Page 2
Every effort has been made to ensure that the information in this manual is accurate. Related Documentation • Quick Start Guide The Quick Start Guide shows how to connect the Device and get up and running right away. VMG1312-B10C User’s Guide...
Page 7
8.4.1 The RIP Screen ........................130 Chapter 9 Quality of Service (QoS)........................131 9.1 Overview ............................131 9.1.1 What You Can Do in this Chapter ..................131 9.2 What You Need to Know .........................132 9.3 The Quality of Service General Screen ..................133 VMG1312-B10C User’s Guide...
Page 8
11.1.2 What You Need To Know .....................168 11.2 The DNS Entry Screen ........................168 11.2.1 Add/Edit DNS Entry ......................169 11.3 The Dynamic DNS Screen ......................169 Chapter 12 Interface Group ..........................171 12.1 Overview ............................171 12.1.1 What You Can Do in this Chapter ..................171 VMG1312-B10C User’s Guide...
Page 9
Parental Control ..........................195 16.1 Overview ............................195 16.2 The Parental Control Screen ......................195 16.2.1 Add/Edit a Parental Control Rule ..................196 Chapter 17 Scheduler Rule..........................199 17.1 Overview ............................199 17.2 The Scheduler Rule Screen ......................199 17.2.1 Add/Edit a Schedule ......................200 VMG1312-B10C User’s Guide...
Page 10
20.3 The Security Log Screen .......................223 Chapter 21 Traffic Status ............................225 21.1 Overview ............................225 21.1.1 What You Can Do in this Chapter ..................225 21.2 The WAN Status Screen .......................225 21.3 The LAN Status Screen .........................227 21.4 The NAT Status Screen .........................228 VMG1312-B10C User’s Guide...
Page 12
36.2 What You Need to Know .......................265 36.3 Ping & TraceRoute & NsLookup ....................266 36.4 802.1ag ............................267 36.5 OAM Ping ............................268 Chapter 37 Troubleshooting..........................271 37.1 Power, Hardware Connections, and LEDs ..................271 37.2 Device Access and Login ......................272 VMG1312-B10C User’s Guide...
Page 13
Table of Contents 37.3 Internet Access ..........................274 37.4 Wireless Internet Access .......................275 37.5 USB Device Connection ........................276 37.6 UPnP .............................276 Appendix A Customer Support ......................277 Appendix B Legal Information......................283 Index ..............................289 VMG1312-B10C User’s Guide...
Page 14
Table of Contents VMG1312-B10C User’s Guide...
Device to its factory default settings. If you backed up an earlier configuration file, you would not have to totally re-configure the Device. You could simply restore your last configuration. VMG1312-B10C User’s Guide...
Internet to your network is blocked by default unless it is initiated from your network. This means that probes from the outside to your network are not allowed, but you can safely browse the Internet and download files. VMG1312-B10C User’s Guide...
Page 19
You can also use the Device as a media server. This lets anyone on your network play video, music, and photos from a USB device (B) connected to the Device’s USB port (without having to copy them to another computer). Figure 3 USB Media Server Application VMG1312-B10C User’s Guide...
If you forget your password or cannot access the web configurator, you will need to use the RESET button at the back of the device to reload the factory-default configuration file. This means that you will lose all configurations that you had previously and the password will be reset to “1234”. VMG1312-B10C User’s Guide...
Once the connection is successfully made, the WLAN/WPS LED shines green. To turn off the wireless network, press the WLAN/WPS button on the front of the Device for one second. The WLAN/WPS LED turns off when the wireless network is off. VMG1312-B10C User’s Guide...
Page 22
Chapter 1 Introducing the Device VMG1312-B10C User’s Guide...
If you have changed the password, enter your password and click Login. Figure 5 Password Screen VMG1312-B10C User’s Guide...
Page 24
After you finished or closed the Quick Start Wizard screen, the Network Map page appears. Figure 7 Network Map Click Status to display the Status screen, where you can view the Device’s interface and system information. VMG1312-B10C User’s Guide...
As illustrated above, the main screen is divided into these parts: • A - title bar • B - main window • C - navigation panel 2.2.1 Title Bar The title bar provides some icons in the upper right corner. VMG1312-B10C User’s Guide...
The main window displays information and configuration fields. It is discussed in the rest of this document. After you click Status on the Connection Status page, the Status screen is displayed. See Chapter 4 on page 36 for more information about the Status screen. VMG1312-B10C User’s Guide...
Use the menu items on the navigation panel to open screens to configure Device features. The following tables describe each menu item. Table 3 Navigation Panel Summary LINK FUNCTION Connection Status This screen shows the network status of the Device and computers/ devices connected to it. Network Setting VMG1312-B10C User’s Guide...
Page 28
QoS rules and actions. Queue Setup Use this screen to configure QoS queues. Class Setup Use this screen to define a classifier. Policer Setup Use these screens to configure QoS policers. Monitor Use this screen to view QoS packets statistics. VMG1312-B10C User’s Guide...
Page 29
LAN ports of the Device. Use this screen to view NAT statistics for connected hosts. ARP Table Use this screen to view the ARP table. It displays the IP and MAC address of each DHCP connection. VMG1312-B10C User’s Guide...
Page 30
Use this screen to configure CFM (Connectivity Fault Management) MD (maintenance domain) and MA (maintenance association), perform connectivity tests and view test reports. OAM Ping Use this screen to view information to help you identify problems with the DSL connection. VMG1312-B10C User’s Guide...
The Quick Start Wizard appears automatically after login. Or you can click the Click Start icon in the top right corner of the web configurator to open the quick start screens. Select the time zone of the Device’s location and click Next. Figure 10 Time Zone VMG1312-B10C User’s Guide...
Page 32
Turn the wireless LAN on or off. If you keep it on, record the security settings so you can configure your wireless clients to connect to the Device. Click Save. Figure 12 Internet Connection Your Device saves your settings and attempts to connect to the Internet. VMG1312-B10C User’s Guide...
If you prefer to view the status in a list, click List View in the Viewing Mode selection box. You can configure how often you want the Device to update this screen in Refresh Interval. Figure 13 Network Map: Icon Mode Figure 14 Network Map: List Mode VMG1312-B10C User’s Guide...
Change icon/name. In List Mode, you can also view the client’s information. 4.3 The Status Screen Use this screen to view the status of the Device. Click Status to open this screen. Figure 15 Status Screen VMG1312-B10C User’s Guide...
Page 37
(Maintenance > Reboot), or when you reset it. Current This field displays the current date and time in the Device. You can change this in Date/Time Maintenance> Time Setting. VMG1312-B10C User’s Guide...
Page 38
If memory usage does get close to 100%, the Device is probably becoming unstable, and you should restart the device. See Section 35.2 on page 261, or turn off the device (unplug the power) for a few seconds. VMG1312-B10C User’s Guide...
• Use the Broadband screen to view, remove or add a WAN interface. You can also configure the WAN settings on the Device for Internet access (Section 5.2 on page 42). • Use the 3G Backup screen to configure 3G WAN connection (Section 5.3 on page 51). VMG1312-B10C User’s Guide...
Page 40
(fixed) or dynamically assigned by the ISP each time the Device tries to access the Internet. If your ISP assigns you a static WAN IP address, they should also assign you the subnet mask and DNS server IP address(es). VMG1312-B10C User’s Guide...
Page 41
IPv6 Prefix and Prefix Length Similar to an IPv4 subnet mask, IPv6 uses an address prefix to represent the network address. An IPv6 prefix length specifies how many most significant bits (start from the left) in the address VMG1312-B10C User’s Guide...
Page 42
This indicates the 802.1p priority level assigned to traffic sent through this connection. This displays N/A when there is no priority level assigned. 802.1q This indicates the VLAN ID number assigned to traffic sent through this connection. This displays N/A when there is no VLAN ID number assigned. VMG1312-B10C User’s Guide...
Page 43
This shows whether Multicast Listener Discovery (MLD) is activated or not for this connection. MLD is not available when the connection uses the bridging service. Modify/Delete Click the Edit icon to configure the WAN connection. Click the Delete icon to remove the WAN connection. VMG1312-B10C User’s Guide...
Page 44
Type Select whether it is an ADSL/VDSL over PTM, ADSL over ATM connection or Ethernet. Mode Select Routing if your ISP give you one IP address only and you want multiple computers to share an Internet account. VMG1312-B10C User’s Guide...
