VSG1432 User Setup Guide 802.11n Wireless VDSL2 4-port Gateway Default Login Details IP Address http://192.168.1.254 Username admin Password telus Firmware Version 1.10 Edition 1, 10/2011 www.zyxel.com www.zyxel.
Contents Overview Contents Overview Introducing the VSG1432 ..........................................................................................................................5 User Setup Guide ....................................................................................................................................13 Troubleshooting ......................................................................................................................................
Contents Overview 4 VSG1432 User Setup Guide
C HAPTER 1 Introducing the VSG1432 1.1 Overview The VSG1432 is a VDSL2 router and Gigabit Ethernet gateway with a four-port built-in Ethernet switch and IEEE 802.11n wireless. The VSG1432 allows wired and wireless clients to safely access the Internet. The built-in firewall blocks unauthorized access to your network. Only use firmware for your Device’s specific model. Refer to the label on the bottom of your Device. 1.
To connect the stand, line up the arrow on the stand with the arrow on the bottom of the device as shown.
1.5 Hardware Connections To connect your Device: Figure 2 Hardware Connections 1 4 2b 3 2a 1 Attach the antenna and point it up. 2 Do one of the following for your Internet connection: 3 2a DSL WAN: Use a telephone cable to connect your Device’s DSL WAN port to a telephone jack (or the DSL or modem jack on a splitter if you have one). 2b ETHERNET WAN: If you already have a broadband router or modem, use an Ethernet cable to connect the ETHERNET WAN port to it for Internet access.
4 POWER: Use the provided power adaptor to connect the POWER socket to an appropriate power source. Make sure the power at the outlet is on. After connecting the power adaptor, look at the lights on the front panel. 1.6 LEDs (Lights) The following graphic displays the labels of the LEDs.
None of the LEDs are on if the Device is not receiving power. Table 1 LED Descriptions LED COLOR STATUS DESCRIPTION POWER Green On The Device is receiving power and ready for use. Blinking The Device is self-testing. On The Device detected an error while self-testing, or there is a device malfunction. Off The Device is not receiving power. Blinking Firmware upgrade is in progress. On The Device has a successful 100 Mbps Ethernet connection with a device on the Local Area Network (LAN).
2 To set the device back to the factory default settings, press the RESET button for ten seconds or until the POWER LED begins to blink and then release it. When the POWER LED begins to blink, the defaults have been restored and the device restarts. Note: The default username and password are on the label on the bottom of the Device. 1.8 Wireless Access The Device is a wireless Access Point (AP) for wireless clients, such as notebook computers, smartphones or tablets.
2 Press the WLAN/WPS button for five seconds and release it. 3 Enable WPS on another WPS-enabled client device within range of the Device. If you do not know how to enable WPS on that client device, refer to its manual. The WLAN/WPS LED flashes green and orange while the Device sets up a WPS connection with the other WPS enabled client device. 4 Once the connection is successfully made, the WLAN/WPS LED shines green.
VSG1432 User Setup Guide
C HAPTER 2 User Setup Guide 2.1 Overview This guide shows you how to use the Device’s various features.
Enter the Username and Password in the fields in the top right corner. The default Username is admin and the default Password is telus. Click Login. 2.2 Setting Up a Secure Wireless Network Thomas wants to set up a wireless network so that he can use his notebook to access the Internet. In this wireless network, the Device serves as an access point (AP), and the notebook is the wireless client. The wireless client can access the Internet through the AP.
1 Click Wireless to open the Basic Wireless Setup screen.
1 Select Mixed WPA2-PSK/WPA-PSK as the security mode. Deselect Generate password automatically and enter the Pre-Shared Key in the Password field. Select Enable in the Wireless field. Select 802.11b/g/n Mixed in the 802.11 Mode field. Click Apply. Thomas can now use the WPS feature to establish a wireless connection between his notebook and the Device (see Section 2.2.2 on page 16). He can also use the notebook’s wireless client to search for the Device (see Section 2.2.3 on page 20). 2.2.
1 Make sure that your Device is turned on and your notebook is within the cover range of the wireless signal. 2 Make sure that you have installed the wireless client driver and utility in your notebook. 3 In the wireless client utility, go to the WPS setting page. Enable WPS and press the WPS button (Start or WPS button). 4 Push and hold the WPS button located on the Device’s front panel for more than 5 seconds.
