AMG1312-T Series Wireless N ADSL2+ 4-port Gateway with USB Version 2.00 Edition 1, 8/2013 Quick Start Guide User’s Guide Default Login Details LAN IP Address User Name www.zyxel.com Password http://192.168.1.
IMPORTANT! READ CAREFULLY BEFORE USE. KEEP THIS GUIDE FOR FUTURE REFERENCE. Note: This guide is a reference for a series of products. Therefore some features or options in this guide may not be available in your product. Graphics in this book may differ slightly from the product due to differences in operating systems, operating system versions, or if you installed updated firmware/software for your device. Every effort has been made to ensure that the information in this manual is accurate.
Contents Overview Contents Overview User’s Guide .......................................................................................................................................12 Introduction .............................................................................................................................................14 Introducing the Web Configurator ...........................................................................................................
Table of Contents Table of Contents Contents Overview ..............................................................................................................................3 Table of Contents .................................................................................................................................4 Part I: User’s Guide ......................................................................................... 12 Chapter 1 Introduction...........................................
Table of Contents 4.3 IPv6 Address Configuration ..............................................................................................................36 4.4 Setting Up a Secure Wireless Network .............................................................................................37 4.4.1 Configuring the Wireless Network Settings .............................................................................37 4.4.2 Using WPS ....................................................................
Table of Contents 6.5.2 Multiplexing ..............................................................................................................................83 6.5.3 VPI and VCI .............................................................................................................................84 6.5.4 IP Address Assignment ...........................................................................................................84 6.5.5 Nailed-Up Connection (PPP) ............................
Table of Contents 8.2 The LAN Setup Screen ................................................................................................................... 117 8.3 The Static DHCP Screen ................................................................................................................. 119 8.4 The IP Alias Screen ........................................................................................................................120 8.4.1 Configuring the LAN IP Alias Screen .............
Table of Contents 11.1 Overview .......................................................................................................................................147 11.1.1 What You Can Do in the NAT Screens ................................................................................147 11.1.2 What You Need To Know About NAT ...................................................................................147 11.2 The NAT General Screen ............................................................
Table of Contents 15.1.2 What You Need to Know About Firewall ..............................................................................169 15.2 The Firewall General Screen ........................................................................................................170 15.3 The Default Action Screen ............................................................................................................171 15.4 The Rules Screen .............................................................
Table of Contents 19.2 The WAN Status Screen ...............................................................................................................196 19.3 The LAN Status Screen .................................................................................................................197 19.4 The NAT Screen ............................................................................................................................198 Chapter 20 User Account ..................................
Table of Contents 25.6 The DNS Screen ..........................................................................................................................217 25.7 The ICMP Screen ..........................................................................................................................217 25.8 The SSH Screen ...........................................................................................................................218 25.8.1 SSH Example ..................................
P ART I User’s Guide 12
C HAPT ER 1 Introduction 1.1 Overview The AMG1312-T Series is an ADSL2+ router. By integrating DSL and NAT, you are provided with ease of installation and high-speed, shared Internet access. The AMG1312-T Series is also a complete security solution with a robust firewall and content filtering. Only use firmware for your AMG1312-T Series’s specific model. Refer to the label on the bottom of your AMG1312-T Series. Note: Not all models have all of the features shown in this User’s Guide. 1.
Chapter 1 Introduction 1.4 Applications for the AMG1312-T Series Here are some example uses for which the AMG1312-T Series is well suited. 1.4.1 Internet Access Your AMG1312-T Series provides shared Internet access by connecting the DSL port to the DSL or MODEM jack on a splitter or your telephone jack. Computers can connect to the AMG1312-T Series’s Ethernet ports (or wirelessly).
Chapter 1 Introduction Figure 2 Wireless Access Example 1.5 General Hardware Features Figure 3 General Hardware Features The following table describes the LEDs. Table 1 LED Descriptions LED COLOR Green (POWER) Ethernet 1-4 16 Red Green STATUS DESCRIPTION On The AMG1312-T Series is receiving power and ready for use. Blinking The AMG1312-T Series is self-testing. On The AMG1312-T Series detected an error while self-testing, or there is a device malfunction.
Chapter 1 Introduction Table 1 LED Descriptions (continued) LED COLOR Green (WLAN) Green (WPS) Green (DSL) Green STATUS DESCRIPTION On The wireless network is activated. Blinking The AMG1312-T Series is communicating with wireless clients. Off The wireless network is not activated. On WPS is ready. Blinking The AMG1312-T Series is setting up a WPS connection. Off WPS is disabled or has failed. On The DSL line is up. Blinking The AMG1312-T Series is initializing the DSL line.
Chapter 1 Introduction WPS 3 Press the WPS button on another WPS-enabled device within range of the AMG1312-T Series. The WPS LED should flash while the AMG1312-T Series sets up a WPS connection with the other wireless device. 4 Once the connection is successfully made, the WPS LED shines green. 1.7 The RESET Button If you forget your password or cannot access the web configurator, you will need to use the RESET button at the back of the device to reload the factory-default configuration file.
