnP enabled device; this eliminates the need to manually configure port forwarding Panel. Double-click Add/Remove Programs. 138 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 139
: Communication 3 In the Communications window, select the Universal Plug and Play check box in the Components selection box. Add/Remove Programs: Windows Setup: Communication: Components VSG1435-B101 Series User's Guide 139 - ZyXEL VSG1435-B101 | User Guide - Page 140
and select Optional Networking Components .... Network Connections 4 The Windows Optional Networking Components Wizard window displays. Select Networking Service in the Components selection box and click Details. Windows Optional Networking Components Wizard 140 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 141
check box. Networking Services 6 Click OK port of the ZyXEL Device. Turn on your computer and the ZyXEL Device. Auto-discover Your UPnP-enabled Network Device 1 Click Start and Control Panel. Double-click Network Connections. An icon displays under Internet Gateway. VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 142
Chapter 8 Home Networking 2 Right-click the icon and select Properties. Network Connections 3 In the Internet Connection Properties window, click Settings to see the port mappings there were automatically created. Internet Connection Properties 142 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 143
Settings: Add 5 When the UPnP-enabled device is disconnected from your computer, all port mappings will be deleted automatically. 6 Select Show icon in notification area when connected option and click OK. An icon displays in the system tray. System Tray Icon VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 144
finding out the IP address of the ZyXEL Device first. This comes helpful if you do not know the IP address of the ZyXEL Device. Follow the steps below to access the web configurator. 1 Click Start and then Control Panel. 2 Double-click Network Connections. 144 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 145
8 Home Networking 4 An icon with the description for each UPnP-enabled device displays under Local Network. 5 Right-click on the icon for your ZyXEL Device and select Invoke. The web configurator login screen displays. Network Connections: My Network Places VSG1435-B101 Series User's Guide 145 - ZyXEL VSG1435-B101 | User Guide - Page 146
properties window displays with basic information about the ZyXEL Device. Network Connections: My Network Places: Properties: Example 8.7 Technical Reference This section provides some technical background information about the topics covered in this chapter. 146 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 147
address of a computer before you can access it. The DNS server addresses you enter when you set up DHCP are passed to the client machines along with the assigned IP address and subnet mask. There are two ways that an ISP disseminates the DNS server addresses. VSG1435-B101 Series User's Guide 147 - ZyXEL VSG1435-B101 | User Guide - Page 148
conveyed through IPCP negotiation. The ZyXEL Device supports the IPCP DNS server extensions IP addresses, follow their instructions in selecting the IP addresses ZyXEL Device, but make sure that no other device on your network is using that IP address. 148 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 149
to change the subnet mask computed by the ZyXEL Device unless you are instructed to do otherwise. Private IP Addresses Every and your Internet access is through an ISP, the ISP can provide you with the Internet addresses for your local networks. On the other VSG1435-B101 Series User's Guide 149 - ZyXEL VSG1435-B101 | User Guide - Page 150
Chapter 8 Home Networking 150 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 151
one static route to connect to services offered by your ISP behind router R2. You create another static route to communicate with a separate network behind a router R3 connected to the LAN. Figure 50 Example of Static Routing Topology A R1 LAN R3 WAN R2 VSG1435-B101 Series User's Guide 151 - ZyXEL VSG1435-B101 | User Guide - Page 152
forward packets to their destinations. Modify Click the Edit icon to edit the static route on the ZyXEL Device. Click the Delete icon to remove a static route from the ZyXEL Device. A window displays asking you to confirm that you want to delete the route. 152 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 153
IP address of the gateway. The gateway is a router or switch on the same network segment as the device's LAN or WAN port. The gateway helps forward packets to their destinations. Click Apply to save your changes. Click Cancel to exit this screen without saving. VSG1435-B101 Series User's Guide 153 - ZyXEL VSG1435-B101 | User Guide - Page 154
Chapter 9 Static Routing 154 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 155
Service (QoS) 10.1 Overview Quality of Service ZyXEL Device to group and prioritize application traffic and fine-tune network performance. Setting those for which jitter alone is a problem such as Internet radio or streaming video. This chapter contains VSG1435-B101 Series User's Guide 155 - ZyXEL VSG1435-B101 | User Guide - Page 156
buffers (or queues). Your ZyXEL Device uses the Token Bucket algorithm to allow a certain amount of large bursts while keeping a limit at the average rate. Traffic Rate Traffic Rate Traffic Traffic 156 Time (Before Traffic Shaping) Time (After Traffic Shaping) VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 157
of Service General Screen Click Network Settings > QoS > General to open the screen as shown next. Use this screen to enable or disable QoS and set the upstream bandwidth. See Section 10.1 on page 155 for more information. Figure 53 Network Settings > QoS > General VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 158
this to the LAN interfaces' maximum supported connection speed. Click Apply to save your changes. Click Cancel to restore your previously saved settings. 10.4 The Queue Setup Screen Click Network Settings > QoS > Queue Setup to open the screen as shown next. 158 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 159
Service (QoS) Use this screen to configure QoS queue assignment. Figure 54 Network Settings > QoS > Queue Setup The following table describes the labels in this screen. Table 31 Network Settings shows the name of the ZyXEL Device's interface through which VSG1435-B101 Series User's Guide 159 - ZyXEL VSG1435-B101 | User Guide - Page 160
Chapter 10 Quality of Service (QoS) 10.4.1 Adding a QoS Queue Tail (DT). Drop Tail (DT) is a simple queue management algorithm that allows the ZyXEL Device buffer to accept as many packets as it can until it is full. Once the exit this screen without saving. 160 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 161
protocol port (such as Telnet) to form a flow. You can give different priorities to traffic that the ZyXEL Device forwards out other applications. Click Network Settings > QoS > Class Setup to open the following screen. Figure 56 Network Settings > QoS > Class VSG1435-B101 Series User's Guide 161 - ZyXEL VSG1435-B101 | User Guide - Page 162
Chapter 10 Quality of Service (QoS) Table 33 Network Settings > QoS > Class Setup LABEL DESCRIPTION To Queue This is the name of the queue in which traffic delete an existing classifier. Note that subsequent rules move up by one when you take this action. 162 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 163
Chapter 10 Quality of Service (QoS) 10.5.1 Add/Edit QoS Class Click Add new Classifier in the Class Setup screen or the Edit icon next to a classifier to open the following screen. Figure 57 Class Setup: Add/Edit VSG1435-B101 Series User's Guide 163 - ZyXEL VSG1435-B101 | User Guide - Page 164
Quality of Service (QoS) MAC address, which can be of any hexadecimal character(s). For example, if you set the MAC address to 00:13:49:00:00:00 and the mask to ff port number(s) of the source. Select the check box and enter the source MAC address of the packet. 164 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 165
match. Exclude Others Service Enter "f" for each hexadecimal character(s). For example, if you set the MAC address to 00:13: type of the hardware or firmware. If you select User Class between 0 and 63 in the field provided. This field is available only when you VSG1435-B101 Series User's Guide 165 - ZyXEL VSG1435-B101 | User Guide - Page 166
the ZyXEL Device keep the VLAN ID in the packets. Select a queue that applies to this class. Apply Cancel You should have configured a queue in the Queue Setup screen already. Click Apply to save your changes. Click Cancel to exit this screen without saving. 166 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 167
Service (QoS) 10.6 The QoS Policer Setup Screen Use this screen to configure QoS policers that allow you to limit the transmission rate of incoming traffic. Click Network Settings > QoS > Policer Setup. The screen appears as shown. Figure 58 Network Settings . VSG1435-B101 Series User's Guide 167 - ZyXEL VSG1435-B101 | User Guide - Page 168
Chapter 10 Quality of Service (QoS) 10.6.1 Add/Edit a QoS Policer Click Add new Officer in the Policer Setup screen or the Edit icon next to a it to the Selected Class box. To remove a QoS classifier from the Selected Class box, select it and use the < button. 168 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 169
shows how many packets forwarded to this interface are transmitted successfully. Drop Rate This shows how many packets forwarded to this interface are dropped. Queue Monitor # This is the index number of the entry. Name This shows the name of the queue. VSG1435-B101 Series User's Guide 169 - ZyXEL VSG1435-B101 | User Guide - Page 170
Service (QoS) Table 37 Network Settings contains additional technical information about the ZyXEL Device features described in this chapter. VLAN ID associates a frame with a specific VLAN and provides the information that devices need to process the frame across VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 171
can be marked for different kinds of forwarding. Resources can then be allocated according Service) field in the IP header. There are eight classes of services (ranging from zero to seven) in IP precedence. Zero is the lowest priority level and seven is the highest. VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 172
Chapter 10 Quality of Service (QoS) Automatic Priority Queue Assignment If you enable QoS on the ZyXEL Device, the ZyXEL Device can automatically base on the IEEE 5 101110 7 7 101000 6 110000 7 111000 IP PACKET LENGTH (BYTE) >1100 250~1100 - ZyXEL VSG1435-B101 | User Guide - Page 173
