Home » ZyXEL Manuals » Wireless » ZyXEL VMG3925 » Manual Viewer

ZyXEL VMG3925 User Guide - Page 276

IEEE 802.11g Wireless LAN, Wireless Security Overview, IEEE 802.1x

Add to My Manuals
Save this manual to your list of manuals

Page 276 highlights

Appendix B Wireless LANs IEEE 802.11g Wireless LAN IEEE 802.11g is fully compatible with the IEEE 802.11b standard. This means an IEEE 802.11b adapter can interface directly with an IEEE 802.11g access point (and vice versa) at 11 Mbps or lower depending on range. IEEE 802.11g has several intermediate rate steps between the maximum and minimum data rates. The IEEE 802.11g data rate and modulation are as follows: Table 126 IEEE 802.11g DATA RATE (MBPS) MODULATION 1 DBPSK (Differential Binary Phase Shift Keyed) 2 DQPSK (Differential Quadrature Phase Shift Keying) 5.5 / 11 CCK (Complementary Code Keying) 6/9/12/18/24/36/48/ OFDM (Orthogonal Frequency Division Multiplexing) 54 Wireless Security Overview Wireless security is vital to your network to protect wireless communication between wireless clients, access points and the wired network. Wireless security methods available on the VMG are data encryption, wireless client authentication, restricting access by device MAC address and hiding the VMG identity. The following figure shows the relative effectiveness of these wireless security methods available on your VMG. Table 127 Wireless Security Levels SECURITY LEVEL SECURITY TYPE Least Secure Unique SSID (Default) Unique SSID with Hide SSID Enabled MAC Address Filtering WEP Encryption IEEE802.1x EAP with RADIUS Server Authentication Wi-Fi Protected Access (WPA) Most Secure WPA2 Note: You must enable the same wireless security settings on the VMG and on all wireless clients that you want to associate with it. IEEE 802.1x In June 2001, the IEEE 802.1x standard was designed to extend the features of IEEE 802.11 to support extended authentication as well as providing additional accounting and control features. It is supported by Windows XP and a number of network devices. Some advantages of IEEE 802.1x are: • User based identification that allows for roaming. VMG3925-B10A User's Guide 276