The following figure shows you an example of how to set up a wireless network and its security by pressing a button on both Device and wireless client. Example WPS Process: PBC Method ZyXEL Device Wireless Client WITHIN 2 MINUTES Press and hold for 5 seconds SECURITY INFO COMMUNICATION PIN Configuration When you use the PIN configuration method, you need to use both the Device’s web configurator and the wireless client’s utility. 1 18 Launch your wireless client’s configuration utility.
2 Log into Device’s web configurator and go to the Wireless > WPS screen. Enable the WPS function and click Apply. 3 Enter the PIN number of the wireless client and click the Register button. Activate WPS function on the wireless client utility screen within two minutes. The Device authenticates the wireless client and sends the proper configuration settings to the wireless client. This may take up to two minutes. The wireless client is then able to communicate with the Device securely.
The following figure shows you how to set up a wireless network and its security on a Device and a wireless client by using PIN method. Example WPS Process: PIN Method Wireless Client ZyXEL Device WITHIN 2 MINUTES Authentication by PIN SECURITY INFO COMMUNICATION 2.2.3 Without WPS This section describes how to connect wirelessly to your Device. The connection procedure is shown here using Windows XP as an example.
1 Right-click the wireless adapter icon which appears in the bottom right of your computer monitor. Click View Available Wireless Networks. Tutorial: Network > Wireless LAN > SecuritOpen the Status screen. Verify your wireless and wireless security settings under Device Information and check if the WLAN connection is up under Interface Status Tutorial: Status 2 Select the Device’s SSID name and click Connect (A). The SSID “SecureWirelessNetwork” is given here as an example.
5 You should now be securely connected wirelessly to the Device. Tutorial: Network > Wireless LAN > SecuritOpen the Status screen. Verify your wireless and wireless security settings under Device Information and check if the WLAN connection is up under Interface Status Tutorial: Status Congratulations! Your computer is now ready to connect to the Internet wirelessly through your Device.
1 Click Wireless to open the General screen. Use this screen to set up a secure general wireless network group. Configure the screen using the provided parameters and click Apply. 2 Click Wireless > Additional WLANs to open the following screen. Click the Edit icon to configure the second wireless network group.
3 Configure the screen using the provided parameters and click Apply. 4 In the Additional WLANs screen, click the Edit icon to configure the third wireless network group.
5 Configure the screen using the provided parameters and click Apply. 6 Check the status of Open and Guest in the Additional WLANs screen. The yellow bulbs signify that the SSIDs are active and ready for wireless access. 2.4 Wireless MAC Authentication for Blocking a Computer’s Access to the Wireless Network This example shows how to configure MAC Authentication to use a computer’s MAC address to block it from accessing the wireless network.
1 Click the Wireless icon and click the MAC Authentication tab. In the MAC Authentication screen, click the Add new MAC address button. 2 In the MAC Address field, enter the MAC Address of the computer to block and click Apply.
3 The MAC Address will appear in the MAC List. In the MAC Restrict Mode field select Deny. Then, click Apply. 2.5 Setting Up NAT Forwarding for a Game Server Thomas manages a Civilization IV server on a computer behind the Device. In order for players on the Internet (like A in the figure below) to communicate with the server, Thomas can use port forwarding or application forwarding. Application forwarding can be easier to set up since you do not need to specify port numbers manually.
2.5.1 Port Forwarding Thomas needs to configure the port settings and IP address on the Device. Traffic should be forwarded to TCP/UDP port 6500, and UDP ports 2302 and 13139 of the server computer which has an IP address of 192.168.1.34. Thomas may set up the port settings by configuring the port settings for the server computer. 1 Click Network Settings > NAT > Add new rule and configure the screen with the following values: Service Name CivIV External Port/s Enter 6500 as the Start and End port.
2.5.2 Application Forwarding Application forwarding can be used instead of port forwarding for forwarding traffic to the server. 1 Click Network Settings > NAT > Add new rule. Select Active and in the Application Category dropdown menu, select Games. 1 The following screen appears. Enter the Server IP Address as 192.168.1.34 and in the Application Forwarded dropdown menu, select Civilization IV. Click Apply.