Service • Drops it. • Transmits it but adds a DSCP mark. The ZyXEL Device may drop these marked packets if the network is overloaded. Configure amount of the bandwidth that the interface can support. It does not help if you set it to a bucket size over the VSG1435-B101 Series User's Guide 173 - ZyXEL VSG1435-B101 | User Guide - Page 174
a service provider and client ZyXEL Device checks the CBS bucket. The packet is marked green and can be transmitted if the number of tokens in the CBS bucket is equal to or greater than the size of the packet (in bytes). Otherwise, the packet is marked yellow. 174 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 175
in this screen. Table 40 Network Settings > Routing > Policy Forwarding LABEL DESCRIPTION Add new Click this to create a new policy forwarding rule. Policy Forward Rule # This is the index number of the entry. Policy Name This is the name of the rule. VSG1435-B101 Series User's Guide 175 - ZyXEL VSG1435-B101 | User Guide - Page 176
Address Enter the source IP address. Source Subnet Enter the source subnet mask address. Mask Protocol Select the transport layer protocol (TCP or UDP). Source Port Enter the source port number. Source Mac Enter the source MAC address. 176 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 177
Forwarding: Add/Edit LABEL DESCRIPTION WAN Select a WAN interface through which the traffic is sent. You must have the WAN interface(s) already configured in the Broadband screens. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VSG1435-B101 - ZyXEL VSG1435-B101 | User Guide - Page 178
Chapter 11 Policy Forwarding 178 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 179
screen to forward incoming service requests to the server(s) on your local network (Section 12.3 on page 183). • Use the Port Triggering screen to add and configure the ZyXEL Device's trigger port settings (Section 12.4 on page 185). • Use the DMZ screen to configure a default server (Section - ZyXEL VSG1435-B101 | User Guide - Page 180
a range of port numbers. You can allocate a server IP address that corresponds to a port or a range of ports. The most often used port numbers and services are shown in Appendix E on page 385. Please refer to RFC 1700 for further information about port numbers. 180 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 181
assigned by ISP C=192.168.1.3 D=192.168.1.36 Click Network Settings > NAT > Port Forwarding to open the following screen. See Appendix E on page 385 for port numbers commonly used for particular services. Figure 64 Network Settings > NAT > Port Forwarding VSG1435-B101 Series User's Guide 181 - ZyXEL VSG1435-B101 | User Guide - Page 182
this rule. Click the Delete icon to delete an existing rule. 12.2.1 Add/Edit Port Forwarding Click Add new rule in the Port Forwarding screen or click the Edit icon next to an existing rule to open the following screen. Figure 65 Port Forwarding: Add/Edit 182 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 183
to enable it. Service Name This field is read-only in the Port Forwarding Configuration screen. Enter provides a summary of all NAT applications and their configuration. In addition, this screen allows you to create new applications and/or remove existing ones. VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 184
for the service. Modify Click the Delete icon to delete the rule. 12.3.1 Add New Application This screen lets you create new NAT application rules. Click Add new application in the Applications screen to open the following screen. Figure 67 Applications: Add 184 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 185
LAN computer, you have to manually replace the LAN computer's IP address in the forwarding port with another LAN computer's IP address. Trigger port forwarding solves this problem by allowing computers on the LAN to dynamically take turns using the service. The ZyXEL Device records the IP address - ZyXEL VSG1435-B101 | User Guide - Page 186
. Status This field displays whether the port triggering rule is active or not. A yellow bulb signifies that this rule is active. A gray bulb signifies that this rule is not active. Service Name This field displays the name of the service used by this rule. 186 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 187
(NAT) Table 46 Network Settings > NAT > Port Triggering (continued) LABEL DESCRIPTION WAN Interface This field shows the WAN interface through which the service is forwarded. Trigger Port The trigger port is a port (or a range of ports) that causes (or triggers) the ZyXEL Device to record the - ZyXEL VSG1435-B101 | User Guide - Page 188
port number in a range of port numbers. Type a port number or the ending port number in a range of port numbers. Select the transport layer protocol from TCP, UDP, or TCP/UDP. Click Apply to save your changes. Click Cancel to exit this screen without saving. 188 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 189
Note: If you do not assign a Default Server Address, the ZyXEL Device discards all packets received for ports that are not specified in the NAT Port Forwarding screen. Click Apply to save your changes. Click Cancel to restore your previously saved settings. VSG1435-B101 Series User's Guide 189 - ZyXEL VSG1435-B101 | User Guide - Page 190
and address-mapping rules. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. 12.7 The Sessions Screen Use the Sessions screen to limit the number of concurrent NAT sessions all clients can use. 190 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 191
your changes. Click Cancel to restore your previously saved settings. 12.8 Technical Reference This part contains more information regarding /outside denotes where a host is located relative to the ZyXEL Device, for example, the computers of your subscribers are VSG1435-B101 Series User's Guide 191 - ZyXEL VSG1435-B101 | User Guide - Page 192
inside local address before forwarding it to the ZyXEL Device filters out all incoming inquiries, thus preventing intruders from probing your network. For more information on IP address translation, refer to RFC 1631, The IP Network Address Translator (NAT). 192 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 193
Overload NAT mapping) in each packet and then forwards it to the Internet. The ZyXEL Device keeps track of the original addresses and port numbers so incoming reply packets can have their original (ILA) 192.168.1.11 192.168.1.10 Inside Global Address (IGA) VSG1435-B101 Series User's Guide 193 - ZyXEL VSG1435-B101 | User Guide - Page 194
about port numbers. Please also refer to the Supporting CD for more examples and details on port forwarding and NAT. Table 52 Services and Port Numbers SERVICES Protocol) SNMP (Simple Network Management Protocol) PORT NUMBER 7 21 25 53 79 80 110 119 161 194 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 195
52 Services and Port Numbers SERVICES SNMP trap PPTP (Point-to-Point Tunneling Protocol) PORT NUMBER 162 1723 Port Forwarding Example Let's say you want to assign ports 21-25 to one FTP, Telnet and SMTP server (A in the example), port 80 to another (B in the example) and assign a default server - ZyXEL VSG1435-B101 | User Guide - Page 196
Chapter 12 Network Address Translation (NAT) 196 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 197
10.10.23.7 is obtained from the WAN interface VDSL_PoE/ppp0.1. You configure a DNS route for *example.com to have the ZyXEL Device forward DNS requests for the domain name mail.example.com through the WAN interface VDSL_PoE/ppp0.1 to the DNS server 10.10.23.7. VSG1435-B101 Series User's Guide 197 - ZyXEL VSG1435-B101 | User Guide - Page 198
settings on the ZyXEL Device (Section 13.3 on page 200). 13.1.2 What You Need To Know DYNDNS Wildcard Enabling the wildcard feature for your host causes *.yourhost.dyndns.org to be aliased to the same IP address as yourhost.dyndns.org. This feature is useful if 198 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 199
to view and configure DNS routes on the ZyXEL Device. Click Advanced > DNS Setting to open the DNS Entry screen. Figure 78 Advanced > DNS Setting > DNS Setting The following table describes the fields in this Click the Delete icon to delete an existing rule. VSG1435-B101 Series User's Guide 199 - ZyXEL VSG1435-B101 | User Guide - Page 200
Setup 13.2.1 Add/Edit DNS Entry You can manually add or edit the ZyXEL Device's DNS name and IP address entry. Click your ZyXEL Device's DDNS. Click Advanced > DNS Setting > Dynamic DNS. The screen appears as shown. Figure 80 Advanced > DNS Setting > Dynamic DNS 200 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 201
Provider field, enter the user name you used to register for this service. If you select TZO in the Service Provider field, enter the password you used to register for this service. Click Apply to save your changes. Click Cancel to exit this screen without saving. VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 202
Chapter 13 Dynamic DNS Setup 202 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 203
in this Chapter • Use the IGMP General screen to configure general IGMP proxy and IGMP packet processing settings (Section 14.2 on page 206). • Use the IGMP Filter screens to control IGMP access (Section transferred between IP multicast routers/switches and IP VSG1435-B101 Series User's Guide 203 - ZyXEL VSG1435-B101 | User Guide - Page 204
of the multicast tree) and is able to receive multicast traffic. There should only be one upstream interface (also known as the query port) for one query VLAN on the ZyXEL Device. A downstream interface is a port that connects to a host (such as a computer). 204 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 205
information. Regular data packets do not receive the extra checking and are forwarded with little or no performance penalty. IGMP v2 and IGMP v3 both require the router alert option while IGMP v1 does not use it at all. See RFC 2113 for more information. VSG1435-B101 Series User's Guide 205 - ZyXEL VSG1435-B101 | User Guide - Page 206
Select one or more of these fields to increase the IGMP network's security or control which types of IGMP packets the ZyXEL Device forwards. Ignore IGMP Select this to discard IGMP packets from IP addresses other than the packets not from LAN subnet. LAN subnet VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 207
this to discard IGMP query packets with a destination IP address other than 224.0.0.1, the all-hosts multicast address. Apply Click this button to save your settings back to the ZyXEL Device. Cancel Click Cancel to restore your previously saved settings. VSG1435-B101 Series User's Guide 207 - ZyXEL VSG1435-B101 | User Guide - Page 208