Page 45
The Sustainable Cell Rate (SCR) sets the average cell rate (long-term) that can be Cell Rate transmitted. Type the SCR, which must be less than the PCR. Note that system default is 0 cells/sec. This field is available only when you select Non Realtime VBR or Realtime VBR. VMG1312-B10C User’s Guide...
Page 46
Select this option to have the Device use the WAN interface of this connection as the system Default default gateway. Gateway DNS Server This is available only when you select IPv4 Only or IPv6/IPv4 DualStack in the IPv6/ IPv4 Mode field. VMG1312-B10C User’s Guide...
Page 47
Select Static to have the Device use the IPv6 DNS server addresses you configure manually. IPv6 DNS Enter the first IPv6 DNS server address assigned by the ISP. Server 1 IPv6 DNS Enter the second IPv6 DNS server address assigned by the ISP. Server 2 VMG1312-B10C User’s Guide...
Select Bridge as the encapsulation mode. The screen varies depending on the interface type you select. If you select ADSL/VDSL over PTM as the interface type, the following screen appears. Figure 20 Bridge Mode (ADSL/VDSL over PTM) VMG1312-B10C User’s Guide...
Page 49
Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. If you select ADSL over ATM as the interface type, the following screen appears. Figure 21 Bridge Mode (ADSL over ATM) VMG1312-B10C User’s Guide...
Page 50
Divide the DSL line rate (bps) by 424 (the size of an ATM cell) to find the Peak Cell Rate (PCR). This is the maximum rate at which the sender can send cells. Type the PCR here.This field is not available when you select UBR Without PCR. VMG1312-B10C User’s Guide...
Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. 5.3 The 3G Backup Screen Use this screen to configure your 3G settings. Click Network Setting > Broadband > 3G Backup. VMG1312-B10C User’s Guide...
Page 52
Select this to have the Device ping the particular host name or IP address you typed in this field. 3G Connection Settings Card This field displays the manufacturer and model name of your 3G card if you inserted one in description the Device. Otherwise, it displays N/A. VMG1312-B10C User’s Guide...
Page 53
Select this and specify the amount of time (in hours) that the 3G connection can be used within one month. If you change the value after you configure and enable budget control, the Device resets the statistics. VMG1312-B10C User’s Guide...
Page 54
Enter the interval of how many minutes you want the Device to e-mail you. Enable Log Select this to activate the logging function at the interval you set in this field. Basic Click this to hide the advanced settings of 3G backup. VMG1312-B10C User’s Guide...
CPE to retrain. For PhyR to function, the DSLAM must also support PhyR and have it enabled. Apply Click Apply to save your changes back to the Device. Cancel Click Cancel to return to the previous configuration. VMG1312-B10C User’s Guide...
This shows the Trusted CA used for this authentication. This displays N/A when there is no Trusted CA assigned. Apply Click Apply to save your changes back to the Device. Cancel Click Cancel to return to the previous configuration. VMG1312-B10C User’s Guide...
Page 57
If you are using an ethernet WAN connection, you can configure a LAN port as an ethernet WAN port. Click Network Setting > Broadband > Ethernet WAN to open this screen. Note: LAN port 4 can operate as an Ethernet WAN port. VMG1312-B10C User’s Guide...
Page 58
RFC1483 and sends it through an ATM PVC (Permanent Virtual Circuit) to the Internet Service Provider’s (ISP) DSLAM (digital access multiplexer). Please refer to RFC 2364 for more information on PPPoA. Refer to RFC 1661 for more information on PPP. VMG1312-B10C User’s Guide...
Page 59
Traffic Shaping is an agreement between the carrier and the subscriber to regulate the average rate and fluctuations of data transmission over an ATM network. This agreement helps eliminate congestion, which is important for transmission of real time data such as audio and video connections. VMG1312-B10C User’s Guide...
Page 60
Variable Bit Rate (VBR) traffic class can be grouped into real time (VBR-RT) or non-real time (VBR-nRT) connections. The VBR-RT (real-time Variable Bit Rate) type is used with bursty connections that require closely controlled delay and delay variation. It also provides a fixed amount of bandwidth (a PCR is VMG1312-B10C User’s Guide...
Page 61
Ethernet port has a CFI set to 1, then that frame should not be forwarded as it is to an untagged port. The remaining twelve bits define the VLAN ID, giving a possible maximum VMG1312-B10C User’s Guide...
Page 62
DNS server fields to get the DNS server address from the ISP. IPv6 Addressing The 128-bit IPv6 address is written as eight 16-bit hexadecimal blocks separated by colons (:). This is an example IPv6 address 2001:0db8:1a2b:0015:0000:0000:1a2f:0000. IPv6 addresses can be abbreviated in two ways: VMG1312-B10C User’s Guide...
Page 63
IPv6 prefix length specifies how many most significant bits (start from the left) in the address compose the network address. The prefix length is written as “/x” where x is a number. For example, 2001:db8:1a2b:15::1a2f:0/32 means that the first 32 bits (2001:db8) is the subnet prefix. VMG1312-B10C User’s Guide...
• Use the Others screen to configure wireless advanced features, such as the RTS/CTS Threshold (Section 6.8 on page 84). • Use the Channel Status screen to scan wireless LAN channel noises and view the results (Section 6.9 on page 86). VMG1312-B10C User’s Guide...
Device’s SSID, channel or security settings, you will lose your wireless connection when you press Apply to confirm. You must then change the wireless settings of your computer to match the Device’s new settings. VMG1312-B10C User’s Guide...
Page 67
Chapter 6 Wireless Click Network Setting > Wireless to open the General screen. Figure 28 Network Setting > Wireless > General VMG1312-B10C User’s Guide...
Page 68
Select this to keep the wireless clients in this SSID from communicating with clients in other Isolation SSIDs or wired LAN devices through the Device. Select both Client Isolation and MBSSID/LAN Isolation to allow this SSID’s wireless clients to only connect to the Internet through the Device. VMG1312-B10C User’s Guide...
Page 69
Figure 29 Wireless > General: No Security The following table describes the labels in this screen. Table 16 Wireless > General: No Security LABEL DESCRIPTION Security Level Choose No Security to allow all wireless connections without data encryption or authentication. VMG1312-B10C User’s Guide...
Page 70
LABEL DESCRIPTION Security Level Select Basic to enable WEP data encryption. Generate Select this option to have the Device automatically generate a password. The password field password will not be configurable when you select this option. automatically VMG1312-B10C User’s Guide...
Page 71
In order to configure and enable WEP encryption, click Network Setting > Wireless to display the General screen, then select Basic as the security level and 802.1X as the Security Mode. Figure 31 Wireless > General: Basic (802.1X) VMG1312-B10C User’s Guide...
Page 72
Specify a password (up to 32 alphanumeric characters) as the key to be shared between the external RADIUS server and the Device. This key is not sent over the network. This key must be the same on the external RADIUS server and the Device. VMG1312-B10C User’s Guide...
Page 73
Click more... to show more fields in this section. Click less to hide them. WPA-PSK This field appears when you choose WPA-PSK2 as the Security Mode. Compatible Check this field to allow wireless devices using WPA-PSK security mode to connect to your Device. The Device supports WPA-PSK and WPA2-PSK simultaneously. VMG1312-B10C User’s Guide...
Page 74
WPA2 and therefore is more compatible with older devices. Click Network Setting > Wireless to display the General screen. Select More Secure as the security level. Then select WPA or WPA2 from the Security Mode list. Figure 33 Wireless > General: More Secure: WPA(2) VMG1312-B10C User’s Guide...
The Group Key Update Timer is the rate at which the RADIUS server sends a new group Update Timer key out to all clients. 6.3 The More AP Screen This screen allows you to enable and configure multiple Basic Service Sets (BSSs) on the Device. VMG1312-B10C User’s Guide...
Page 76
If Home Guest displays, clients can connect to each other directly. If External Guest displays, clients are blocked from connecting to each other directly. N/A displays if guest WLAN is disabled. Modify Click the Edit icon to configure the SSID profile. VMG1312-B10C User’s Guide...
The following table describes the fields in this screen. Table 22 More AP: Edit LABEL DESCRIPTION Wireless Network Setup Wireless You can Enable or Disable the wireless LAN in this field. Passphrase Passphrase type cannot be changed. The default is None. Type Wireless Network Settings VMG1312-B10C User’s Guide...
