ZyXEL Communications VMG Series User Manual
  1. Manuals
  2. Brands
  3. ZyXEL Communications Manuals
  4. Network Router
  5. VMG Series
  6. User manual

ZyXEL Communications VMG Series User Manual

Hide thumbs Also See for VMG Series:
1
2
3
Table Of Contents
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
Table of Contents

Advertisement

Quick Links

Download this manual
User's Guide
VMG/EMG/AM/DM/GM Series
Default Login Details
Version 5.13-5.50 Ed 3, 8/2023
LAN IP Address
http://192.168.1.1
Login
admin
Password
See the device label
Copyright © 2023 Zyxel and/or its affiliates. All Rights Reserved.

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the VMG Series and is the answer not in the manual?

Questions and answers

Related Manuals for ZyXEL Communications VMG Series

Summary of Contents for ZyXEL Communications VMG Series

  • Page 1 User’s Guide VMG/EMG/AM/DM/GM Series Default Login Details Version 5.13-5.50 Ed 3, 8/2023 LAN IP Address http://192.168.1.1 Login admin Password See the device label Copyright © 2023 Zyxel and/or its affiliates. All Rights Reserved.
  • Page 2 IMPORTANT! READ CAREFULLY BEFORE USE. KEEP THIS GUIDE FOR FUTURE REFERENCE. This is a User’s Guide for a series of products. Not all products support all firmware features. Screenshots and graphics in this book may differ slightly from your product due to differences in product features or web configurator brand style.

  • Page 3: Document Conventions

    Document Conventions Document Conventions Warnings and Notes These are how warnings and notes are shown in this guide. Warnings tell you about things that could harm you or your Zyxel Device. Note: Notes tell you other important information (for example, other things you may need to configure or helpful tips) or recommendations.

  • Page 4: Table Of Contents

    Contents Overview Contents Overview User’s Guide ............................18 Introducing the Zyxel Device ......................19 Hardware ............................... 29 Web Configurator ..........................56 Quick Start ............................. 68 Web Interface Tutorials ........................72 App Tutorials ............................122 Technical Reference ........................169 Connection Status ..........................170 Broadband ............................
  • Page 5 Contents Overview System ..............................430 User Account ............................431 Remote Management ........................435 SNMP ..............................438 Time Settings ............................441 Email Notification ..........................444 Log Setting ............................447 Firmware Upgrade ..........................451 Backup/Restore ..........................454 Diagnostic ............................458 Troubleshooting and Appendices ....................465 Troubleshooting ..........................

  • Page 6: Table Of Contents

    Table of Contents Table of Contents Document Conventions ........................3 Contents Overview ..........................4 Table of Contents ..........................6 Part I: User’s Guide..................18 Chapter 1 Introducing the Zyxel Device ......................19 1.1 Overview ............................19 1.2 Example Applications ........................21 1.2.1 Internet Access ........................21 1.2.2 Firewall Application ......................
  • Page 7 Table of Contents Chapter 3 Web Configurator..........................56 3.1 Overview ............................56 3.1.1 Access the Web Configurator ..................... 56 3.2 Web Configurator Layout ......................58 3.2.1 Settings Icon .......................... 58 3.2.2 Widget Icon ........................... 66 Chapter 4 Quick Start ............................68 4.1 Quick Start Overview ........................68 4.2 Quick Start Setup ..........................
  • Page 8 Table of Contents 5.6.4 Configuring a Phone ......................117 5.6.5 Making a VoIP Call ......................118 5.7 Device Maintenance ........................118 5.7.1 Upgrading the Firmware ....................118 5.7.2 Backing up the Device Configuration ................119 5.7.3 Restoring the Device Configuration ................. 120 Chapter 6 App Tutorials.............................122 6.1 App Tutorials Overview ........................
  • Page 9 Table of Contents 7.2.1 LAN ............................177 7.3 The Parental Control Screen ....................... 179 7.3.1 Create a Parental Control Profile ..................180 7.3.2 Define a Schedule ......................181 Chapter 8 Broadband............................183 8.1 Broadband Overview ........................183 8.1.1 What You Can Do in this Chapter ..................183 8.1.2 What You Need to Know ....................
  • Page 10 Table of Contents 9.11.6 MBSSID ..........................236 9.11.7 Preamble Type ........................236 9.11.8 WiFi Protected Setup (WPS) ..................... 237 Chapter 10 Home Networking ..........................243 10.1 Home Networking Overview ..................... 243 10.1.1 What You Can Do in this Chapter ................... 243 10.1.2 What You Need To Know ....................
  • Page 11 Table of Contents 12.3 Quality of Service General Settings ..................279 12.4 Queue Setup ..........................281 12.4.1 Add a QoS Queue ......................282 12.5 QoS Classification Setup ......................284 12.5.1 Add or Edit QoS Class ....................... 285 12.6 QoS Shaper Setup ........................289 12.6.1 Add or Edit a QoS Shaper ....................
  • Page 12 Table of Contents 15.1 IGMP/MLD Overview ........................321 15.1.1 What You Need To Know ....................321 15.2 The IGMP/MLD Screen ....................... 321 Chapter 16 VLAN Group............................324 16.1 VLAN Group Overview ....................... 324 16.1.1 What You Can Do in this Chapter ................... 324 16.2 VLAN Group Settings ........................
  • Page 13 Table of Contents 20.4.1 Add Customized Service ....................344 20.5 Access Control (Rules) ....................... 345 20.5.1 Add New ACL Rule ......................346 20.6 DoS ............................... 347 20.7 Firewall Technical Reference ....................348 20.7.1 Firewall Rules Overview ....................348 20.7.2 Guidelines For Security Enhancement With Your Firewall ..........349 20.7.3 Security Considerations ....................
  • Page 14 Table of Contents 25.7 Certificates Technical Reference ..................... 371 25.7.1 Verify a Certificate ......................372 Chapter 26 Voice..............................374 26.1 Voice Overview .......................... 374 26.1.1 What You Can Do in this Chapter ................... 374 26.1.2 What You Need to Know About VoIP ................374 26.2 Before You Begin ........................
  • Page 15 Table of Contents 29.1 VoIP Status Screen ........................413 Chapter 30 ARP Table ............................416 30.1 ARP Table Overview ........................416 30.1.1 How ARP Works ........................416 30.2 ARP Table ............................ 416 Chapter 31 Routing Table............................418 31.1 Routing Table Overview ......................418 31.2 Routing Table ..........................
  • Page 16 Table of Contents Chapter 38 Remote Management ........................435 38.1 Remote Management Overview ..................... 435 38.1.1 What You Can Do in this Chapter ................... 435 38.2 MGMT Services ..........................435 38.3 Trust Domain ..........................436 38.3.1 Add Trust Domain ......................437 Chapter 39 SNMP ..............................438 39.1 SNMP Overview ..........................
  • Page 17 Table of Contents 45.1 Diagnostic Overview ........................458 45.1.1 What You Can Do in this Chapter ................... 458 45.2 What You Need to Know ......................458 45.3 Diagnostic ........................... 459 45.4 802.1ag (CFM) ..........................460 45.5 802.3ah (OAM) ..........................461 45.6 OAM Ping ............................

  • Page 18: User's Guide

    User’s Guide...

  • Page 19: Introducing The Zyxel Device

    Introducing the Zyxel Device 1.1 Overview This User’s Guide contains the following Zyxel Device series: • VMG Series – VDSL WiFi router • DM Series – DSL modem with VoIP • GM Series – G.fast NTU (Network Termination Unit) • EMG Series – Gigabit Ethernet gateway •...
  • Page 20 Chapter 1 Introducing the Zyxel Device Table 1 Zyxel Device Comparison Table (continued) VMG3312- VMG3625- VMG3625- VMG8623- VMG8825- T20A T50B T50C T50B Cellular Backup Media Server File Sharing IGMP/MLD Speed Test VDSL 35b Profile Firmware 5.13 5.50 5.50 5.50 5.50 Version Table 2 Zyxel Device Comparison Table EMG3525-...

  • Page 21: Example Applications

    Note: The ADSL and VDSL lines share the same WAN (layer-2) interfaces that you configure in the Zyxel Device. Figure 1 Zyxel Device’s Internet Access Application (VMG series) G.fast (GM Series) G.fast Internet access is over the telephone line from the WAN port to a telephone jack through the DSL or Modem port on a G.fast-compatible splitter.
  • Page 22 Chapter 1 Introducing the Zyxel Device switch over a telephone line (T) using the G.fast technology. Your home devices can access the Internet by connecting to the Zyxel Device through Ethernet cables (E). Figure 2 Fiber-To-The-Building (FTTB) with G.fast (GM series) Figure 3 Fiber-To-The-Curb (FTTC) with G.fast Connect computers to the Zyxel Device’s LAN ports or wirelessly.

  • Page 23: Firewall Application

    Chapter 1 Introducing the Zyxel Device Figure 4 Zyxel Device’s Internet Access Application: Ethernet WAN Fiber (AM Series) The Zyxel Device provides shared Internet access by connecting a Small Form-Factor Pluggable (SFP) transceiver to the SFP port. In addition, you can connect computers, IPTVs, gaming consoles, and other Ethernet devices to the Ethernet ports for fiber-speed Internet access.

  • Page 24: Wifi Access

    Figure 7 WiFi Access Example 1.2.3.1 Dual-Band WiFi The EMG and VMG series support dual-band 2.4 GHz and 5 GHz WiFi. IEEE 80211a/b/g/n/ac/ax compliant clients, such as notebooks, tablets, and smartphones can wirelessly connect to the Zyxel Device to access network resources. WiFi clients can use the 2.4 GHz band for regular Internet surfing and downloading while using the 5 GHz band for time sensitive traffic like high-definition video, music, and gaming.

  • Page 25: Triple Play

    Chapter 1 Introducing the Zyxel Device Figure 8 Dual-Band WiFi Application 1.2.4 Triple Play The ISP may provide “triple play” service to the Zyxel Device. This allows you to take advantage of “triple play” services such as Voice over IP telephony, and streaming video/audio media all at the same time, with no noticeable loss in bandwidth.
  • Page 26 Chapter 1 Introducing the Zyxel Device Cellular WAN Backup Connect a supported cellular USB dongle with an active SIM card to the USB port. This adds a second WAN interface and allows the Zyxel Device to wirelessly access the Internet through a cellular network. The cellular WAN connection is a backup in case the DSL connection fails.

  • Page 27: Internet Phone Calls (Voip)

    Chapter 1 Introducing the Zyxel Device Media Server You can also use the Zyxel Device as a media server. This lets anyone on your network play video, music, and photos from a USB device (A) connected to the Zyxel Device’s USB port (without having to copy them to another computer).
  • Page 28 Chapter 1 Introducing the Zyxel Device • Change the password. Use a password that’s not easy to guess and that consists of different types of characters, such as numbers and letters. • Write down the password and put it in a safe place. •...

  • Page 29: Hardware

    H A P T E R Hardware This section describes the front and back panel of the Zyxel Device. Refer to the Quick Start Guides to see how to make the hardware connections. 2.1 LED Indicator Use the LEDs to determine if the Zyxel Device is behaving normally or if there are problems on your network.
  • Page 30 Chapter 2 Hardware Table 3 VMG3312-T20A LED Descriptions (continued) COLOR STATUS DESCRIPTION ETHERNET1~4 Green The Zyxel Device has a successful 10/100 Mbps Ethernet connection with a device on the Local Area Network (LAN). Blinking The Zyxel Device is sending or receiving data to/from the LAN at 10/100 Mbps.

  • Page 31: Vmg3625-T50B, Vmg3625-T50C And Vmg8623-T50B

    Chapter 2 Hardware 2.1.2 VMG3625-T50B, VMG3625-T50C and VMG8623-T50B Figure 15 VMG3625-T50B Figure 16 VMG3625-T50C VMG/EMG/AM/DM/GM Series User’s Guide...
  • Page 32 Chapter 2 Hardware Figure 17 VMG8623-T50B The following are the LED descriptions of your VMG3625-T50B, VMG3625-T50C and VMG8623-T50B. Table 4 VMG3625-T50B/VMG3625-T50C/VMG8623-T50B LED Descriptions COLOR STATUS DESCRIPTION Power Green The Zyxel Device is receiving power and ready for use. Blinking The Zyxel Device is self-testing. The Zyxel Device detected an error while self-testing, or there is a device malfunction.
  • Page 33 Chapter 2 Hardware Table 4 VMG3625-T50B/VMG3625-T50C/VMG8623-T50B LED Descriptions (continued) COLOR STATUS DESCRIPTION LAN1~4 Green The Zyxel Device has a successful 10/100/1000 Mbps Ethernet connection with a device on the Local Area Network (LAN). Blinking The Zyxel Device is sending or receiving data to/from the LAN at 10/100/ 1000 Mbps.

  • Page 34: Vmg8825-T50

    Chapter 2 Hardware 2.1.3 VMG8825-T50 Figure 18 VMG8825-T50 The following are the LED descriptions of your VMG8825-T50. Table 5 VMG8825-T50 LED Descriptions COLOR STATUS DESCRIPTION Power Green The Zyxel Device is receiving power and ready for use. Blinking The Zyxel Device is self-testing. The Zyxel Device detected an error while self-testing, or there is a device malfunction.
  • Page 35 Chapter 2 Hardware Table 5 VMG8825-T50 LED Descriptions (continued) COLOR STATUS DESCRIPTION Internet Green Your device has a WAN IP address (either static or assigned by a DHCP server), PPP negotiation was successfully completed (if used) and the DSL connection is up. Blinking The Zyxel Device is sending or receiving IP traffic.

  • Page 36: Emg3525-T50B And Emg3525-T50C

    Chapter 2 Hardware 2.1.4 EMG3525-T50B and EMG3525-T50C Figure 19 EMG3525-T50B Figure 20 EMG3525-T50C VMG/EMG/AM/DM/GM Series User’s Guide...
  • Page 37 Chapter 2 Hardware The following are the LED descriptions of your EMG3525-T50B and EMG3525-T50C. Table 6 EMG3525-T50B/EMG3525-T50C LED Descriptions COLOR STATUS DESCRIPTION Power Green The Zyxel Device is receiving power and ready for use. Blinking The Zyxel Device is self-testing. The Zyxel Device detected an error while self-testing, or there is a device malfunction.

  • Page 38: Emg5523-T50B

    Chapter 2 Hardware 2.1.5 EMG5523-T50B Figure 21 EMG5523-T50B The following are the LED descriptions of your EMG5523-T50B. Table 7 EMG5523-T50B LED Descriptions COLOR STATUS DESCRIPTION Power Green The Zyxel Device is receiving power and ready for use. Blinking The Zyxel Device is self-testing. The Zyxel Device detected an error while self-testing, or there is a device malfunction.
  • Page 39 Chapter 2 Hardware Table 7 EMG5523-T50B LED Descriptions (continued) COLOR STATUS DESCRIPTION LAN1~4 Green The Zyxel Device has a successful 10/100/1000 Mbps Ethernet connection with a device on the Local Area Network (LAN). Blinking The Zyxel Device is sending or receiving data to/from the LAN at 10/ 100/1000 Mbps.

  • Page 40: Emg5723-T50K

    Chapter 2 Hardware 2.1.6 EMG5723-T50K Figure 22 EMG5723-T50K The following are the LED descriptions of your EMG5723-T50K. Table 8 EMG5723-T50K LED Descriptions COLOR STATUS DESCRIPTION Power Green The Zyxel Device is receiving power and ready for use. Blinking The Zyxel Device is self-testing. The Zyxel Device detected an error while self-testing, or there is a device malfunction.
  • Page 41 Chapter 2 Hardware Table 8 EMG5723-T50K LED Descriptions (continued) COLOR STATUS DESCRIPTION 2.4G WLAN Green The 2.4 GHz WiFi is activated. Blinking The Zyxel Device is communicating with 2.4 GHz WiFi clients. The 2.4 GHz WiFi is not activated. 5G WLAN Green The 5 GHz WiFi is activated.

  • Page 42: Am3100-B0

    Chapter 2 Hardware 2.1.7 AM3100-B0 Figure 23 AM3100-B0 The following are the LED descriptions of your AM3100-B0. Table 9 AM3100-B0 LED Descriptions COLOR STSTUS DESCRIPTION Power Green The Zyxel Device is receiving power and ready for use. Blinking The Zyxel Device is self-testing. The Zyxel Device detected an error while self-testing, or there is a device malfunction.

  • Page 43: Gm4100-B0

    Chapter 2 Hardware Table 9 AM3100-B0 LED Descriptions (continued) COLOR STSTUS DESCRIPTION LAN1~4 Green The Zyxel Device has a successful 10/100/1000 Mbps Ethernet connection with a device on the Local Area Network (LAN). Blinking The Zyxel Device is sending or receiving data to/from the LAN at 10/100/ 1000 Mbps.

  • Page 44: Dm3101-T0

    Chapter 2 Hardware Table 10 GM4100-B0 LED Descriptions (continued) COLOR STATUS DESCRIPTION G.fast Green One of the following connections is up. • ADSL • VDSL • G.fast Slow The ADSL/VDSL/G.fast link is down, and the Zyxel Device is looking for an Blinking ADSL/VDSL/G.fast link.
  • Page 45 Chapter 2 Hardware The following are the LED descriptions of your DM3101-T0. Table 11 DM3101-T0 LED Descriptions COLOR STATUS DESCRIPTION POWER Green The Zyxel Device is receiving power and ready for use. Blinking The Zyxel Device is booting up. The Zyxel Device detected an error while self-testing, or there is a device malfunction.

  • Page 46: Port Panel

    Chapter 2 Hardware 2.2 Port Panel Figure 26 VMG3312-T20A Figure 27 VMG3625-T50B VMG/EMG/AM/DM/GM Series User’s Guide...
  • Page 47 Chapter 2 Hardware Figure 28 VMG3625-T50C Figure 29 VMG8623-T50B VMG/EMG/AM/DM/GM Series User’s Guide...
  • Page 48 Chapter 2 Hardware Figure 30 VMG8825-T50 Figure 31 EMG3525-T50B VMG/EMG/AM/DM/GM Series User’s Guide...
  • Page 49 Chapter 2 Hardware Figure 32 EMG3525-T50C Figure 33 EMG5523-T50B VMG/EMG/AM/DM/GM Series User’s Guide...
  • Page 50 Chapter 2 Hardware Figure 34 EMG5723-T50K Figure 35 AM3100-B0 Figure 36 GM4100-B0 VMG/EMG/AM/DM/GM Series User’s Guide...

  • Page 51: Sfp Transceiver

    Chapter 2 Hardware Figure 37 DM3101-T0 The following table describes the items on the panels. Table 12 Panel Ports and Buttons LABEL DESCRIPTION WIFI Press the WLAN button for more than one second to enable the WiFi function. Press the WPS button for more than one second to quickly set up a secure wireless connection between the device and a WPS-compatible client.
  • Page 52 Chapter 2 Hardware Press the transceiver firmly until it clicks into place. The Zyxel Device automatically detects the installed transceiver. Check the LEDs to verify that it is functioning properly. Remove the dust plugs from the transceiver and cables (dust plug styles vary). Identify the signal transmission direction of the fiber cables and the transceiver.

  • Page 53: Using The Wlan And Wps Buttons

    Chapter 2 Hardware Note: Do NOT pull the transceiver out by force. You could damage it. If the transceiver will not slide out, grasp the tabs on both sides of the transceiver with a slight up or down motion and carefully slide it out of the slot. If unsuccessful, contact Zyxel Support to prevent damage to your Zyxel Device and transceiver.

  • Page 54: The Reset Button

    Chapter 2 Hardware Note: If your Zyxel Device supports both 2.4 GHz and 5 GHz wireless networks, the connection to the 2.4 GHz wireless network has priority. To turn off the wireless network, press the WiFi button. The WLAN/WPS LED turns off when the wireless network is off.
  • Page 55 Chapter 2 Hardware Figure 44 Wall Mounting Screw Specifications Use the holes on the bottom of the Zyxel Device to hang the Zyxel Device on the screws. Figure 45 Wall Mounting Procedures Note: Wall-mount the Zyxel Device vertically. Attach the bracket to your Zyxel Device with the bracket holes facing down.

  • Page 56: Web Configurator

    H A P T E R Web Configurator 3.1 Overview The Web Configurator is an HTML-based management interface that allows easy system setup and management through Internet browser. Use a browser that supports HTML5, such as Microsoft Edge, Mozilla Firefox, or Google Chrome. The recommended minimum screen resolution is 1024 by 768 pixels. In order to use the Web Configurator you need to allow: •...
  • Page 57 Chapter 3 Web Configurator Note: The first time you enter the password, you will be asked to change it. Make sure the new password must contain at least one uppercase letter, one lowercase letter and one number. For some models, the password must contain at least one English character and one number.