IGMP packets received on any of the LAN Ethernet ports. Allow IGMP packets from WiFi interface Select this to accept IGMP packets received through the wireless LAN interface. Clear this to discard IGMP packets received through the wireless LAN interface. 208 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 209
multicast service domain's channels the LAN device using the specified IP address can subscribe. Click the Edit icon to change the entry. Apply Cancel Click the Delete icon to delete the entry. Click Apply to save your changes. Click Cancel to restore your previously saved settings. VSG1435-B101 - ZyXEL VSG1435-B101 | User Guide - Page 210
IGMP services through the ZyXEL Device. Max Allowed Channels Specify to how many IGMP channels the LAN device is allowed to subscribe. Apply Click Apply to save your changes back to the ZyXEL Device. Cancel Click Cancel to exit this screen without saving. 210 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 211
column lists the multicast groups and subnet masks for this IGMP service domain. Modify Click the Delete icon to delete the entry. Apply Click Apply to save your changes back to the ZyXEL Device. Cancel Click Cancel to exit this screen without saving. VSG1435-B101 Series User's Guide 211 - ZyXEL VSG1435-B101 | User Guide - Page 212
IGMP services through the ZyXEL Device. Max Allowed Channels Specify to how many IGMP channels the LAN device is allowed to subscribe. Apply Click Apply to save your changes back to the ZyXEL Device. Cancel Click Cancel to exit this screen without saving. 212 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 213
Click Network Settings > IGMP Setting > IGMP ACL to open the following screen. Figure 87 Network Settings > IGMP Setting > IGMP Multicast Address Mask Modify Select Disabled to have the ZyXEL Device not restrict which multicast channels the multimedia devices on VSG1435-B101 Series User's Guide 213 - ZyXEL VSG1435-B101 | User Guide - Page 214
or allow access. Click Network Settings > IGMP Setting > IGMP ACL > Add a new rule to open the following screen. Figure 88 Network Settings > IGMP Setting > IGMP ACL > Add a changes back to the ZyXEL Device. Click Cancel to exit this screen without saving. 214 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 215
you set the ZyXEL Device to assign IP addresses based on the client's DHCP Vendor ID option information, you must enable DHCP server and configure LAN TCP/IP settings for both the default and user-defined groups. See Chapter 8 on page 131 for more information. VSG1435-B101 Series User's Guide 215 - ZyXEL VSG1435-B101 | User Guide - Page 216
ID option set to MSFT Grouping Application Default: ETH 2~4 192. ZyXEL Device automatically add clients to the interface group based on their Vendor Class Identifiers. Click the Delete icon to remove the group. Click this button to create a new group. 216 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 217
list to add the interfaces to this group. To remove a LAN or wireless LAN interface from the Grouped LAN Interfaces, use the right-facing arrow. VSG1435-B101 Series User's Guide 217 - ZyXEL VSG1435-B101 | User Guide - Page 218
(DHCP Option 60) to identify LAN hosts to add to the interface group by criteria such as the type of the hardware or firmware. Apply Click Apply to save your changes back to the ZyXEL Device. Cancel Click Cancel to exit this screen without saving. 218 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 219
.2 on page 221). • Use the Protocol screen to add or remove predefined Internet services and configure firewall rules (Section 16.3 on page 221). • Use the Access Control screen to view and configure incoming/outgoing filtering rules (Section 16.4 on page 224). VSG1435-B101 Series User's Guide 219 - ZyXEL VSG1435-B101 | User Guide - Page 220
, making the system unavailable for legitimate users. DoS Denials of Service (DoS) attacks are aimed at devices and networks with a so users no longer have access to network resources. The ZyXEL Device is pre-configured to automatically detect and thwart all known VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 221
The Protocol Screen You can configure customized services and port numbers in the Protocol screen. For a comprehensive list of port numbers and services, visit the IANA (Internet Assigned Number Authority) website. See Appendix E on page 385 for some examples. VSG1435-B101 Series User's Guide 221 - ZyXEL VSG1435-B101 | User Guide - Page 222
or TCP/UDP) and the port number or range of ports that defines your customized service. Other and the protocol number displays if the service uses another IP protocol. Modify Click the Edit icon to edit the entry. Click the Delete icon to remove this entry. 222 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 223
service. This field is displayed if you select Other as the protocol. Enter the protocol number of your customized port. Click this to add the protocol to the Rule List below. This is the IP port (TCP, UDP, ICMP, or Other) that defines your customized port. VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 224
Security Settings > Firewall > Protocol > Add LABEL DESCRIPTION Ports/ Protocol Number For TCP, UDP, ICMP, or TCP/UDP protocol rules this shows the port number or range that defines the custom service. or outgoing IP traffic. This displays the name of the rule. VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 225
the transport layer protocol that defines the service to which this rule applies. Direction (DROP), discards packets and sends a TCP reset packet or an ICMP destinationunreachable message to the settings. Click Cancel to restore your previously saved settings. VSG1435-B101 Series User's Guide 225 - ZyXEL VSG1435-B101 | User Guide - Page 226
> Add/Edit 226 The following table describes the labels in this screen. Table 69 Security Settings > Firewall > Access Control > Add/Edit LABEL DESCRIPTION General Filter Name Enter a descriptive address in the field below. Enter the destination IP address. VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 227
Protocol in Select Protocol. Custom Destination Port Enter a single port number or the range of port numbers of the source. This field Settings > Scheduler Rules screen. Click Apply to save your changes. Click Cancel to exit this screen without saving. VSG1435-B101 Series User's Guide 227 - ZyXEL VSG1435-B101 | User Guide - Page 228
Chapter 16 Firewall 228 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 229
the MAC addresses of the devices to configure this screen. 17.2 The MAC Filter Screen Use this screen to change your ZyXEL Device's MAC filter settings. Click Security Settings > MAC Filter. The screen appears as shown. Figure 98 Security Settings > MAC Filter VSG1435-B101 Series User's Guide 229 - ZyXEL VSG1435-B101 | User Guide - Page 230
the MAC address of the device that is allowed access to the ZyXEL Device. Select the entry(ies) that you want to delete in the Remove column, then click the Delete icon. Click Apply to save your changes. Click Cancel to restore your previously saved settings. 230 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 231
. You can define time periods and days during which the ZyXEL Device performs parental control on a specific user in the Security Settings > Scheduler Rules screen (see Chapter 19 on page 235 Scheduler Rule screen for configurations. Figure 99 Parental Control VSG1435-B101 Series User's Guide 231 - ZyXEL VSG1435-B101 | User Guide - Page 232
PC Name/IP/MAC The ZyXEL Device allows or prohibits the settings. 18.2.1 Add/Edit Parental Control Rule Click Add new rule in the Parental Control screen or click the Edit icon next to a rule to open the following screen. Figure 100 Parental Control: Add/Edit 232 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 233
user to the web site of this rule. If you select Block Web Site, the ZyXEL Device prohibits the users from viewing the web sites with the URLs listed below. If you select Allow Web Apply to save your changes. Click Cancel to exit this screen without saving. VSG1435-B101 Series User's Guide 233 - ZyXEL VSG1435-B101 | User Guide - Page 234
Chapter 18 Parental Control 234 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 235
19 Scheduler Rules 19.1 Overview You can define time periods and days during which the ZyXEL Device performs scheduled rules of certain features (such as Firewall Access Control, Parental Control) This shows the period of time on which this rule is enabled. VSG1435-B101 Series User's Guide 235 - ZyXEL VSG1435-B101 | User Guide - Page 236
not including spaces) for this schedule. Day Select check boxes for the days that you want the ZyXEL Device to perform this scheduler rule. Time if Day Range Enter the time period of each day, . Cancel Click Cancel to exit this screen without saving. 236 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 237
use the certification authority's public key to verify the certificates. You can use the ZyXEL Device to generate certification requests that contain identifying information and public keys and then send the certification requests to a certification authority. VSG1435-B101 Series User's Guide 237 - ZyXEL VSG1435-B101 | User Guide - Page 238
Security Settings > Certificates to open the Local Certificates screen. This is the ZyXEL Device's summary list of certificates and certification requests. Figure 103 Security Settings > cannot delete a certificate that one or more features is configured to use. VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 239
Settings > Certificates > Local Certificates and then Create Certificate Request to open the following screen. Use this screen to have the ZyXEL in the field provided. The domain name ZyXEL Device. Otherwise click Back to return to the Local Certificates screen. VSG1435-B101 Series User's Guide 239 - ZyXEL VSG1435-B101 | User Guide - Page 240
have it signed by a Certificate Authority, in the Local Certificates screen click the certificate request's Load Signed icon to import the signed certificate into the ZyXEL Device. 240 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 241
to the previous screen. 20.3.3 Import Certificate Click Security Settings > Local Certificates and then Import Certificate to open the Import Local Certificate screen. Follow the instructions in this screen to save an existing certificate to the ZyXEL Device. VSG1435-B101 Series User's Guide 241 - ZyXEL VSG1435-B101 | User Guide - Page 242
Click this check box to open a screen where you can save the certificate of a certification authority that you trust, from your computer to the ZyXEL Device. Certificate Type up to 63 ASCII characters (not including spaces) to identify this Name certificate. VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 243