MAC (Media Access Control) address. The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02. You need to know the MAC addresses of the devices to configure this screen. VMG1312-B10C User’s Guide...
WPS allows you to quickly set up a wireless network with strong security, without having to configure security settings manually. Set up each WPS connection between two devices. Both devices must support WPS. See Section 6.10.9.3 on page 95 for more information about WPS. VMG1312-B10C User’s Guide...
Page 80
You can find the PIN either on the outside of the device, or by checking the device’s settings. Note: You must also activate WPS on that device within two minutes to have it present its PIN to the Device. VMG1312-B10C User’s Guide...
Device "wakes up". The Device wakes up periodically to check for incoming data. Note: Note: This works only if the wireless device to which the Device is connected also supports this feature. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG1312-B10C User’s Guide...
This field is available only when you set operating mode to Access Point. Select Enabled to turn on WDS and enter the peer device’s MAC address manually in the table below. Select Disable to turn off WDS. VMG1312-B10C User’s Guide...
This shows the SSID of the available wireless device within range. BSSID This shows the MAC address of the available wireless device within range. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG1312-B10C User’s Guide...
Delivery Traffic Indication Message (DTIM) is the time period after which broadcast and multicast packets are transmitted to mobile clients in the Power Saving mode. A high DTIM value can cause clients to lose connectivity with the network. This value can be set from 1 to 255. VMG1312-B10C User’s Guide...
Page 85
Select a preamble type from the drop-down list box. Choices are Long or Short. See Section 6.10.7 on page 92 for more information. This field is configurable only when you set 802.11 Mode to 802.11b. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG1312-B10C User’s Guide...
• An access point is a radio with a wired connection to a network, which can connect with numerous wireless clients and let them access the network. • A bridge is a radio that relays communications between access points and wireless clients, extending a network’s range. VMG1312-B10C User’s Guide...
Page 87
• Every device in the same wireless network must use security compatible with the AP. Security stops unauthorized devices from using the wireless network. It can also protect the information that is sent in the wireless network. VMG1312-B10C User’s Guide...
These security standards vary in effectiveness. Some can be broken, such as the old Wired Equivalent Protocol (WEP). Using WEP is better than using no security at all, but it will not keep a determined attacker out. Other security standards are secure in themselves but can be broken if a VMG1312-B10C User’s Guide...
Page 89
Some wireless devices, such as scanners, can detect wireless networks but cannot use wireless networks. These kinds of wireless devices might not have MAC addresses. Hexadecimal characters are 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, A, B, C, D, E, and F. VMG1312-B10C User’s Guide...
Page 90
WPA compatible option in the Device. Many types of encryption use a key to protect the information in the wireless network. The longer the key, the stronger the encryption. Every device in the wireless network must have the same key. VMG1312-B10C User’s Guide...
Figure 44 Basic Service set 6.10.6 MBSSID Traditionally, you need to use different APs to configure different Basic Service Sets (BSSs). As well as the cost of buying extra APs, there is also the possibility of channel interference. The Device’s VMG1312-B10C User’s Guide...
The following figure illustrates how WDS link works between APs. Notebook computer A is a wireless client connecting to access point AP 1. AP 1 has no wired Internet connection, but it can VMG1312-B10C User’s Guide...
Page 93
(SSID) and security key through an secure connection to the enrollee. If you need to make sure that WPS worked, check the list of associated wireless clients in the AP’s configuration utility. If you see the wireless client in the list, WPS was successful. VMG1312-B10C User’s Guide...
Page 94
On a computer connected to the wireless client, try to connect to the Internet. If you can connect, WPS was successful. If you cannot connect, check the list of associated wireless clients in the AP’s configuration utility. If you see the wireless client in the list, WPS was successful. VMG1312-B10C User’s Guide...
WPA-PSK or WPA2-PSK pre-shared key to the enrollee. Whether WPA-PSK or WPA2-PSK is used depends on the standards supported by the devices. If the registrar is already part of a network, it sends the existing information. If not, it generates the SSID and WPA(2)-PSK randomly. VMG1312-B10C User’s Guide...
Page 96
This section shows how security settings are distributed in an example WPS setup. The following figure shows an example network. In step 1, both AP1 and Client 1 are unconfigured. When WPS is activated on both, they perform the handshake. In this example, AP1 VMG1312-B10C User’s Guide...
Page 97
(it already has security information for the network). AP1 supplies the existing security information to Client 2. Figure 49 WPS: Example Network Step 2 REGISTRAR EXISTING CONNECTION CLIENT 1 ENROLLEE CLIENT 2 VMG1312-B10C User’s Guide...
Page 98
(if the device supports this feature). Then, you can enter the key into the non-WPS device and join the network as normal (the non-WPS device must also support WPA-PSK or WPA2-PSK). VMG1312-B10C User’s Guide...
Page 99
Check the MAC addresses of your wireless clients (usually printed on a label on the bottom of the device). If there is an unknown MAC address you can remove it or reset the AP. VMG1312-B10C User’s Guide...
Set Top Box (STB) devices when they request IP addresses (Section 7.8 on page 119) • Use the LAN VLAN screen to control the VLAN ID and IEEE 802.1p priority tags of traffic sent out through individual LAN ports (Section 7.9 on page 120). VMG1312-B10C User’s Guide...
Page 102
UPnP devices and enable exchange of simple product and service descriptions. NAT traversal allows the following: • Dynamic port mapping • Learning public IP addresses VMG1312-B10C User’s Guide...
This will become the IP address of your Device. Enter the IP subnet mask into the IP Subnet Mask field. Unless instructed otherwise it is best to leave this alone, the configurator will automatically compute a subnet mask based upon the IP address you entered. VMG1312-B10C User’s Guide...
Page 104
IP Address you enter, so do not change this field unless you are instructed to do so. IGMP Snooping Status Select the Enable IGMP Snooping check box to allows the Device to passively learn multicast group. VMG1312-B10C User’s Guide...
Page 105
A unique local address (ULA) is a unique IPv6 address for use in private networks but not Random Global routable in the global IPv6 Internet. Select this to have the Device automatically generate a globally unique address for the LAN IPv6 address. The address format is like fdxx:xxxx:xxxx:xxxx::/64. ULA IPv6 Address Setup VMG1312-B10C User’s Guide...
Page 106
If DHCPv6 is enabled, specify the domain name to be assigned to DHCPv6 clients. Name IPv6 Router Advertisement State RADVD State This shows the status of RADVD. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG1312-B10C User’s Guide...
If you click Add new static lease in the Static DHCP screen or the Edit icon next to a static DHCP entry, the following screen displays. Figure 53 Static DHCP: Add/Edit VMG1312-B10C User’s Guide...
UPnP. Use the following screen to configure the UPnP settings on your Device. Click Network Setting > Home Networking > UPnP to display the screen shown next. Figure 54 Network Setting > Home Networking > UPnP VMG1312-B10C User’s Guide...
This section shows how to install UPnP in Windows Me and Windows XP. Installing UPnP in Windows Me Follow the steps below to install the UPnP in Windows Me. Click Start and Control Panel. Double-click Add/Remove Programs. VMG1312-B10C User’s Guide...
Page 110
Click on the Windows Setup tab and select Communication in the Components selection box. Click Details. Add/Remove Programs: Windows Setup: Communication In the Communications window, select the Universal Plug and Play check box in the Components selection box. Add/Remove Programs: Windows Setup: Communication: Components VMG1312-B10C User’s Guide...
Page 111
In the Network Connections window, click Advanced in the main menu and select Optional Networking Components …. Network Connections The Windows Optional Networking Components Wizard window displays. Select Networking Service in the Components selection box and click Details. Windows Optional Networking Components Wizard VMG1312-B10C User’s Guide...
Make sure the computer is connected to a LAN port of the Device. Turn on your computer and the Device. Auto-discover Your UPnP-enabled Network Device Click Start and Control Panel. Double-click Network Connections. An icon displays under Internet Gateway. VMG1312-B10C User’s Guide...
Page 113
Chapter 7 Home Networking Right-click the icon and select Properties. Network Connections In the Internet Connection Properties window, click Settings to see the port mappings there were automatically created. Internet Connection Properties VMG1312-B10C User’s Guide...