Section	Page
VMG3925-B10A	1
Contents Overview	3
Table of Contents	5
User’s Guide	14
Introducing the VMG	15
1.1 Overview	15
1.2 Ways to Manage the VMG	15
1.3 Good Habits for Managing the VMG	15
1.4 Applications for the VMG	16
1.4.1 Internet Access	16
1.4.2 VMG’s USB Support	16
1.5 LEDs (Lights)	17
1.6 The RESET Button	19
1.7 Wireless Access	20
1.7.1 Using the Wi-Fi and WPS Buttons	20
The Web Configurator	21
2.1 Overview	21
2.1.1 Accessing the Web Configurator	21
2.2 Web Configurator Layout	23
2.2.1 Title Bar	23
2.2.2 Main Window	24
2.2.3 Navigation Panel	25
Quick Start	29
3.1 Overview	29
3.2 Quick Start Setup	29
Tutorials	31
4.1 Overview	31
4.2 Setting Up an ADSL PPPoE Connection	31
4.3 Setting Up a Secure Wireless Network	34
4.3.1 Configuring the Wireless Network Settings	34
4.3.2 Using WPS	36
4.3.3 Without WPS	40
4.4 Setting Up Multiple Wireless Groups	41
4.5 Configuring Static Route for Routing to Another Network	44
4.6 Configuring QoS Queue and Class Setup	46
4.7 Access the VMG Using DDNS	50
4.7.1 Registering a DDNS Account on www.dyndns.org	50
4.7.2 Configuring DDNS on Your VMG	51
4.7.3 Testing the DDNS Setting	51
4.8 Configuring the MAC Address Filter	51
4.9 Access Your Shared Files From a Computer	53
Technical Reference	54
Network Map and Status Screens	55
5.1 Overview	55
5.2 The Network Map Screen	55
5.3 The Status Screen	56
Broadband	59
6.1 Overview	59
6.1.1 What You Can Do in this Chapter	59
6.1.2 What You Need to Know	60
6.1.3 Before You Begin	62
6.2 The Broadband Screen	63
6.2.1 Add/Edit Internet Connection	64
6.3 The 3G Backup Screen	71
6.4 The Advanced Screen	75
6.5 The 802.1x Screen	78
6.5.1 Modify 802.1X Settings	79
6.6 Technical Reference	79
Wireless	85
7.1 Overview	85
7.1.1 What You Can Do in this Chapter	85
7.1.2 What You Need to Know	85
7.2 The General Screen	86
7.2.1 No Security	88
7.2.2 Basic (WEP Encryption)	88
7.2.3 More Secure (WPA(2)-PSK)	89
7.3 The Guest / More AP Screen	91
7.3.1 Edit Guest / More AP	91
7.4 The MAC Authentication Screen	93
7.5 The WPS Screen	94
7.6 The WMM Screen	96
7.7 The WDS Screen	97
7.7.1 WDS Scan	98
7.8 The Others Screen	99
7.9 The Channel Status Screen	101
7.10 Technical Reference	102
7.10.1 Wireless Network Overview	102
7.10.2 Additional Wireless Terms	104
7.10.3 Wireless Security Overview	104
7.10.4 Signal Problems	106
7.10.5 BSS	107
7.10.6 MBSSID	107
7.10.7 Preamble Type	108
7.10.8 Wireless Distribution System (WDS)	108
7.10.9 WiFi Protected Setup (WPS)	108
Home Networking	116
8.1 Overview	116
8.1.1 What You Can Do in this Chapter	116
8.1.2 What You Need To Know	117
8.1.3 Before You Begin	118
8.2 The LAN Setup Screen	118
8.3 The Static DHCP Screen	122
8.4 The UPnP Screen	123
8.4.1 Turning On UPnP in Windows 7 Example	124
8.5 The Additional Subnet Screen	126
8.6 The STB Vendor ID Screen	127
8.7 The Wake on LAN Screen	127
8.8 The TFTP Server Name Screen	128
8.9 Technical Reference	128
8.9.1 LANs, WANs and the VMG	128
8.9.2 DHCP Setup	129
8.9.3 DNS Server Addresses	129
8.9.4 LAN TCP/IP	130
Routing	132
9.1 Overview	132
9.2 The Routing Screen	132
9.2.1 Add/Edit Static Route	133
9.3 The DNS Route Screen	134
9.3.1 The DNS Route Add Screen	135
9.4 The Policy Route Screen	135
9.4.1 Add/Edit Policy Route	137
9.5 RIP	138
9.5.1 The RIP Screen	138
Quality of Service (QoS)	139
10.1 Overview	139
10.1.1 What You Can Do in this Chapter	139
10.2 What You Need to Know	140
10.3 The Quality of Service General Screen	141
10.4 The Queue Setup Screen	142
10.4.1 Adding a QoS Queue	144
10.5 The Classification Setup Screen	144
10.5.1 Add/Edit QoS Classifier	145
10.6 The QoS Shaper Setup Screen	149
10.6.1 Add/Edit a QoS Shaper	150
10.7 The QoS Policer Setup Screen	150
10.7.1 Add/Edit a QoS Policer	151
10.8 Technical Reference	152
Network Address Translation (NAT)	157
11.1 Overview	157
11.1.1 What You Can Do in this Chapter	157
11.1.2 What You Need To Know	157
11.2 The Port Forwarding Screen	158
11.2.1 Add/Edit Port Forwarding	160
11.3 The Applications Screen	161
11.3.1 Add New Application	162
11.4 The Port Triggering Screen	162
11.4.1 Add/Edit Port Triggering Rule	164
11.5 The DMZ Screen	165
11.6 The ALG Screen	166
11.7 The Address Mapping Screen	166
11.7.1 Add/Edit Address Mapping Rule	167
11.8 The Sessions Screen	168
11.9 Technical Reference	169
11.9.1 NAT Definitions	169
11.9.2 What NAT Does	169
11.9.3 How NAT Works	170
11.9.4 NAT Application	170
DNS Setup	173
12.1 Overview	173
12.1.1 What You Can Do in this Chapter	173
12.1.2 What You Need To Know	173
12.2 The DNS Entry Screen	174
12.2.1 Add/Edit DNS Entry	174
12.3 The Dynamic DNS Screen	175
IGMP/MLD	177
13.1 Overview	177
13.1.1 What You Need To Know	177
13.2 The IGMP/MLD Screen	177
VLAN Group	180
14.1 Overview	180
14.1.1 What You Can Do in this Chapter	180
14.2 The Vlan Group Screen	180
14.2.1 Add/Edit a VLAN Group	181
Interface Group	183
15.1 Overview	183
15.1.1 What You Can Do in this Chapter	183
15.2 The Interface Group Screen	183
15.2.1 Interface Group Configuration	184
15.2.2 Interface Grouping Criteria	186
USB Service	188
16.1 Overview	188
16.1.1 What You Can Do in this Chapter	188
16.1.2 What You Need To Know	188
16.1.3 Before You Begin	189
16.2 The File Sharing Screen	189
16.2.1 The Add New User Screen	190
16.3 The Media Server Screen	191
Firewall	193
17.1 Overview	193
17.1.1 What You Can Do in this Chapter	193
17.1.2 What You Need to Know	194
17.2 The Firewall Screen	194
17.3 The Protocol Screen	195
17.3.1 Add/Edit a Protocol	196
17.4 The Access Control Screen	197
17.4.1 Add/Edit an ACL Rule	197
17.5 The DoS Screen	199
MAC Filter	200
18.1 Overview	200
18.2 The MAC Filter Screen	200
Parental Control	202
19.1 Overview	202
19.2 The Parental Control Screen	202
19.2.1 Add/Edit a Parental Control Profile	203
Scheduler Rule	206
20.1 Overview	206
20.2 The Scheduler Rule Screen	206
20.2.1 Add/Edit a Schedule	206
Certificates	208
21.1 Overview	208
21.1.1 What You Can Do in this Chapter	208
21.2 What You Need to Know	208
21.3 The Local Certificates Screen	208
21.3.1 Create Certificate Request	209
21.3.2 Load Signed Certificate	211
21.4 The Trusted CA Screen	212
21.4.1 View Trusted CA Certificate	213
21.4.2 Import Trusted CA Certificate	214
Log	215
22.1 Overview	215
22.1.1 What You Can Do in this Chapter	215
22.1.2 What You Need To Know	215
22.2 The System Log Screen	216
22.3 The Security Log Screen	216
Traffic Status	218
23.1 Overview	218
23.1.1 What You Can Do in this Chapter	218
23.2 The WAN Status Screen	218
23.3 The LAN Status Screen	219
23.4 The NAT Status Screen	220
ARP Table	221
24.1 Overview	221
24.1.1 How ARP Works	221
24.2 ARP Table Screen	221
Routing Table	223
25.1 Overview	223
25.2 The Routing Table Screen	223
Multicast Status	225
26.1 Overview	225
26.2 The IGMP Status Screen	225
26.3 The MLD Status Screen	225
xDSL Statistics	227
27.1 The xDSL Statistics Screen	227
3G Statistics	230
28.1 Overview	230
28.2 The 3G Statistics Screen	230
System	232
29.1 Overview	232
29.2 The System Screen	232
User Account	233
30.1 Overview	233
30.2 The User Account Screen	233
30.2.1 The User Account Add/Edit Screen	233
Remote Management	235
31.1 Overview	235
31.2 The Remote MGMT Screen	235
31.3 The Trust Domain Screen	236
31.3.1 The Add Trust Domain Screen	236
SNMP	238
32.1 Overview	238
32.2 The SNMP Screen	238
Time Settings	240
33.1 Overview	240
33.2 The Time Screen	240
E-mail Notification	243
34.1 Overview	243
34.2 The E-mail Notification Screen	243
34.2.1 Email Notification Edit	243
Log Setting	245
35.1 Overview	245
35.2 The Log Settings Screen	245
35.2.1 Example E-mail Log	246
Firmware Upgrade	248
36.1 Overview	248
36.2 The Firmware Screen	248
Backup Restore	250
37.1 Overview	250
37.2 The Backup Restore Screen	250
37.3 The Reboot Screen	252
Diagnostic	253
38.1 Overview	253
38.1.1 What You Can Do in this Chapter	253
38.2 What You Need to Know	253
38.3 Ping & TraceRoute & NsLookup	254
38.4 802.1ag	254
38.5 OAM Ping	255
Troubleshooting	258
39.1 Power, Hardware Connections, and LEDs	258
39.2 VMG Access and Login	259
39.3 Internet Access	261
39.4 Wireless Internet Access	262
39.5 USB Device Connection	263
39.6 UPnP	263
Appendices	265
Customer Support	266
Wireless LANs	272
IPv6	285
Services	293
Legal Information	297