Details Click Security Settings> Certificates > Local Certificates to open the My Certificates screen. Click the View icon to open the Certificate Details screen. Use this screen to view in-depth certificate information and change the certificate's name. VSG1435-B101 Series User's Guide 243 - ZyXEL VSG1435-B101 | User Guide - Page 244
you can copy and paste the certificate into a text editor and save the file on a management computer for later distribution (via floppy disk for example). VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 245
return to the previous screen. 20.4 The Trusted CA Screen Click Security Settings > Certificates > Trusted CA to open the following screen. This screen you trust to the ZyXEL Device. Name This field displays the name used to identify this certificate. VSG1435-B101 Series User's Guide 245 - ZyXEL VSG1435-B101 | User Guide - Page 246
Chapter 20 Certificates Table 81 Security Settings > Certificates > Trusted CA (continued) LABEL DESCRIPTION Subject This field displays information that identifies the about the certificate. ca means that a Certification Authority signed the certificate. 246 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 247
Trusted CA Certificate Click the Import Certificate button in the Trusted CA screen to open the following screen. The ZyXEL Device trusts any valid certificate signed by any of the imported trusted CA certificates. Figure 112 Trusted CA: Import Certificate VSG1435-B101 Series User's Guide 247 - ZyXEL VSG1435-B101 | User Guide - Page 248
including spaces). Certificate Copy and paste the certificate into the text box to store it on the ZyXEL Device. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without Click Cancel to exit this screen without saving. 248 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 249
built around a number of standardized cryptographic techniques to provide confidentiality, data integrity and authentication at the IP layer the Settings screen to view the configured IPSec policies and add, edit or remove a policy (Section 21.3 on page 252). VSG1435-B101 Series User's Guide 249 - ZyXEL VSG1435-B101 | User Guide - Page 250
SA through which the ZyXEL Device and remote IPSec router ZyXEL Device has to rebuild the VPN tunnel each time the remote secure gateway's WAN IP address changes (there may be a delay until the DDNS servers are updated with the remote gateway's new WAN IP address). VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 251
IPSec Status Screen Click Security Settings > IPSec > Status to ZyXEL Device. Remote Addresses This is the IP address of computer(s) on the remote network behind the remote IPSec router. Action Click Trigger to establish a VPN connection with the remote network. VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 252
must be static. Click Security Settings > IPSec to open the Settings screen. This is a menu of your IPSec tunnels. Figure 118 Security Settings > IPSec > Settings The following table describes the fields WAN IP address or URL of the remote IPSec router. 252 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 253
default gateway interface's WAN IP address as its WAN IP address to set up a VPN tunnel. 21.3.1.1 Auto(IKE) Key Setup Auto(IKE) provides more protection so it is generally recommended. You only configure VPN manual key when you select Auto(IKE) in the Key Exchange VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 254
fields in this screen. Table 87 Settings > Add/Edit: Auto(IKE) LABEL ZyXEL Device drops trailing spaces. Remote IPSec Gateway Address Type the WAN IP address or the URL (up to 31 characters) of the IPSec router with which you're making the VPN connection. 254 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 255
as some of the services offered by AH. Select Auto(IKE) or Manual from the drop-down list box. Auto(IKE) provides more protection so it is generally recommended. Manual is a useful option for troubleshooting if you have problems using Auto(IKE) key management. VSG1435-B101 Series User's Guide 255 - ZyXEL VSG1435-B101 | User Guide - Page 256
to forward UDP port 500 packets to the remote IPSec router behind the NAT router. Otherwise, select Disable. Phase 1/Phase 2 Mode Select Main or Aggressive from the drop-down list box. Multiple SAs connecting through a secure gateway must have the same negotiation mode. 256 VSG1435-B101 Series - ZyXEL VSG1435-B101 | User Guide - Page 257
Chapter 21 IPSec Table 87 Settings > Add/Edit: Auto(IKE) Cancel to exit this screen without saving. 21.3.1.2 Manual Key Setup Manual key management is useful if you have problems with Auto(IKE) key management. 21.3.1.3 Security Parameter establish the tunnel. VSG1435-B101 Series User's Guide 257 - ZyXEL VSG1435-B101 | User Guide - Page 258
this VPN policy. You may use spaces, underscores and dashes, but the ZyXEL Device drops trailing spaces. Remote IPSec Gateway Address Type the WAN IP address or the URL (up to 31 characters) of the IPSec router with which you're making the VPN connection. 258 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 259
as some of the services offered by AH. Select Auto(IKE) or Manual from the drop-down list box. Auto(IKE) provides more protection so it is generally recommended. Manual is a useful option for troubleshooting if you have problems using Auto(IKE) key management. VSG1435-B101 Series User's Guide 259 - ZyXEL VSG1435-B101 | User Guide - Page 260
Chapter 21 IPSec Table 88 IPSec Settings > Add/Edit: Manual LABEL DESCRIPTION Encryption Algorithm Select DES, 3DES, saving. 21.4 Technical Reference This section provides some technical background information about the topics covered in this chapter. 260 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 261
packet formats and the default standards for packet structure provide an authentication mechanism for the AH and ESP protocols. Key Management Key management allows you to determine whether to use IKE (ISAKMP) or manual key configuration in order to set up a VPN. VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 262
the time of writing, the ZyXEL Device supports Tunnel mode only. Figure 122 AH as the security protocol, protection is extended forward into the IP header to verify the integrity Tunnel mode is required for gateway services to provide access to internal systems. Tunnel VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 263
or DH2). • Set the IKE SA ZyXEL Device automatically renegotiates the IPSec SA if there is traffic when the IPSec SA lifetime period expires. If an IPSec SA times out, then the IPSec router must renegotiate the SA the next time someone attempts to send traffic. VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 264
speed limits its negotiating power and it also does not provide identity protection. It is useful in remote access situations section if you are running IPSec on a host computer behind the ZyXEL Device. NAT is incompatible with the AH protocol in both Transport and VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 265
in transport mode either, but the ZyXEL Device's NAT Traversal feature provides a way to handle this. NAT traversal allows you to set up an IKE SA when there NAT traversal on both IPSec endpoints. • Set the NAT router to forward UDP port 500 to IPSec router A. VSG1435-B101 Series User's Guide 265 - ZyXEL VSG1435-B101 | User Guide - Page 266
Tunnel NAT N N Y* Y Y* - This is supported in the ZyXEL Device if you enable NAT traversal. 21.4.7 ID Type the ID type and content are encrypted to provide identity protection. In this case the ZyXEL Device can only distinguish between up to 12 ZyXEL Device. 266 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 267
: [email protected] The two ZyXEL Devices in this example cannot complete their negotiation because ZyXEL Device B's Local ID type is IP, but ZyXEL Device A's Remote ID type is set to E-mail. before you can communicate with them over a secure connection. VSG1435-B101 Series User's Guide 267 - ZyXEL VSG1435-B101 | User Guide - Page 268
keys. 768-bit, 1024-bit 1536-bit, 2048-bit, and 3072-bit Diffie-Hellman groups are supported. Upon completion of the Diffie-Hellman exchange, the two peers have a shared secret, but the IKE SA is not authenticated. For authentication, use pre-shared keys. 268 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 269
through the following interfaces: • LAN • WAN Note: The ZyXEL Device is managed using the Web Configurator. 22.2 The Service Control Screen Use this screen to configure through which interface(s) users can use which service(s) to manage the ZyXEL Device. VSG1435-B101 Series User's Guide 269 - ZyXEL VSG1435-B101 | User Guide - Page 270
ZyXEL Device from the WAN. Port You may change the server port number for a service if needed, however you must use the same port number in order to use that service back to the ZyXEL Device. Cancel Click Cancel to restore your previously saved settings. 270 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 271
directly back to the requesting machine. ARP updates the ARP Table for future reference and then sends the packet to the MAC address that replied. VSG1435-B101 Series User's Guide 271 - ZyXEL VSG1435-B101 | User Guide - Page 272
learned IP address of a device connected to a port. MAC Address This is the MAC address of the device with the listed IP address. Device This is the type of interface used by the device. You can click on the device type to go to its configuration screen. 272 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 273
you to choose which categories of events and/or alerts to have the ZyXEL Device log and then display the logs or have the ZyXEL Device send them to an administrator (as e-mail) or to a syslog level. The syslog facility identifies a file in the syslog server. VSG1435-B101 Series User's Guide 273 - ZyXEL VSG1435-B101 | User Guide - Page 274
purposes. 24.2 The System Log Screen Use the System Log screen to see the system logs for the categories that you select in Maintenance > Log Setting. Click System Monitor > Log to open the System Log screen. Figure 127 System Monitor > Log > System Log 274 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 275
level you have selected. When you select a severity, the ZyXEL Device searches through all logs of that severity or higher. (s) to the E-mail address you specify in the Maintenance > Logs Setting screen. System Log # This field is a sequential value and is VSG1435-B101 Series User's Guide 275 - ZyXEL VSG1435-B101 | User Guide - Page 276