Page 114
When the UPnP-enabled device is disconnected from your computer, all port mappings will be deleted automatically. Select Show icon in notification area when connected option and click OK. An icon displays in the system tray. System Tray Icon VMG1312-B10C User’s Guide...
Page 115
Device first. This comes helpful if you do not know the IP address of the Device. Follow the steps below to access the web configurator. Click Start and then Control Panel. Double-click Network Connections. VMG1312-B10C User’s Guide...
Page 116
Select My Network Places under Other Places. Network Connections An icon with the description for each UPnP-enabled device displays under Local Network. Right-click on the icon for your Device and select Invoke. The web configurator login screen displays. Network Connections: My Network Places VMG1312-B10C User’s Guide...
Page 117
Chapter 7 Home Networking Right-click on the icon for your Device and select Properties. A properties window displays with basic information about the Device. Network Connections: My Network Places: Properties: Example VMG1312-B10C User’s Guide...
Select the checkbox to enable the Public LAN feature. Your ISP must support Public LAN and Static IP. IP Address Enter the public IP address provided by your ISP. IP Subnet Mask Enter the public IP subnet mask provided by your ISP. VMG1312-B10C User’s Guide...
Page 119
Table 36 Network Setting > Home Networking > STB Vendor ID LABEL DESCRIPTION Vendor ID 1 ~ Enter the STB’s vendor ID. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG1312-B10C User’s Guide...
(from 0 to 4094) to use here. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. 7.10 Technical Reference This section provides some technical background information about the topics covered in this chapter. VMG1312-B10C User’s Guide...
• The ISP tells you the DNS server addresses, usually in the form of an information sheet, when you sign up. If your ISP gives you DNS server addresses, enter them in the DNS Server fields in the DHCP Setup screen. VMG1312-B10C User’s Guide...
Page 122
Internet, for example, only between your two branch offices, you can assign any IP addresses to the hosts without problems. However, the Internet Assigned Numbers Authority (IANA) has reserved the following three blocks of IP addresses specifically for private networks: • 10.0.0.0 — 10.255.255.255 • 172.16.0.0 — 172.31.255.255 • 192.168.0.0 — 192.168.255.255 VMG1312-B10C User’s Guide...
Page 123
Note: Regardless of your particular situation, do not create an arbitrary IP address; always follow the guidelines above. For more information on address assignment, please refer to RFC 1597, “Address Allocation for Private Internets” and RFC 1466, “Guidelines for Management of IP Address Space”. VMG1312-B10C User’s Guide...
Page 124
Chapter 7 Home Networking VMG1312-B10C User’s Guide...
ISP behind router R2. You create another static route to communicate with a separate network behind a router R3 connected to the LAN. Figure 59 Example of Routing Topology VMG1312-B10C User’s Guide...
Click the Edit icon to edit the static route on the Device. Click the Delete icon to remove a static route from the Device. A window displays asking you to confirm that you want to delete the route. VMG1312-B10C User’s Guide...
Policy forwarding allows the Device to override the default routing behavior and alter the packet forwarding based on the policy defined by the network administrator. Policy-based routing is applied to outgoing packets, prior to the normal routing. VMG1312-B10C User’s Guide...
Page 128
This is the WAN interface through which the traffic is routed. Modify/Delete Click the Edit icon to edit this policy. Click the Delete icon to remove a policy from the Device. A window displays asking you to confirm that you want to delete the policy. VMG1312-B10C User’s Guide...
Page 129
Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. 8.4 RIP Routing Information Protocol (RIP, RFC 1058 and RFC 1389) allows a device to exchange routing information with other routers. VMG1312-B10C User’s Guide...
Select Active to have the Device advertise its route information and also listen for routing updates from neighboring routers. Enabled Select the check box to activate the settings. Apply Click Apply to save your changes back to the Device. VMG1312-B10C User’s Guide...
(Section 9.5 on page 136). • The Policer Setup screen lets you add, edit or delete QoS policers (Section 9.5 on page 136). • The Monitor screen lets you view the Device's QoS-related packet statistics (Section 9.7 on page 143). VMG1312-B10C User’s Guide...
Page 132
(or queues). Your Device uses the Token Bucket algorithm to allow a certain amount of large bursts while keeping a limit at the average rate. Traffic Rate Traffic Rate Time Time (Before Traffic Shaping) (After Traffic Shaping) VMG1312-B10C User’s Guide...
Click Network Setting > QoS > General to open the screen as shown next. Use this screen to enable or disable QoS and set the upstream bandwidth. See Section 9.1 on page for more information. Figure 65 Network Settings > QoS > General VMG1312-B10C User’s Guide...
Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. 9.4 The Queue Setup Screen Click Network Setting > QoS > Queue Setup to open the screen as shown next. VMG1312-B10C User’s Guide...
Page 135
This shows the maximum transmission rate allowed for traffic on this queue. Modify/Delete Click the Edit icon to edit the queue. Click the Delete icon to delete an existing queue. Note that subsequent rules move up by one when you take this action. VMG1312-B10C User’s Guide...
Click Cancel to exit this screen without saving. 9.5 The Class Setup Screen Use this screen to add, edit or delete QoS classifiers. A classifier groups traffic into data flows according to specific criteria such as the source address, destination address, source port number, VMG1312-B10C User’s Guide...
Page 137
This is the name of the queue in which traffic of this classifier is put. Modify/Delete Click the Edit icon to edit the classifier. Click the Delete icon to delete an existing classifier. Note that subsequent rules move up by one when you take this action. VMG1312-B10C User’s Guide...
Page 138
Chapter 9 Quality of Service (QoS) 9.5.1 Add/Edit QoS Class Click Add new Classifier in the Class Setup screen or the Edit icon next to a classifier to open the following screen. Figure 69 Class Setup: Add/Edit VMG1312-B10C User’s Guide...
Page 139
For example, if you set the MAC address to 00:13:49:00:00:00 and the mask to ff:ff:ff:00:00:00, a packet with a MAC address of 00:13:49:12:34:56 matches this criteria. Exclude Select this option to exclude the packets that match the specified criteria from this classifier. Others VMG1312-B10C User’s Guide...
Page 140
If you select Unchange, the Device keep the VLAN ID in the packets. Forward to Select a WAN interface through which traffic of this class will be forwarded out. If you select Interface Unchange, the Device forward traffic of this class according to the default routing table. VMG1312-B10C User’s Guide...
This shows the how the policer has the Device treat different types of traffic belonging to the policer’s member QoS classes. Modify/Delete Click the Edit icon to edit the policer. Click the Delete icon to delete an existing policer. Note that subsequent rules move up by one when you take this action. VMG1312-B10C User’s Guide...
Page 142
Burst Size peak burst size (two rate three color) or excess burst size (single rate three color) if it is also configured. This is the maximum size of the (first) token bucket in a traffic metering algorithm. VMG1312-B10C User’s Guide...
Table 50 Network Setting > QoS > Monitor LABEL DESCRIPTION Refresh Interval Enter how often you want the Device to update this screen. Select No Refresh to stop refreshing statistics. Interface Monitor This is the index number of the entry. VMG1312-B10C User’s Guide...
Page 144
This is for “spare bandwidth”. Level 1 This is typically used for non-critical “background” traffic such as bulk transfers that are allowed but that should not affect other applications and users. Level 0 Typically used for best-effort traffic. VMG1312-B10C User’s Guide...
Page 145
Automatic Priority Queue Assignment If you enable QoS on the Device, the Device can automatically base on the IEEE 802.1p priority level, IP precedence and/or packet length to assign priority to traffic which does not match a class. VMG1312-B10C User’s Guide...
Page 146
• A packet can be transmitted if the number of tokens in the bucket is equal to or greater than the size of the packet (in bytes). • After a packet is transmitted, a number of tokens corresponding to the packet size is removed from the bucket. VMG1312-B10C User’s Guide...
Page 147
(CIR) and the Peak Information Rate (PIR). The CIR specifies the average rate at which packets are admitted to the network. The PIR is greater than or equal to the CIR. CIR and PIR values are based VMG1312-B10C User’s Guide...
Page 148
• If the PBS bucket has enough tokens, the Device checks the CBS bucket. The packet is marked green and can be transmitted if the number of tokens in the CBS bucket is equal to or greater than the size of the packet (in bytes). Otherwise, the packet is marked yellow. VMG1312-B10C User’s Guide...