  • Page 58: Web Configurator Layout

    Chapter 3 Web Configurator 3.2 Web Configurator Layout Figure 48 Screen Layout As illustrated above, the main screen is divided into these parts: • A – Settings Icon (Navigation Panel and Side Bar) • B – Layout Icon • C – Main Window 3.2.1 Settings Icon Click this icon ( ) to see the side bar and navigation panel.
  • Page 59 Chapter 3 Web Configurator Figure 49 Side Bar The icons provide the following functions. Table 13 Web Configurator Icons in the Title Bar ICON DESCRIPTION Wizard: Click this icon to open screens where you can configure the Zyxel Device’s time zone and WiFi settings.
  • Page 60 Chapter 3 Web Configurator Table 13 Web Configurator Icons in the Title Bar (continued) ICON DESCRIPTION Restart: Click this icon to reboot the Zyxel Device without turning the power off. Logout: Click this icon to log out of the Web Configurator. 3.2.1.2 Navigation Panel Click the menu icon ( ) to display the navigation panel that contains configuration menus and icons...
  • Page 61 Chapter 3 Web Configurator Table 14 Navigation Panel Summary (continued) LINK FUNCTION Advanced Use this screen to enable or disable PTM over ADSL, Annex M/Annex J, and DSL PhyR functions. Wireless General Use this screen to configure the WiFi settings and WiFi authentication or security settings.
  • Page 62 Chapter 3 Web Configurator Table 14 Navigation Panel Summary (continued) LINK FUNCTION Sessions Use this screen to configure the maximum number of NAT sessions each client host is allowed to have through the Zyxel Device. DNS Entry Use this screen to view and configure DNS routes. Dynamic DNS Use this screen to allow a static hostname alias for a dynamic IP address.
  • Page 63 Chapter 3 Web Configurator Table 14 Navigation Panel Summary (continued) LINK FUNCTION System Log Use this screen to view the status of events that occurred to the Zyxel Device. You can export or email the logs. Security Log Use this screen to view all security related events. You can select the level and category of the security events in their proper drop-down list window.
  • Page 64 Chapter 3 Web Configurator Table 14 Navigation Panel Summary (continued) LINK FUNCTION E-mail E-mail Use this screen to configure up to two mail servers and sender addresses Notification Notification on the Zyxel Device. Log Settings Log Settings Use this screen to change your Zyxel Device’s log settings. Firmware Firmware Use this screen to upload firmware to your Zyxel Device.
  • Page 65 Chapter 3 Web Configurator Table 15 Navigation Panel Summary – GM4100-B0 (continued) LINK FUNCTION Access Control Use this screen to enable specific traffic directions for network services. Use this screen to activate protection against Denial of Service (DoS) attacks. MAC Filter MAC Filter Use this screen to block or allow traffic from devices of certain MAC addresses to the Zyxel Device.

  • Page 66: Widget Icon

    Chapter 3 Web Configurator Table 15 Navigation Panel Summary – GM4100-B0 (continued) LINK FUNCTION Firmware Firmware Use this screen to upload firmware to your Zyxel Device. Upgrade Upgrade Backup/Restore Backup/Restore Use this screen to backup and restore your Zyxel Device’s configuration (settings) or reset the factory default settings.
  • Page 67 Chapter 3 Web Configurator Figure 52 Check Icon VMG/EMG/AM/DM/GM Series User’s Guide...

  • Page 68: Quick Start

    H A P T E R Quick Start 4.1 Quick Start Overview Use the Wizard screens to configure the Zyxel Device’s time zone and WiFi settings. Note: See the technical reference chapters for background information on the features in this chapter.

  • Page 69: Quick Start Setup - Internet Connection

    Chapter 4 Quick Start Figure 54 Wizard – Time Zone 4.4 Quick Start Setup – Internet Connection The Zyxel Device detects your Internet connection status. Click Next to continue. Figure 55 Wizard – Internet 4.4.1 Successful Internet Connection The Zyxel Device has Internet access. Figure 56 Wizard –...

  • Page 70: Unsuccessful Internet Connection

    Chapter 4 Quick Start 4.4.2 Unsuccessful Internet Connection The Zyxel Device did not detect a WAN connection. See Section 46.4 on page 470 for troubleshooting the Zyxel Device WAN connection. Figure 57 Wizard – Internet Connection is Down 4.5 Quick Start Setup – WiFi Turn WiFi on or off.

  • Page 71: Quick Start Setup - Finish

    Chapter 4 Quick Start 4.6 Quick Start Setup – Finish Your Zyxel Device saves and applies your settings. VMG/EMG/AM/DM/GM Series User’s Guide...

  • Page 72: Web Interface Tutorials

    H A P T E R Web Interface Tutorials 5.1 Web Interface Overview This chapter shows you how to use the Zyxel Device’s various features. • Wired Network Setup • WiFi Network Setup • USB Applications • Network Security • Internet Calls •...
  • Page 73 Chapter 5 Web Interface Tutorials To set the Zyxel Device to Routing mode, see Section 1 on page To set the Zyxel Device to Bridge mode, see Section 1 on page Routing Mode In this routing mode example, the DSL WAN connection has the following information. General Name MyDSLConnection...
  • Page 74 Chapter 5 Web Interface Tutorials Secondary DNS server 192.168.5.1 Others Authentication Method: AUTO PPPoE Passthrough: Disabled NAT: Enabled IGMP Multicast Proxy: Enabled Apply as Default Gateway: Enabled VLAN: Disabled Enter the General and ATM PVC Configuration settings as provided above. •...
  • Page 75 Chapter 5 Web Interface Tutorials Try to connect to a website to see if you have correctly set up your Internet connection. VMG/EMG/AM/DM/GM Series User’s Guide...
  • Page 76 Chapter 5 Web Interface Tutorials The new connection is displayed on the Broadband screen. Bridge Mode In this bridge mode example, the DSL WAN connection has the following information. General Name MyDSLConnection Type ADSL over ATM Connection Mode Bridge ATM PVC Configuration VPI/VCI 36/48 Encapsulation Mode...

  • Page 77: Setting Up An Ethernet Connection

    Chapter 5 Web Interface Tutorials 5.2.2 Setting Up an Ethernet Connection If you connect to the Internet through an Ethernet connection, you need to connect a broadband modem or router with Internet access to the WAN Ethernet port on the Zyxel Device. You need to configure the Internet settings from the broadband modem or router on the Zyxel Device.
  • Page 78 Chapter 5 Web Interface Tutorials To set the Zyxel Device to Routing mode, see Section 1 on page To set the Zyxel Device to Bridge mode, see Section 1 on page Routing Mode In this routing mode example, configure the following information for the Ethernet WAN connection. General Name My ETH Connection...
  • Page 79 Chapter 5 Web Interface Tutorials Go to the Network Setting > Broadband screen to view the established Ethernet connection. The new connection is displayed on the Broadband screen. Bridge Mode In this bridge mode example, configure the following information for the Ethernet WAN connection. General Name My ETH Connection...

  • Page 80: Wifi Network Setup

    Chapter 5 Web Interface Tutorials For the rest of the fields, use the default settings. Click Apply to save your settings. 5.3 WiFi Network Setup In this example, you want to set up a WiFi network so that you can use your notebook to access the Internet.
  • Page 81 Chapter 5 Web Interface Tutorials Go to the Network Setting > Wireless > General screen. Select More Secure as the security level and WPA2-PSK as the security mode. Configure the screen using the provided parameters. Click Apply. Go to the Wireless > Others screen. Set 802.11 Mode to 802.11b/g/n Mixed, and then click Apply. VMG/EMG/AM/DM/GM Series User’s Guide...

  • Page 82: Connecting To The Zyxel Device's Wifi Network Using Wps

    Chapter 5 Web Interface Tutorials You can now use the WPS feature to establish a WiFi connection between your notebook and the Zyxel Device (see Section 5.3.2 on page 82). Now use the new security settings to connect to the Internet through the Zyxel Device using WiFi.
  • Page 83 Chapter 5 Web Interface Tutorials In Windows 10, click on the Network icon in the system tray to open the list of available WiFi networks. Locate the WiFi network of the Zyxel Device. The default WiFi network name is “Zyxel_XXXX” (2.4G) or “Zyxel_XXXX_5G”...
  • Page 84 Chapter 5 Web Interface Tutorials The Zyxel Device sends the WiFi network settings to Windows using WPS. Windows displays “Getting settings from the router”. VMG/EMG/AM/DM/GM Series User’s Guide...
  • Page 85 Chapter 5 Web Interface Tutorials The WiFi device is then able to connect to the WiFi network securely. 5.3.2.2 WPS PIN Configuration The WPS PIN (Personal Identification Number) method is a more secure version of WPS, used by WiFi- enabled devices such as printers. To use this connection method, you need to log into the Zyxel Device’s Web Configurator.

  • Page 86: Setting Up A Guest Network

    Chapter 5 Web Interface Tutorials Within 2 minutes, enable WPS on the WiFi device. 5.3.3 Setting Up a Guest Network The Zyxel Device authenticates the WiFi device using the PIN, and then sends the WiFi network settings to the device using WPS. This process may take up to 2 minutes. The WiFi device is then able to connect to the WiFi network securely.A company wants to create two WiFi networks for different groups of users as shown in the following figure.
  • Page 87 Chapter 5 Web Interface Tutorials • Employees using the General WiFi network group will have access to the local network and the Internet. • Visitors using the Guest WiFi network group with a different SSID and password will have access to the Internet only.
  • Page 88 Chapter 5 Web Interface Tutorials Go to the Network Setting > Wireless > Guest/More AP screen. Click the Modify icon to configure the second WiFi network group. On the Guest/More AP screen, click the Modify icon to configure the other Guest WiFi network group. Configure the screen using the provided parameters and click OK.
  • Page 89 Chapter 5 Web Interface Tutorials Check the status of Guest in the Guest/More AP screen. A yellow bulb under Status means the SSID is active and ready for WiFi access. VMG/EMG/AM/DM/GM Series User’s Guide...

  • Page 90: Setting Up Two Guest Wifi Networks On Different Wifi Bands

    Chapter 5 Web Interface Tutorials 5.3.4 Setting Up Two Guest WiFi Networks on Different WiFi Bands In this example, a company wants to create two Guest WiFi networks: one for the Guest group and the other for the VIP group as shown in the following figure. Each network will have its SSID and security mode to access the internet.
  • Page 91 Chapter 5 Web Interface Tutorials Go to the Wireless > Guest/More AP screen and click the Modify icon. The following screen appears. Configure the Security Mode and Password using the provided parameters and click OK. VMG/EMG/AM/DM/GM Series User’s Guide...
  • Page 92 Chapter 5 Web Interface Tutorials The 2.4 GHz Guest WiFi network is now configured. Go to the Wireless > General screen and set Band to 5GHz to configure the 5G Guest WiFi settings for VIP. Click OK. VMG/EMG/AM/DM/GM Series User’s Guide...
  • Page 93 Chapter 5 Web Interface Tutorials Go to the Wireless > Guest/More AP screen and click the Modify icon. The following screen appears. Configure the Security Mode and Password using the provided parameters and click OK. VMG/EMG/AM/DM/GM Series User’s Guide...
  • Page 94 Chapter 5 Web Interface Tutorials The 5G VIP WiFi network is now configured. VMG/EMG/AM/DM/GM Series User’s Guide...

  • Page 95: Usb Applications

    Chapter 5 Web Interface Tutorials 5.4 USB Applications This section shows you how to set up a cellular backup network, access shared folders and play files through Window Media using a USB device. 5.4.1 Setting up a Cellular Network Connection You can connect to the Internet through a cellular network connection with a cellular dongle, using the information from your Internet Service Provider (ISP) to configure the Zyxel Device.

  • Page 96: File Sharing

    Chapter 5 Web Interface Tutorials 5.4.2 File Sharing This section shows you how to create a shared folder on your Zyxel Device through a USB device and allow others to access the shared folder with File Sharing services. 5.4.2.1 Setting up File Sharing on Your Zyxel Device Before enabling file sharing in the Zyxel Device, please set up your shared folders beforehand in your USB device.
  • Page 97 Chapter 5 Web Interface Tutorials Go to the Network Setting > USB Service > File Sharing screen. Enable File Sharing Services and click Apply to activate the file sharing function. The Zyxel Device automatically adds your USB device to the Information table.
  • Page 98 Chapter 5 Web Interface Tutorials The Add New Share screen appears. • Select your USB device from the Volume drop-down list box. • Enter a Description name for the added share to identify the device. • Click Browse and the Browse Directory screen appears. •...
  • Page 99 Chapter 5 Web Interface Tutorials • In Access Level, select Public to let the share to be accessed by all users connected to the Zyxel Device. Otherwise, select Security to let the share to be accessed by specific users to access only. Click OK to save the settings.

  • Page 100: Media Server

    Chapter 5 Web Interface Tutorials 5.4.2.2 Accessing Your Shared Files From a Computer You can use Windows Explorer to access the USB storage devices connected to the Zyxel Device. Note: This example shows you how to use Microsoft Windows 10 to browse shared files in a share called (usb1_sda)Zoeys file.
  • Page 101 Chapter 5 Web Interface Tutorials This section shows you how the media server feature works using the following: • Microsoft (MS) Windows Media Player Media Server works with Windows 10. Make sure your computer is able to play media files (music, videos and pictures).
  • Page 102 Chapter 5 Web Interface Tutorials 5.4.3.2 Playing Media Using Windows Media Player on Windows 10 This section shows you how to play the media files on the USB storage device connected to your Zyxel Device using Windows Media Player. Open Windows Media Player. It automatically detects the Zyxel Device. If you cannot see the Zyxel Device in the left panel as shown above, go to Organize >...
  • Page 103 Chapter 5 Web Interface Tutorials Select the shared folder, and then click Add to add it to your Media Library. Click OK to save the settings. In the right panel, you can browse and play the files available in the USB storage device based on the category (Music, Video, Pictures, Recorded TV) you selected.
  • Page 104 Chapter 5 Web Interface Tutorials 5.4.3.3 Using a Digital Media Player This section shows you how you can use the Zyxel Device with a hardware digital media player to play media files stored in the USB storage device on your TV screen. Note: For this tutorial, your digital media player is already connected to the TV.
  • Page 105 Chapter 5 Web Interface Tutorials The screen shows you the list of available media files in the USB storage device. Select the file you want to open and push the Play button on the remote control. VMG/EMG/AM/DM/GM Series User’s Guide...

  • Page 106: Using Ftp

    Chapter 5 Web Interface Tutorials 5.4.4 Using FTP This section shows how to use an FTP program to access files on an USB storage device connected to the Zyxel Device. Note: This example uses the FileZilla FTP program to browse your shared files. In FileZilla, enter the IP address of the Zyxel Device (The default IP is 192.168.1.1), your account’s Username, Password and Port number, and then click Quickconnect.
  • Page 107 Chapter 5 Web Interface Tutorials Open the Access Control screen, click Add New ACL Rule to create a rule. Use the following fields to configure and apply a new ACL (Access Control List) rule. VMG/EMG/AM/DM/GM Series User’s Guide...

  • Page 108: Parental Control

    Chapter 5 Web Interface Tutorials • Filter Name: Enter a name to identify the firewall rule. • Source IP Address: Enter the IP address of the computer that initializes traffic for the application or service. • Destination IP Address: Enter the IP address of the computer to which traffic for the application or service is entering.
  • Page 109 Chapter 5 Web Interface Tutorials • Websites and URL keyword blocking. Use this feature to: • Limit the days and times a user can access the Internet. • Limit the websites a user can access on the Internet. This example shows you how to block a user from accessing the Internet during time for studying. It also shows you how to stop a user from accessing specific websites.
  • Page 110 Chapter 5 Web Interface Tutorials Add New PCP Screen Go to Parental Control > Add New PCP. Under General: • Select Enable to enable the rule you are configuring. • Enter the Parental Control Profile Name given in the above parameter. •...
  • Page 111 Chapter 5 Web Interface Tutorials Under Site / URL Keyword: • Select Block the web URLs in Block or Allow the Web Site. • Click Add, then use the parameter given above to configure settings for the URL keyword you are blocking.
  • Page 112 Chapter 5 Web Interface Tutorials Use this screen to add a Parental Control rule. • Enter the Profile Name given in the above parameter. • Click on the switch to enable Profile Active. • Select a device, and then click Next to proceed. Use this screen to edit the Parental Control schedule.

  • Page 113: Configuring A Mac Address Filter For Wired Lan Connections

    Chapter 5 Web Interface Tutorials 5.5.3 Configuring a MAC Address Filter for Wired LAN Connections You can use a MAC address filter to exclusively allow or permanently block someone from the wired LAN network. This example shows that computer B is not allowed access to the wired LAN network. Figure 60 Configure a MAC Address Filter Example VMG/EMG/AM/DM/GM Series User’s Guide...

  • Page 114: Internet Calls

    Chapter 5 Web Interface Tutorials Go to the Security > MAC Filter > MAC Filter screen. Under MAC Address Filter, select Enable. Click Add New Rule to add a new entry. Select Active, and then enter the Host Name and MAC Address of computer B.

  • Page 115: Adding A Sip Service Provider

    Chapter 5 Web Interface Tutorials 5.6.2 Adding a SIP Service Provider Follow the steps below to add a SIP service provider. Make sure your Zyxel Device is connected to the Internet. Open the Web Configurator. Go to the Voice > SIP > SIP Service Provider screen. Click the Add New Provider button to add the SIP Service Provider.

  • Page 116: Adding A Sip Account

    Chapter 5 Web Interface Tutorials 5.6.3 Adding a SIP Account The SIP account must be associated with the SIP service provider configured above. You may configure several SIP accounts for the same service provider. Follow the steps below to set up your SIP account: Make sure your Zyxel Device is connected to the Internet.

  • Page 117: Configuring A Phone

    Chapter 5 Web Interface Tutorials 5.6.4 Configuring a Phone You must now configure the phone port to use the SIP account you just configured. Go to the Voice > Phone > Phone Device screen. Click the Modify icon of PHONE1 to configure PHONE1 on your Zyxel Device. The following screen appears.

  • Page 118: Making A Voip Call

    Chapter 5 Web Interface Tutorials 5.6.5 Making a VoIP Call Follow these steps to make a phone call using Voice over IP (VoIP). Make sure you connect a telephone to phone port 1 on the Zyxel Device. Make sure the Zyxel Device is turned on and connected to the Internet. Pick up the phone receiver.

  • Page 119: Backing Up The Device Configuration

    Chapter 5 Web Interface Tutorials Download the correct firmware file from the download library at the Zyxel website. The model code for the Zyxel Device in this example is v5.13(ABLZ.1) Note the model code for your Zyxel Device. Unzip the file.

  • Page 120: Restoring The Device Configuration

    Chapter 5 Web Interface Tutorials 5.7.3 Restoring the Device Configuration This section shows you how to restore a previously-saved configuration file from your computer to your Zyxel Device. Go to the Maintenance > Backup/Restore screen. Under Restore Configuration, click Browse/Choose File, and then select the configuration file that you want to upload.
  • Page 121 Chapter 5 Web Interface Tutorials The Zyxel Device automatically restarts after the configuration file is successfully uploaded. Wait for one minute before logging into the Zyxel Device again. Go to the Connection Status page to check the firmware version after the reboot. VMG/EMG/AM/DM/GM Series User’s Guide...

  • Page 122: App Tutorials

    H A P T E R App Tutorials 6.1 App Tutorials Overview This part shows you how to use the MPro Mesh app to manage the Zyxel Device and the MPro Mesh network. Note: To enjoy the latest features of the MPro Mesh app, make sure you have installed the latest version on your smartphone or tablet.

  • Page 123: Mpro Mesh Network

    Chapter 6 App Tutorials • Finding the Best Location for the Extenders • Checking Your Network Topology • Changing the Default Home WiFi Network Name and Password • Letting WiFi Clients Connect to the WiFi Network • Blocking Internet Access at Specific Times •...
  • Page 124 Chapter 6 App Tutorials Figure 62 MPro Mesh Network The following table describes the icons used in the figure. Table 18 Icons used in MPro Mesh Network ICON DESCRIPTION Zyxel Device – MPro Mesh Router or Non-MPro Mesh Router Note: Your router must have an Internet connection. MPro Mesh Extender in AP (Access Point) mode.
  • Page 125 Chapter 6 App Tutorials Extender with a strong signal. MPro Mesh Router (ZD) MPro Mesh Extenders (E1, E2) Figure 63 AP Steering Application • Band steering allows 2.4 GHz/5 GHz dual-band WiFi clients to move from one band to another. For example, if the 2.4 GHz channel is congested, WiFi clients that support 5 GHz can move to the 5 GHz band.

  • Page 126: Mpro Mesh Network Connection

    Chapter 6 App Tutorials 6.4 MPro Mesh Network Connection If you are setting up the MPro Mesh network with an MPro Mesh Router and an MPro Mesh Extender, you can connect your MPro Mesh Router (ZD) with an MPro Mesh Extender (E) using a WiFi or wired connection.