2 The application forwarding settings you configured appear in the table. 2.6 Access Your Home Computer from the Internet Using DDNS If you connect your Device to the Internet and it uses a dynamic WAN IP address, it is inconvenient for you to access your home computer from the Internet. The Device’s WAN IP address changes dynamically. Dynamic DNS (DDNS) allows you to access your home computer using a domain name. Note: You will need to enable remote desktop server service on your home computer.
2.6.1 Registering a DDNS Account on www.dyndns.org 1 Open a browser and type http://www.dyndns.org. 2 Apply for a user account. This tutorial uses UserName1 and 12345 as the username and password. 3 Log into www.dyndns.org using your account. 4 Add a new DDNS host name. This tutorial uses the following settings as an example. • Hostname: zyxelrouter.dyndns.org • Service Type: Host with IP address • IP Address: Enter the WAN IP address that your Device is currently using.
• Select the TCP in the Protocol field. • Type the LAN IP address of your computer in the Server IP Address field. To check this on your home computer, click Start, All Programs, Accessories and then Command Prompt. In the Command Prompt window, type "ipconfig" and then press [ENTER]. This example uses 192.168.1.64. You will also need to configure a Static DHCP rule for this IP address. See Configuring Static DHCP. Click Apply. 2.6.
1 Place your mouse over the Security Settings icon, and click Firewall in the drop down. Firewall Example: Edit Rule: Destination Address 2 In the security Level dropdown, you can select High, Medium or Low: • High - All WAN-to-LAN and LAN-to-WAN traffic is blocked. • Medium - All WAN-to-LAN traffic is blocked. All LAN-to-WAN traffic is allowed, except for Access Control Lists (ACL's). • Low - All WAN-to-LAN and LAN-to-WAN traffic is allowed, except for ACL's.
2.7.1 Access Control List The following access control list example shows how to allow a hypothetical connection to/from the Internet. 1 Click the Access Control List (ACL) tab. Finally, click the Add New ACL Rule button. Firewall Example: Edit Rule: Destination Address 2 In the Access Control List (ACL) screen, configure the screen as follows and click Apply.
3 On completing the configuration procedure for this Internet firewall rule, the Rules screen should look like the following. Firewall Example: Edit Rule: Destination Address 2.8 MAC Filter Setup for Blocking LAN Computers The following example shows how to create a MAC filter rule to block a computer from accessing the Device. 1 Place your mouse over the Security Settings icon, and click MAC Filter in the drop down.
2 In the MAC Filter screen, select Enable as follows and click Apply. To add a device to the MAC Filter Lists, click the Add Device button. Firewall Example: Edit Rule: Destination Address Firewall Example: Edit Rule: Select Customized Services 3 Enter the MAC address of the computer you want to block and cilck Apply.
4 The new entry will appear in the Allow List. Select the check box next to the entry and click the right hand arrow to move it to the Block List. Firewall Example: Edit Rule: Destination Address 5 The entry will now appear in the Block List. Click Apply. Firewall Example: Edit Rule: Destination Address 2.9 Scheduler Rules and Parental Control The following example creates a Parental Control to block web access from a selected computer during a specified time period.
1 Place your mouse over the Security Settings icon, and click Scheduler Rules in the drop down. Firewall Example: Edit Rule: Destination Address 2 In the Scheduler Rules screen, click the Add new rule button.
3 Enter the configuration information as below and click Apply. Firewall Example: Edit Rule: Destination Address 4 On completing the configuration procedure for this schedule rule, the rule should appear in the rule list as below. Firewall Example: Edit Rule: Destination Address 5 Now, configure the Parental Control rule. Place your mouse over the Security Settings icon, and click Parental Control in the drop down.
6 Select Enabled then click Apply. Then click Add new Rule. Firewall Example: Edit Rule: Destination Address 7 Select the desired computer in the PC Name/IP/MAC field and select Block All. In the Scheduler Rules menu, select WeekdayNight. Click Apply. Firewall Example: Edit Rule: Destination Address 2.10 LAN DHCP for IP Addressing Assignment The following example shows how to configure LAN DHCP settings.