WAN side. In the simplest form, NAT changes the source IP address in a packet received from a subscriber (the inside local address) to another (the inside global address) before forwarding the packet to the VMG1312-B10C User’s Guide...
Let's say you want to assign ports 21-25 to one FTP, Telnet and SMTP server (A in the example), port 80 to another (B in the example) and assign a default server IP address of 192.168.1.35 to a VMG1312-B10C User’s Guide...
Page 151
This is the first external port number that identifies a service. End Port This is the last external port number that identifies a service. Translation This is the first internal port number that identifies a service. Start Port VMG1312-B10C User’s Guide...
Page 152
Enter a name to identify this rule using keyboard characters (A-Z, a-z, 1-2 and so on). WAN Interface Select the WAN interface through which the service is forwarded. You must have already configured a WAN connection with NAT enabled. VMG1312-B10C User’s Guide...
This screen provides a summary of all NAT applications and their configuration. In addition, this screen allows you to create new applications and/or remove existing ones. To access this screen, click Network Setting > NAT > Applications. The following screen appears. Figure 76 Network Setting > NAT > Applications VMG1312-B10C User’s Guide...
View Rule Click this to display the configuration of the service that you have chosen in Application Fowarded. Click OK to save your changes. Cancel Click Cancel to exit this screen without saving. VMG1312-B10C User’s Guide...
Only Jane can connect to the Real Audio server until the connection is closed or times out. The Device times out in three minutes with UDP (User Datagram Protocol) or two hours with TCP/IP (Transfer Control Protocol/Internet Protocol). VMG1312-B10C User’s Guide...
Page 156
This is the last port number that identifies a service. Open Proto. This is the open transport layer protocol. Modify/Delete Click the Edit icon to edit this rule. Click the Delete icon to delete an existing rule. VMG1312-B10C User’s Guide...
Page 157
Type a port number or the ending port number in a range of port numbers. Open Protocol Select the transport layer protocol from TCP, UDP, or TCP/UDP. Click OK to save your changes. Cancel Click Cancel to exit this screen without saving. VMG1312-B10C User’s Guide...
Device is behind a SIP ALG. Use this screen to enable and disable the NAT and SIP (VoIP) ALG in the Device. To access this screen, click Network Setting > NAT > ALG. Figure 82 Network Setting > NAT > ALG VMG1312-B10C User’s Guide...
IP address from your ISP. You can only do this for the Many-to-One mapping type. Global End IP This is the ending Inside Global IP Address (IGA). This field is blank for One-to-One and Many-to-One mapping types. VMG1312-B10C User’s Guide...
Page 160
SUA (i.e., PAT, port address translation), the Device's Single User Account feature that previous routers supported only. Many-to-Many: This mode maps multiple local IP addresses to shared global IP addresses. Local Start IP Enter the starting Inside Local IP Address (ILA). VMG1312-B10C User’s Guide...
IP address of a host when the packet is in the local network, while the global address refers to the IP address of the host when the same packet is traveling in the WAN side. VMG1312-B10C User’s Guide...
Many-to-Many Overload mapping), NAT offers the additional benefit of firewall protection. With no servers defined, your Device filters out all incoming inquiries, thus preventing intruders from probing your network. For more information on IP address translation, refer to RFC 1631, The IP Network Address Translator (NAT). VMG1312-B10C User’s Guide...
Figure 85 How NAT Works NAT Table Inside Local Inside Global IP Address IP Address 192.168.1.10 IGA 1 192.168.1.13 192.168.1.11 IGA 2 192.168.1.12 IGA 3 192.168.1.13 IGA 4 192.168.1.12 192.168.1.10 IGA1 Inside Local Inside Global Address (ILA) Address (IGA) 192.168.1.11 192.168.1.10 VMG1312-B10C User’s Guide...
SMTP (Simple Mail Transfer Protocol) DNS (Domain Name System) Finger HTTP (Hyper Text Transfer protocol or WWW, Web) POP3 (Post Office Protocol) NNTP (Network News Transport Protocol) SNMP (Simple Network Management Protocol) SNMP trap PPTP (Point-to-Point Tunneling Protocol) 1723 VMG1312-B10C User’s Guide...
Page 165
(C in the example). You assign the LAN IP addresses and the ISP assigns the WAN IP address. The NAT network appears as a single host on the Internet. Figure 87 Multiple Servers Behind NAT Example A=192.168.1.33 192.168.1.1 B=192.168.1.34 IP address assigned by ISP C=192.168.1.35 D=192.168.1.36 VMG1312-B10C User’s Guide...
• Use the DNS Entry screen to view, configure, or remove DNS routes (Section 11.2 on page 168). • Use the Dynamic DNS screen to enable DDNS and configure the DDNS settings on the Device (Section 11.3 on page 169). VMG1312-B10C User’s Guide...
This indicates the host name or domain name. IP Address This indicates the IP address assigned to this computer. Modify/Delete Click the Edit icon to edit the rule. Click the Delete icon to delete an existing rule. VMG1312-B10C User’s Guide...
Click Cancel to exit this screen without saving. 11.3 The Dynamic DNS Screen Use this screen to change your Device’s DDNS. Click Network Setting > DNS > Dynamic DNS. The screen appears as shown. Figure 90 Network Setting > DNS > Dynamic DNS VMG1312-B10C User’s Guide...
Page 170
If you select TZO in the Service Provider field, enter the password you used to register for this service. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG1312-B10C User’s Guide...
If you set the Device to assign IP addresses based on the client’s DHCP Vendor ID option information, you must enable DHCP server and configure LAN TCP/IP settings for both the default and user-defined groups. See Chapter 7 on page for more information. VMG1312-B10C User’s Guide...
Click this button to create a new group. 12.2.1 Interface Group Configuration Click the Add New Interface Group button in the Interface Group screen to open the following screen. Use this screen to create a new interface group. VMG1312-B10C User’s Guide...
Page 173
Click Add to identify LAN hosts to add to the interface group by criteria such as the type of Add Clients the hardware or firmware. See Section 12.2.2 on page 174 for more information. With the following DHCP Vendor IDs This shows the index number of the rule. VMG1312-B10C User’s Guide...
Select this option to be able to use wildcards in the Vendor Class Identifier configured for wildcard on DHCP option 60. DHCP option 60 option DHCP Option Select this and enter the device identity of the matched traffic. VMG1312-B10C User’s Guide...
Page 175
Enter the model name of the device. Name Serial Enter the serial number of the device. Number Apply Click Apply to save your changes back to the Device. Cancel Click Cancel to exit this screen without saving. VMG1312-B10C User’s Guide...
Page 176
Chapter 12 Interface Group VMG1312-B10C User’s Guide...
Device supports File Allocation Table (FAT) and FAT32. Common Internet File System The Device uses Common Internet File System (CIFS) protocol for its file sharing functions. CIFS compatible computers can access the USB file storage devices connected to the Device. CIFS VMG1312-B10C User’s Guide...
• Microsoft Windows 95, Windows 98 SE (Second Edition), Windows Me, Windows NT 4.0, Windows 2000, Windows XP or Macintosh OS X. 13.2 The File Sharing Screen You can share files on a USB memory stick or hard drive connected to your Device with users on your network. VMG1312-B10C User’s Guide...
Page 179
Note: If your USB device cannot be detected by the Device, see the troubleshooting for suggestions. Use this screen to set up file sharing using the Device. To access this screen, click Network Setting > USB Service > File Sharing. Figure 96 Network Setting > USB Service > File Sharing VMG1312-B10C User’s Guide...
To change your Device’s media server settings, click Network Setting > USB Service > Media Server. The screen appears as shown. Figure 97 Network Setting > USB Service > Media Server VMG1312-B10C User’s Guide...
Note: Your printer’s installation instructions may ask that you connect the printer to your computer. Connect your printer to the Device instead. Use this screen to enable or disable sharing of a USB printer via your Device. VMG1312-B10C User’s Guide...
Page 182
Make and Enter the manufacturer and model number of the printer. model Printer Name This displays the system name for the printer. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG1312-B10C User’s Guide...
• Use the Access Control screen to view and configure incoming/outgoing filtering rules (Section 14.4 on page 188). • Use the DoS screen to activate protection against Denial of Service (DoS) attacks (.Section 14.5 on page 190). VMG1312-B10C User’s Guide...