  • Page 127: Setting Up An Mpro Mesh Router And Mpro Mesh Extender With A Wifi Or Wired Connection

    Chapter 6 App Tutorials Enable MPro Mesh on the MPro Mesh Extender: Turn on your MPro Mesh Extender. Enable MPro Mesh in the MPro Mesh Extender’s Web Configurator. See your MPro Mesh Extender’s User’s Guide for how to enable MPro Mesh. 6.4.2 Setting up an MPro Mesh Router and MPro Mesh Extender with a WiFi or Wired Connection Follow the steps below to set up your MPro Mesh Router with an MPro Mesh Extender.
  • Page 128 Chapter 6 App Tutorials The Home screen displays. The Controller (MPro Mesh Router) displays on top of the Home screen. Tap the Add ( ) icon in the Mesh Devices field to add an MPro Mesh Extender to the Mesh network. Select a connection scenario to pair the MPro Mesh Extender to the MPro Mesh Router (Controller).
  • Page 129 Chapter 6 App Tutorials Follow the instructions and tap the WPS button on the MPro Mesh Extender. Within 2 minutes, tap Start Pairing to start pairing the MPro Mesh Extender to the MPro Mesh Router (Controller). A 2-minute countdown starts after you tap Start Pairing. VMG/EMG/AM/DM/GM Series User’s Guide...
  • Page 130 Chapter 6 App Tutorials The following screen displays when the pairing process is done. Tap Done to finish pairing. VMG/EMG/AM/DM/GM Series User’s Guide...
  • Page 131 Chapter 6 App Tutorials You can now check and manage the paired MPro Mesh Extender on the Home screen. 10 Place the MPro Mesh Extender where you need to extend WiFi coverage. Use the app to see if the extender is too far from the router; see Section 6.5 on page 137 for more information.

  • Page 132: Setting Up A Non-Mpro Mesh Router And Mpro Mesh Extender With A Wired Connection

    Chapter 6 App Tutorials 6.4.3 Setting up a non-MPro Mesh Router and MPro Mesh Extender with a Wired Connection This scenario describes the process to create an MPro Mesh network with a wired connection from the non-MPro Mesh router to two extenders. Make sure the non-MPro Mesh router is connected to the Internet.
  • Page 133 Chapter 6 App Tutorials The Home screen displays. The Controller (Extender 1) displays on top of the screen. Tap the Add ( ) icon in the Mesh Devices field to add Extender 2 to the Mesh network. Select a connection scenario to pair Extender 2 to Extender 1 (Controller). In this example, select the Use WiFi scenario.
  • Page 134 Chapter 6 App Tutorials Follow the instructions and press the WPS button on the Extender 2. Within 2 minutes, tap Start Pairing to start pairing Extender 2 to Extender 1 (Controller). A 2-minute countdown starts after you tap Start Pairing. VMG/EMG/AM/DM/GM Series User’s Guide...
  • Page 135 Chapter 6 App Tutorials The following screen displays when the pairing process is done. Tap Done to finish pairing. VMG/EMG/AM/DM/GM Series User’s Guide...
  • Page 136 Chapter 6 App Tutorials 10 You can now check and manage the paired Extender 2 on the Home screen. 11 Place Extender 2 where you need to extend WiFi coverage. Use the app to see if Extender 2 is too far from Extender 1;...

  • Page 137: Finding The Best Location For The Extenders

    Chapter 6 App Tutorials 6.5 Finding the Best Location for the Extenders Follow the steps below to check the signal icons to see which extenders are too far from or too close to the Controller. Find the best location of your extenders for a better WiFi signal. Tap on Home in the navigation panel.

  • Page 138: Checking Your Network Topology

    Chapter 6 App Tutorials Table 21 Link Quality ICON CONNECTION TYPE CONNECTION STATUS ACTION TO DO Wireless Too Far from the Router • Move the Extender closer to the Router/uplink Extender. • Avoid obstacles, such as walls or doors in between.

  • Page 139: Changing The Default Home Wifi Network Name And Password

    Chapter 6 App Tutorials 6.7 Changing the Default Home WiFi Network Name and Password It is advisable to change the default WiFi settings as they are printed on the label on the Controller. Note that you need to reconnect your phone to this network with the new settings. Changing Home WiFi Settings Change the SSID and key for your Home WiFi for better security.
  • Page 140 Chapter 6 App Tutorials For the WiFi password, you can use 8 – 63 alphanumeric (0-9, a-z, A-Z) and single-byte special characters and spaces. Table 22 Home WiFi Settings Parameters Example HOME WIFI SSID Company Password company123 Setting Up Home WiFi Follow the steps below to change your Home WiFi settings.

  • Page 141: Letting Wifi Clients Connect To The Wifi Network

    Chapter 6 App Tutorials Note: It takes 2-3 minutes for the Zyxel Device to apply the new WiFi settings to the whole MPro Mesh network. You will need to reconnect to the WiFi network using the new SSID and password. 6.7.1 Letting WiFi Clients Connect to the WiFi Network Take a screenshot of the QR code and share it with the WiFi clients that you want to access the WiFi network.
  • Page 142 Chapter 6 App Tutorials VMG/EMG/AM/DM/GM Series User’s Guide...

  • Page 143: Blocking Internet Access At Specific Times

    Chapter 6 App Tutorials 6.8 Blocking Internet Access at Specific Times Use the Parental Control screen to configure Internet access schedule profiles to limit the days and times current client devices can access the Internet. You can create up to 20 schedules in a profile. Clients in a profile will be blocked from the Internet during the time periods you schedule.
  • Page 144 Chapter 6 App Tutorials Tap Parental Control in the navigation panel. Tap the add icon ( ) or Create Profile to create a parental control profile. Enter the Profile Name. Tap Add Schedule to add a schedule for this profile. VMG/EMG/AM/DM/GM Series User’s Guide...
  • Page 145 Chapter 6 App Tutorials Configure the first schedule using the parameters given above. Tap Save. VMG/EMG/AM/DM/GM Series User’s Guide...
  • Page 146 Chapter 6 App Tutorials Tap Add schedule to add the second schedule. VMG/EMG/AM/DM/GM Series User’s Guide...
  • Page 147 Chapter 6 App Tutorials Configure the second schedule using the parameters given above. Tap Save. VMG/EMG/AM/DM/GM Series User’s Guide...
  • Page 148 Chapter 6 App Tutorials Tap Add Device to select the client devices for which you want to apply this profile. VMG/EMG/AM/DM/GM Series User’s Guide...
  • Page 149 Chapter 6 App Tutorials Tap the ( ) icon of the client devices you want to select. Tap Add. VMG/EMG/AM/DM/GM Series User’s Guide...
  • Page 150 Chapter 6 App Tutorials 10 Tap Create to finish creating the parental control profile. VMG/EMG/AM/DM/GM Series User’s Guide...
  • Page 151 Chapter 6 App Tutorials 11 Tap the switch to enable Parental Control. The profiles are active when you enable Parental Control. If a profile is currently blocking clients from Internet access during the scheduled period, the status displays Block from Internet. Otherwise, it displays Allow to Internet. VMG/EMG/AM/DM/GM Series User’s Guide...

  • Page 152: Seeing Currently Connected Client Devices

    Chapter 6 App Tutorials 6.9 Seeing Currently Connected Client Devices Follow the steps below to view clients that are currently connected to your MPro Mesh network and their link quality and device details, such as the IP address, MAC address, and the connection status of a client device.
  • Page 153 Chapter 6 App Tutorials Table 24 Client Device Connection Status ICON CONNECTION TYPE CONNECTION STATUS ACTION TO DO Wired Wired Connection None. Wireless Good to Go None. Wireless Too Far from the Zyxel • Move the client device closer to the Zyxel Device.

  • Page 154: Changing The Client Device Names

    Chapter 6 App Tutorials Tap to select a client device to view the device’s IP address, MAC address, Internet access schedule profile, and the connection status. 6.10 Changing the Client Device Names Follow the steps below to change your client device’s name displayed on the app. Tap the Devices icon in the navigation panel.
  • Page 155 Chapter 6 App Tutorials Tap the edit icon ( ) to edit the device name. Enter a descriptive name for the device and tap the ( ) icon. You can use 1 – 20 alphanumeric (0-9, a-z, A-Z) and single-byte special characters except [ " ], [ ` ], [ ' ], [ < ], [ > ], [ ^ ], [ $ ], [ | ], [ & ], or [ ; ]. Spaces are allowed.

  • Page 156: Blocking Internet Access For Specific Clients Immediately

    Chapter 6 App Tutorials 6.11 Blocking Internet Access for Specific Clients Immediately Follow the steps below to block a specific client named Laura from accessing the Internet using the Pause Internet function. Note: If you enable Pause Internet for a client device, the client device will be blocked from the Internet immediately regardless of your Parental Control profile schedules.
  • Page 157 Chapter 6 App Tutorials Tap the search icon ( ). Enter Laura in the field. Tap the ( ) icon to show the Device Detail screen. VMG/EMG/AM/DM/GM Series User’s Guide...
  • Page 158 Chapter 6 App Tutorials Devices Tap to enable the switch in the Pause Internet field. Laura will not be able to access the Internet until you disable Pause Internet. VMG/EMG/AM/DM/GM Series User’s Guide...

  • Page 159: Setting Up The Guest Wifi Network

    Chapter 6 App Tutorials 6.12 Setting Up the Guest WiFi Network You can set up a Guest WiFi network for your Zyxel Device. Company A wants to create a different WiFi network group for different types of users as shown in the following figure. This group has its own SSID and password.
  • Page 160 Chapter 6 App Tutorials Figure 68 Visiting Guests Blocked from Company Network Use the following parameters to set up the Guest WiFi network group. For the SSID, you can use 1 – 32 alphanumeric (0-9, a-z, A-Z), single-byte special characters and spaces. For the WiFi password, you can use 8 –...
  • Page 161 Chapter 6 App Tutorials Your phone will temporarily disconnect from the Main WiFi network when you enable Guest WiFi. It takes 2 – 3 minutes for the Zyxel Device to apply the new settings to the whole MPro Mesh network. Make sure your phone reconnects to the Zyxel Main WiFi network.
  • Page 162 Chapter 6 App Tutorials Tap the edit icon ( ) to edit the Guest WiFi network. VMG/EMG/AM/DM/GM Series User’s Guide...
  • Page 163 Chapter 6 App Tutorials Set the Guest WiFi group SSID and password using the parameters given above. Tap Done to save and apply the settings. Your phone will temporarily disconnect from the Main WiFi network when you change the Guest WiFi settings. Make sure it reconnects to the Zyxel Main WiFi network. VMG/EMG/AM/DM/GM Series User’s Guide...

  • Page 164: Letting Wifi Clients Only Connect To The Internet Through The Guest Wifi Network

    Chapter 6 App Tutorials 6.12.1 Letting WiFi Clients Only Connect to the Internet Through the Guest WiFi Network Tap the WiFi icon in the navigation panel. Tap the ( ) icon to show the QR code. VMG/EMG/AM/DM/GM Series User’s Guide...
  • Page 165 Chapter 6 App Tutorials Swipe to the left to see the Share Guest WiFi QR code for connecting to the Zyxel Device Guest WiFi. Take a screenshot of the QR code and share it with the WiFi clients that you let access the Internet (only) through this WiFi network.

  • Page 166: Viewing More App Information And The Online Help

    Chapter 6 App Tutorials 6.13 Viewing More App Information and the Online Help You can view the following information about the app: • The app online help page • The app version • The privacy policy. VMG/EMG/AM/DM/GM Series User’s Guide...

  • Page 167: Logging Out Of The Controller Device

    Chapter 6 App Tutorials 6.13.1 Logging Out of the Controller Device To log out of the current Controller device (the MPro Mesh router or extender) of this MPro Mesh network: Tap the Account icon in the navigation panel. Tap Logout, then tap YES. VMG/EMG/AM/DM/GM Series User’s Guide...
  • Page 168 Chapter 6 App Tutorials VMG/EMG/AM/DM/GM Series User’s Guide...

  • Page 169: Technical Reference

    Technical Reference VMG/EMG/AM/DM/GM Series User’s Guide...

  • Page 170: Connection Status

    H A P T E R Connection Status 7.1 Connection Status Overview After you log into the Web Configurator, the Connection Status screen appears. You can configure basic Internet access and WiFi settings in this screen. It also shows the network status of the Zyxel Device and computers or devices connected to it.

  • Page 171: Icon And Device Name

    Chapter 7 Connection Status 7.1.2 Icon and Device Name Select an icon and/or enter a name in the Device Name field for a connected device. Click to enable ) Internet Blocking (or Active) for a connected WiFi client. Click Save to save your changes. Figure 71 Connectivity: Edit 7.1.3 Management Service Use this screen to check if a control service (such as HTTP or Telnet) is allowed on the interfaces (LAN/...
  • Page 172 Chapter 7 Connection Status Figure 73 System Info Click the Arrow icon ( ) to view more information on the status of your firewall and interfaces (WAN, LAN, and WLAN). Figure 74 System Info: Detailed Information Each field is described in the following table. Table 26 System Info: Detailed Information LABEL DESCRIPTION...
  • Page 173 Chapter 7 Connection Status Table 26 System Info: Detailed Information (continued) LABEL DESCRIPTION System Uptime This field displays how long the Zyxel Device has been running since it last started up. The Zyxel Device starts up when you plug it in, when you restart it (Maintenance > Reboot), or when you reset it.

  • Page 174: Wifi Settings

    Chapter 7 Connection Status 7.1.5 WiFi Settings Use this screen to enable or disable the main WiFi network. When the switch turns blue, the function is enabled. You can use this screen or the QR code on the upper right corner to check the SSIDs (WiFi network name) and passwords of the main WiFi networks.
  • Page 175 Chapter 7 Connection Status Figure 76 WiFi Settings: Configuration Each field is described in the following table. Table 27 WiFi Settings: Configuration LABEL DESCRIPTION Keep 2.4G, 5G and Select this and the 2.4 GHz, 5 GHz and 6GHz wireless networks will use the same SSID. 6G the same If you deselect this, the screen will change.

  • Page 176: Guest Wifi Settings

    Chapter 7 Connection Status 7.2 Guest WiFi Settings Use this screen to enable or disable the guest 2.4 GHz / 5 GHz /6GHz WiFi networks. When the switch goes to the right ( ), the function is enabled. Otherwise, it is not. You can check their SSIDs (WiFi network name) and passwords from this screen.

  • Page 177: Lan

    Chapter 7 Connection Status Figure 79 Guest WiFi Settings: Different SSIDs Each field is described in the following table. Table 28 WiFi Settings: Configuration LABEL DESCRIPTION 2.4G/5G/6G WiFi Click this switch to enable or disable the 2.4 GHz / 5 GHz / 6GHz WiFi networks. When the switch goes to the right , the function is enabled.
  • Page 178 Chapter 7 Connection Status Figure 80 LAN Click the Arrow icon ( ) to configure the LAN IP settings and DHCP setting for your Zyxel Device. Figure 81 LAN Setup Each field is described in the following table. Table 29 LAN Setup LABEL DESCRIPTION LAN IP Setup...

  • Page 179: The Parental Control Screen

    Chapter 7 Connection Status Table 29 LAN Setup (continued) LABEL DESCRIPTION DHCP Server State DHCP Server This is the period of time a DHCP-assigned address is valid, before it expires. Lease Time When a client connects to the Zyxel Device, DHCP automatically assigns the client an IP addresses from the IP address pool.

  • Page 180: Create A Parental Control Profile

    Chapter 7 Connection Status Disable the MESH feature in the Wireless > MESH screen and ONE Connect feature in the Network > Home Connectivity screen, and the grayed-out Arrow icon should turn yellow ( Figure 84 Parental Control Figure 85 Parental Control Each field is described in the following table.

  • Page 181: Define A Schedule

    Chapter 7 Connection Status Figure 86 Parental Control: Add More Profile Each field is described in the following table. Table 32 Parental Control: Add More Profile LABEL DESCRIPTION Profile Name Enter a descriptive name for the profile. Profile Active Click this switch to enable or disable Internet access. When the switch goes to the right the function is enabled.
  • Page 182 Chapter 7 Connection Status Table 33 Parental Control: Schedule (continued) LABEL DESCRIPTION Profile Device List This field shows the devices selected on the right for this profile. Blocking Schedule This field shows the time during which Internet access is blocked on the profile devices. Schedule Add New Schedule Click this to add a new block for scheduling.

  • Page 183: Broadband

    H A P T E R Broadband 8.1 Broadband Overview This chapter discusses the Zyxel Device’s Broadband screens. Use these screens to configure your Zyxel Device for Internet access. A WAN (Wide Area Network) connection is an outside connection to another network or the Internet. It connects your private networks, such as a LAN (Local Area Network) and other networks, so that a computer in one location can communicate with computers in other locations.

  • Page 184: What You Need To Know

    Chapter 8 Broadband Note: For G.fast connection, see the ADSL/VDSL over PTM connection type in the following table. Table 34 WAN Setup Overview LAYER-2 INTERFACE INTERNET CONNECTION CONNECTION DSL LINK TYPE MODE ENCAPSULATION CONNECTION SETTINGS ADSL/VDSL over Routing PPPoE PPP information, IPv4/IPv6 IP address, routing feature, DNS server, VLAN, QoS, and MTU IPoE...
  • Page 185 Chapter 8 Broadband Packet Transfer Mode (PTM) is packet-oriented and supported by the VDSL2 standard. In PTM, packets are encapsulated directly in the High-level Data Link Control (HDLC) frames. It is designed to provide a low-overhead, transparent way of transporting packets over DSL links, as an alternative to ATM. IPv6 Introduction IPv6 (Internet Protocol version 6), is designed to enhance IP address size and features.
  • Page 186 Chapter 8 Broadband The Zyxel Device generates a global IPv6 prefix from its IPv4 WAN address and tunnels IPv6 traffic to the ISP’s Border Relay router (BR in the figure) to connect to the native IPv6 Internet. The local network can also use IPv4 services.

  • Page 187: Before You Begin

    Chapter 8 Broadband Figure 91 Dual Stack Lite 8.1.3 Before You Begin You need to know your Internet access settings such as encapsulation and WAN IP address. Get this information from your ISP. 8.2 Broadband Settings Use this screen to change your Zyxel Device’s Internet access settings. The summary table shows you the configured WAN services (connections) on the Zyxel Device.

  • Page 188: Add/Edit Internet Connection

    Chapter 8 Broadband The following table describes the labels in this screen. Table 35 Network Setting > Broadband LABEL DESCRIPTION Add New WAN Click this to create a new connection. Interface This is the index number of the entry. Name This is the service name of the connection.
  • Page 189 Chapter 8 Broadband The following example screen displays when you select the VDSL over PTM connection type, Routing mode, and PPPoE encapsulation. The screen varies when you select other interface type, encapsulation, and IPv6/IPv4 mode. Figure 93 Network Setting > Broadband > Add/Edit New WAN Interface (Routing Mode) VMG/EMG/AM/DM/GM Series User’s Guide...
  • Page 190 Chapter 8 Broadband The following table describes the labels in this screen. Table 36 Network Setting > Broadband > Add/Edit New WAN Interface (Routing Mode) LABEL DESCRIPTION General Click this switch to enable the interface. Name Enter a descriptive name for this WAN interface. You can use up to 15 printable characters except [ "...
  • Page 191 Chapter 8 Broadband Table 36 Network Setting > Broadband > Add/Edit New WAN Interface (Routing Mode) (continued) LABEL DESCRIPTION Encapsulation Select the method of multiplexing used by your ISP from the drop-down list box. Choices are: • LLC/SNAP-BRIDGING: In LCC encapsulation, bridged PDUs are encapsulated by identifying the type of the bridged media in the SNAP header.
  • Page 192 Chapter 8 Broadband Table 36 Network Setting > Broadband > Add/Edit New WAN Interface (Routing Mode) (continued) LABEL DESCRIPTION Secondary DNS Enter the second DNS server address assigned by the ISP. Server Routing Feature (This is available only when you select IPv4 Only or IPv4 IPv6 DualStack in the IPv4/IPv6 Mode field.) Click this switch to activate NAT on this connection.
  • Page 193 Chapter 8 Broadband Table 36 Network Setting > Broadband > Add/Edit New WAN Interface (Routing Mode) (continued) LABEL DESCRIPTION DUID Enter the hardware type, a time value and the MAC address of the device. option 125 Select this to have the Zyxel Device automatically generate and add vendor specific parameters in the DHCP discovery packets that go to the DHCP server.
  • Page 194 Chapter 8 Broadband Table 36 Network Setting > Broadband > Add/Edit New WAN Interface (Routing Mode) (continued) LABEL DESCRIPTION Note: The following PSID fields are used for the port mapping rule of MAP-T or MAP-E. PSID Offset The Port Set Identifier (PSID) offset specifies the excluded port range. The default PSID Offset is 6; port 0~1023 will be reserved for the system to use.
  • Page 195 Chapter 8 Broadband The following table describes the fields in this screen. Table 37 Network Setting > Broadband > Add/Edit New WAN Interface (ADSL/VDSL over PTM or Ethernet-Bridge Mode) LABEL DESCRIPTION General Click this switch to enable or disable the WAN interface. Name Enter a service name of this WAN interface.
  • Page 196 Chapter 8 Broadband The following table describes the fields in this screen. Table 38 Network Setting > Broadband > Add/Edit New WAN Interface (ADSL over ATM-Bridge Mode) LABEL DESCRIPTION General Click this switch to enable or disable the WAN interface. Name Enter a service name of this WAN interface.