1 Place your mouse over the Networking Settings icon, and click Home Networking in the drop down.
2 In the IP Addressing Values section, you can change the DHCP server IP address range. In the DHCP Server Lease Time section you can specify how long an IP address is leased to a LAN computer. Click Apply. Firewall Example: Edit Rule: Destination Address 2.10.1 Configuring Static DHCP Configure the following settings in the Network Setting > Home Networking > Static DHCP > Add screen. • Select Active.
• Select your computer in the Select Device Info field. The computer’s MAC Address will be displayed in the MAC Address field. The computer’s current LAN IP Address will be displayed in the IP Address field. • Click Apply. Firewall Example: Edit Rule: Select Customized Services 2.11 Check the Firmware Version The following procedure shows how to check the firmware version that is installed on the Device. 1 In your web browser, enter the LAN IP address of the Device. The default is http://192.168.1.254.
2 The Status screen will display. The Firmware Version field displays the current firmware version. Firewall Example: Edit Rule: Destination Address 2.12 Restore to Factory Default The following procedure shows how to restore the factory default settings to the Device.
1 Place your mouse over the Maintenance icon, and click Configuration in the drop down.
2 In the Back to Factory Defaults section, click the Reset button. Firewall Example: Edit Rule: Destination Address 3 Click Confirm. Firewall Example: Edit Rule: Destination Address 4 46 The Reboot screen will display.
Note: The Power LED will start flashing. When it once again becomes solid green, the modem will be configured to its default settings and will be ready to be reconfigured. To reprogram your modem, follow the instructions provided by your ISP. Note: The default username and password are on the label on the bottom of the Device.
VSG1432 User Setup Guide
C HAPTER 3 Troubleshooting 3.1 Overview This section offers some suggestions to solve problems you might encounter. The potential problems are divided into the following categories. • Power, Hardware Connections, and LEDs • Device Access and Login • Internet Access 3.2 Power, Hardware Connections, and LEDs None of the LEDs turn on. 1 Make sure the Device is plugged in. 2 Make sure you are using the power adaptor or cord included with the Device.
3.3 Device Access and Login I forgot the IP address for the Device. 1 The default LAN IP address is 192.168.1.254. 2 If you changed the IP address and have forgotten it, you might get the IP address of the Device by looking up the IP address of the default gateway for your computer. To do this in most Windows computers, click Start > Run, enter cmd, and then enter ipconfig.
Advanced Suggestions • Make sure you have logged out of any earlier management sessions using the same user account even if they were through a different interface or using a different browser. • If your computer is connected to the WAN port or is connected wirelessly, use a computer that is connected to an ETHERNET port. I can see the Login screen, but I cannot log in to the Device. 1 Make sure you have entered the password correctly.
2 Check the hardware connections, and make sure the LEDs are behaving as expected. See Section 1.6 on page 8. 3 Unplug the the Device’s power adapter, and plug it back in. 4 If the problem continues, contact your ISP. 3.5 Wireless Internet Access What factors may cause intermittent or unstable wireless connection? How can I solve this problem? The following factors may cause interference: • Obstacles: walls, ceilings, furniture, and so on. • Building Materials: metal doors, aluminum studs.
The available security modes in your ZyXEL device are as follows: • WPA2-PSK: (recommended) This uses a pre-shared key with the WPA2 standard. • WPA-PSK: This has the device use either WPA-PSK or WPA2-PSK depending on which security mode the wireless client uses. • WEP: Wired Equivalent Privacy (WEP) encryption scrambles the data transmitted between the wireless stations and the access points to keep network communications private.
VSG1432 User Setup Guide
Technical Specifications Technical Specifications The following table summarize the Device’s hardware and firmware features. Hardware Specifications Gigabit Ethernet WAN Port One RJ-45 connector for GBE WAN Built-in Switch Four auto-negotiating, auto MDI/MDI-X 10/100 Mbps RJ-45 Ethernet ports Wireless Functionality Allow the IEEE 802.11b, IEEE 802.11g and/or IEEE 802.11n wireless clients to connect to the Device wirelessly.
Technical Specifications 56 VSG1432 User Setup Guide