Page 184
Stateful Packet Inspection (SPI) tracks each connection crossing the firewall and makes sure it is valid. Filtering decisions are based not only on rules but also context. For example, traffic from the WAN may only be allowed to cross the firewall in response to a request from the LAN. VMG1312-B10C User’s Guide...
Click Cancel to restore your previously saved settings. 14.3 The Service Screen You can configure customized services and port numbers in the Service screen. For a comprehensive list of port numbers and services, visit the IANA (Internet Assigned Number Authority) website. VMG1312-B10C User’s Guide...
Page 186
Other and the protocol number displays if the service uses another IP protocol. Modify/Delete Click the Edit icon to edit the entry. Click the Delete icon to remove this entry. VMG1312-B10C User’s Guide...
Page 187
For TCP, UDP, ICMP, or TCP/UDP protocol rules this shows the port number or range that Number defines the custom service. For other IP protocol rules this shows the protocol number. Modify/Delete Click the Delete icon to remove the rule. VMG1312-B10C User’s Guide...
Click the Delete icon to delete an existing rule. Note that subsequent rules move up by one when you take this action. Click the Move To icon to change the order of the rule. Enter the number in the # field. VMG1312-B10C User’s Guide...
Page 189
Address Select Select the destination device to which the ACL rule applies. If you select Specific IP Destination Address, enter the destiniation IP address in the field below. Device Destination IP Enter the destination IP address. Address VMG1312-B10C User’s Guide...
Internet access becomes unavailable. Use the DoS screen to activate protection against DoS attacks. Click Security > Firewall > DoS to display the following screen. Figure 106 Security > Firewall > DoS VMG1312-B10C User’s Guide...
Page 191
DoS Protection Select Enable to enable protection against DoS attacks. Blocking Deny Ping Select Enable to block ping request packets. Response Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG1312-B10C User’s Guide...
15.2 The MAC Filter Screen Use this screen to allow wireless and LAN clients access to the Device. Click Security > MAC Filter. The screen appears as shown. Figure 107 Security > MAC Filter VMG1312-B10C User’s Guide...
Page 194
Device in these address fields. Enter the MAC addresses in a valid MAC address format, that is, six hexadecimal character pairs, for example, 12:34:56:78:9a:bc. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG1312-B10C User’s Guide...
This indicates whether the rule is active or not. A yellow bulb signifies that this rule is active. A gray bulb signifies that this rule is not active. PCP Name This shows the name of the rule. VMG1312-B10C User’s Guide...
Page 196
Use this screen to configure a restricted access schedule and/or URL filtering settings to block the users on your network from accessing certain web sites. Figure 109 Parental Control Rule: Add/Edit VMG1312-B10C User’s Guide...
Page 197
Click Add to show a screen to enter the URL of web site or URL keyword to which the Device URL Keyword blocks access. Click Delete to remove it. Apply Click this button to save your settings back to the Device. Cancel Click Cancel to restore your previously saved settings. VMG1312-B10C User’s Guide...
Page 198
Chapter 16 Parental Control VMG1312-B10C User’s Guide...
This shows the description of this rule. Modify/Delete Click the Edit icon to edit the schedule. Click the Delete icon to delete a scheduler rule. Note: You cannot delete a scheduler rule once it is applied to a certain feature. VMG1312-B10C User’s Guide...
Page 200
Enter the time period of each day, in 24-hour format, during which the rule will be enforced. Range Description Enter a description for this scheduler rule. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG1312-B10C User’s Guide...
You can use the Device to generate certification requests that contain identifying information and public keys and then send the certification requests to a certification authority. VMG1312-B10C User’s Guide...
For a certification request, click Load Signed to import the signed certificate. Click the Remove icon to delete the certificate (or certification request). You cannot delete a certificate that one or more features is configured to use. VMG1312-B10C User’s Guide...
After you click Apply, the following screen displays to notify you that you need to get the certificate request signed by a Certificate Authority. If you already have, click Load_Signed to import the signed certificate into the Device. Otherwise click Back to return to the Local Certificates screen. VMG1312-B10C User’s Guide...
18.3.2 Load Signed Certificate After you create a certificate request and have it signed by a Certificate Authority, in the Local Certificates screen click the certificate request’s Load Signed icon to import the signed certificate into the Device. VMG1312-B10C User’s Guide...
Click Security > Certificates > Trusted CA to open the following screen. This screen displays a summary list of certificates of the certification authorities that you have set the Device to accept as trusted. The Device accepts any valid certificate signed by a certification authority on this list as VMG1312-B10C User’s Guide...
18.4.1 View Trusted CA Certificate Click the View icon in the Trusted CA screen to open the following screen. Use this screen to view in-depth information about the certification authority’s certificate. Figure 117 Trusted CA: View VMG1312-B10C User’s Guide...
CA will be displayed in the Network Setting > Broadband > 802.1x: Authentication Edit screen. Certificate Copy and paste the certificate into the text box to store it on the Device. Click OK to save your changes. Cancel Click Cancel to exit this screen without saving. VMG1312-B10C User’s Guide...
Use this screen to view and manage your VPN tunnel policies. The following figure helps explain the main fields in the web configurator. Figure 119 IPSec Fields Summary Remote Network Local Network VPN Tunnel Click Security > VPN to open this screen as shown next. Figure 120 IPSec VPN VMG1312-B10C User’s Guide...
Page 210
Click the Delete icon to delete an existing rule. 19.2.2 IPSec VPN: Add Use these settings to add or edit VPN policies. Click Security > VPN > Add new connection to open this screen as shown next. VMG1312-B10C User’s Guide...
Page 212
A pre-shared key identifies a communicating party during a phase 1 IKE negotiation. It is called "pre-shared" because you have to share it with another party before you can communicate with them over a secure connection. Select Certificate to use a certificate for authentication. VMG1312-B10C User’s Guide...
Page 213
Define the length of time before an IPSec SA automatically renegotiates in this field. A short SA Life Time increases security by forcing the two VPN gateways to update the encryption and authentication keys. However, every time the VPN tunnel renegotiates, all users accessing remote resources are temporarily disconnected. VMG1312-B10C User’s Guide...
Page 214
AES - type a unique key 32, 48 or 64 hexadecimal characters long Authentication Select which hash algorithm to use to authenticate packet data. Choices are MD5, Algorithm SHA1. SHA is generally considered stronger than MD5, but it is also slower. VMG1312-B10C User’s Guide...
The overall IPSec architecture is shown as follows. Figure 122 IPSec Architecture IPSec Algorithms The ESP (Encapsulating Security Payload) Protocol (RFC 2406) and AH (Authentication Header) protocol (RFC 2402) describe the packet formats and the default standards for packet structure (including implementation algorithms). VMG1312-B10C User’s Guide...
Page 216
Tunnel mode communications have two sets of IP headers: • Outside header: The outside IP header contains the destination IP address of the VPN gateway. VMG1312-B10C User’s Guide...
The Device automatically renegotiates the IPSec SA if there is traffic when the IPSec SA lifetime period expires. If an IPSec SA times out, then the IPSec router must renegotiate the SA the next time someone attempts to send traffic. VMG1312-B10C User’s Guide...
"original header plus original payload," which is unchanged by a NAT device. Transport mode ESP with authentication is not compatible with NAT. Table 93 VPN and NAT SECURITY PROTOCOL MODE Transport Tunnel Transport Tunnel VMG1312-B10C User’s Guide...
Page 219
A pre-shared key identifies a communicating party during a phase 1 IKE negotiation (see Section 19.3.3 on page 217 for more on IKE phases). It is called “pre-shared” because you have to share it with another party before you can communicate with them over a secure connection. VMG1312-B10C User’s Guide...
Page 220
Diffie-Hellman is used within IKE SA setup to establish session keys. Upon completion of the Diffie-Hellman exchange, the two peers have a shared secret, but the IKE SA is not authenticated. For authentication, use pre-shared keys. VMG1312-B10C User’s Guide...
Page 221
CODE SEVERITY Emergency: The system is unusable. Alert: Action must be taken immediately. Critical: The system condition is critical. Error: There is an error condition on the system. Warning: There is a warning condition on the system. VMG1312-B10C User’s Guide...
Level This field displays the severity level of the logs that the device is to send to this syslog server. Messages This field states the reason for the log. VMG1312-B10C User’s Guide...
Level This field displays the severity level of the logs that the device is to send to this syslog server. Messages This field states the reason for the log. VMG1312-B10C User’s Guide...