  • Page 197: Cellular Backup

    Chapter 8 Broadband Table 38 Network Setting > Broadband > Add/Edit New WAN Interface (ADSL over ATM-Bridge Mode) LABEL DESCRIPTION Cancel Click Cancel to exit this screen without saving. Apply Click Apply to save your changes. 8.3 Cellular Backup The USB port of the Zyxel Device allows you to attach a cellular dongle to wirelessly connect to a cellular network for Internet access.
  • Page 198 Chapter 8 Broadband Figure 97 Network Setting > Broadband > Cellular Backup VMG/EMG/AM/DM/GM Series User’s Guide...
  • Page 199 Chapter 8 Broadband Figure 98 Network Setting > Broadband > Cellular Backup (Budget Setup) The following table describes the labels in this screen. Table 39 Network Setting > Broadband > Cellular Backup LABEL DESCRIPTION General Cellular Backup Click this switch to enable Cellular Backup to have the Zyxel Device use the cellular connection as your WAN or a backup when the wired WAN connection fails.
  • Page 200 Chapter 8 Broadband Table 39 Network Setting > Broadband > Cellular Backup (continued) LABEL DESCRIPTION Card This field displays the manufacturer and model name of your cellular card if you inserted one in description the Zyxel Device. Otherwise, it displays N/A. Username Enter the user name (of up to 64 alphanumeric (0-9, a-z, A-Z) and special characters, including spaces) given to you by your service provider.
  • Page 201 Chapter 8 Broadband Table 39 Network Setting > Broadband > Cellular Backup (continued) LABEL DESCRIPTION Mail Account Select an email address you have configured in Maintenance > Email Notification. The Zyxel Device uses the corresponding mail server to send notifications. You must have configured a mail server already in the Maintenance >...

  • Page 202: Broadband Advanced

    Chapter 8 Broadband Table 39 Network Setting > Broadband > Cellular Backup (continued) LABEL DESCRIPTION Actions when Specify the actions the Zyxel Device takes when the time or data limit is exceeded. over budget Current Cellular Select Keep to maintain an existing cellular connection or Drop to disconnect it. connection Actions Enable Email...
  • Page 203 Chapter 8 Broadband Table 40 VDSL Profiles (continued) MAX. NUMBER OF CARRIER BANDWIDTH DOWNSTREAM PROFILE DOWNSTREAM BANDWIDTH POWER (DBM) (MHZ) THROUGHPUT CARRIERS (KHZ) (MBIT/S) 17.664 4096 4.3125 14.5 35.328 8192 4.3125 17.0 Below is a comparison of xDSL standards VDSL2 and G.fast. Table 41 VDSL vs G.fast VDSL2 G.FAST...
  • Page 204 Chapter 8 Broadband Figure 99 Network Setting > Broadband > Advanced Note: This screen only shows if you’re using the VMG/GM series devices. The following table describes the labels in this screen. Table 42 Network Setting > Broadband > Advanced LABEL DESCRIPTION DSL Capabilities...
  • Page 205 Chapter 8 Broadband Table 42 Network Setting > Broadband > Advanced (continued) LABEL DESCRIPTION Bitswap Select Enable to allow the Zyxel Device to adapt to line changes when you are using G.dmt. Bit-swapping is a way of keeping the line more stable by constantly monitoring and redistributing bits between channels.

  • Page 206: Ethernet Wan

    Chapter 8 Broadband 8.5 Ethernet WAN Use this screen to have the fourth LAN port act as an Ethernet WAN port. You can restore it back from a WAN port to a LAN port. Click the switch to set up the configuration. When the switch goes to the right, the fourth LAN port act as an Ethernet WAN port.
  • Page 207 Chapter 8 Broadband PPP over ATM (PPPoA) PPPoA stands for Point to Point Protocol over ATM Adaptation Layer 5 (AAL5). A PPPoA connection functions like a dial-up Internet connection. The Zyxel Device encapsulates the PPP session based on RFC1483 and sends it through an ATM PVC (Permanent Virtual Circuit) to the Internet Service Provider’s (ISP) DSLAM (digital access multiplexer).
  • Page 208 Chapter 8 Broadband Traffic Shaping Traffic Shaping is an agreement between the carrier and the subscriber to regulate the average rate and fluctuations of data transmission over an ATM network. This agreement helps eliminate congestion, which is important for transmission of real time data such as audio and video connections. Peak Cell Rate (PCR) is the maximum rate at which the sender can send cells.
  • Page 209 Chapter 8 Broadband Variable Bit Rate (VBR) The Variable Bit Rate (VBR) ATM traffic class is used with bursty connections. Connections that use the Variable Bit Rate (VBR) traffic class can be grouped into real time (VBR-RT) or non-real time (VBR-nRT) connections.
  • Page 210 Chapter 8 Broadband A tagged frame is four bytes longer than an untagged frame and contains two bytes of TPID (Tag Protocol Identifier), residing within the type/length field of the Ethernet frame) and two bytes of TCI (Tag Control Information), starts after the source address field of the Ethernet frame). The CFI (Canonical Format Indicator) is a single-bit flag, always set to zero for Ethernet switches.
  • Page 211 Chapter 8 Broadband IPv6 Addressing The 128-bit IPv6 address is written as eight 16-bit hexadecimal blocks separated by colons (:). This is an example IPv6 address 2001:0db8:1a2b:0015:0000:0000:1a2f:0000. IPv6 addresses can be abbreviated in two ways: • Leading zeros in a block can be omitted. So 2001:0db8:1a2b:0015:0000:0000:1a2f:0000 can be written as 2001:db8:1a2b:15:0:0:1a2f:0.

  • Page 212: Wireless

    H A P T E R Wireless 9.1 Wireless Overview This chapter describes the Zyxel Device’s Network Setting > Wireless screens. Use these screens to set up your Zyxel Device’s WiFi network and security settings. 9.1.1 What You Can Do in this Chapter This section describes the Zyxel Device’s Wireless screens.

  • Page 213: Wireless General Settings

    Chapter 9 Wireless Finding Out More Section 9.11 on page 231 for advanced technical information on WiFi networks. 9.2 Wireless General Settings Use this screen to enable the WiFi, enter the SSID and select the WiFi security mode. We recommend that you select More Secure to enable WPA3-SAE data encryption.
  • Page 214 Chapter 9 Wireless Figure 102 Network Setting > Wireless > General VMG/EMG/AM/DM/GM Series User’s Guide...
  • Page 215 Chapter 9 Wireless The following table describes the general WiFi labels in this screen. Table 43 Network Setting > Wireless > General LABEL DESCRIPTION Wireless Wireless Select Keep 2.4G and 5G wireless network name the same and the 2.4 GHz/5 GHz WiFi networks will use te same SSID and wireless security settings.

  • Page 216: No Security

    Chapter 9 Wireless Table 43 Network Setting > Wireless > General (continued) LABEL DESCRIPTION Security Mode Select More Secure (Recommended) to add security on this WiFi network. The WiFi clients which want to associate to this network must have same WiFi security settings as the Zyxel Device. When you select to use a security, additional options appears in this screen.
  • Page 217 Chapter 9 Wireless Figure 104 Wireless > General: More Secure: WPA2-PSK The following table describes the labels in this screen. Table 45 Wireless > General: More Secure: WPA2-PSK LABEL DESCRIPTION Security Level Select More Secure to enable data encryption. Security Mode Select a security mode from the drop-down list box.

  • Page 218: Guest/More Ap Screen

    Chapter 9 Wireless 9.3 Guest/More AP Screen Use this screen to configure a guest WiFi network that allows access to the Internet through the Zyxel Device. You can use one access point to provide several BSSs simultaneously. You can then assign varying security types to different SSIDs.
  • Page 219 Chapter 9 Wireless Note: If upstream/downstream bandwidth is empty, the Zyxel Device sets the value automatically. Setting a maximum upstream/downstream bandwidth will significantly decrease WiFi performance. Click the Edit icon next to an SSID in the Guest/More AP screen. The following screen displays. Figure 106 Network Setting >...
  • Page 220 Chapter 9 Wireless Table 48 Network Setting > Wireless > Guest/More AP > Edit (continued) LABEL DESCRIPTION WiFi/Wireless Network Settings WiFi/Wireless The SSID (Service Set IDentity) identifies the service set with which a wireless device is associated. Network Name Wireless devices associating to the access point (AP) must have the same SSID. Enter a descriptive name for the WiFi.

  • Page 221: Mac Authentication

    Chapter 9 Wireless Table 48 Network Setting > Wireless > Guest/More AP > Edit (continued) LABEL DESCRIPTION Encryption Select the encryption type (AES or TKIP+AES) for data encryption. Select AES if your WiFi clients can all use AES. Select TKIP+AES to allow the WiFi clients to use either TKIP or AES. Not all models support the TKIP+AES option.

  • Page 222: Wps

    Chapter 9 Wireless Table 49 Network Setting > Wireless > MAC Authentication (continued) LABEL DESCRIPTION MAC address List Add new MAC This field is available when you select Deny or Allow in the MAC Restrict Mode field. address Click this if you want to add a new MAC address entry to the MAC filter list below. WiFi Enter the MAC addresses of the devices that are allowed or denied access to the Zyxel...
  • Page 223 Chapter 9 Wireless Figure 108 Network Setting > Wireless > WPS The following table describes the labels in this screen. Table 50 Network Setting > Wireless > WPS LABEL DESCRIPTION General Slide this to the right to enable and have the Zyxel Device activate WPS. Otherwise, it is disabled.

  • Page 224: Wmm

    Chapter 9 Wireless Table 50 Network Setting > Wireless > WPS (continued) LABEL DESCRIPTION Method 3 Use this section to set up a WPS WiFi network by entering the PIN of the Zyxel Device into the client. Click this switch to make it turn blue. Click Apply to activate WPS method 3 on the Zyxel Device.

  • Page 225: Others Screen

    Chapter 9 Wireless The following table describes the labels in this screen. Table 51 Network Setting > Wireless > WMM LABEL DESCRIPTION WiFi WMM of SSID Select On to have the Zyxel Device automatically give the network (SSIDx) a priority level WiFi according to the ToS value in the IP header of packets it sends.
  • Page 226 Chapter 9 Wireless The following table describes the labels in this screen. Table 52 Network Setting > Wireless > Others LABEL DESCRIPTION RTS/CTS Data with its frame size larger than this value will perform the RTS (Request To Send)/CTS (Clear Threshold To Send) handshake.

  • Page 227: Channel Status

    Chapter 9 Wireless Table 52 Network Setting > Wireless > Others (continued) LABEL DESCRIPTION 802.11 Protection Enabling this feature can help prevent collisions in mixed-mode networks (networks with both IEEE 802.11b and IEEE 802.11g traffic). Select Auto to have the wireless devices transmit data after a RTS/CTS handshake. This helps improve IEEE 802.11g performance.

  • Page 228: Wlan Scheduler

    Chapter 9 Wireless Figure 111 Network Setting > Wireless > Channel Status The following table describes the labels in this screen. Table 53 Network Setting > Wireless > Channel Status LABEL DESCRIPTION Channel Monitor Scan WiFi LAN Click the Scan button to scan WiFi channels. Channels Channel Scan This displays the results of the channel scan.

  • Page 229: Add Or Edit Rules

    Chapter 9 Wireless Figure 112 Network Setting > Wireless > WLAN Scheduler The following table describes the labels in this screen. Table 54 Network Setting > Wireless > WLAN Scheduler LABEL DESCRIPTION WLAN Scheduler Click this switch to enable the WLAN scheduler function. This serves as the main switch to Access allow the individual rules to function.

  • Page 230: Mesh

    Chapter 9 Wireless Use this screen to create a scheduling rule to permit Internet traffic from each wireless network interface. Figure 113 Network Setting > Wireless > WLAN Scheduler > Add New Rule The following table describes the labels in this screen. Table 55 Network Setting >...

  • Page 231: Mpro Mesh

    Chapter 9 Wireless The Zyxel Device can function as a controller to automatically configure WiFi settings on extenders in the network as well as optimize bandwidth usage. The Zyxel Device optimizes bandwidth usage by directing WiFi clients to an extender (AP steering) or a 2.4GHz/ 5GHz band (band steering) that is less busy.
  • Page 232 Chapter 9 Wireless • A bridge is a radio that relays communications between access points and WiFi clients, extending a network’s range. Normally, a WiFi network operates in an “infrastructure” type of network. An “infrastructure” type of network has one or more access points and one or more WiFi clients. The WiFi clients connect to the access points.

  • Page 233: Additional Wifi Terms

    Chapter 9 Wireless 9.11.2 Additional WiFi Terms The following table describes some WiFi network terms and acronyms used in the Zyxel Device’s Web Configurator. Table 57 Additional WiFi Terms TERM DESCRIPTION RTS/CTS Threshold In a WiFi network which covers a large area, WiFi devices are sometimes not aware of each other’s presence.
  • Page 234 Chapter 9 Wireless Vanishing Point (which you know was made in 1971) you could use “70dodchal71vanpoi” as your security key. The following sections introduce different types of WiFi security you can set up in the WiFi network. 9.11.3.1 SSID Normally, the Zyxel Device acts like a beacon and regularly broadcasts the SSID in the area. You can hide the SSID instead, in which case the Zyxel Device does not broadcast the SSID.

  • Page 235: Signal Problems

    Chapter 9 Wireless For example, if the WiFi network has a RADIUS server, you can choose WPA, WPA2, or WPA3. If users do not log in to the WiFi network, you can choose no encryption, WPA2-PSK, or WPA3-SAE. Note: It is recommended that WiFi networks use WPA3-SAE, WPA2-PSK, or stronger encryption. The other types of encryption are better than none at all, but it is still possible for unauthorized WiFi devices to figure out the original information pretty quickly.

  • Page 236: Mbssid

    Chapter 9 Wireless Figure 116 Basic Service Set 9.11.6 MBSSID Traditionally, you need to use different APs to configure different Basic Service Sets (BSSs). As well as the cost of buying extra APs, there is also the possibility of channel interference. The Zyxel Device’s MBSSID (Multiple Basic Service Set IDentifier) function allows you to use one access point to provide several BSSs simultaneously.

  • Page 237: Wifi Protected Setup (Wps)

    Chapter 9 Wireless Use short preamble if you are sure all WiFi devices on the network support it, and to provide more efficient communications. Use the dynamic setting to automatically use short preamble when all WiFi devices on the network support it, otherwise the Zyxel Device uses long preamble.
  • Page 238 Chapter 9 Wireless Use the PIN method instead of the push-button configuration (PBC) method if you want to ensure that the connection is established between the devices you specify, not just the first two devices to activate WPS in range of each other. However, you need to log into the configuration interfaces of both devices to use the PIN method.
  • Page 239 Chapter 9 Wireless Figure 117 Example WPS Process: PIN Method 9.11.8.3 How WPS Works When two WPS-enabled devices connect, each device must assume a specific role. One device acts as the registrar (the device that supplies network and security settings) and the other device acts as the enrollee (the device that receives network and security settings.
  • Page 240 Chapter 9 Wireless Figure 118 How WPS Works The roles of registrar and enrollee last only as long as the WPS setup process is active (2 minutes). The next time you use WPS, a different device can be the registrar if necessary. The WPS connection process is like a handshake;...
  • Page 241 Chapter 9 Wireless Figure 119 WPS: Example Network Step 1 In step 2, you add another WiFi client to the network. You know that Client 1 supports registrar mode, but it is better to use AP1 for the WPS handshake with the new client since you must connect to the access point anyway in order to use the network.
  • Page 242 Chapter 9 Wireless Figure 121 WPS: Example Network Step 3 9.11.8.5 Limitations of WPS WPS has some limitations of which you should be aware. • When you use WPS, it works between two devices only. You cannot enroll multiple devices simultaneously, you must enroll one after the other.

  • Page 243: Home Networking

    H A P T E R Home Networking 10.1 Home Networking Overview A Local Area Network (LAN) is a shared communication system to which many computers are attached. A LAN is usually located in one immediate area such as a building or floor of a building. The LAN screens can help you configure a LAN DHCP server and manage IP addresses.
  • Page 244 Chapter 10 Home Networking 10.1.2.1 About LAN IP Address Similar to the way houses on a street share a common street name, so too do computers on a LAN share one common network number. This is known as an Internet Protocol address. Subnet Mask The subnet mask specifies the network number portion of an IP address.

  • Page 245: Before You Begin

    Chapter 10 Home Networking • Assigning lease times to mappings Windows Messenger is an example of an application that supports NAT traversal and UPnP. Cautions with UPnP The automated nature of NAT traversal applications in establishing their own services and opening firewall ports may present network security issues.
  • Page 246 Chapter 10 Home Networking Figure 123 Network Setting > Home Networking > LAN Setup VMG/EMG/AM/DM/GM Series User’s Guide...
  • Page 247 Chapter 10 Home Networking The following table describes the fields in this screen. Table 59 Network Setting > Home Networking > LAN Setup LABEL DESCRIPTION Interface Group Group Name Select the interface group that you want to configure its LAN settings. LAN IP Setup IP Address Enter the LAN IP address you want to assign to your Zyxel Device in dotted decimal notation,...
  • Page 248 Chapter 10 Home Networking Table 59 Network Setting > Home Networking > LAN Setup (continued) LABEL DESCRIPTION The Zyxel Device supports DNS proxy by default. The Zyxel Device sends out its own LAN IP address to the DHCP clients as the first DNS server address. DHCP clients use this first DNS server to send domain-name queries to the Zyxel Device.
  • Page 249 Chapter 10 Home Networking Table 59 Network Setting > Home Networking > LAN Setup (continued) LABEL DESCRIPTION MLD Mode Select Standard Mode to forward multicast packets to a port that joins the multicast group and broadcast unknown multicast packets from the WAN to all LAN ports. Select Blocking Mode to block all unknown multicast packets from the WAN.

  • Page 250: Static Dhcp

    Chapter 10 Home Networking Table 59 Network Setting > Home Networking > LAN Setup (continued) LABEL DESCRIPTION DNS Query Scenario Select how the Zyxel Device handles clients’ DNS information requests. IPv4/IPv6 DNS Server: The Zyxel Device forwards the requests to both the IPv4 and IPv6 DNS servers and sends clients the first DNS information it receives.
  • Page 251 Chapter 10 Home Networking The following table describes the labels in this screen. Table 60 Network Setting > Home Networking > Static DHCP LABEL DESCRIPTION Static DHCP Click this to configure a static DHCP entry. Configuration This is the index number of the entry. Status This field displays whether the client is connected to the Zyxel Device.

  • Page 252: Upnp

    Chapter 10 Home Networking Table 61 Network Setting > Home Networking > Static DHCP: Static DHCP Configuration (continued) LABEL DESCRIPTION IP Address Enter the IP address that you want to assign to the computer on your LAN with the MAC address that you will also specify if you select Manual Input in the previous field.

  • Page 253: Lan Additional Subnet

    Chapter 10 Home Networking The following table describes the labels in this screen. Table 62 Network Settings > Home Networking > UPnP LABEL DESCRIPTION UPnP State UPnP Select Enable to activate UPnP. Be aware that anyone could use a UPnP application to open the Web Configurator's login screen without entering the Zyxel Device's IP address (although you must still enter the password to access the Web Configurator).
  • Page 254 Chapter 10 Home Networking Figure 127 Network Setting > Home Networking > Additional Subnet The following table describes the labels in this screen. Table 63 Network Setting > Home Networking > Additional Subnet LABEL DESCRIPTION IP Alias Setup Group Name Select the interface group name for which you want to configure the IP alias settings.

  • Page 255: Stb Vendor Id

    Chapter 10 Home Networking Table 63 Network Setting > Home Networking > Additional Subnet (continued) LABEL DESCRIPTION Subnet Mask Enter the public IPv4 subnet mask provided by your ISP. Offer Public IP Click this switch to enable the Zyxel Device to provide public IP addresses by DHCP server. by DHCP Otherwise, click to disable.

  • Page 256: Wake On Lan

    Chapter 10 Home Networking 10.7 Wake on LAN Wake on LAN (WoL) allows you to remotely turn on a device on the network, such as a computer, storage device or media server. To use this feature, the remote hardware (for example the network adapter on a computer) must support Wake on LAN using the ‘Magic Packet’...

  • Page 257: Technical Reference

    Chapter 10 Home Networking Figure 130 Network Setting > Home Networking > TFTP Server Name The following table describes the labels in this screen. Table 66 Network Setting > Home Networking > TFTP Server Name LABEL DESCRIPTION TFTP Server Enter the IP address or the host name of a single TFTP server. Name Cancel Click Cancel to restore your previously saved settings.

  • Page 258: Dhcp Setup

    Chapter 10 Home Networking 10.9.1 DHCP Setup DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at start-up from a server. You can configure the Zyxel Device as a DHCP server or disable it.

  • Page 259: Turn On Upnp In Windows 10 Example

    Chapter 10 Home Networking you must enable the Network Address Translation (NAT) feature of the Zyxel Device. The Internet Assigned Number Authority (IANA) reserved this block of addresses specifically for private use; please do not use any other number unless you are told otherwise. Let's say you select 192.168.1.0 as the network number;...
  • Page 260 Chapter 10 Home Networking Click Network and Sharing Center. Click Change advanced sharing settings. VMG/EMG/AM/DM/GM Series User’s Guide...