level you have selected. When you select a severity, the ZyXEL Device searches through all logs of that severity or higher. Category to the E-mail address you specify in the Maintenance > Logs Setting screen. # This field is a sequential value and is not associated VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 277
view the WAN traffic statistics (Section 25.2 on page 278). • Use the LAN screen to view the LAN traffic statistics (Section 25.3 on page 280). VSG1435-B101 Series User's Guide 277 - ZyXEL VSG1435-B101 | User Guide - Page 278
WAN screen. The figure in this screen shows the number of bytes received and sent on the ZyXEL Device. Figure 129 System Monitor > Traffic Status > WAN The following table describes the fields in this name of the WAN interface that is currently disconnected. 278 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 279
. Error This indicates the number of frames with errors received on this interface. Drop This indicates the number of received packets dropped on this interface. VSG1435-B101 Series User's Guide 279 - ZyXEL VSG1435-B101 | User Guide - Page 280
the following screen. The figure in this screen shows the interface that is currently connected on the ZyXEL Device. Figure 130 System Monitor > Traffic Status > LAN 280 The following table describes the hide them. Interface This shows the LAN or WLAN interface. VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 281
. Error This indicates the number of frames with errors received on this interface. Drop This indicates the number of received packets dropped on this interface. VSG1435-B101 Series User's Guide 281 - ZyXEL VSG1435-B101 | User Guide - Page 282
Chapter 25 Traffic Status 282 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 283
current list of multicast groups the ZyXEL Device has joined and which ports have joined it. To open this ZyXEL Device that belongs to an IGMP multicast group. Multicast Group This field displays the name of the IGMP multicast group to which the interface belongs. VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 284
group. Total Leaves This field displays the total number of Leave packets the ZyXEL Device has received for this IGMP multicast group. IGMP LAN Host Statistics This section shows statistics about the number of IGMP-related packets received from each LAN host. VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 285
when it left. Total Joins This field displays the total number of Join packets the ZyXEL Device has received from this LAN IP address. Total Leaves This field displays the total number of Leave packets the ZyXEL Device has received from this LAN IP address. VSG1435-B101 Series User's Guide 285 - ZyXEL VSG1435-B101 | User Guide - Page 286
Chapter 26 IGMP Status 286 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 287
In the Users Configuration screen, you can view, add, and configure user accounts of the ZyXEL Device. 27.2 The Users Configuration Screen Click Maintenance > Users Configuration to open the following screen. Figure 133 Maintenance > Users Configuration VSG1435-B101 Series User's Guide 287 - ZyXEL VSG1435-B101 | User Guide - Page 288
the password in the login screen's password field changes randomly to prevent anyone watching the password field from knowing the length of your password. • The ZyXEL Device notifies users when their passwords expire the Edit icon to edit this user account. 288 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 289
new system password (6 to 15 alphanumeric characters (0-9, A-Z, a-z, -, _ with no spaces), not containing the user name). This field is displayed only when you are editing the user account. Enter the exact same password that you just entered in the above field. VSG1435-B101 Series User's Guide 289 - ZyXEL VSG1435-B101 | User Guide - Page 290
can configure the ZyXEL Device while User accounts can only view some status information. Apply Cancel Users logged in with either type of account can access the Internet. Click Apply to save your changes. Click Cancel to exit this screen without saving. 290 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 291
ACS to remotely set up the ZyXEL Device, modify settings, perform firmware upgrades as well as monitor and diagnose the ZyXEL Device. You have to enable the device to be managed by the ACS and specify the ACS IP address or domain name and username and password. VSG1435-B101 Series User's Guide 291 - ZyXEL VSG1435-B101 | User Guide - Page 292
name for authentication with the autoconfiguration server. ACS Password Enter the TR-069 password for authentication with the autoconfiguration server. WAN Interface a connection request to the ZyXEL Device, this user name is used to authenticate the ACS. 292 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 293
Client LABEL DESCRIPTION Connection Request Password Enter the connection request password. When the ACS makes a connection request to the ZyXEL Device, this password is used to authenticate the . Cancel Click Cancel to exit this screen without saving. VSG1435-B101 Series User's Guide 293 - ZyXEL VSG1435-B101 | User Guide - Page 294
Chapter 28 Remote Management 294 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 295
. 29.2 The Time Setting Screen To change your ZyXEL Device's time and date, click Maintenance > Time Setting. The screen appears as shown. Use this screen to configure the ZyXEL Device's time based on your local time zone. Figure 137 Maintenance > Time Setting VSG1435-B101 Series User's Guide 295 - ZyXEL VSG1435-B101 | User Guide - Page 296
set the day to Last, Sunday and the month to March. The time you select in the o'clock field depends on your time zone. In Germany for instance, you would select 2 in the Hour field because Germany's time zone is one hour ahead of GMT or UTC (GMT+1). 296 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 297
United States stops using Daylight Saving Time at 2 A.M. local time. So in the United States you would set the day to First, Sunday, the month to November and the time to 2 in the Hour field. save your changes. Click Cancel to exit this screen without saving. VSG1435-B101 Series User's Guide 297 - ZyXEL VSG1435-B101 | User Guide - Page 298
Chapter 29 Time Settings 298 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 299
which logs and/or immediate alerts the ZyXEL Device records in the Logs Setting screen. 30.2 The Log Settings Screen To change your ZyXEL Device's log settings, click Maintenance > Logs Setting. The screen appears as shown. Figure 138 Maintenance > Logs Setting VSG1435-B101 Series User's Guide 299 - ZyXEL VSG1435-B101 | User Guide - Page 300
characters) (usually the user name of a mail account). Password Enter the password associated with the user name above. Clear log after Select this to delete all the logs after the ZyXEL Device sends an E-mail of sending mail the logs. Active Log and Alert 300 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 301
|From:192.168.1.131 To:192.168.1.255 |match |forward | 10:05:17 |UDP src port:00520 dest port:00520 | | 128|Apr 7 00 |From:192.168.1.1 To:192.168.1.255 |match |forward | 10:05:30 |UDP src port:00520 dest port:00520 | | End of Firewall Log VSG1435-B101 Series User's Guide 301 - ZyXEL VSG1435-B101 | User Guide - Page 302
Chapter 30 Logs Setting 302 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 303
. Table 109 Maintenance > Firmware Upgrade LABEL DESCRIPTION Current Firmware Version This is the present Firmware version and the date created. File Path Type in the location of the file you want to upload in this field or click Browse ... to find it. VSG1435-B101 Series User's Guide 303 - ZyXEL VSG1435-B101 | User Guide - Page 304
Temporarily Disconnected After two minutes, log in again and check your new firmware version in the Status screen. If the upload was not successful, the following screen will appear. Click OK to go back to the Firmware Upgrade screen. Figure 143 Error Message 304 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 305
your ZyXEL Device is configured and functioning properly, it is highly recommended that you back up your configuration file before making configuration changes. The backup configuration file will be useful in case you need to return to your previous settings. VSG1435-B101 Series User's Guide 305 - ZyXEL VSG1435-B101 | User Guide - Page 306
ZyXEL Device default configuration file you may need to change the IP address of your computer to be in the same subnet as that of the default device IP address (192.168.1.1). See Appendix A on page 325 for details on how to set up your computer's IP address. 306 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 307
appears. Figure 147 Reset Warning Message Figure 148 Reset In Process Message You can also press the RESET button on the rear panel to reset the factory defaults of your ZyXEL Device. Refer to Section 1.8 on page 32 for more information on the RESET button. VSG1435-B101 Series User's Guide 307 - ZyXEL VSG1435-B101 | User Guide - Page 308
without turning the power off. You may need to do this if the ZyXEL Device hangs, for example. Click Maintenance > Reboot. Click Reboot to have the ZyXEL Device reboot. This does not affect the ZyXEL Device's configuration. Figure 149 Maintenance > Reboot 308 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 309
problems with the ZyXEL Device. 33.2 The Diagnostic Screen Use this screen to ping, traceroute, or nslookup an IP address. Click Maintenance > Diagnostic > Ping & TraceRoute & NsLookup to open the screen shown next. Figure 150 Maintenance > Diagnostic > Ping & TraceRoute & NsLookup VSG1435-B101 - ZyXEL VSG1435-B101 | User Guide - Page 310
the path a packet takes to the specified computer. Nslookup Click this button to perform a DNS lookup on the IP address of a computer you enter. 310 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 311
. Make sure the power source is turned on. 4 Turn the ZyXEL Device off and on. 5 If the problem continues, contact the vendor. One of the LEDs does not behave as expected. 1 Make sure you understand the normal behavior of the LED. See Section 1.7 on page 30. VSG1435-B101 Series User's Guide 311 - ZyXEL VSG1435-B101 | User Guide - Page 312
password is 1234. 2 If this does not work, you have to reset the device to its factory defaults. See Section 1.8 on page 32. I cannot see or access the Login screen in the web configurator. 1 Make sure you are using the correct IP address. • The default IP address is 192.168.1.1. 312 VSG1435-B101 - ZyXEL VSG1435-B101 | User Guide - Page 313
the ZyXEL Device. Log out of the ZyXEL Device in the other session, or ask the person who is logged in to log out. 3 Turn the ZyXEL Device off and on. 4 If this does not work, you have to reset the device to its factory defaults. See Section 34.1 on page 311. VSG1435-B101 Series User's Guide 313 - ZyXEL VSG1435-B101 | User Guide - Page 314