21.2 The WAN Status Screen Click System Monitor > Traffic Status to open the WAN screen. The figure in this screen shows the number of bytes received and sent on the Device. Figure 128 System Monitor > Traffic Status > WAN VMG1312-B10C User’s Guide...
Page 226
Packets Received Data This indicates the number of received packets on this interface. Error This indicates the number of frames with errors received on this interface. Drop This indicates the number of received packets dropped on this interface. VMG1312-B10C User’s Guide...
Received (Packets) Data This indicates the number of received packets on this interface. Error This indicates the number of frames with errors received on this interface. Drop This indicates the number of received packets dropped on this interface. VMG1312-B10C User’s Guide...
IP Address This displays the IP address of the connected host. MAC Address This displays the MAC address of the connected host. No. of Open This displays the number of open NAT sessions for the connected host. Session VMG1312-B10C User’s Guide...
The following table describes the labels in this screen. Table 101 System Monitor > ARP Table LABEL DESCRIPTION This is the ARP table entry number. IP Address This is the learned IP address of a device connected to a port. VMG1312-B10C User’s Guide...
Page 230
This is the MAC address of the device with the listed IP address. Device This is the type of interface used by the device. You can click on the device type to go to its configuration screen. VMG1312-B10C User’s Guide...
M-Modified (redirect): The route is modified from a routing daemon or redirect. Metric The metric represents the "cost of transmission". A router determines the best route for transmission by choosing a path with the lowest "cost". The smaller the number, the lower the "cost". VMG1312-B10C User’s Guide...
Page 232
Interface This indicates the name of the interface through which the route is forwarded. br0 indicates the LAN interface. ptm0 indicates the WAN interface using IPoE or in bridge mode. ppp0 indicates the WAN interface using PPPoE. VMG1312-B10C User’s Guide...
EXCLUDE means that the IP addresses in the Source List are not allowed to receive the multicast group’s traffic but other IP addresses can. Source List This is the list of IP addresses that are allowed or not allowed to receive the multicast group’s traffic depending on the filter mode. VMG1312-B10C User’s Guide...
Page 234
Chapter 24 IGMP Status VMG1312-B10C User’s Guide...
HAPTER xDSL Statistics 25.1 The xDSL Statistics Screen Use this screen to view detailed DSL statistics. Click System Monitor > xDSL Statistics to open the following screen. Figure 134 System Monitor > xDSL Statistics VMG1312-B10C User’s Guide...
Page 236
Attainable Net These are the highest theoretically possible transfer rates at which the port could send and Data Rate receive payload data without transport layer protocol headers and traffic. xDSL Counters VMG1312-B10C User’s Guide...
Page 237
30% or more errored blocks or at least one defect. This is a subset of ES. This is the number of UnAvailable Seconds. This is the number of Loss Of Signal seconds. This is the number of Loss Of Frame seconds. This is the number of Loss of Margin seconds. VMG1312-B10C User’s Guide...
HSDPA - High-Speed Downlink Packet Access, 3.5G HSUPA - High-Speed Uplink Packet Access, 3.75G HSPA - HSDPA+HSUPA, 3.75G Service This field displays the name of the service provider. Provider Signal Strength This field displays the strength of the signal in dBm. VMG1312-B10C User’s Guide...
Page 240
This field displays the firmware version of the 3G card. Version SIM Card IMSI The International Mobile Subscriber Identity or IMSI is a unique identification number associated with all cellular networks. This number is provisioned in the SIM card. VMG1312-B10C User’s Guide...
(*) for each character you type. After you change the password, use the new password to access the Device. Retype to Type the new password again for confirmation. confirm Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. VMG1312-B10C User’s Guide...
Page 242
Chapter 27 User Account VMG1312-B10C User’s Guide...
28.2 The Remote MGMT Screen Use this screen to configure through which interface(s) users can use which service(s) to manage the Device. Click Maintenance > Remote MGMT to open the following screen. Figure 137 Maintenance > Remote MGMT VMG1312-B10C User’s Guide...
Page 244
Select a certificate the HTTPS server (the Device) uses to authenticate itself to the HTTPS Certificate client. You must have certificates already configured in the Certificates screen. Apply Click Apply to save your changes back to the Device. Cancel Click Cancel to restore your previously saved settings. VMG1312-B10C User’s Guide...
ACS and specify the ACS IP address or domain name and username and password. Click Maintenance > TR-069 Client to open the following screen. Use this screen to configure your Device to be managed by an ACS. Figure 138 Maintenance > TR-069 Client VMG1312-B10C User’s Guide...
Page 246
You can choose a local certificate used by TR-069 client. The local certificate should be used by TR-069 imported in the Security > Certificates > Local Certificates screen. client Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG1312-B10C User’s Guide...
The following table describes the fields in this screen. Table 109 Maintenance > TR-064 LABEL DESCRIPTION State Select Enable to activate management via TR-064 on the LAN. Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG1312-B10C User’s Guide...
31.2 The Time Screen To change your Device’s time and date, click Maintenance > Time. The screen appears as shown. Use this screen to configure the Device’s time based on your local time zone. Figure 140 Maintenance > Time Setting VMG1312-B10C User’s Guide...
Page 250
October. The time you select in the o'clock field depends on your time zone. In Germany for instance, you would select 2 in the Hour field because Germany's time zone is one hour ahead of GMT or UTC (GMT+1). VMG1312-B10C User’s Guide...
Page 251
Chapter 31 Time Settings Table 110 Maintenance > Time Setting (continued) LABEL DESCRIPTION Apply Click Apply to save your changes. Cancel Click Cancel to exit this screen without saving. VMG1312-B10C User’s Guide...
Page 252
Chapter 31 Time Settings VMG1312-B10C User’s Guide...
This field displays the password of the sender’s mail account. Email Address This field displays the e-mail address that you want to be in the from/sender line of the e- mail that the Device sends. Delete Click this button to delete the selected entries. VMG1312-B10C User’s Guide...
If you activate SSL/TLS authentication, the e-mail address must be able to be authenticated by the mail server as well. Apply Click this button to save your changes and return to the previous screen. Cancel Click this button to begin configuring this screen afresh. VMG1312-B10C User’s Guide...
HAPTER Logs Setting 33.1 Overview You can configure where the Device sends logs and which logs and/or immediate alerts the Device records in the Logs Setting screen. VMG1312-B10C User’s Guide...
If you select Remote, the log(s) will be sent to a remote syslog server. If you select Local File, the log(s) will be saved in a local file. If you want to send the log(s) to a remote syslog server and save it in a local file, select Local File and Remote. VMG1312-B10C User’s Guide...
Page 257
An "End of Log" message displays for each mail in which a complete log has been sent. The following is an example of a log sent by e-mail. • You may edit the subject title. • The date format here is Day-Month-Year. • The date format here is Month-Day-Year. The time format is Hour-Minute-Second. VMG1312-B10C User’s Guide...
Page 258
|<1,02> 127|Apr 7 00 |From:192.168.1.131 To:192.168.1.255 |match |forward | 10:05:17 |UDP src port:00520 dest port:00520 |<1,02> 128|Apr 7 00 |From:192.168.1.1 To:192.168.1.255 |match |forward | 10:05:30 |UDP src port:00520 dest port:00520 |<1,02> End of Firewall Log VMG1312-B10C User’s Guide...
Click this to find the .bin file you want to upload. Remember that you must decompress compressed (.zip) files before you can upload them. Upload Click this to begin the upload process. This process may take up to two minutes. VMG1312-B10C User’s Guide...
Page 260
After two minutes, log in again and check your new firmware version in the Status screen. If the upload was not successful, the following screen will appear. Click OK to go back to the Firmware Upgrade screen. Figure 148 Error Message VMG1312-B10C User’s Guide...
The backup configuration file will be useful in case you need to return to your previous settings. Click Backup to save the Device’s current configuration to your computer. VMG1312-B10C User’s Guide...
Page 262
IP address (192.168.1.1). If the upload was not successful, the following screen will appear. Click OK to go back to the Configuration screen. Figure 151 Configuration Upload Error VMG1312-B10C User’s Guide...
System restart allows you to reboot the Device remotely without turning the power off. You may need to do this if the Device hangs, for example. Click Maintenance > Reboot. Click Reboot to have the Device reboot. This does not affect the Device's configuration. Figure 154 Maintenance > Reboot VMG1312-B10C User’s Guide...