  • Page 261: Auto-Discover Your Upnp-Enabled Network Device

    Chapter 10 Home Networking Under Domain, select Turn on network discovery and click Save Changes. Network discovery allows your computer to find other computers and devices on the network and other computers on the network to find your computer. This makes it easier to share files and printers. 10.10.1 Auto-discover Your UPnP-enabled Network Device Before you follow these steps, make sure you already have UPnP activated on the Zyxel Device and in your computer.
  • Page 262 Chapter 10 Home Networking Make sure your computer is connected to the LAN port of the Zyxel Device. Open File Explorer and click Network. Right-click the Zyxel Device icon and select Properties. Figure 132 Network Connections In the Internet Connection Properties window, click Settings to see port mappings. Figure 133 Internet Connection Properties You may edit or delete the port mappings or click Add to manually add port mappings.
  • Page 263 Chapter 10 Home Networking Figure 134 Internet Connection Properties: Advanced Settings Figure 135 Internet Connection Properties: Advanced Settings: Add Note: When the UPnP-enabled device is disconnected from your computer, all port mappings will be deleted automatically. Click OK. Check the network icon on the system tray to see your Internet connection status. Figure 136 System Tray Icon To see more details about your current Internet connection status, right click the network icon in the system tray and click Open Network &...

  • Page 264: Web Configurator Access With Upnp In Windows 10

    Chapter 10 Home Networking Figure 137 Internet Connection Status 10.11 Web Configurator Access with UPNP in Windows 10 Follow the steps below to access the Web Configurator. Open File Explorer. Click Network. VMG/EMG/AM/DM/GM Series User’s Guide...
  • Page 265 Chapter 10 Home Networking Figure 138 Network Connections An icon with the description for each UPnP-enabled device displays under Network Infrastructure. Right-click the icon for your Zyxel Device and select View device webpage. The Web Configurator login screen displays. Figure 139 Network Connections: Network Infrastructure Right-click the icon for your Zyxel Device and select Properties.
  • Page 266 Chapter 10 Home Networking Figure 140 Network Connections: Network Infrastructure: Properties: Example VMG/EMG/AM/DM/GM Series User’s Guide...

  • Page 267: Routing

    H A P T E R Routing 11.1 Routing Overview The Zyxel Device usually uses the default gateway to route outbound traffic from computers on the LAN to the Internet. To have the Zyxel Device send data to devices not reachable through the default gateway, use static routes.

  • Page 268: Add Or Edit Static Route

    Chapter 11 Routing Figure 142 Network Setting > Routing > Static Route The following table describes the labels in this screen. Table 67 Network Setting > Routing > Static Route LABEL DESCRIPTION Add New Static Click this to set up a new static route on the Zyxel Device. Route This is the number of an individual static route.
  • Page 269 Chapter 11 Routing Figure 143 Network Setting > Routing > Static Route > Add New Static Route The following table describes the labels in this screen. Table 68 Network Setting > Routing > Static Route > Add New Static Route LABEL DESCRIPTION Active...
  • Page 270 Chapter 11 Routing computer B (in N2 network), the traffic is sent to the Zyxel Device’s WAN default gateway by default. In this case, B will never receive the traffic. You need to specify a static routing rule on the Zyxel Device to specify R as the router in charge of forwarding traffic to N2.
  • Page 271 Chapter 11 Routing This tutorial uses the following example IP settings: Table 69 IP Settings in this Tutorial DEVICE / COMPUTER IP ADDRESS The Zyxel Device’s WAN 172.16.1.1 The Zyxel Device’s LAN 192.168.1.1 IP Type IPv4 Use Interface Default 192.168.1.34 R’s N1 192.168.1.253 R’s N2...

  • Page 272: Dns Route

    Chapter 11 Routing 11.3 DNS Route Use this screen to view and configure DNS routes on the Zyxel Device. A DNS route entry defines a policy for the Zyxel Device to forward a particular DNS query to a specific WAN interface. Click Network Setting >...

  • Page 273: Add Or Edit Dns Route

    Chapter 11 Routing Table 70 Network Setting > Routing > DNS Route (continued) LABEL DESCRIPTION Status This field indicates whether the rule is active (yellow bulb) or not (gray bulb). Domain Name This is the domain name to which the DNS route applies. WAN Interface This is the WAN interface through which the matched DNS request is routed.

  • Page 274: Policy Route

    Chapter 11 Routing 11.4 Policy Route By default, the Zyxel Device routes packets based on the shortest path to the destination address. Policy routes allow you to override the default behavior and route packets based on other criteria, such as the source address.
  • Page 275 Chapter 11 Routing Figure 147 Network Setting > Routing > Policy Route: Add or Edit The following table describes the labels in this screen. Table 73 Network Setting > Routing > Policy Route: Add or Edit LABEL DESCRIPTION Active Click this switch to activate this policy route. Otherwise, click to disable. Route Name Enter a descriptive name of this policy route.

  • Page 276: Rip Overview

    Chapter 11 Routing 11.5 RIP Overview Routing Information Protocol (RIP, RFC 1058 and RFC 1389) allows the Zyxel Device to exchange routing information with other routers. To activate RIP for the WAN interface, select the supported RIP version and operation. 11.5.1 RIP Click Network Setting >...

  • Page 277: Quality Of Service (Qos)

    H A P T E R Quality of Service (QoS) 12.1 QoS Overview Quality of Service (QoS) refers to both a network’s ability to deliver data with minimum delay, and the networking methods used to control the use of bandwidth. Without QoS, all traffic data is equally likely to be dropped when the network is congested.
  • Page 278 Chapter 12 Quality of Service (QoS) QoS versus CoS QoS is used to prioritize source-to-destination traffic flows. All packets in the same flow are given the same priority. CoS (class of service) is a way of managing traffic in a network by grouping similar types of traffic together and treating each type as a class.

  • Page 279: Quality Of Service General Settings

    Chapter 12 Quality of Service (QoS) The Zyxel Device supports three incoming traffic metering algorithms: Token Bucket Filter (TBF), Single Rate Two Color Maker (srTCM), and Two Rate Two Color Marker (trTCM). You can specify actions which are performed on the colored packets. See Section 12.8 on page 294 for more information on each metering algorithm.
  • Page 280 Chapter 12 Quality of Service (QoS) Figure 149 Network Setting > QoS > General The following table describes the labels in this screen. Table 75 Network Setting > QoS > General LABEL DESCRIPTION Click this switch to enable QoS to improve your network performance. WAN Managed Enter the amount of upstream bandwidth for the WAN interfaces that you want to allocate using Upstream...

  • Page 281: Queue Setup

    Chapter 12 Quality of Service (QoS) Table 75 Network Setting > QoS > General (continued) LABEL DESCRIPTION Upstream Traffic Select how the Zyxel Device assigns priorities to various upstream traffic flows. Priority Assigned • None: Disables auto priority mapping and has the Zyxel Device put packets into the queues according to your classification rules.

  • Page 282: Add A Qos Queue

    Chapter 12 Quality of Service (QoS) The following table describes the labels in this screen. Table 76 Network Setting > QoS > Queue Setup LABEL DESCRIPTION Add New Click this to create a new queue entry. Queue Queue Setting Select between SP (Strict Priority), SP+WRR, or WRR (Weighted Round Robin). SP scheduling singles out the highest priority queue and ensures all queued traffic in this queue is transmitted before servicing the lower priority queues.
  • Page 283 Chapter 12 Quality of Service (QoS) Figure 151 Network Setting > QoS > Queue Setup > Add New Queue/Edit The following table describes the labels in this screen. Table 77 Network Setting > QoS > Queue Setup > Add New Queue/Edit LABEL DESCRIPTION Active...

  • Page 284: Qos Classification Setup

    Chapter 12 Quality of Service (QoS) 12.5 QoS Classification Setup Use this screen to add, edit or delete QoS classifiers. A classifier groups traffic into data flows according to specific criteria such as the source address, destination address, source port number, destination port number or incoming interface.

  • Page 285: Add Or Edit Qos Class

    Chapter 12 Quality of Service (QoS) 12.5.1 Add or Edit QoS Class Click Add New Classification in the Classification Setup screen or the Edit icon next to a classifier to open the following screen. Figure 153 Network Setting > QoS > Classification Setup > Add New Classification/Edit: Step1 VMG/EMG/AM/DM/GM Series User’s Guide...
  • Page 286 Chapter 12 Quality of Service (QoS) Figure 154 Network Setting > QoS > Classification Setup > Add New Classification/Edit: Step2 Figure 155 Network Setting > QoS > Classification Setup > Add New Classification/Edit: Step3 Figure 156 Network Setting > QoS > Classification Setup > Add New Classification/Edit: Step4 VMG/EMG/AM/DM/GM Series User’s Guide...
  • Page 287 Chapter 12 Quality of Service (QoS) Figure 157 Network Setting > QoS > Classification Setup > Add New Classification/Edit: Step5 The following table describes the labels in this screen. Table 79 Network Setting > QoS > Classification Setup > Add New Classification/Edit LABEL DESCRIPTION Step1: Class Configuration...
  • Page 288 Chapter 12 Quality of Service (QoS) Table 79 Network Setting > QoS > Classification Setup > Add New Classification/Edit (continued) LABEL DESCRIPTION MAC Mask Enter the mask for the specified MAC address to determine which bits a packet’s MAC address should match.

  • Page 289: Qos Shaper Setup

    Chapter 12 Quality of Service (QoS) Table 79 Network Setting > QoS > Classification Setup > Add New Classification/Edit (continued) LABEL DESCRIPTION DSCP This field is available only when you select IP or IPv6 in the Ether Type field. Select this option and specify a DSCP (DiffServ Code Point) number between 0 and 63 in the field provided.

  • Page 290: Add Or Edit A Qos Shaper

    Chapter 12 Quality of Service (QoS) Figure 158 Network Setting > QoS > Shaper Setup The following table describes the labels in this screen. Table 80 Network Setting > QoS > Shaper Setup LABEL DESCRIPTION Add New Click this to create a new entry. Shaper This is the index number of the entry.

  • Page 291: Qos Policer Setup

    Chapter 12 Quality of Service (QoS) The following table describes the labels in this screen. Table 81 Network Setting > QoS > Shaper Setup > Add New Shaper/Edit LABEL DESCRIPTION Active Click this switch to enable the shaper. Interface Select a Zyxel Device's interface through which traffic in this shaper applies. Rate Limit Enter the average rate limit of traffic bursts for this shaper.

  • Page 292: Add Or Edit A Qos Policer

    Chapter 12 Quality of Service (QoS) Table 82 Network Setting > QoS > Policer Setup (continued) LABEL DESCRIPTION Action This shows how the policer has the Zyxel Device treat different types of traffic belonging to the policer’s member QoS classes. Modify Click the Edit icon to edit the policer.
  • Page 293 Chapter 12 Quality of Service (QoS) Table 83 Network Setting > QoS > Policer Setup > Add New Policer/Edit (continued) LABEL DESCRIPTION Meter Type This shows the traffic metering algorithm used in this policer. The Simple Token Bucket algorithm uses tokens in a bucket to control when traffic can be transmitted.

  • Page 294: Technical Reference

    Chapter 12 Quality of Service (QoS) Table 83 Network Setting > QoS > Policer Setup > Add New Policer/Edit (continued) LABEL DESCRIPTION Available Class Select a QoS classifier to apply this QoS policer to traffic that matches the QoS classifier. Selected Class Highlight a QoS classifier in the Available Class box and use the >...
  • Page 295 Chapter 12 Quality of Service (QoS) packets differently depending on the code points without the need to negotiate paths or remember state information for every flow. In addition, applications do not have to request a particular service or give advanced notice of where the traffic is going. DSCP and Per-Hop Behavior DiffServ defines a new Differentiated Services (DS) field to replace the Type of Service (TOS) field in the IP header.
  • Page 296 Chapter 12 Quality of Service (QoS) Table 85 Internal Layer2 and Layer3 QoS Mapping (continued) LAYER 2 LAYER 3 PRIORITY IEEE 802.1P USER QUEUE TOS (IP IP PACKET LENGTH PRIORITY (ETHERNET DSCP PRECEDENCE) (BYTE) PRIORITY) 010110 010100 010010 010000 011110 <250 011100 011010...
  • Page 297 Chapter 12 Quality of Service (QoS) Configure the bucket size to be equal to or less than the amount of the bandwidth that the interface can support. It does not help if you set it to a bucket size over the interface’s capability. The smaller the bucket size, the lower the data transmission rate and that may cause outgoing packets to be dropped.
  • Page 298 Chapter 12 Quality of Service (QoS) The following shows how tokens work with incoming packets in trTCM: • A packet arrives. If the number of tokens in the PBS bucket is less than the size of the packet (in bytes), the packet is marked red and may be dropped regardless of the CBS bucket.

  • Page 299: Network Address Translation (Nat)

    H A P T E R Network Address Translation (NAT) 13.1 NAT Overview NAT (Network Address Translation – NAT, RFC 1631) is the translation of the IP address of a host in a packet, for example, the source address of an outgoing packet, used within one network to a different IP address known within another network.

  • Page 300: Port Forwarding

    Chapter 13 Network Address Translation (NAT) Port Forwarding A port forwarding set is a list of inside (behind NAT on the LAN) servers, for example, web or FTP, that you can make visible to the outside world even though NAT makes your whole inside network appear as a single computer to the outside world.

  • Page 301: Port Forwarding

    Chapter 13 Network Address Translation (NAT) 13.2.1 Port Forwarding Click Network Setting > NAT to open the Port Forwarding screen. Note: TCP port 7547 is reserved for system use. Figure 163 Network Setting > NAT > Port Forwarding The following table describes the fields in this screen. Table 86 Network Setting >...
  • Page 302 Chapter 13 Network Address Translation (NAT) Figure 164 Network Setting > NAT > Port Forwarding: Add or Edit Note: To configure port forwarding, you need to have the same configurations in the Start Port, End Port, Translation Start Port, and Translation End Port fields. To configure port translation, you need to have different configurations in the Start Port, End Port, Translation Start Port, and Translation End Port fields.

  • Page 303: Port Triggering

    Chapter 13 Network Address Translation (NAT) Table 87 Network Setting > NAT > Port Forwarding: Add or Edit (continued) LABEL DESCRIPTION Start Port Configure this for a user-defined entry. Enter the original destination port for the packets. To forward only one port, enter the port number again in the End Port field. To forward a series of ports, enter the start port number here and the end port number in the End Port field.
  • Page 304 Chapter 13 Network Address Translation (NAT) Figure 165 Trigger Port Forwarding Process: Example Jane requests a file from the Real Audio server (port 7070). Port 7070 is a “trigger” port and causes the Zyxel Device to record Jane’s computer IP address. The Zyxel Device associates Jane's computer IP address with the "open"...

  • Page 305: Add Or Edit Port Triggering Rule

    Chapter 13 Network Address Translation (NAT) Table 88 Network Setting > NAT > Port Triggering (continued) LABEL DESCRIPTION Service Name This field displays the name of the service used by this rule. WAN Interface This field shows the WAN interface through which the service is forwarded. Trigger Start Port The trigger port is a port (or a range of ports) that causes (or triggers) the Zyxel Device to record the IP address of the LAN computer that sent the traffic to a server on the WAN.

  • Page 306: Dmz

    Chapter 13 Network Address Translation (NAT) The following table describes the labels in this screen. Table 89 Network Setting > NAT > Port Triggering: Add or Edit LABEL DESCRIPTION Active Click this switch to activate this rule. Service Name Enter a name to identify this rule. You can use up to 256 printable characters except [ " ], [ ` ], [ ' ], [ <...

  • Page 307: Alg

    Chapter 13 Network Address Translation (NAT) Figure 168 Network Setting > NAT > DMZ The following table describes the fields in this screen. Table 90 Network Setting > NAT > DMZ LABEL DESCRIPTION Default Server Enter the IP address of the default server which receives packets from ports that are not Address specified in the Port Forwarding screen.

  • Page 308: Address Mapping

    Chapter 13 Network Address Translation (NAT) Figure 169 Network Setting > NAT > ALG The following table describes the fields in this screen. Table 91 Network Setting > NAT > ALG LABEL DESCRIPTION NAT ALG Enable this to make sure applications such as FTP and file transfer in IM applications work correctly with port-forwarding and address-mapping rules.

  • Page 309: Add New Rule Screen

    Chapter 13 Network Address Translation (NAT) Figure 170 Network Setting > NAT > Address Mapping The following table describes the fields in this screen. Table 92 Network Setting > NAT > Address Mapping LABEL DESCRIPTION Add New Rule Click this to create a new rule. Rule Name This is the name of the rule.
  • Page 310 Chapter 13 Network Address Translation (NAT) Figure 171 Network Setting > NAT > Address Mapping > Add New Rule The following table describes the fields in this screen. Table 93 Network Setting > NAT > Address Mapping > Add New Rule LABEL DESCRIPTION Rule Name...

  • Page 311: Sessions

    Chapter 13 Network Address Translation (NAT) 13.7 Sessions Use this screen to limit the number of concurrent NAT sessions a client can use, to ensure that no single client uses up too many available NAT sessions. Some applications, such as P2P file sharing, demand a greater number of NAT sessions in order to get a better uploading and downloading rate.

  • Page 312: Nat Definitions

    Chapter 13 Network Address Translation (NAT) 13.8.1 NAT Definitions Inside or outside denotes where a host is located relative to the Zyxel Device, for example, the computers of your subscribers are the inside hosts, while the web servers on the Internet are the outside hosts.

  • Page 313: How Nat Works

    Chapter 13 Network Address Translation (NAT) 13.8.3 How NAT Works Each packet has two addresses – a source address and a destination address. For outgoing packets, the ILA (Inside Local Address) is the source address on the LAN, and the IGA (Inside Global Address) is the source address on the WAN.
  • Page 314 Chapter 13 Network Address Translation (NAT) Figure 174 NAT Application With IP Alias Port Forwarding: Services and Port Numbers The most often used port numbers are shown in the following table. Please refer to RFC 1700 for further information about port numbers. Please also refer to the Supporting CD for more examples and details on port forwarding and NAT.
  • Page 315 Chapter 13 Network Address Translation (NAT) Port Forwarding Example Let's say you want to assign ports 21 – 25 to one FTP, Telnet and SMTP server (A in the example), port 80 to another (B in the example) and assign a default server IP address of 192.168.1.35 to a third (C in the example).

  • Page 316: Dns

    H A P T E R 14.1 DNS Overview DNS (Domain Name System) is for mapping a domain name to its corresponding IP address and vice versa. The DNS server is extremely important because without it, you must know the IP address of a machine before you can access it.

  • Page 317: What You Need To Know

    Chapter 14 DNS 14.1.2 What You Need To Know DYNDNS Wildcard Enabling the wildcard feature for your host causes *.yourhost.dyndns.org to be aliased to the same IP address as yourhost.dyndns.org. This feature is useful if you want to be able to use, for example, www.yourhost.dyndns.org and still reach your hostname.

  • Page 318: Add Or Edit Dns Entry

    Chapter 14 DNS 14.2.1 Add or Edit DNS Entry You can manually add or edit the Zyxel Device’s DNS name and IP address entry. Click Add New DNS Entry in the DNS Entry screen or the Edit icon next to the entry you want to edit. The screen shown next appears.
  • Page 319 Chapter 14 DNS Figure 178 Network Setting > DNS > Dynamic DNS The following table describes the fields in this screen. Table 99 Network Setting > DNS > Dynamic DNS LABEL DESCRIPTION Dynamic DNS Setup Dynamic DNS Select Enable to use dynamic DNS. Service Provider Select your Dynamic DNS service provider from the drop-down list box.
  • Page 320 Chapter 14 DNS Table 99 Network Setting > DNS > Dynamic DNS (continued) LABEL DESCRIPTION Cancel Click Cancel to exit this screen without saving. Apply Click Apply to save your changes. VMG/EMG/AM/DM/GM Series User’s Guide...

  • Page 321: Igmp/Mld

    H A P T E R IGMP/MLD 15.1 IGMP/MLD Overview Multicast delivers IP packets to a group of hosts on the network defined by multicast groups. Membership to these multicast groups are established using IGMP/MLD. Use the IGMP/MLD screen to configure IGMP/MLD group settings. 15.1.1 What You Need To Know Multicast and IGMP Multicast on page 210...
  • Page 322 Chapter 15 IGMP/MLD Note: Some models might only support IGMP/MLD Default Version configuration. Figure 179 Network Setting > IGMP/MLD The following table describes the labels in this screen. Table 100 Network Setting > IGMP/MLD LABEL DESCRIPTION IGMP/MLD Configuration Default Version Enter the version of IGMP (1~3) and MLD (1~2) that you want the Zyxel Device to use on the WAN.
  • Page 323 Chapter 15 IGMP/MLD Table 100 Network Setting > IGMP/MLD (continued) LABEL DESCRIPTION Query Interval Enter the number of seconds the Zyxel Device sends a query message to hosts to get the group membership information. Query Response Enter the maximum number of seconds the Zyxel Device can wait for receiving a General Query Interval message.

  • Page 324: Vlan Group

    H A P T E R VLAN Group 16.1 VLAN Group Overview A VLAN (Virtual Local Area Network) allows a physical network to be partitioned into multiple logical networks. Devices on a logical network belong to one group. A device can belong to more than one group.

  • Page 325: Vlan Group Settings

    Chapter 16 VLAN Group 16.2 VLAN Group Settings This screen shows the VLAN groups created on the Zyxel Device. Click Network Setting > VLAN Group to open the following screen. Figure 181 Network Setting > VLAN Group The following table describes the fields in this screen. Table 101 Network Setting >...
  • Page 326 Chapter 16 VLAN Group Figure 182 Network Setting > VLAN Group > Add New VLAN Group/Edit The following table describes the fields in this screen. Table 102 Network Setting > VLAN Group > Add New VLAN Group/Edit LABEL DESCRIPTION VLAN ID Enter a unique ID number, from 1 to 4,094, to identify this VLAN group.