client and that the wireless settings in the wireless client are the same as the settings in the ZyXEL Device. 4 Disconnect all the cables from your device, and follow the directions in Section 1.6 on page 29 again. 5 If the problem continues, contact your ISP. 314 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 315
provided by your ISP and that it is enabled. 3 Check that the LAN interface you are connected to is in the same interface group as the DSL connection (Network Settings > Interface Group). 4 If you set up a WAN connection using bridging service at one time. VSG1435-B101 Series User's Guide 315 - ZyXEL VSG1435-B101 | User Guide - Page 316
See Section 1.6 on page 29 and Section 1.7 on page 30. 3 Turn the ZyXEL Device off and on. 4 If the problem continues, contact your ISP. 34.4 Wireless Internet Access What factors may cause intermittent or may have too many programs open that use the Internet. 316 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 317
the use of a RADIUS server and is mostly used in business networks. • WEP: Wired Equivalent Privacy (WEP) encryption scrambles the data transmitted between the wireless stations and the access points to keep network communications private. VSG1435-B101 Series User's Guide 317 - ZyXEL VSG1435-B101 | User Guide - Page 318
Chapter 34 Troubleshooting 318 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 319
DSL Port One RJ-11 connector for DSL over POTS Gigabit Ethernet WAN One RJ-45 connector for GBE WAN Port HomePNA Coaxial Port One port for HPNA v3.1 access, coax F type connector USB Ports One USB v2.0 port for file sharing Operation Temperature 0º C ~ 40º C VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 320
address assignment from the actual real DHCP server to the clients. Dynamic DNS Support With Dynamic DNS (Domain Name System) support, you can use a fixed URL with a dynamic IP address. You must register for this service with a Dynamic DNS service provider. 320 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 321
turn on your ZyXEL Device. You can also set the time manually. These dates and times are then used in logs. Logs Use logs for troubleshooting. You can send logs from the ZyXEL Device to an filtering function allows added network security and management. VSG1435-B101 Series User's Guide 321 - ZyXEL VSG1435-B101 | User Guide - Page 322
support Modulation: Multi-Carrier-Modulation (MCM) Interleaving: General Convolution Support of maximum SNRM configuration (directed by the central office) Seamless Rate Adaptation (SRA) as described in Amendment 1 of G.993.2 Tone Spacing: 4.3KHz/8.6KHz 322 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 323
via 64/65b encapsulation method defined in IEEE 802.3ah-2004) Support of Vendor ID during Handshake in the Vendor ID information block Firmware Upgrade Embedded FTP/TFTP Server for firmware upgrade and configuration file backup and restore Syslog TR-069 TR-064 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 324
standards supported in the ZyXEL Device. Table 114 Standards Supported known by the brand Wi-Fi, denotes a set of Wireless LAN/ WLAN standards developed by working Port Based Network Access Control. IEEE 802.11e QoS IEEE 802.11 e Wireless LAN for Quality of Service VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 325
the TCP/IP settings in order to "communicate" with your network. If you manually assign IP information instead of using dynamic assignment, make sure that your computers have IP addresses that place them in the same subnet as the ZyXEL Device's LAN port. VSG1435-B101 Series User's Guide 325 - ZyXEL VSG1435-B101 | User Guide - Page 326
up Your Computer's IP Address Windows 95/98/Me Click Start, Settings, Control Panel and double-click the Network icon to open the Network window. Figure 151 WIndows 95/ you need TCP/IP: 1 In the Network window, click Add. 2 Select Protocol and then click Add. 326 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 327
Appendix A Setting up Your Computer's IP Address 3 Select Microsoft from the list of manufacturers. 4 Select TCP/IP from the list of network information into the IP Address and Subnet Mask fields. Figure 152 Windows 95/98/Me: TCP/IP Properties: IP Address VSG1435-B101 Series User's Guide 327 - ZyXEL VSG1435-B101 | User Guide - Page 328
when prompted. Verifying Settings 1 Click Start and then Run. 2 In the Run window, type "winipcfg" and then click OK to open the IP Configuration window. 3 Select your network adapter. You should see your computer's IP address, subnet mask and default gateway. 328 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 329
default Windows XP GUI theme. 1 Click start (Start in Windows 2000/NT), Settings, Control Panel. Figure 154 Windows XP: Start Menu 2 In the Control Panel, double-click Network Connections (Network and Dialup Connections in Windows 2000/NT). Figure 155 Windows XP: Control Panel VSG1435-B101 Series - ZyXEL VSG1435-B101 | User Guide - Page 330
Appendix A Setting up Your Computer's IP Address 3 Right-click Local Area Connection and then click Properties. Figure 156 Windows XP: Control Area Connection Properties 5 The Internet Protocol TCP/IP Properties window opens (the General tab in Windows XP). 330 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 331
Settings default gateway in Gateway. To manually configure a default metric (the number of transmission hops), clear the Automatic metric check box and type a metric in Metric. • Click Add. • Repeat the previous three steps for each default gateway you want to add. VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 332
Appendix A Setting up Your Computer's IP Address • Click OK when finished. Figure 159 Windows XP: Advanced TCP/IP Properties 7 In the Internet Use the following DNS server addresses, and type them in the Preferred DNS server and Alternate DNS server fields. 332 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 333
Windows 2000/NT). 11 Turn on your ZyXEL Device and restart your computer (if prompted). Verifying Settings 1 Click Start, All Programs, Accessories and click the Support tab. Windows Vista This section shows screens from Windows Vista Enterprise Version 6.0. VSG1435-B101 Series User's Guide 333 - ZyXEL VSG1435-B101 | User Guide - Page 334
Appendix A Setting up Your Computer's IP Address 1 Click the Start icon, Control Panel. Figure 161 Windows Vista: Start Menu 2 In the . Figure 162 Windows Vista: Control Panel 3 Click Network and Sharing Center. Figure 163 Windows Vista: Network And Internet 334 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 335
Appendix A Setting up Your Computer's IP Address 4 Click Manage network connections. Figure 164 Windows Vista: Network and Sharing Center 5 displays a screen saying that it needs your permission to continue. Figure 165 Windows Vista: Network and Sharing Center VSG1435-B101 Series User's Guide 335 - ZyXEL VSG1435-B101 | User Guide - Page 336
Appendix A Setting up Your Computer's IP Address 6 Select Internet Protocol Version 4 (TCP/IPv4) and click Properties. Figure 166 Windows a static IP address click Use the following IP address and fill in the IP address, Subnet mask, and Default gateway fields. 336 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 337
the default gateway in Gateway. To manually configure a default metric (the number of transmission hops), clear the Automatic metric check box and type a metric in Metric. • Click Add. • Repeat the previous three steps for each default gateway you want to add. VSG1435-B101 Series User's Guide 337 - ZyXEL VSG1435-B101 | User Guide - Page 338
Appendix A Setting up Your Computer's IP Address • Click OK when finished. Figure 168 Windows Vista: Advanced TCP/IP Properties 9 In the Internet the following DNS server addresses, and type them in the Preferred DNS server and Alternate DNS server fields. 338 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 339
Settings 1 Click Start, All Programs, Accessories and then Command Prompt. 2 In the Command Prompt window, type "ipconfig" and then press [ENTER]. You can also open Network Connections, right-click a network connection, click Status and then click the Support tab. VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 340
Appendix A Setting up Your Computer's IP Address Macintosh OS 8/9 1 Click the Apple menu, Control Panel and double-click TCP/IP to open the TCP/ IP Control Panel. Figure 170 Macintosh OS 8/9: Apple Menu 340 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 341
box. 5 Close the TCP/IP Control Panel. 6 Click Save if prompted, to save changes to your configuration. 7 Turn on your ZyXEL Device and restart your computer (if prompted). Verifying Settings Check your TCP/IP properties in the TCP/IP Control Panel window. VSG1435-B101 Series User's Guide 341 - ZyXEL VSG1435-B101 | User Guide - Page 342
the Location list. • Select Built-in Ethernet from the Show list. • Click the TCP/IP tab. 3 For dynamically assigned settings, select Using DHCP from the Configure list. Figure 173 Macintosh OS X: Network 4 For statically assigned settings, do the following: 342 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 343
the steps below to configure your computer IP address using the KDE. 1 Click the Red Hat button (located on the bottom left corner), select System Setting and click Network. Figure 174 Red Hat 9.0: KDE: Network Configuration: Devices VSG1435-B101 Series User's Guide 343 - ZyXEL VSG1435-B101 | User Guide - Page 344
If you have a static IP address, click Statically set IP Addresses and fill in the Address, Subnet mask, and Default Gateway Address fields. 3 Click OK to save the fields provided. Figure 176 Red Hat 9.0: KDE: Network Configuration: DNS 5 Click the Devices tab. 344 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 345
Follow the steps below to edit the network configuration files and set your computer IP address. 1 Assuming that you have only one Hat 9.0: Dynamic IP Address Setting in ifconfig-eth0 DEVICE=eth0 ONBOOT=yes BOOTPROTO=dhcp USERCTL=no PEERDNS=yes TYPE=Ethernet VSG1435-B101 Series User's Guide 345 - ZyXEL VSG1435-B101 | User Guide - Page 346
181 Red Hat 9.0: Restart Ethernet Card [root@localhost init.d]# network restart Shutting down interface eth0: Shutting down loopback interface: Setting network parameters: Bringing up loopback interface: Bringing up interface eth0: [OK] [OK] [OK] [OK] [OK] 346 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 347
up Your Computer's IP Address Verifying Settings Enter ifconfig in a terminal screen to check your TCP/IP properties. Figure 182 Red Hat 9.0: Checking :100 RX bytes:730412 (713.2 Kb) TX bytes:1570 (1.5 Kb) Interrupt:10 Base address:0x1000 [root@localhost]# VSG1435-B101 Series User's Guide 347 - ZyXEL VSG1435-B101 | User Guide - Page 348