Match case Limit results 1 per page

Appendix B Wireless LANs

VMG3925-B10A User’s Guide

276

IEEE 802.11g Wireless LAN

IEEE 802.11g is fully compatible with the IEEE 802.11b standard. This means an IEEE 802.11b

adapter can interface directly with an IEEE 802.11g access point (and vice versa) at 11 Mbps or

lower depending on range. IEEE 802.11g has several intermediate rate steps between the

maximum and minimum data rates. The IEEE 802.11g data rate and modulation are as follows:

Wireless Security Overview

Wireless security is vital to your network to protect wireless communication between wireless

clients, access points and the wired network.

Wireless security methods available on the VMG are data encryption, wireless client authentication,

restricting access by device MAC address and hiding the VMG identity.

The following figure shows the relative effectiveness of these wireless security methods available on

your VMG.

Note: You must enable the same wireless security settings on the VMG and on all wireless

clients that you want to associate with it.

IEEE 802.1x

In June 2001, the IEEE 802.1x standard was designed to extend the features of IEEE 802.11 to

support extended authentication as well as providing additional accounting and control features. It

is supported by Windows XP and a number of network devices. Some advantages of IEEE 802.1x

are:

•

User based identification that allows for roaming.

Table 126

IEEE 802.11g

DATA RATE (MBPS)

MODULATION

DBPSK (Differential Binary Phase Shift Keyed)

DQPSK (Differential Quadrature Phase Shift Keying)

5.5 / 11

CCK (Complementary Code Keying)

6/9/12/18/24/36/48/

OFDM (Orthogonal Frequency Division Multiplexing)

Table 127

Wireless Security Levels

SECURITY

LEVEL

SECURITY TYPE

Least

Secure

Most Secure

Unique SSID (Default)

Unique SSID with Hide SSID Enabled

MAC Address Filtering

WEP Encryption

IEEE802.1x EAP with RADIUS Server Authentication

Wi-Fi Protected Access (WPA)

WPA2