  • Page 327: Interface Grouping

    H A P T E R Interface Grouping 17.1 Interface Grouping Overview By default, all LAN and WAN interfaces on the Zyxel Device are in the same group and can communicate with each other. Create interface groups to have the Zyxel Device assign IP addresses in different domains to different groups.

  • Page 328: Interface Group Configuration

    Chapter 17 Interface Grouping You can use this screen to create new user-defined interface groups or modify existing ones. Interfaces that do not belong to any user-defined group always belong to the default group. Click Network Setting > Interface Grouping to open the following screen. Figure 184 Network Setting >...
  • Page 329 Chapter 17 Interface Grouping Figure 185 Network Setting > Interface Grouping > Add New Interface Group The following table describes the fields in this screen. Table 104 Network Setting > Interface Grouping > Add New Interface Group/Edit LABEL DESCRIPTION Group Name Enter a descriptive name for this interface group.

  • Page 330: Interface Grouping Criteria

    Chapter 17 Interface Grouping Table 104 Network Setting > Interface Grouping > Add New Interface Group/Edit (continued) LABEL DESCRIPTION Automatically Click Add to identify LAN hosts to add to the interface group by criteria such as the type of the Add Clients With hardware or firmware.
  • Page 331 Chapter 17 Interface Grouping The following table describes the fields in this screen. Table 105 Network Setting > Interface Grouping > Interface Group Configuration: Add LABEL DESCRIPTION Source MAC Enter the source MAC address of the packet. Address DHCP Option 60 Select this option and enter the Vendor Class Identifier (Option 60) of the matched traffic, such as the type of the hardware or firmware.

  • Page 332: Usb Service

    H A P T E R USB Service 18.1 USB Service Overview You can share files on a USB memory stick or hard drive connected to your Zyxel Device with users on your network. The following figure is an overview of the Zyxel Device’s file server feature. Computers A and B can access files on a USB device (C) which is connected to the Zyxel Device.

  • Page 333: Before You Begin

    Chapter 18 USB Service Shares When settings are set to default, each USB device connected to the Zyxel Device is given a folder, called a “share”. If a USB hard drive connected to the Zyxel Device has more than one partition, then each partition will be allocated a share.
  • Page 334 Chapter 18 USB Service Figure 188 Network Setting > USB Service Note: The Share Directory List is only visible when you connect a USB device. Each field is described in the following table. Table 106 Network Setting > USB Service LABEL DESCRIPTION Information...

  • Page 335: Add New Share

    Chapter 18 USB Service Table 106 Network Setting > USB Service (continued) LABEL DESCRIPTION Share Name This field displays the name of the file you shared. Share Path This field displays the location in the USB of the file you shared. Share This field displays a description of the file you shared.

  • Page 336: Add New User Screen

    Chapter 18 USB Service The following table describes the labels in this menu. Table 107 Network Setting > USB Service > Add New Share LABEL DESCRIPTION Volume Select the volume in the USB storage device that you want to add as a share in the Zyxel Device.
  • Page 337 Chapter 18 USB Service To change your Zyxel Device’s media server settings, click Network Setting > USB Service > Media Server. The screen appears as shown. Figure 190 Network Setting > USB Service > Media Server The following table describes the labels in this menu. Table 108 Network Setting >...

  • Page 338: Home Connectivity

    H A P T E R Home Connectivity 19.1 Home Connectivity Overview ONE Connect complies with the IEEE 1905.1 standard to allow auto-detection and auto-configuration of compatible Zyxel Devices in a wireless network using the Multy Pro App without Zyxel MESH. You can check what Zyxel Devices are in the wireless network, do speed tests, turn on or turn off Zyxel Devices, block or allow access to the wireless network, and set up a guest WiFi network.
  • Page 339 Chapter 19 Home Connectivity Figure 192 Network Setting > Home Connectivity VMG/EMG/AM/DM/GM Series User’s Guide...

  • Page 340: Firewall

    H A P T E R Firewall 20.1 Firewall Overview This chapter shows you how to enable the Zyxel Device firewall. Use the firewall to protect your Zyxel Device and network from attacks by hackers on the Internet and control access to it. The firewall: •...

  • Page 341: Firewall

    Chapter 20 Firewall Denial-of-Service (DoS) attacks are aimed at devices and networks with a connection to the Internet. Their goal is not to steal information, but to disable a device or network so users no longer have access to network resources. The Zyxel Device is pre-configured to automatically detect and thwart all known DoS attacks.

  • Page 342: What You Can Do In This Chapter

    Chapter 20 Firewall 20.2.1 What You Can Do in this Chapter • Use the General screen to configure the security level of the firewall on the Zyxel Device (Section 20.3 on page 342). • Use the Protocol screen to add or remove predefined Internet services and configure firewall rules (Section 20.4 on page 343).

  • Page 343: Protocol (Customized Services)

    Chapter 20 Firewall The following table describes the labels in this screen. Table 109 Security > Firewall > General LABEL DESCRIPTION IPv4 Enable firewall protection when using IPv4 (Internet Protocol version 4). Firewall IPv6 Enable firewall protection when using IPv6 (Internet Protocol version 6). Firewall High This setting blocks all traffic to and from the Internet.

  • Page 344: Add Customized Service

    Chapter 20 Firewall Table 110 Security > Firewall > Protocol (continued) LABEL DESCRIPTION Ports/Protocol Number This shows the port number or range and the IP protocol (TCP or UDP) that defines your customized service. Modify Click this to edit a customized service. 20.4.1 Add Customized Service Add a customized rule or edit an existing rule by specifying the protocol and the port numbers.

  • Page 345: Access Control (Rules)

    Chapter 20 Firewall 20.5 Access Control (Rules) An Access Control List (ACL) rule is a manually-defined rule that can accept, reject, or drop incoming or outgoing packets from your network. This screen displays a list of the configured incoming or outgoing filtering rules.

  • Page 346: Add New Acl Rule

    Chapter 20 Firewall 20.5.1 Add New ACL Rule Click Add new ACL rule or the Edit icon next to an existing ACL rule in the Access Control screen. The following screen displays. Use this screen to accept, reject, or drop packets based on specified parameters, such as source and destination IP address, IP Type, service, and direction.

  • Page 347: Dos

    Chapter 20 Firewall Table 113 Security > Firewall > Access Control > Add New ACL Rule (continued) LABEL DESCRIPTION Source IP Address If you selected Specific IP Address in the previous item, enter the source device’s IP address here. Otherwise this field will be hidden if you select the detected device. Select Destination If you want your rule to apply to packets with a particular (single) IP, select Specific IP Device...

  • Page 348: Firewall Technical Reference

    Chapter 20 Firewall Figure 199 Security > Firewall > DoS The following table describes the labels in this screen. Table 114 Security > Firewall > DoS LABEL DESCRIPTION DoS Protection Enable this to protect against DoS attacks. The Zyxel Device will drop sessions that surpass Blocking maximum thresholds.

  • Page 349: Guidelines For Security Enhancement With Your Firewall

    Chapter 20 Firewall • LAN to WAN These rules specify which computers on the LAN can access which computers or services on the WAN. By default, the Zyxel Device’s stateful packet inspection drops packets traveling in the following directions: • WAN to LAN These rules specify which computers on the WAN can access which computers or services on the LAN.

  • Page 350: Security Considerations

    Chapter 20 Firewall Protect against IP spoofing by making sure the firewall is active. Keep the firewall in a secured (locked) room. 20.7.3 Security Considerations Note: Incorrectly configuring the firewall may block valid access or introduce security risks to the Zyxel Device and your protected network. Use caution when creating or deleting firewall rules and test your rules after you configure them.

  • Page 351: Mac Filter

    H A P T E R MAC Filter 21.1 MAC Filter Overview You can configure the Zyxel Device to permit access to clients based on their MAC addresses in the MAC Filter screen. This applies to wired connections. Every Ethernet device has a unique MAC (Media Access Control) address.

  • Page 352: Add New Rule

    Chapter 21 MAC Filter The following table describes the labels in this screen. Table 115 Security > MAC Filter LABEL DESCRIPTION MAC Address Filter Select Enable to activate the MAC filter function. MAC Restrict Mode Select Allow to only permit the listed MAC addresses access to the Zyxel Device. Select Deny to permit anyone access to the Zyxel Device except the listed MAC addresses.
  • Page 353 Chapter 21 MAC Filter Table 116 Security > MAC Filter > Add New Rule (continued) LABEL DESCRIPTION Delete Click the Delete icon to delete an existing rule. Cancel Click Cancel to restore your previously saved settings. Apply Click Apply to save your changes. VMG/EMG/AM/DM/GM Series User’s Guide...

  • Page 354: Home Security

    Chapter 22 Home Security Chapter 22 Home Security 22.1 Home Security Overview The Zyxel Device supports URL (Uniform Resource Locator) filtering that allows you to block user access to specific websites containing inappropriate or harmful content. Users on your network will not be able to enter the websites with URL domain names, keywords or full URLs you specify.
  • Page 355 Chapter 22 Home Security The following table describes the labels in this screen. Table 117 Security > Home Security LABEL DESCRIPTION Enter Website URL Enter the URL of a website or URL keyword to which the Zyxel Device blocks access. Click Block to add the website to the Block List.

  • Page 356: Parental Control

    H A P T E R Parental Control 23.1 Parental Control Overview Parental control allows you to limit the time a user can access the Internet and prevent users from viewing inappropriate content or participating in specified online activities. Your parental control screens may be different depending on the model you’re using. Some Zyxel Devices support scheduling, some support scheduling and URL filtering.

  • Page 357: Add Or Edit A Parental Control Profile

    Chapter 23 Parental Control The following table describes the fields in this screen. Table 118 Security > Parental Control LABEL DESCRIPTION General Parental Control Select Enable to activate parental control on the Zyxel Device. Parental Control Profile (PCP) Add new PCP Click this if you want to configure a new Parental Control Profile (PCP).
  • Page 358 Chapter 23 Parental Control Figure 204 Security > Parental Control > Add or Edit PCP (General, Rule List & Internet Access Schedule) VMG/EMG/AM/DM/GM Series User’s Guide...
  • Page 359 Chapter 23 Parental Control Figure 205 Security > Parental Control > Add or Edit PCP (Network Service & Site/URL Keyword) The following table describes the fields in this screen. Table 119 Security > Parental Control >Add or Edit PCP LABEL DESCRIPTION General Active...
  • Page 360 Chapter 23 Parental Control Table 119 Security > Parental Control >Add or Edit PCP (continued) LABEL DESCRIPTION Modify Click the Edit icon to go to the screen where you can edit the rule. Click the Delete icon to delete an existing rule. Site/URL Keyword Block or Allow If you select Block the Web URLs, the Zyxel Device prohibits the users from viewing the Web sites...
  • Page 361 Chapter 23 Parental Control The following table describes the fields in this screen. Table 120 Security > Parental Control > Add or Edit PCP > Add New Service LABEL DESCRIPTION Add New Select the name of the service from the drop-down list. Otherwise, select User Define and specify Service the name, protocol, and port of the service.

  • Page 362: Scheduler Rule

    H A P T E R Scheduler Rule 24.1 Scheduler Rule Overview A Scheduler Rule allows you to define time periods and days during which the Zyxel Device allows certain actions. 24.2 Scheduler Rule Settings Use this screen to view, add, or edit time schedule rules. A scheduler rule is a reusable object that is applied to other features, such as Firewall Access Control.

  • Page 363: Add Or Edit A Schedule Rule

    Chapter 24 Scheduler Rule 24.2.1 Add or Edit a Schedule Rule Click the Add New Rule button in the Scheduler Rule screen or click the Edit icon next to a schedule rule to open the following screen. Use this screen to configure a restricted access schedule. Figure 210 Security >...

  • Page 364: Certificates

    H A P T E R Certificates 25.1 Certificates Overview The Zyxel Device can use certificates (also called digital IDs) to authenticate users. Certificates are based on public-private key pairs. A certificate contains the certificate owner’s identity and public key. Certificates provide a way to exchange public keys for use in authentication.
  • Page 365 Chapter 25 Certificates Figure 211 Security > Certificates > Local Certificates The following table describes the labels in this screen. Table 124 Security > Certificates > Local Certificates LABEL DESCRIPTION Replace Private Key/Certificate file in PEM format Private Key is Select the check box and enter the private key into the text box to store it on the Zyxel Device.

  • Page 366: Create Certificate Request

    Chapter 25 Certificates 25.3.1 Create Certificate Request Click Security > Certificates > Local Certificates and then Create Certificate Request to open the following screen. Use this screen to have the Zyxel Device generate a certification request. To create a certificate signing request, you need to enter a common name, organization name, state or province name, and the default US two-letter country code (The US country code is by default and not changeable when sold in the U.S.) for the certificate.

  • Page 367: View Certificate Request

    Chapter 25 Certificates 25.3.2 View Certificate Request Use this screen to view in-depth information about the certificate request. The Certificate is used to verify the authenticity of the certification authority. The Private Key serves as your digital signature for authentication and must be safely stored. The Signing Request contains the certificate signing request value that you will copy upon submitting the certificate request to the CA (certificate authority).

  • Page 368: Trusted Ca

    Chapter 25 Certificates The following table describes the fields in this screen. Table 126 Security > Certificates > Local Certificates: View Certificates LABEL DESCRIPTION Name This field displays the identifying name of this certificate. Type This field displays general information about the certificate. ca means that a Certification Authority signed the certificate.

  • Page 369: Import Trusted Ca Certificate

    Chapter 25 Certificates The following table describes the labels in this screen. Table 127 Security > Certificates > Trusted CA LABEL DESCRIPTION Import Certificate Click this to open a screen where you can save the certificate of a certification authority that you trust to the Zyxel Device.

  • Page 370: View Trusted Ca Certificate

    Chapter 25 Certificates The following table describes the labels in this screen. Table 128 Security > Certificates > Trusted CA > Import Certificate LABEL DESCRIPTION Certificate File Enter the location of the file you want to upload in this field or click Choose File/Browse to find it. Path Choose File/ Click this to find the certificate file you want to upload.

  • Page 371: Certificates Technical Reference

    Chapter 25 Certificates The following table describes the labels in this screen. Table 129 Security > Certificates > Trusted CA > View Certificate LABEL DESCRIPTION Name This field displays the identifying name of this certificate. This read-only text box displays the certificate or certification request in Privacy Enhanced Mail (PEM) format.

  • Page 372: Verify A Certificate

    Chapter 25 Certificates Advantages of Certificates Certificates offer the following benefits. • The Zyxel Device only has to store the certificates of the certification authorities that you decide to trust, no matter how many devices you need to authenticate. • Key distribution is simple and very secure since you can freely distribute public keys and you never need to transmit private keys.
  • Page 373 Chapter 25 Certificates Figure 218 Certificate Details Use a secure method to verify that the certificate owner has the same information in the Thumbprint Algorithm and Thumbprint fields. The secure method may vary based on your situation. Possible examples would be over the telephone or through an HTTPS connection. VMG/EMG/AM/DM/GM Series User’s Guide...

  • Page 374: Voice

    H A P T E R Voice 26.1 Voice Overview You can make calls over the Internet using VoIP technology. For this, you first need to set up a SIP account with a SIP service provider. Use this chapter to: •...

  • Page 375: Before You Begin

    Chapter 26 Voice SIP stands for Session Initiation Protocol. SIP is a signaling standard that lets one network device (like a computer or the Zyxel Device) send messages to another. In VoIP, these messages are about phone calls over the network. For example, when you dial a number on your Zyxel Device, it sends a SIP message over the network asking the other device (the number you dialed) to take part in the call.

  • Page 376: Add Or Edit Sip Account

    Chapter 26 Voice Figure 219 VoIP > SIP > SIP Account The following table describes the labels in this screen. Table 130 VoIP > SIP > SIP Account LABEL DESCRIPTION Add New Account Click this to configure a SIP account. This is the index number of the entry.
  • Page 377 Chapter 26 Voice Figure 220 VoIP > SIP > SIP Account > Add Account or Edit VMG/EMG/AM/DM/GM Series User’s Guide...
  • Page 378 Chapter 26 Voice VoIP > SIP > SIP Account > Add Account or Edit (Call Features) VoIPThe following table describes the labels in this screen. Table 131 VoIP > SIP > SIP Account > SIP Account Entry Edit LABEL DESCRIPTION SIP Account Selection SIP Account Selection This field displays ChangeMe if you are creating a new SIP account or the SIP...
  • Page 379 Chapter 26 Voice Table 131 VoIP > SIP > SIP Account > SIP Account Entry Edit (continued) LABEL DESCRIPTION SIP Account Associated with Select the SIP service provider profile to use for the SIP account you are configuring in this screen. You should already have configured a SIP service provider profile in the SIP Service Provider screen.
  • Page 380 Chapter 26 Voice Table 131 VoIP > SIP > SIP Account > SIP Account Entry Edit (continued) LABEL DESCRIPTION Send Caller ID Select this if you want to send identification when you make VoIP phone calls. Clear this if you do not want to send identification. Enable Call Transfer Select this to enable call transfer on the Zyxel Device.

  • Page 381: Sip Service Provider

    Chapter 26 Voice Table 131 VoIP > SIP > SIP Account > SIP Account Entry Edit (continued) LABEL DESCRIPTION Mail Account Select a mail account for the email address specified below. If you select None here, email notifications will not be sent through email. You must have configured a mail account already in the Email Notification screen.

  • Page 382: Provider Entry Add/Edit

    Chapter 26 Voice Table 132 VoIP > SIP > SIP Service Provider LABEL DESCRIPTION REGISTER Server Address This shows the IP address or domain name of the SIP register server. SIP Service Domain Enter the SIP service domain name. In the full SIP URI, this is the part after the @symbol.
  • Page 383 Chapter 26 Voice Figure 222 VoIP > SIP > SIP Service Provider: Add New Provider or Edit VMG/EMG/AM/DM/GM Series User’s Guide...
  • Page 384 Chapter 26 Voice The following table describes the labels in this screen. Table 133 VoIP > SIP > SIP Service Provider > Add New Provider or Edit LABEL DESCRIPTION SIP Service Provider Selection Service Provider Selection This field displays ADD_NEW if you are creating a new SIP service provider profile or the SIP service provider name you are modifying.
  • Page 385 Chapter 26 Voice Table 133 VoIP > SIP > SIP Service Provider > Add New Provider or Edit (continued) LABEL DESCRIPTION Bound Interface Name If you select AnyWAN, the Zyxel Device automatically activates the VoIP service when any WAN connection is up. If you select MultiWAN, you also need to select the pre-configured WAN connections.
  • Page 386 Chapter 26 Voice Table 133 VoIP > SIP > SIP Service Provider > Add New Provider or Edit (continued) LABEL DESCRIPTION Transport Type Transport Type Select the protocol used to transport the SIP packets. For UDP and TCP, see the Service appendix for more information on the example services and the required protocol and port number.

  • Page 387: Sip Tls Common

    Chapter 26 Voice 26.5 SIP TLS Common Encrypt SIP traffic between the Zyxel Device and the SIP server using TLS (Transport Layer Security). Configure this screen if the SIP server requires it. Use this screen to: • Change the default TLS local port. •...

  • Page 388: Phone Device

    Chapter 26 Voice 26.6.1 Phone Device Use this screen to view detailed information on phones used for Internet phone calls (SIP). You can define which phones will ring when a specific SIP address receives an incoming call, and which SIP address will be used when an outgoing call is made with a specific phone.

  • Page 389: Phone Region

    Chapter 26 Voice Figure 225 VoIP > Phone > Phone Device > Edit Each field is described in the following table. Table 136 VoIP > Phone > Phone Device > Edit LABEL DESCRIPTION SIP Account to Select the SIP account you want to use when making outgoing calls with the analog Make Outgoing phone connected to this phone port.

  • Page 390: Call Rule

    Chapter 26 Voice To access this screen, click VoIP > Phone > Region. Figure 226 VoIP > Phone > Region The following table describes the labels in this screen. Table 137 VoIP > Phone > Region LABEL DESCRIPTION Region Setting Select the place in which the Zyxel Device is located.

  • Page 391: Call History

    Chapter 26 Voice Figure 227 VoIP > Call Rule The following table describes the labels in this screen. Table 138 VoIP > Call Rule LABEL DESCRIPTION Keys This field displays the speed-dial number you should dial to use this entry. Number Enter the SIP number you want the Zyxel Device to call when you dial the speed-dial number.

  • Page 392: Call Summary

    Chapter 26 Voice Figure 228 VoIP > Call History Each field is described in the following table. Table 139 VoIP > Call History LABEL DESCRIPTION Clear List Click this button to remove all entries from the call history list. Refresh Click this button to renew the call history list.