Appendix A Setting up Your Computer's IP Address 348 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 349
example 11000000, which is 192 in decimal notation). Therefore, each octet has a possible range of 00000000 to 11111111 in binary, or 0 to 255 in decimal. VSG1435-B101 Series User's Guide 349 - ZyXEL VSG1435-B101 | User Guide - Page 350
IP Address (Binary) Subnet Mask (Binary) Network Number Host ID (192) (168) (1) (2) 11000000 10101000 00000001 00000010 11111111 11111111 11111111 00000000 11000000 10101000 00000001 00000010 350 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 351
bits 24 bits 255.255.255.0 8 bits 29 bits 255.255.255.2 3 bits 48 224 - 2 216 - 2 28 - 2 23 - 2 MAXIMUM NUMBER OF HOSTS 16777214 65534 254 6 VSG1435-B101 Series User's Guide 351 - ZyXEL VSG1435-B101 | User Guide - Page 352
the address (192.168.1) are the network number, and the remaining octet is the host ID, allowing a maximum of 28 - 2 or 254 possible hosts. 352 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 353
.168.1.128 /25. The following figure shows the company network after subnetting. There are now two sub-networks, A and B. Figure 185 Subnetting Example: After Subnetting VSG1435-B101 Series User's Guide 353 - ZyXEL VSG1435-B101 | User Guide - Page 354
VALUE 192.168.1. 64 11000000.10101000.00000001. 01000000 11111111.11111111.11111111. 11000000 Lowest Host ID: 192.168.1.65 Highest Host ID: 192.168.1.126 354 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 355
1 30 33 62 65 94 97 126 129 158 161 190 193 222 225 254 BROADCAST ADDRESS 31 63 95 127 159 191 223 255 VSG1435-B101 Series User's Guide 355 - ZyXEL VSG1435-B101 | User Guide - Page 356
Where you obtain your network number depends on your particular situation. If the ISP or your network administrator assigns you a block of registered IP 356 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 357
to change the subnet mask computed by the ZyXEL Device unless you are instructed to do otherwise. Private IP Addresses Every and your Internet access is through an ISP, the ISP can provide you with the Internet addresses for your local networks. On the VSG1435-B101 Series User's Guide 357 - ZyXEL VSG1435-B101 | User Guide - Page 358
Appendix B IP Addresses and Subnetting 358 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 359
disable pop-up blocking to log into your device. Either disable pop-up blocking (enabled by default in Windows XP SP (Service Pack) 2) or allow pop-up blocking and create an exception for your device's IP address. the Pop-up Blocker section in the Privacy tab. VSG1435-B101 Series User's Guide 359 - ZyXEL VSG1435-B101 | User Guide - Page 360
3 Click Apply to save this setting. Enable Pop-up Blockers with Exceptions Alternatively, if you only want to allow pop-up windows from your device, see the following steps. 1 In Internet Explorer, select Tools, Internet Options and then the Privacy tab. 360 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 361
2 Select Settings...to open the Pop-up Blocker Settings screen. Figure 188 Internet Options: Privacy 3 Type the IP address of your device (the web page that you do not want to have blocked) with the prefix "http://". For example, http://192.168.167.1. VSG1435-B101 Series User's Guide 361 - ZyXEL VSG1435-B101 | User Guide - Page 362
Allowed sites. Figure 189 Pop-up Blocker Settings 5 Click Close to return to the Privacy screen. 6 Click Apply to save this setting. JavaScripts If pages of the web configurator do not display properly in Internet Explorer, check that JavaScripts are allowed. 362 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 363
. Figure 190 Internet Options: Security 2 Click the Custom Level... button. 3 Scroll down to Scripting. 4 Under Active scripting make sure that Enable is selected (the default). 5 Under Scripting of Java applets make sure that Enable is selected (the default). VSG1435-B101 Series User's Guide 363 - ZyXEL VSG1435-B101 | User Guide - Page 364
Settings - Java Scripting Java Permissions 1 From Internet Explorer, click Tools, Internet Options and then the Security tab. 2 Click the Custom Level... button. 3 Scroll down to Microsoft VM. 4 Under Java permissions make sure that a safety level is selected. 364 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 365
and Java Permissions 5 Click OK to close the window. Figure 192 Security Settings - Java JAVA (Sun) 1 From Internet Explorer, click Tools, Internet Options and then the Advanced tab. 2 Make sure that Use Java 2 for under Java (Sun) is selected. VSG1435-B101 Series User's Guide 365 - ZyXEL VSG1435-B101 | User Guide - Page 366
Java, Javascripts and pop-ups in one screen. Click Tools, then click Options in the screen that appears. Figure 194 Mozilla Firefox: Tools > Options 366 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 367
Appendix C Pop-up Windows, JavaScripts and Java Permissions Click Content.to show the screen below. Select the check boxes as shown in the following screen. Figure 195 Mozilla Firefox Content Security VSG1435-B101 Series User's Guide 367 - ZyXEL VSG1435-B101 | User Guide - Page 368
Appendix C Pop-up Windows, JavaScripts and Java Permissions 368 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 369
wireless LAN. Figure 196 Peer-to-Peer Communication in an Ad-hoc Network BSS A Basic Service Set (BSS) exists when all communications between wireless clients or between a wireless client and a wired client A and B can access the wired network and communicate VSG1435-B101 Series User's Guide 369 - ZyXEL VSG1435-B101 | User Guide - Page 370
cannot communicate with each other. Figure 197 Basic Service Set ESS An Extended Service Set (ESS) consists of a series of overlapping BSSs provide communication with the wired network but also mediate wireless network traffic in the immediate neighborhood. 370 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 371
communicate. Figure 198 Infrastructure WLAN Channel A channel is the radio frequency(ies) used by wireless devices to transmit and receive stations are within range of the same access point, but are not within range of each other. The following figure illustrates a VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 372
Send) handshake is invoked. When a data frame exceeds the RTS/CTS value you set (between 0 to 2432 bytes), the station that wants to transmit this frame must first send an RTS (Request To Send affect the throughput performance instead of providing a remedy. 372 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 373
value is smaller than the RTS/CTS value (see previously) you set then the RTS (Request To Send)/CTS (Clear to Send) ZyXEL Device are data encryption, wireless client authentication, restricting access by device MAC address and hiding the ZyXEL Device identity. VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 374
based on a client-server model that supports authentication, authorization and accounting. The access point is the client and the server is the RADIUS server. The RADIUS server handles the following tasks: • Authentication Determines the identity of the users. 374 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 375
• Authorization Determines the network services available to authenticated users once which is a password, they both know. The key is not sent over the network. In addition to the shared key, password information exchanged is support all authentication types. VSG1435-B101 Series User's Guide 375 - ZyXEL VSG1435-B101 | User Guide - Page 376
to support multiple types of user authentication. By using EAP to interact with an EAP-compatible RADIUS server, an access point helps a wireless station password through the secure connection, thus client identity is protected. For client authentication, EAP- 376 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 377
password methods through the secured connection to authenticate the clients, thus hiding client identity. However, PEAP only supports is enabled, it is not necessary to configure a default encryption key in the wireless security configuration screen. You may VSG1435-B101 Series User's Guide 377 - ZyXEL VSG1435-B101 | User Guide - Page 378
gateway and wireless client. As long as the passwords match, a wireless client will be granted access to a WLAN. If the AP or the wireless clients do not support WPA2, just use WPA or WPA-PSK depending clients. This all happens in the background automatically. 378 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 379
resending them. The MIC provides a strong mathematical function not be supported in all instructing the wireless client how to use WPA. At the time of writing, the most widely available supplicant is the WPA patch for Windows XP, Funk Software's Odyssey client. VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 380
Example A WPA(2)-PSK application looks as follows. 1 First enter identical passwords into the AP and all wireless clients. The Pre-Shared Key (PSK) must consist of between 8 and 63 ASCII characters or 64 hexadecimal characters (including spaces and symbols). 380 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 381
The AP checks each wireless client's password and allows it to join the network only if the password matches. 3 The AP and wireless AUTHENTICATION METHOD/ KEY MANAGEMENT PROTOCOL ENCRYPTIO N METHOD ENTER MANUAL KEY IEEE 802.1X Open None No Disable Enable VSG1435-B101 Series User's Guide 381 - ZyXEL VSG1435-B101 | User Guide - Page 382
) AUTHENTICATION METHOD/ KEY MANAGEMENT PROTOCOL ENCRYPTIO N METHOD ENTER MANUAL KEY IEEE 802.1X WPA2 TKIP/AES No Enable WPA2-PSK that sends out radio signals equally well in all directions. dBi represents the true gain that the antenna provides. 382 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 383
as close to the center of the coverage area as possible. For directional antennas, point the antenna in the direction of the desired coverage area. VSG1435-B101 Series User's Guide 383 - ZyXEL VSG1435-B101 | User Guide - Page 384
Appendix D Wireless LANs 384 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 385
If the Protocol is TCP, UDP, or TCP/UDP, this is the IP port number. • If the Protocol is USER, this is the IP protocol number. • Description: This is a brief explanation of the applications that use this service or the situations in which this service is used. VSG1435-B101 Series User's Guide 385 - ZyXEL VSG1435-B101 | User Guide - Page 386