Page 265
If an MEP port does not respond to the source MEP, this may indicate a fault. Administrators can take further action to check and resume services from the fault according to the line connectivity status report. VMG1312-B10C User’s Guide...
Page 266
Click this button to perform the traceroute function. This determines the path a packet takes to the specified computer. Nslookup Click this button to perform a DNS lookup on the IP address of a computer you enter. VMG1312-B10C User’s Guide...
Page 267
Click this button to have the selected MEP send the LBM (Loop Back Message) to a specified remote end point. Send Linktrace Click this button to have the selected MEP send the LTMs (Link Trace Messages) to a specified remote end point. VMG1312-B10C User’s Guide...
Page 268
Segment loopback tests allow you to verify integrity of a PVC to the nearest neighboring ATM device. End-to-end loopback tests allow you to verify integrity of an end-to-end PVC. Note: The DSLAM to which the Device is connected must also support ATM F4 and/or F5 to use this test. VMG1312-B10C User’s Guide...
Page 269
Press this to perform an OAM F4 segment loopback test. F4 end-end Press this to perform an OAM F4 end-to-end loopback test. F5 segment Press this to perform an OAM F5 segment loopback test. F5 end-end Press this to perform an OAM F5 end-to-end loopback test. VMG1312-B10C User’s Guide...
Make sure you understand the normal behavior of the LED. See Section 1.5 on page Check the hardware connections. Inspect your cables for damage. Contact the vendor to replace any damaged cables. Turn the Device off and on. VMG1312-B10C User’s Guide...
Make sure your Internet browser does not block pop-up windows and has JavaScripts and Java enabled. If it is possible to log in from another interface, check the service control settings for HTTP and HTTPS (Maintenance > Remote MGMT). VMG1312-B10C User’s Guide...
Page 273
I cannot use FTP to upload / download the configuration file. / I cannot use FTP to upload new firmware. See the troubleshooting suggestions for I cannot see or access the Login screen in the web configurator. Ignore the suggestions about your browser. VMG1312-B10C User’s Guide...
I cannot access the Internet anymore. I had access to the Internet (with the Device), but my Internet connection is not available anymore. Your session with the Device may have expired. Try logging into the Device again. VMG1312-B10C User’s Guide...
Internet. What is a Server Set ID (SSID)? An SSID is a name that uniquely identifies a wireless network. The AP and all the clients within a wireless network must use the same SSID. VMG1312-B10C User’s Guide...
The Local Area Connection icon for UPnP disappears in the screen. Restart your computer. I cannot open special applications such as white board, file transfer and video when I use the MSN messenger. Wait more than three minutes. Restart the applications. VMG1312-B10C User’s Guide...
• Brief description of the problem and the steps you took to solve it. Corporate Headquarters (Worldwide) Taiwan • ZyXEL Communications Corporation • http://www.zyxel.com Asia China • ZyXEL Communications (Shanghai) Corp. ZyXEL Communications (Beijing) Corp. ZyXEL Communications (Tianjin) Corp. • http://www.zyxel.cn India • ZyXEL Technology India Pvt Ltd • http://www.zyxel.in Kazakhstan •...
Page 279
Appendix A Customer Support Belgium • ZyXEL Communications B.V. • http://www.zyxel.com/be/nl/ Bulgaria • ZyXEL България • http://www.zyxel.com/bg/bg/ Czech • ZyXEL Communications Czech s.r.o • http://www.zyxel.cz Denmark • ZyXEL Communications A/S • http://www.zyxel.dk Estonia • ZyXEL Estonia • http://www.zyxel.com/ee/et/ Finland • ZyXEL Communications •...
Page 280
• ZyXEL Communications Poland • http://www.zyxel.pl Romania • ZyXEL Romania • http://www.zyxel.com/ro/ro Russia • ZyXEL Russia • http://www.zyxel.ru Slovakia • ZyXEL Communications Czech s.r.o. organizacna zlozka • http://www.zyxel.sk Spain • ZyXEL Spain • http://www.zyxel.es Sweden • ZyXEL Communications • http://www.zyxel.se Switzerland •...
Page 281
• http://www.zyxel.com/ec/es/ Ecuador • ZyXEL Communication Corporation • http://www.zyxel.com/ec/es/ Middle East Egypt • ZyXEL Communication Corporation • http://www.zyxel.com/homepage.shtml Middle East • ZyXEL Communication Corporation • http://www.zyxel.com/homepage.shtml North America • ZyXEL Communications, Inc. - North America Headquarters • http://www.us.zyxel.com/ VMG1312-B10C User’s Guide...
Page 282
Appendix A Customer Support Oceania Australia • ZyXEL Communications Corporation • http://www.zyxel.com/au/en/ Africa South Africa • Nology (Pty) Ltd. • http://www.zyxel.co.za VMG1312-B10C User’s Guide...
Your use of the Device is subject to the terms and conditions of any related service providers. Trademarks ZyNOS (ZyXEL Network Operating System) is a registered trademark of ZyXEL Communications, Inc. Other trademarks mentioned in this publication are used for identification purposes only and may be properties of their respective owners.
[Maltese] Hawnhekk, ZyXEL, jiddikjara li dan tagħmir jikkonforma mal-ħtiġijiet essenzjali u ma provvedimenti oħrajn relevanti li hemm fid-Dirrettiva 1999/5/EC. [Hungarian] Alulírott, ZyXEL nyilatkozom, hogy a berendezés megfelel a vonatkozó alapvetõ követelményeknek és az 1999/5/EK irányelv egyéb elõírásainak. VMG1312-B10C User’s Guide...
Page 285
This product meets the National Radio Interface and the requirements specified in the National Frequency Allocation Table for Italy. Unless this wireless LAN product is operating within the boundaries of the owner's property, its use requires a “general authorization.” Please check http://www.sviluppoeconomico.gov.it/ for more details. VMG1312-B10C User’s Guide...
Avoid using a telephone (other than a cordless type) during an electrical storm. There may be a remote risk of electric shock from lightning. • Do not use the telephone to report a gas leak in the vicinity of the leak. VMG1312-B10C User’s Guide...
Page 287
Your product is marked with this symbol, which is known as the WEEE mark. WEEE stands for Waste Electronics and Electrical Equipment. It means that used electrical and electronic products should not be mixed with general waste. Used electrical and electronic equipment should be treated separately. VMG1312-B10C User’s Guide...
Page 288
Appendix B Legal Information VMG1312-B10C User’s Guide...
Page 289
Basic Service Set, see BSS reset blinking LEDs restoring Broadband static route 57, 127, 169 broadcast Connectivity Check Messages, see CCMs contact information example copyright CoS technologies creating certificates CTS threshold 84, 88 VMG1312-B10C User’s Guide...
Page 290
84, 88 150, 164 DS field DS, dee differentiated services DSCP dynamic DNS wildcard General wireless LAN screen Dynamic Host Configuration Protocol, see DHCP Guide DYNDNS wildcard Quick Start ECHO HTTP e-mail log example Encapsulation PPP over Ethernet VMG1312-B10C User’s Guide...
Page 291
41, 63 Maintenance End Point, see MEP prefix delegation managing the device prefix length 41, 63 good habits Maximum Burst Size (MBS) iTunes server MBSSID media server activation iTunes server and USB printer MTU (Multi-Tenant Unit) VMG1312-B10C User’s Guide...
Page 292
WPS Network Address Translation, see NAT Network Map network map NNTP 131, 145 marking setup tagging other documentation versus CoS outside header Quality of Service, see QoS Quick Start Guide passwords 23, 24 RADIUS server VMG1312-B10C User’s Guide...
Page 293
Single Rate Three Color Marker, see srTCM data fragment 84, 88 SIP ALG RTS/CTS 84, 88 activation time SMTP TPID SNMP TR-064 SNMP trap TR-069 ACS setup srTCM authentication SSID trademarks activation traffic shaping MBSSID transport mode static route 125, 129, 253 trTCM VMG1312-B10C User’s Guide...
Page 294
VLAN tag push button 21, 93 wizard setup Internet WPA-PSK status 93, 95 Wide Area Network, see WAN example warranty limitations note example 82, 92 push button compatibility 21, 93 example web configurator login passwords 23, 24 VMG1312-B10C User’s Guide...
Need help?
Do you have a question about the VMG1312-B10C and is the answer not in the manual?
Questions and answers