  • Page 393: Technical Reference

    Chapter 26 Voice Table 140 VoIP > Call History > Call Summary (continued) LABEL DESCRIPTION Date This is the date when the calls were made. Total Calls This displays the total number of calls from or to your SIP numbers that day. Outgoing Calls This displays how many calls originated from you that day.
  • Page 394 Chapter 26 Voice SIP Service Domain The SIP service domain of the VoIP service provider is the domain name in a SIP URI. For example, if the SIP address is 1122334455@VoIP-provider.com, then “VoIP-provider.com” is the SIP service domain. SIP Registration Each Zyxel Device is an individual SIP User Agent (UA).
  • Page 395 Chapter 26 Voice Figure 230 SIP User Agent SIP Proxy Server A SIP proxy server receives requests from clients and forwards them to another server. In the following example, you want to use client device A to call someone who is using client device C. The client device (A in the figure) sends a call invitation to the SIP proxy server (B).
  • Page 396 Chapter 26 Voice Client device A then sends the call invitation to client device C. Figure 232 SIP Redirect Server SIP Register Server A SIP register server maintains a database of SIP identity-to-IP address (or domain name) mapping. The register server checks your user name and password when you register. When you make a VoIP call using SIP, the RTP (Real time Transport Protocol) is used to handle voice data transfer.
  • Page 397 Chapter 26 Voice Table 141 SIP Call Progression (continued) 6. BYE 7. OK A sends a SIP INVITE request to B. This message is an invitation for B to participate in a SIP telephone call. B sends a response indicating that the telephone is ringing. B sends an OK response after the call is answered.
  • Page 398 Chapter 26 Voice Figure 233 SIP Call Through Proxy Servers The following table shows the SIP call progression. Table 142 SIP Call Progression UA 1 PROXY 1 PROXY 2 UA 2 Invite Invite 100 Trying Invite 100 Trying 180 Ringing 180 Ringing 180 Ringing 200 OK...
  • Page 399 Chapter 26 Voice User Agent 2 sends a response back to Proxy 2 indicating that the phone is ringing. The response is relayed back to User Agent 1 through Proxy 1. User Agent 2 sends an OK response to Proxy 2 after the call is answered. This is also relayed back to User Agent 1 through Proxy 1.
  • Page 400 Chapter 26 Voice Custom Tones (IVR) IVR (Interactive Voice Response) is a feature that allows you to use your telephone to interact with the Zyxel Device. The Zyxel Device allows you to record custom tones for the Early Media and Music On Hold functions.

  • Page 401: Quality Of Service (Qos)

    Chapter 26 Voice You can continue to add, listen to, or delete tones, or you can hang up the receiver when you are done. 26.10.1 Quality of Service (QoS) Quality of Service (QoS) refers to both a network's ability to deliver data with minimum delay, and the networking methods used to provide bandwidth for real-time multimedia applications.
  • Page 402 Chapter 26 Voice • Call Return • Call Hold • Call Waiting • Making a Second Call • Call Transfer • Call Forwarding • Three-Way Conference • Internal Calls • Call Park and Pickup • Do not Disturb • IVR •...
  • Page 403 Chapter 26 Voice Table 144 European Flash Key Commands (continued) COMMAND SUB-COMMAND DESCRIPTION Flash 1. Switch back and forth between two calls. 2. Put a current call on hold to answer an incoming call. 3. Separate the current three-way conference call into two individual calls (one is on-line, the other is on hold).
  • Page 404 Chapter 26 Voice European Three-Way Conference Use the following steps to make three-way conference calls. When you are on the phone talking to someone, press the flash key to put the caller on hold and get a dial tone. Dial a phone number directly to make another call. When the second call is answered, press the flash key and press “3”...
  • Page 405 Chapter 26 Voice Press the flash key to put the caller on hold. When you hear the dial tone, dial “*98#” followed by the number to which you want to transfer the call. After you hear the ring signal or the second party answers it, hang up the phone. USA Three-Way Conference Use the following steps to make three-way conference calls.

  • Page 406: Log

    H A P T E R 27.1 Log Overview These screens allow you to determine the categories of events and/or alerts that the Zyxel Device logs and then display these logs or have the Zyxel Device send them to an administrator (through email) or to a syslog server.

  • Page 407: System Log

    Chapter 27 Log Table 147 Syslog Severity Levels (continued) CODE SEVERITY Notice: There is a normal but significant condition on the system. Informational: The syslog contains an informational message. Debugging: The message is intended for debug-level purposes. 27.2 System Log Use the System Log screen to see the system logs.

  • Page 408: Security Log

    Chapter 27 Log 27.3 Security Log Use the Security Log screen to see the security-related logs for the categories that you select. You can filter the entries by selecting a severity level and/or category. Click System Monitor > Log > Security Log to open the following screen.

  • Page 409: Traffic Status

    H A P T E R Traffic Status 28.1 Traffic Status Overview Use the Traffic Status screens to look at the network traffic status and statistics of the WAN/LAN interfaces and NAT. 28.1.1 What You Can Do in this Chapter •...
  • Page 410 Chapter 28 Traffic Status Figure 237 System Monitor > Traffic Status > WAN The following table describes the fields in this screen. Table 150 System Monitor > Traffic Status > WAN LABEL DESCRIPTION Refresh Interval Select how often you want the Zyxel Device to update this screen. Connected This shows the name of the WAN interface that is currently connected.

  • Page 411: Lan Status

    Chapter 28 Traffic Status Table 150 System Monitor > Traffic Status > WAN (continued) LABEL DESCRIPTION Error This indicates the number of frames with errors received on this interface. Drop This indicates the number of received packets dropped on this interface. 28.3 LAN Status Click System Monitor >...

  • Page 412: Nat Status

    Chapter 28 Traffic Status Table 151 System Monitor > Traffic Status > LAN (continued) LABEL DESCRIPTION Error This indicates the number of frames with errors received on this interface. Drop This indicates the number of received packets dropped on this interface. 28.4 NAT Status Click System Monitor >...

  • Page 413: Voip Status

    H A P T E R VoIP Status 29.1 VoIP Status Screen Click System Monitor > VoIP Status to open the following screen. You can view the Voice over IP (VoIP) registration, current call status and phone numbers in this screen. Figure 240 System Monitor >...
  • Page 414 Chapter 29 VoIP Status Table 153 System Monitor > VoIP Status (continued) LABEL DESCRIPTION Register Action Click on this switch to register/unregister the SIP account. This switch will turn blue if a registration attempt is successful; otherwise, it will revert to its unregistered setting. Unregistering an account does not delete the SIP account itself, but removes the mapping between your SIP identity and your IP address or domain name, Registration...
  • Page 415 Chapter 29 VoIP Status Table 153 System Monitor > VoIP Status (continued) LABEL DESCRIPTION Call Type This field displays the call direction type of the current VoIP call. Outgoing Call – It is a SIP VoIP call made by local phone ports, and this SIP account is able to issue a (SIP-based) call setup to the SIP account of remote peers for a VoIP call establishment.

  • Page 416: Arp Table

    H A P T E R ARP Table 30.1 ARP Table Overview Address Resolution Protocol (ARP) is a protocol for mapping an Internet Protocol (IP) address to a physical machine address, known as a Media Access Control (MAC) address, on the local area network.
  • Page 417 Chapter 30 ARP Table Figure 241 System Monitor > ARP Table The following table describes the labels in this screen. Table 154 System Monitor > ARP Table LABEL DESCRIPTION This is the ARP table entry number. IPv4 / IPv6 This is the learned IPv4 or IPv6 IP address of a device connected to the Zyxel Device. Address MAC Address This is the MAC address of the connected device with the listed IP address.

  • Page 418: Routing Table

    H A P T E R Routing Table 31.1 Routing Table Overview Routing is based on the destination address only and the Zyxel Device takes the shortest path to forward a packet. 31.2 Routing Table The table below shows IPv4 and IPv6 routing information. The IPv4 subnet mask is ‘255.255.255.255’ for a host destination and ‘0.0.0.0’...
  • Page 419 Chapter 31 Routing Table Figure 242 System Monitor > Routing Table The following table describes the labels in this screen. Table 155 System Monitor > Routing Table LABEL DESCRIPTION IPv4 / IPv6 Routing Table Destination This indicates the destination IPv4 address or IPv6 address and prefix of this route. Gateway This indicates the IPv4 address or IPv6 address of the gateway that helps forward this route’s traffic.
  • Page 420 Chapter 31 Routing Table Table 155 System Monitor > Routing Table (continued) LABEL DESCRIPTION Flag This indicates the route status. U–Up: The route is up. !–Reject: The route is blocked and will force a route lookup to fail. G–Gateway: The route uses a gateway to forward traffic. H–Host: The target of the route is a host.

  • Page 421: Multicast Status

    H A P T E R Multicast Status 32.1 Multicast Status Overview Use the Multicast Status screens to look at IGMP/MLD group status and traffic statistics. 32.2 The IGMP Status Screen Use this screen to look at the current list of multicast groups the Zyxel Device manages through IGMP. Configure IGMP in Network Setting >...

  • Page 422: The Mld Status Screen

    Chapter 32 Multicast Status 32.3 The MLD Status Screen Use this screen to look at the current list of multicast groups the Zyxel Device manages through MLD. Configure MLD in Network Setting > IGMP/MLD. To open this screen, click System Monitor > Multicast Status >...

  • Page 423: Xdsl Statistics

    H A P T E R xDSL Statistics 33.1 xDSL Statistics Overview You can view information about DSL statistics, such as port details, in this screen. 33.2 xDSL Statistics Use this screen to view detailed DSL statistics. Click System Monitor > xDSL Statistics to open the following screen.
  • Page 424 Chapter 33 xDSL Statistics The following table describes the labels in this screen. Table 158 System Monitor > xDSL Statistics LABEL DESCRIPTION Monitor Type Select the type of DSL line for refreshing statistics. Refresh Interval Select the time interval for refreshing statistics. Line Select which DSL line’s statistics you want to display.
  • Page 425 Chapter 33 xDSL Statistics Table 158 System Monitor > xDSL Statistics (continued) LABEL DESCRIPTION Attainable Net These are the highest theoretically possible transfer rates at which the port could send and Data Rate receive payload data without transport layer protocol headers and traffic. xDSL Counters Downstream These are the statistics for the traffic direction coming into the port from the service provider.

  • Page 426: Wlan Station Status

    H A P T E R WLAN Station Status 34.1 WLAN Station Status Overview Click System Monitor > WLAN Station Status to open the following screen. Use this screen to view information and status of the wireless stations (WiFi clients) that are currently associated with the Zyxel Device.
  • Page 427 Chapter 34 WLAN Station Status Table 159 System Monitor > WLAN Station Status (continued) LABEL DESCRIPTION The Signal-to-Noise Ratio (SNR) is the ratio between the received signal power and the received noise power. The greater the number, the better the quality of WiFi. The normal range is 15 to 40.

  • Page 428: Cellular Statistics

    H A P T E R Cellular Statistics 35.1 Cellular Statistics Overview Use the Cellular Statistics screens to look at cellular Internet connection status. By default, a cellular WAN connection is used as a backup for the wired DSL or Ethernet WAN connections. 35.2 Cellular Statistics Settings To open this screen, click System Monitor >...
  • Page 429 Chapter 35 Cellular Statistics The following table describes the labels in this screen. Table 160 System Monitor > Cellular Statistics LABEL DESCRIPTION Monitor Refresh Interval Select how often you want the Zyxel Device to update this screen. Select None to stop refreshing.

  • Page 430: System

    H A P T E R System 36.1 System Overview Use this screen to name your Zyxel Device (Host) and give it an associated domain name for identification purposes. 36.2 System Click Maintenance > System to open the following screen. Assign a unique name to the Zyxel Device so it can be easily recognized on your network.

  • Page 431: User Account

    H A P T E R User Account 37.1 User Account Overview In the User Account screen, you can view the settings of the “admin” and other user accounts that you use to log into the Zyxel Device to manage it. 37.2 User Account Click Maintenance >...

  • Page 432: User Account Add Or Edit

    Chapter 37 User Account Table 162 Maintenance > User Account (continued) LABEL DESCRIPTION Group This field displays whether this user has Administrator or User privileges. Remote This field displays whether this user can access the Zyxel Device with HTTP, Telnet or SSH through Privilege the WAN, LAN or LAN/WAN.
  • Page 433 Chapter 37 User Account Figure 251 Maintenance > User Account: Edit The following table describes the labels in this screen. Table 163 Maintenance > User Account > User Account Add/Edit LABEL DESCRIPTION Active Click to enable (switch turns blue) or disable (switch turns gray) to activate or deactivate the user account.
  • Page 434 Chapter 37 User Account Table 163 Maintenance > User Account > User Account Add/Edit (continued) LABEL DESCRIPTION Group Specify whether this user will have Administrator or User privileges. An Administrator account can access all Web Configurator menus. A User account can only access Monitor and Maintenance menus.

  • Page 435: Remote Management

    H A P T E R Remote Management 38.1 Remote Management Overview Remote management controls through which interfaces, which web services (such as HTTP, HTTPS, FTP, Telnet, SSH and Ping) can access the Zyxel Device. Note: The Zyxel Device is managed using the Web Configurator. 38.1.1 What You Can Do in this Chapter •...

  • Page 436: Trust Domain

    Chapter 38 Remote Management The following table describes the fields in this screen. Table 164 Maintenance > Remote Management > MGMT Services LABEL DESCRIPTION Service Control WAN Interface Select Any_WAN to have the Zyxel Device automatically activate the remote management used for services service when any WAN connection is up.

  • Page 437: Add Trust Domain

    Chapter 38 Remote Management The following table describes the fields in this screen. Table 165 Maintenance > Remote Management > Trust Domain LABEL DESCRIPTION Add Trust Click this to add a trusted host IP address. Domain IP Address This field shows a trusted host IP address. Delete Click the Delete icon to remove the trusted host IP address.

  • Page 438: Snmp

    H A P T E R SNMP 39.1 SNMP Overview This chapter explains how to configure the SNMP settings on the Zyxel Device. Simple Network Management Protocol is a protocol used for exchanging management information between network devices. Your Zyxel Device supports SNMP agent functionality, which allows a manager station to manage and monitor the Zyxel Device through the network.

  • Page 439: Snmp Settings

    Chapter 39 SNMP • Get – Allows the manager to retrieve an object variable from the agent. • GetNext – Allows the manager to retrieve the next object variable from a table or list within an agent. In SNMPv1, when a manager wants to retrieve all elements of a table from an agent, it initiates a Get operation, followed by a series of GetNext operations.
  • Page 440 Chapter 39 SNMP Table 167 Maintenance > SNMP (continued) LABEL DESCRIPTION System Contact Enter the SNMP system contact. Trap Destination Type the IP address of the station to send your SNMP traps to. Apply Click this to save your changes back to the Zyxel Device. Cancel Click this to restore your previously saved settings.

  • Page 441: Time Settings

    H A P T E R Time Settings 40.1 Time Settings Overview This chapter shows you how to configure system related settings, such as system date and time. 40.2 Time For effective scheduling and logging, the Zyxel Device system time must be accurate. Use this screen to configure the Zyxel Device’s time based on your local time zone.
  • Page 442 Chapter 40 Time Settings Figure 257 Maintenance > Time The following table describes the fields in this screen. Table 168 Maintenance > Time LABEL DESCRIPTION Current Date/Time Current Time This displays the time of your Zyxel Device. Each time you reload this screen, the Zyxel Device synchronizes the time with the time server. Current Date This displays the date of your Zyxel Device.
  • Page 443 Chapter 40 Time Settings Table 168 Maintenance > Time (continued) LABEL DESCRIPTION First – Fifth Time Select an NTP time server from the drop-down list box. Server Address Otherwise, select Other and enter the IP address or URL (up to 29 printable characters in length) of your time server.

  • Page 444: Email Notification

    H A P T E R Email Notification 41.1 Email Notification Overview A mail server is an application or a computer that can receive, forward and deliver email messages. To have the Zyxel Device send reports, logs or notifications through email, you must specify an email server and the email addresses of the sender and receiver.

  • Page 445: E-Mail Notification Edit

    Chapter 41 Email Notification The following table describes the labels in this screen. Table 169 Maintenance > E-mail Notification LABEL DESCRIPTION Add New e-mail Click this button to create a new entry (up to 32 can be created). Mail Server This displays the server name or the IP address of the mail server.
  • Page 446 Chapter 41 Email Notification Table 170 Maintenance > E-mail Notification > Add (continued) LABEL DESCRIPTION Authentication Enter the password associated with the user name above. Password Account e-mail Enter the email address that you want to be in the from or sender line of the email notification Address that the Zyxel Device sends.

  • Page 447: Log Setting

    H A P T E R Log Setting 42.1 Log Setting Overview You can configure where the Zyxel Device sends logs and which type of logs the Zyxel Device records in the Logs Setting screen. 42.2 Log Setting Use this screen to configure where the Zyxel Device sends logs, and which type of logs the Zyxel Device records.
  • Page 448 Chapter 42 Log Setting Figure 260 Maintenance > Log Setting The following table describes the fields in this screen. Table 171 Maintenance > Log Setting LABEL DESCRIPTION Syslog Settings Syslog Logging Slide the switch to the right to enable syslog logging. Mode Select Remote to have the Zyxel Device send it to an external syslog server.

  • Page 449: Example Email Log

    Chapter 42 Log Setting Table 171 Maintenance > Log Setting (continued) LABEL DESCRIPTION E-mail Log Slide the switch to the right to allow the sending through email the system and security logs to Settings the email address specified in Send Log to. Note: Make sure that the Mail Server Address field is not left blank in the Maintenance >...
  • Page 450 Chapter 42 Log Setting Figure 261 Email Log Example Subject: Firewall Alert From Date: Fri, 07 Apr 2000 10:05:42 From: user@zyxel.com user@zyxel.com 1|Apr 7 00 |From:192.168.1.1 To:192.168.1.255 |default policy |forward | 09:54:03 |UDP src port:00520 dest port:00520 |<1,00> 2|Apr 7 00 |From:192.168.1.131 To:192.168.1.255 |default policy |forward...

  • Page 451: Firmware Upgrade

    H A P T E R Firmware Upgrade 43.1 Firmware Upgrade Overview This chapter explains how to upload new firmware to your Zyxel Device if you get new firmware releases from your service provider. 43.2 Firmware Upgrade This screen lets you upload new firmware to your Zyxel Device. Get the latest firmware from your service provider.
  • Page 452 Chapter 43 Firmware Upgrade The following table describes the labels in this screen. Table 172 Maintenance > Firmware Upgrade LABEL DESCRIPTION Upgrade Firmware Restore Select this to reset all your configurations, including Mesh WiFi settings, to the factory defaults Default after firmware upgrade.
  • Page 453 Chapter 43 Firmware Upgrade Figure 264 Network Temporarily Disconnected After 2 minutes, log in again and check your new firmware version in the Connection Status screen. If the upload was not successful, an error screen will appear. Click OK to go back to the Firmware Upgrade screen.

  • Page 454: Backup/Restore

    H A P T E R Backup/Restore 44.1 Backup/Restore Overview Information related to factory default settings and backup configuration are shown in this screen. You can also use this to restore Zyxel Device’s previous configurations. 44.2 Backup/Restore Click Maintenance > Backup/Restore. Information related to factory defaults, backup configuration, and restoring configuration appears in this screen, as shown next.
  • Page 455 Chapter 44 Backup/Restore Figure 266 Maintenance > Backup/Restore Backup Configuration Backup Configuration allows you to back up (save) the Zyxel Device’s current configuration to a file on your computer. Once your Zyxel Device is configured and functioning properly, it is highly recommended that you back up your configuration file before making configuration changes.
  • Page 456 Chapter 44 Backup/Restore Restore Configuration Restore Configuration allows you to upload a new or previously saved configuration file from your computer to your Zyxel Device. Table 173 Maintenance > Backup/Restore: Restore Configuration LABEL DESCRIPTION File Path Enter in the location of the file you want to upload in this field or click Choose File / Browse to find it. Choose File Click this to find the file you want to upload.

  • Page 457: Reboot

    Chapter 44 Backup/Restore Figure 269 Reset Warning Message Figure 270 Reset In Progress You can also press the RESET button on the panel to reset the factory defaults of your Zyxel Device. 44.3 Reboot System Reboot allows you to reboot the Zyxel Device remotely without turning the power off. You may need to do this if the Zyxel Device hangs, for example.

  • Page 458: Diagnostic

    H A P T E R Diagnostic 45.1 Diagnostic Overview The Diagnostic screen displays information to help you identify problems with the Zyxel Device. The route between an Ethernet switch and one of its Customer-Premises Equipment (CPE) may go through switches owned by independent organizations. A connectivity fault point generally takes time to discover and impacts subscriber’s network access.

  • Page 459: Diagnostic

    Chapter 45 Diagnostic 45.3 Diagnostic Use this screen to ping, traceroute, nslookup, or speed test for troubleshooting. Ping and traceroute are used to test whether a particular host is reachable. After entering an IP address and clicking one of the buttons to start a test, the results will be shown in the Ping/Traceroute Test area.

  • Page 460: Ag (Cfm)

    Chapter 45 Diagnostic Table 174 Maintenance > Diagnostic (continued) LABEL DESCRIPTION Trace Route 6 Click this button to perform the IPv6 trace route function. This determines the path a packet takes to the specified host. Nslookup Click this button to perform a DNS lookup on the IP address or host name. 45.4 802.1ag (CFM) Click Maintenance >...

  • Page 461: Ah (Oam)

    Chapter 45 Diagnostic The following table describes the fields in this screen. Table 175 Maintenance > Diagnostic > 802.1ag LABEL DESCRIPTION 802.1ag Connectivity Fault Management IEEE 802.1ag Click this switch to enable or disable the IEEE802.1ag CFM specification, which allows network administrators to identify and manage connection faults.