TCP User-Defined UDP User-Defined UDP IMAP4 IMAP4S IRC TCP TCP TCP/UDP PORT(S) 51 5190 113 179 68 67 7648 24032 53 50 79 20 21 1720 Software. Domain Name Server, a service that matches web names (for instance www.zyxel.com) to IP numbers. The IPSEC program. 386 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 387
TCP/UDP PORT(S) 1863 137 138 139 DESCRIPTION Microsoft Networks' messenger service uses this provides services mainly for cable modems. Remote Telnet. The Real Time Streaming (media control) Protocol (RTSP) is a remote control for multimedia on the Internet. VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 388
, midrange systems, UNIX systems and network servers. The Simple Service Discovery Protocol supports Universal Plug-and-Play (UPnP). Secure Shell Remote Login Program systems. A videoconferencing solution. The UDP port number is specified in the application. 388 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 389
APPENDIX F Open Software Announcements End-User License Agreement for "VSG1435-B101" WARNING: ZyXEL Communications Corp. IS WILLING TO LICENSE THE SOFTWARE TO YOU ONLY UPON THE users specified in sales order and invoice. You have the right to make one VSG1435-B101 Series User's Guide 389 - ZyXEL VSG1435-B101 | User Guide - Page 390
operation of a service bureau or provide any technical or other support for such software other than compliance with the applicable license terms of such third party, and makes no warranty (express, implied or statutory) whatsoever with respect thereto. Please 390 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 391
support and customer service related to its software and products. 5.Confidentiality You acknowledge that the Software contains proprietary trade secrets of ZyXEL THE SOFTWARE IS PROVIDED "AS IS." TO THE MAXIMUM EXTENT PERMITTED BY LAW, ZyXEL DISCLAIMS ALL VSG1435-B101 Series User's Guide 391 - ZyXEL VSG1435-B101 | User Guide - Page 392
Agreement. Upon notification of termination, you agree to destroy or return to ZyXEL all copies of the Software and Documentation and to certify in writing that prior written consent of ZyXEL. Any waiver or modification of this License Agreement shall only be 392 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 393
applicable product or software, we will give to anyone who contacts us at the ZyXEL Technical Support ([email protected]), for a charge of no more than our cost of physically performing source , Inc. 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA VSG1435-B101 Series User's Guide 393 - ZyXEL VSG1435-B101 | User Guide - Page 394
freedom to distribute copies of free software (and charge for this service if you wish), that you receive source code or can get that what they have is not the original, so that any problems introduced by others will not reflect on the original authors' reputations. VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 395
the Program, and copy and distribute such modifications or work under the terms of Section 1 above, provided that you also meet all of these conditions: a) You must cause the modified files to carry prominent Program is not required to print an announcement.) VSG1435-B101 Series User's Guide 395 - ZyXEL VSG1435-B101 | User Guide - Page 396
, under Section 2) in object code or executable form under the terms of Sections 1 and 2 above provided that you also do one of the following: a) Accompany it with the complete corresponding machine-readable source to copy the source along with the object code. 396 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 397
4. You may not copy, modify, sublicense, or distribute the Program except as expressly provided under this License. Any attempt otherwise to copy, modify, sublicense or distribute the Program or by copyrighted interfaces, the original copyright holder who VSG1435-B101 Series User's Guide 397 - ZyXEL VSG1435-B101 | User Guide - Page 398
but may differ in detail to address new problems or concerns. Each version is given a THE COPYRIGHT HOLDERS AND/ OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY , YOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION. 12. IN NO VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 399
-to-Point Protocol (PPP) to provide Internet connections over serial lines. ppp-2.4 currently supports Linux and Solaris. All of the PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 400
the following disclaimer in the documentation and/or other materials provided with the distribution. Neither the name of the - ZyXEL VSG1435-B101 | User Guide - Page 401
, manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation. All rights reserved. Disclaimer ZyXEL does two conditions: • This device may not cause harmful interference. VSG1435-B101 Series User's Guide 401 - ZyXEL VSG1435-B101 | User Guide - Page 402
provide reasonable protection against harmful interference in a residential installation. This device generates, uses, and can radiate radio frequency energy, and if not installed and used in accordance with the instructions this device and all persons. 注意 ! VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 403
. Note Repair or replacement, as provided under this warranty, is the exclusive remedy of the purchaser. This warranty is in lieu of all other warranties, express or implied, including any implied warranty of merchantability or fitness for a particular use or VSG1435-B101 Series User's Guide 403 - ZyXEL VSG1435-B101 | User Guide - Page 404
to the purchaser. To obtain the services of this warranty, contact ZyXEL's Service Center for your Return Material Authorization number firmware upgrades and information at www.zyxel.com for global products, or at www.us.zyxel.com for North American products. 404 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 405
Protocol 271 administrator password 36 ADSL VSG1435-B101 Series User's Guide Index Index Basic Service Set, See BSS 369 Basic Service Set, see BSS blinking LEDs 31 broadcast 80 BSS 121, 369 example 122 C CA 237, 376 Canonical Format Indicator See CFI CBR 93 certificate details 243 factory default - ZyXEL VSG1435-B101 | User Guide - Page 406
, 119 Finger 194 firewalls 219 add protocols 221 configuration 221 DDoS 220 DoS 220 LAND attack 220 Ping of Death 220 SYN attack 220 firmware 303 version 75 forwarding ports 180 fragmentation threshold 114, 117, 373 FTP 180, 194 G General wireless LAN screen 96 406 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 407
Service Set See IBSS 369 initialization vector (IV) 378 Inside Global Address, see IGA inside header 262 Inside Local Address, see ILA interface group 215 Internet wizard setup 43 Internet access 24 wizard setup 43 Internet Group Multicast Protocol, see IGMP Internet Key Exchange 263 VSG1435-B101 - ZyXEL VSG1435-B101 | User Guide - Page 408
global 192 IGA 192 ILA 192 inside 192 IPSec 264 local 192 outside 192 port forwarding 180 port number 194 services 194 SIP ALG 190 activation 190 traversal 265 NAT example 195 negotiation mode 264 Network QoS 155, 171 marking 156 setup 155 tagging 156 versus CoS 156 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 409
Security Parameter Index, see SPI service access control 269 Service Set 98, 106 Services 194 setup VSG1435-B101 Series User's Guide Index firewalls 221 static route syslog protocol 273 severity levels 273 system firmware 303 version 75 passwords 35, 36 reset 32 status 73 LAN 76 WAN 75 wireless LAN 76 - ZyXEL VSG1435-B101 | User Guide - Page 410
Rate Three Color Marker, see trTCM U UBR 93 unicast 80 Universal Plug and Play, see UPnP upgrading firmware 303 UPnP 137 cautions 133 example 138 installation 138 NAT traversal 132 USB features 27 V VBR 93 VBR traffic shaping 92 example 92 VCI 91 VPI 91 warranty 403 VSG1435-B101 Series User's Guide - ZyXEL VSG1435-B101 | User Guide - Page 411
123 compatibility 111 example 123 web configurator 35 login 35 passwords 35, 36 WEP 120 WEP Encryption 101, 102 WEP , 124 wireless security 373 Wireless tutorial 52 wizard setup Internet 43 VSG1435-B101 Series User's Guide Index WLAN interference 371 security parameters 381 WPA 120, 378 key - ZyXEL VSG1435-B101 | User Guide - Page 412
Index 412 VSG1435-B101 Series User's Guide
-
1 -
2 -
3 -
4 -
5 -
6 -
7 -
8
-
9
-
10
-
11
-
12
-
13
-
14
-
15
-
16
-
17
-
18
-
19
-
20
-
21
-
22
-
23
-
24
-
25
-
26
-
27
-
28
-
29
-
30
-
31
-
32
-
33
-
34
-
35
-
36
-
37
-
38
-
39
-
40
-
41
-
42
-
43
-
44
-
45
-
46
-
47
-
48
-
49
-
50
-
51
-
52
-
53
-
54
-
55
-
56
-
57
-
58
-
59
-
60
-
61
-
62
-
63
-
64
-
65
-
66
-
67
-
68
-
69
-
70
-
71
-
72
-
73
-
74
-
75
-
76
-
77
-
78
-
79
-
80
-
81
-
82
-
83
-
84
-
85
-
86
-
87
-
88
-
89
-
90
-
91
-
92
-
93
-
94
-
95
-
96
-
97
-
98
-
99
-
100
-
101
-
102
-
103
-
104
-
105
-
106
-
107
-
108
-
109
-
110
-
111
-
112
-
113
-
114
-
115
-
116
-
117
-
118
-
119
-
120
-
121
-
122
-
123
-
124
-
125
-
126
-
127
-
128
-
129
-
130
-
131
-
132
-
133
-
134
-
135
-
136
-
137
-
138
-
139
-
140
-
141
-
142
-
143
-
144
-
145
-
146
-
147
-
148
-
149
-
150
-
151
-
152
-
153
-
154
-
155
-
156
-
157
-
158
-
159
-
160
-
161
-
162
-
163
-
164
-
165
-
166
-
167
-
168
-
169
-
170
-
171
-
172
-
173
-
174
-
175
-
176
-
177
-
178
-
179
-
180
-
181
-
182
-
183
-
184
-
185
-
186
-
187
-
188
-
189
-
190
-
191
-
192
-
193
-
194
-
195
-
196
-
197
-
198
-
199
-
200
-
201
-
202
-
203
-
204
-
205
-
206
-
207
-
208
-
209
-
210
-
211
-
212
-
213
-
214
-
215
-
216
-
217
-
218
-
219
-
220
-
221
-
222
-
223
-
224
-
225
-
226
-
227
-
228
-
229
-
230
-
231
-
232
-
233
-
234
-
235
-
236
-
237
-
238
-
239
-
240
-
241
-
242
-
243
-
244
-
245
-
246
-
247
-
248
-
249
-
250
-
251
-
252
-
253
-
254
-
255
-
256
-
257
-
258
-
259
-
260
-
261
-
262
-
263
-
264
-
265
-
266
-
267
-
268
-
269
-
270
-
271
-
272
-
273
-
274
-
275
-
276
-
277
-
278
-
279
-
280
-
281
-
282
-
283
-
284
-
285
-
286
-
287
-
288
-
289
-
290
-
291
-
292
-
293
-
294
-
295
-
296
-
297
-
298
-
299
-
300
-
301
-
302
-
303
-
304
-
305
-
306
-
307
-
308
-
309
-
310
-
311
-
312
-
313
-
314
-
315
-
316
-
317
-
318
-
319
-
320
-
321
-
322
-
323
-
324
-
325
-
326
-
327
-
328
-
329
-
330
-
331
-
332
-
333
-
334
-
335
-
336
-
337
-
338
-
339
-
340
-
341
-
342
-
343
-
344
-
345
-
346
-
347
-
348
-
349
-
350
-
351
-
352
-
353
-
354
-
355
-
356
-
357
-
358
-
359
-
360
-
361
-
362
-
363
-
364
-
365
-
366
-
367
-
368
-
369
-
370
-
371
-
372
-
373
-
374
-
375
-
376
-
377
-
378
-
379
-
380
-
381
-
382
-
383
-
384
-
385
-
386
-
387
-
388
-
389
-
390
-
391
-
392
-
393
-
394
-
395
-
396
-
397
-
398
-
399
-
400
-
401
-
402
-
403
-
404
-
405
-
406
-
407
-
408
-
409
-
410
-
411
-
412
 |
 |
www.zyxel.com
www.zyxel.com
VSG1435-B101 Series
802.11n Wireless VDSL2 4-port Gateway with HPNA
Copyright © 2010
ZyXEL Communications Corporation
Firmware Version 1.10
Edition 1, 11/2010
Default Login Details
IP Address
User Name
admin
Password
1234