  • Page 462: Oam Ping

    Chapter 45 Diagnostic Figure 274 Maintenance > Diagnostic > 802.3ah The following table describes the labels in this screen. Table 176 Maintenance > Diagnostics > 802.3ah LABEL DESCRIPTION IEEE 802.3ah Ethernet OAM Click this switch to enable or disable the Ethernet OAM on the specified interface. When the switch goes to the right , the function is enabled.
  • Page 463 Chapter 45 Diagnostic B3 sends an OAM F4 or F5 packet to the DSLAM or ATM switch and then returns it to the DX5301-B2/B3. The test result then displays in the text box. ATM sets up virtual circuits over which end systems communicate. The terminology for virtual circuits is as follows: •...
  • Page 464 Chapter 45 Diagnostic Figure 276 Maintenance > Diagnostic > OAM Ping The following table describes the labels in this screen. Table 177 Maintenance > Diagnostics > OAM Ping LABEL DESCRIPTION Select a PVC on which you want to perform the loopback test. F4 segment Press this to perform an OAM F4 segment loopback test.

  • Page 465: Troubleshooting And Appendices

    Troubleshooting and Appendices Appendices contain general information. Some information may not apply to your Zyxel Device.

  • Page 466: Troubleshooting

    H A P T E R Troubleshooting 46.1 Troubleshooting Overview This chapter offers some suggestions to solve problems you might encounter. The potential problems are divided into the following categories. • Power and Hardware Problems • Device Access Problems • Internet Problems •...

  • Page 467: Device Access Problems

    Chapter 46 Troubleshooting Inspect your cables for damage. Contact the vendor to replace any damaged cables. Turn the Zyxel Device off and on. If the problem continues, contact the vendor. 46.3 Device Access Problems I do not know the IP address of the Zyxel Device. The default IP address is 192.168.1.1 If you changed the IP address, you might be able to find the IP address of the Zyxel Device by looking up the IP address of your computer’s default gateway.
  • Page 468 Chapter 46 Troubleshooting Reset the Zyxel Device to its factory default, and try to access the Zyxel Device with the default IP address. If the problem continues, contact the network administrator or vendor, or try one of the advanced suggestions. Advanced Suggestions •...
  • Page 469 Chapter 46 Troubleshooting Step 1 Register for a DDNS Account on www.dyndns.org Open a browser and enter http://www.dyndns.org. Apply for a user account. This tutorial uses UserName1 and 12345 as the username and password. Log into www.dyndns.org using your account. Add a new DDNS host name.

  • Page 470: Internet Problems

    Chapter 46 Troubleshooting The SIM card cannot be detected. Disconnect the Zyxel Device from the power supply. Remove the SIM card from its slot. Clean the SIM card slot of any loose debris using compressed air. Clean the gold connectors on the SIM card with a clean lint-free cloth. Insert the SIM card into its slot and connect the Zyxel Device to the power supply to restart it.
  • Page 471 Chapter 46 Troubleshooting If you are connecting an Ethernet cable to the WAN port for Ethernet WAN connections, and an RJ-11 cable to the DSL port for DSL connections at the same time. Make sure you have the Ethernet WAN port connected to a MODEM or Router that has Internet access.
  • Page 472 Chapter 46 Troubleshooting I cannot connect to the Internet using a Fiber connection. Check the hardware connections, and make sure the LEDs are behaving as expected. See the Quick Start Guide. The PON LED is off if the optical transceiver has malfunctioned or the fiber cable is not connected or is broken or damaged enough to break the PON connection.

  • Page 473: Wifi Problems

    Chapter 46 Troubleshooting Note: If your Zyxel Device is an outdoor-type, inclement weather like rain and hot weather may affect cellular signals. 46.5 WiFi Problems I cannot connect to the Zyxel Device WiFi. Check the WiFi LED status to make sure the Zyxel Device WiFi is on. Make sure your WiFi client is within transmission range of the Zyxel Device.

  • Page 474: Usb Problems

    Chapter 46 Troubleshooting 46.6 USB Problems The Zyxel Device fails to detect my USB device. Disconnect the USB device. Reboot the Zyxel Device. If you are connecting a USB hard drive that comes with an external power supply, make sure it is connected to an appropriate power source that is on.

  • Page 475: Upnp Problems

    Chapter 46 Troubleshooting 46.8 UPnP Problems My computer cannot detect UPnP settings from the Zyxel Device. Make sure that UPnP is enabled in your computer. For Windows 10, see Section 10.12 on page 386. On the Zyxel Device, make sure that UPnP is enabled on the Network Settings > Home Networking > UPnP screen.

  • Page 476: Appendix A Customer Support

    • Date that you received your device. • Brief description of the problem and the steps you took to solve it. Corporate Headquarters (Worldwide) Taiwan • Zyxel Communications (Taiwan) Co., Ltd. • https://www.zyxel.com Asia China • Zyxel Communications Corporation–China Office •...
  • Page 477 • https://www.zyxel.com/global/en Philippines • Zyxel Communications Corp. • https://www.zyxel.com/global/en Singapore • Zyxel Communications Corp. • https://www.zyxel.com/global/en Taiwan • Zyxel Communications (Taiwan) Co., Ltd. • https://www.zyxel.com/tw/zh Thailand • Zyxel Thailand Co., Ltd. • https://www.zyxel.com/th/th Vietnam • Zyxel Communications Corporation–Vietnam Office • https://www.zyxel.com/vn/vi...
  • Page 478 Appendix A Customer Support • https://www.zyxel.com/bg/bg Czech Republic • Zyxel Communications Czech s.r.o. • https://www.zyxel.com/cz/cs Denmark • Zyxel Communications A/S • https://www.zyxel.com/dk/da Finland • Zyxel Communications • https://www.zyxel.com/fi/fi France • Zyxel France • https://www.zyxel.com/fr/fr Germany • Zyxel Deutschland GmbH. • https://www.zyxel.com/de/de Hungary •...
  • Page 479 • Zyxel Communications A/S • https://www.zyxel.com/se/sv Switzerland • Studerus AG • https://www.zyxel.com/ch/de-ch • https://www.zyxel.com/fr/fr Turkey • Zyxel Turkey A.S. • https://www.zyxel.com/tr/tr • Zyxel Communications UK Ltd. • https://www.zyxel.com/uk/en-gb Ukraine • Zyxel Ukraine • https://www.zyxel.com/ua/uk-ua South America Argentina • Zyxel Communications Corp. • https://www.zyxel.com/co/es-co Brazil •...
  • Page 480 Ecuador • Zyxel Communications Corp. • https://www.zyxel.com/co/es-co South America • Zyxel Communications Corp. • https://www.zyxel.com/co/es-co Middle East Israel • Zyxel Communications Corp. • https://il.zyxel.com North America • Zyxel Communications, Inc. – North America Headquarters • https://www.zyxel.com/us/en-us VMG/EMG/AM/DM/GM Series User’s Guide...

  • Page 481: Appendix B Wireless Lans

    P P E N D I X Wireless LANs Wireless LAN Topologies This section discusses ad-hoc and infrastructure wireless LAN topologies. Ad-hoc Wireless LAN Configuration The simplest WLAN configuration is an independent (Ad-hoc) WLAN that connects a set of computers with wireless adapters (A, B, C).
  • Page 482 Appendix B Wireless LANs Figure 278 Basic Service Set An Extended Service Set (ESS) consists of a series of overlapping BSSs, each containing an access point, with each access point connected together by a wired network. This wired connection between APs is called a Distribution System (DS).
  • Page 483 Appendix B Wireless LANs Figure 279 Infrastructure WLAN Channel A channel is the radio frequency(ies) used by wireless devices to transmit and receive data. Channels available depend on your geographical area. You may have a choice of channels (for your region) so you should use a channel different from an adjacent AP (access point) to reduce interference.
  • Page 484 Appendix B Wireless LANs Figure 280 RTS/CTS When station A sends data to the AP, it might not know that the station B is already using the channel. If these two stations send data at the same time, collisions may occur when both sets of data arrive at the AP at the same time, resulting in a loss of messages for both stations.
  • Page 485 Appendix B Wireless LANs If the Fragmentation Threshold value is smaller than the RTS/CTS value (see previously) you set then the RTS (Request To Send)/CTS (Clear to Send) handshake will never occur as data frames will be fragmented before they reach RTS/CTS size. IEEE 802.11g Wireless LAN IEEE 802.11g is fully compatible with the IEEE 802.11b standard.
  • Page 486 Appendix B Wireless LANs • User based identification that allows for roaming. • Support for RADIUS (Remote Authentication Dial In User Service, RFC 2138, 2139) for centralized user profile and accounting management on a network RADIUS server. • Support for EAP (Extensible Authentication Protocol, RFC 2486) that allows additional authentication methods to be deployed with no changes to the access point or the WiFi clients.
  • Page 487 Appendix B Wireless LANs In order to ensure network security, the access point and the RADIUS server use a shared secret key, which is a password, they both know. The key is not sent over the network. In addition to the shared key, password information exchanged is also encrypted to protect the network from unauthorized access.
  • Page 488 Appendix B Wireless LANs PEAP (Protected EAP) Like EAP-TTLS, server-side certificate authentication is used to establish a secure connection, then use simple username and password methods through the secured connection to authenticate the clients, thus hiding client identity. However, PEAP only supports EAP methods, such as EAP-MD5, EAP-MSCHAPv2 and EAP-GTC (EAP-Generic Token Card), for client authentication.
  • Page 489 Appendix B Wireless LANs gateway and WiFi client. As long as the passwords match, a WiFi client will be granted access to a WLAN. If the AP or the WiFi clients do not support WPA2, just use WPA or WPA-PSK depending on whether you have an external RADIUS server or not.
  • Page 490 Appendix B Wireless LANs Key caching allows a WiFi client to store the PMK it derived through a successful authentication with an AP. The WiFi client uses the PMK when it tries to connect to the same AP and does not need to go with the authentication process again.
  • Page 491 Appendix B Wireless LANs WPA(2)-PSK Application Example A WPA(2)-PSK application looks as follows. First enter identical passwords into the AP and all WiFi clients. The Pre-Shared Key (PSK) must consist of between 8 to 63 alphanumeric (0-9, a-z, A-Z) and special characters, including spaces. The AP checks each WiFi client's password and allows it to join the network only if the password matches.
  • Page 492 Appendix B Wireless LANs Table 181 Wireless Security Relational Matrix (continued) AUTHENTICATION METHOD/ ENCRYPTION ENTER MANUAL KEY MANAGEMENT IEEE 802.1X METHOD PROTOCOL TKIP/AES Enable WPA-PSK TKIP/AES Disable WPA2 TKIP/AES Enable WPA2-PSK TKIP/AES Disable Antenna Overview An antenna couples RF signals onto air. A transmitter within a wireless device sends an RF signal to the antenna, which propagates the signal through the air.
  • Page 493 Appendix B Wireless LANs • Directional antennas concentrate the RF signal in a beam, like a flashlight does with the light from its bulb. The angle of the beam determines the width of the coverage pattern. Angles typically range from 20 degrees (very directional) to 120 degrees (less directional). Directional antennas are ideal for hallways and outdoor point-to-point applications.

  • Page 494: Appendix C Ipv6

    P P E N D I X IPv6 Overview IPv6 (Internet Protocol version 6), is designed to enhance IP address size and features. The increase in IPv6 address size to 128 bits (from the 32-bit IPv4 address) allows up to 3.4 x 10 IP addresses.
  • Page 495 Appendix C IPv6 Unspecified Address An unspecified address (0:0:0:0:0:0:0:0 or ::) is used as the source address when a device does not have its own address. It is similar to “0.0.0.0” in IPv4. Loopback Address A loopback address (0:0:0:0:0:0:0:1 or ::1) allows a host to send packets to itself. It is similar to “127.0.0.1” in IPv4.
  • Page 496 Appendix C IPv6 Subnet Masking Both an IPv6 address and IPv6 subnet mask compose of 128-bit binary digits, which are divided into eight 16-bit blocks and written in hexadecimal notation. Hexadecimal uses four bits for each character (1 – 10, A – F). Each block’s 16 bits are then represented by four hexadecimal characters. For example, FFFF:FFFF:FFFF:FFFF:FC00:0000:0000:0000.
  • Page 497 Appendix C IPv6 DHCP Relay Agent A DHCP relay agent is on the same network as the DHCP clients and helps forward messages between the DHCP server and clients. When a client cannot use its link-local address and a well-known multicast address to locate a DHCP server on its network, it then needs a DHCP relay agent to send a message to a DHCP server that is not attached to the same network.
  • Page 498 Appendix C IPv6 receives a neighbor advertisement in response, it stores the neighbor’s link-layer address in the neighbor cache. When the Zyxel Device uses a router solicitation message to query for a router and receives a router advertisement message, it adds the router’s information to the neighbor cache, prefix list and destination cache.
  • Page 499 Appendix C IPv6 Click the Search icon ( ) and then enter “cmd” in the search box.. Use the ipconfig command to check your dynamic IPv6 address. This example shows a global address (2001:b021:2d::1000) obtained from a DHCP server. C:\>ipconfig Windows IP Configuration Ethernet adapter Local Area Connection: Connection-specific DNS Suffix...

  • Page 500: Appendix D Services

    P P E N D I X Services The following table lists some commonly-used services and their associated protocols and port numbers. • Name: This is a short, descriptive name for the service. You can use this one or create a different one, if you like.
  • Page 501 Appendix D Services Table 187 Examples of Services NAME PROTOCOL PORT(S) DESCRIPTION AH (IPSEC_TUNNEL) User-Defined The IPSEC AH (Authentication Header) tunneling protocol uses this service. 5190 AOL’s Internet Messenger service. AUTH Authentication protocol used by some servers. Border Gateway Protocol. BOOTP_CLIENT DHCP Client.
  • Page 502 Appendix D Services Table 187 Examples of Services (continued) NAME PROTOCOL PORT(S) DESCRIPTION 2049 Network File System - NFS is a client/server distributed file service that provides transparent file sharing for network environments. NNTP Network News Transport Protocol is the delivery mechanism for the USENET newsgroup service.
  • Page 503 Appendix D Services Table 187 Examples of Services (continued) NAME PROTOCOL PORT(S) DESCRIPTION TACACS Login Host Protocol used for (Terminal Access Controller Access Control System). TELNET Telnet is the login and terminal emulation protocol common on the Internet and in UNIX environments. It operates over TCP/IP networks.

  • Page 504: Appendix E Legal Information

    P P E N D I X Legal Information Copyright Copyright © 2023 by Zyxel and/or its affiliates. The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of Zyxel and/or its affiliates.
  • Page 505 Appendix E Legal Information Български С настоящото Zyxel декларира, че това оборудване е в съответствие със съществените изисквания и другите (Bulgarian) приложими разпоредбите на Директива 2014/53/ЕC. National Restrictions • The Belgian Institute for Postal Services and Telecommunications (BIPT) must be notified of any outdoor wireless link having a range exceeding 300 meters.
  • Page 506 Appendix E Legal Information Svenska Härmed intygar Zyxel att denna utrustning står I överensstämmelse med de väsentliga egenskapskrav och övriga relevanta (Swedish) bestämmelser som framgår av direktiv 2014/53/EU. Norsk Erklærer herved Zyxel at dette utstyret er I samsvar med de grunnleggende kravene og andre relevante bestemmelser I (Norwegian) direktiv 2014/53/EU.
  • Page 507 Appendix E Legal Information • The following warning statements apply, where the disconnect device is not incorporated in the device or where the plug on the power supply cord is intended to serve as the disconnect device, – For a permanently connected device, a readily accessible method to disconnect the device shall be incorporated externally to the device;...
  • Page 508 Appendix E Legal Information 台灣 以下訊息僅適用於產品具有無線功能且銷售至台灣地區 • 取得審驗證明之低功率射頻器材，非經核准，公司、商號或使用者均不得擅自變更頻率、加大功率或變更原設計之特性及功能。 • 低功率射頻器材之使用不得影響飛航安全及干擾合法通信；經發現有干擾現象時，應立即停用，並改善至無干擾時方得繼續使用。前述合法通 信，指依電信管理法規定作業之無線電通信。低功率射頻器材須忍受合法通信或工業、科學及醫療用電波輻射性電機設備之干擾。 • 本機限在不干擾合法電台與不被干擾保障條件下於室內使用。本產品使用時建議應距離人體 20 cm 以上。 • 無線資訊傳輸設備忍受合法通信之干擾且不得干擾合法通信；如造成干擾，應立即停用， 俟無干擾之虞，始得繼續使用。 • 無線資訊傳輸設備的製造廠商應確保頻率穩定性，如依製造廠商使用手冊上所述正常操作， 發射的信號應維持於操作頻帶中 • 使用無線產品時，應避免影響附近雷達系統之操作。 • 高增益指向性天線只得應用於固定式點對點系統。 以下訊息僅適用於產品屬於專業安裝並銷售至台灣地區 • 本器材須經專業工程人員安裝及設定，始得設置使用，且不得直接販售給⼀般消費者。 安全警告 - 為了您的安全，請先閱讀以下警告及指示 : • 請勿將此產品接近水、火焰或放置在高溫的環境。 • 避免設備接觸 : – 任何液體 - 切勿讓設備接觸水、雨水、高濕度、污水腐蝕性的液體或其他水份。 –...
  • Page 509 Appendix E Legal Information Explanation of the Symbols SYMBOL EXPLANATION Alternating current (AC): AC is an electric current in which the flow of electric charge periodically reverses direction. Direct current (DC): DC if the unidirectional flow or movement of electric charge carriers. Earth;...
  • Page 510 Index Broadband broadcast 235, 481 example BYE request access troubleshooting Access Control (Rules) screen ACK message activation 371, 487 firewalls call hold 403, 404 media server call service mode 402, 404 SSID call transfer 403, 404 Address Resolution Protocol call waiting 403, 404 antenna Canonical Format Indicator See CFI...
  • Page 511 Certification Authority, see CA DHCP 244, 258 certifications DHCP Server Lease Time viewing DHCP Server State diagnostic diagnostic screens CCMs differentiated services link trace test Differentiated Services, see DiffServ loopback test DiffServ marking rule DiffServ (Differentiated Services) code points marking rule digital IDs channel disclaimer...
  • Page 512 echo cancellation ICMP Ping of Death email rules log example security log setting SYN attack Encapsulation firmware PPP over Ethernet Firmware Upgrade screen encapsulation firmware upload RFC 1483 firmware version encryption check flash key Ether Type flashing Europe type call service mode fragmentation threshold 226, 233, 484 Extended Service Set IDentification...
  • Page 513 multicast group list iTunes server 321, 421, 422 version ITU-T IGMP Fast Leave IGMPv2 IGMPv3 Import Certificate screen key combinations importing trusted CAs keypad Independent Basic Service Set See IBSS initialization vector (IV) Inside Global Address, see IGA Inside Local Address, see ILA interface group client list Internet...
  • Page 514 applications IP alias default server DMZ host example MAC address 222, 229, 251 global filter 221, 234 MAC Authentication screen inside local MAC Filter multiple server example Maintenance Association, see MA outside Maintenance Domain, see MD port number Maintenance End Point, see MEP services Management Information Base (MIB) NAT ALG screen...
  • Page 515 PIN, WPS message types example messages shared secret key Ping of Death Real time Transport Protocol, see RTP Ping test Reboot screen Ping/TraceRoute/Nslookup screen reset Point-to-Point Tunneling Protocol, see PPTP reset to factory defaults POP3 restart system port forwarding rule add/edit restoring configuration Port Forwarding screen...
  • Page 516 call progression client identities INVITE request 397, 398 number OK response proxy server redirect server register server servers service domain user agent SMTP SNMP 314, 438 agents GetNext Manager managers network components Trap versions SNMP trap srTCM unusable SSID activation MBSSID static DHCP configuration...
  • Page 517 protocol severity levels syslog logging enable syslog server name or IP address system firmware password reset status 173, 178 wireless LAN time Tag Control Information See TCI Tag Protocol Identifier See TPID Telnet unusable three-way conference 404, 405 thresholds data fragment 226, 233 RTS/CTS 226, 233...
  • Page 518 unicast Uniform Resource Identifier Universal Plug and Play, see UPnP upgrading firmware UPnP forum NAT traversal security issues state usage confirmation UPnP screen UPnP-enabled Network Device auto-discover USA type call service mode USB features Vendor ID Virtual Circuit (VC) Virtual Local Area Network See VLAN VLAN Introduction number of possible VIDs...
  • Page 519 Wide Area Network, see WAN warranty note Web Configurator login password WEP Encryption WiFi MBSSID Wi-Fi Protected Access wireless client WPA supplicants Wireless General screen wireless LAN authentication example example fragmentation threshold 226, 233 limitations MAC address filter 221, 234 preamble 227, 233 RTS/CTS threshold...
  • Page 520 WPA2 216, 488 user authentication vs WPA2-PSK wireless client supplicant with RADIUS application example WPA2-Pre-Shared Key WPA2-PSK 216, 488, 489 application example WPA-PSK application example WPA-PSK (WiFi Protected Access-Pre-Shared Key) 237, 239 example limitations example push button 53, 237 WPS screen WWAN package version check Zyxel Family Safety page...

This manual is also suitable for:

Emg seriesAm seriesDm seriesGm seriesVmg3312-t20aVmg3625-t50b ... Show all

Table of Contents

Save PDF