C HAPT ER 2 Introducing the Web Configurator 2.1 Overview The web configurator is an HTML-based management interface that allows easy device setup and management via Internet browser. Use Internet Explorer 6.0 and later versions, Mozilla Firefox 3 and later versions, or Safari 2.0 and later versions. The recommended screen resolution is 1024 by 768 pixels. In order to use the web configurator, you need to allow: • Web browser pop-up windows from your device.
Chapter 2 Introducing the Web Configurator Figure 4 Password Screen Note: For security reasons, the AMG1312-T Series automatically logs you out if you do not use the web configurator for five minutes (default). If this happens, log in again. 5 The following screen displays if you have not yet changed your password. It is strongly recommended you change the default password.
Chapter 2 Introducing the Web Configurator Figure 6 Connection Status 7 Click System Info to display the System Info screen, where you can view the AMG1312-T Series’s interface and system information.
Chapter 2 Introducing the Web Configurator 2.2 The Web Configurator Layout Click Connection Status > System Info to show the following screen.
Chapter 2 Introducing the Web Configurator 2.2.1 Title Bar The title bar shows the following icon in the upper right corner. Click this icon to log out of the web configurator.
Chapter 2 Introducing the Web Configurator 2.2.2 Main Window The main window displays information and configuration fields. It is discussed in the rest of this document. After you click System Info on the Connection Status screen, the System Info screen is displayed. See Chapter 5 on page 64 for more information about the System Info screen. If you click LAN Device on the System Info screen, the Connection Status screen appears.
Chapter 2 Introducing the Web Configurator Table 2 Navigation Panel Summary (continued) LINK Home Networking Static Route QoS NAT Port Binding Dynamic DNS TAB FUNCTION LAN Setup Use this screen to configure LAN TCP/IP settings, and other advanced properties. Static DHCP Use this screen to assign specific IP addresses to individual MAC addresses. IP Alias Use this screen to partition your LAN interface into different logical networks. UPnP Use this screen to enable the UPnP function.
Chapter 2 Introducing the Web Configurator Table 2 Navigation Panel Summary (continued) LINK TAB FUNCTION Parental Control Parental Control Use this screen to define time periods and days during which the AMG1312-T Series performs parental control and/or block web sites with the specific URL. Certificates Local Certificates Use this screen to export self-signed certificates or certification requests and import the AMG1312-T Series’s CA-signed certificates.
C HAPT ER 3 Internet / Wireless Setup Wizard 3.1 Overview Use the wizard setup screens to configure your system for Internet access with the information given to you by your ISP. Note: See the advanced menu chapters for background information on these fields. 3.2 Internet / Wireless Wizard Setup 1 After you enter the password to access the web configurator, click the Wizard icon ( right corner of the web configurator to go to the Wizard.
Chapter 3 Internet / Wireless Setup Wizard Enter your Internet access information in the wizard screen exactly as your service provider gave it to you. Leave the defaults in any fields for which you were not given information. 4 Configure the field and click Next to continue. See Section 3.2 on page 27 for wireless connection wizard setup. Figure 9 Internet Access Wizard Setup: IPoA Configuration The following table describes the fields in this screen.
Chapter 3 Internet / Wireless Setup Wizard Note: Virtual Path Identifier (VPI) and Virtual Channel Identifier (VCI) define a virtual circuit. Figure 10 Internet Connection with ENET ENCAP The following table describes the fields in this screen. Table 4 Internet Connection with ENET ENCAP LABEL DESCRIPTION Encapsulation Select the encapsulation type your ISP uses from the Encapsulation drop-down list box: IPoA, ENET ENCAP, PPPoA, or PPPoE.
Chapter 3 Internet / Wireless Setup Wizard Figure 11 Internet Connection with PPPoA The following table describes the fields in this screen. Table 5 Internet Connection with PPPoA 30 LABEL DESCRIPTION Encapsulation Select the encapsulation type your ISP uses from the Encapsulation drop-down list box: IPoA, ENET ENCAP, PPPoA, or PPPoE. User Name Enter the login name that your ISP gives you. Password Enter the password associated with the user name above.
Chapter 3 Internet / Wireless Setup Wizard Figure 12 Internet Connection with PPPoE The following table describes the fields in this screen. Table 6 Internet Connection with PPPoE LABEL DESCRIPTION User Name Enter the user name exactly as your ISP assigned. If assigned a name in the form user@domain where domain identifies a service name, then enter both components exactly as given. Password Enter the password associated with the user name above.
Chapter 3 Internet / Wireless Setup Wizard After you configure the Internet access information, use the following screen to set up your wireless LAN. 5 Check the Wireless Service box to enable wireless connection on the ZyXEL device. 6 Configure your wireless settings in this screen. Click Next. Figure 13 Wireless Setup The following table describes the labels in this screen.
Chapter 3 Internet / Wireless Setup Wizard Figure 14 Results Summary 8 Launch your web browser and navigate to www.zyxel.com. Internet access is just the beginning. Refer to the rest of this guide for more detailed information on the complete range of AMG1312-T Series features. If you cannot access the Internet, open the web configurator again to confirm that the Internet settings you configured in the wizard setup are correct.
C HAPT ER 4 Tutorials 4.1 Overview This chapter shows you how to use the AMG1312-T Series’s various features.
Chapter 4 Tutorials Account Configuration For this example, the interface type is ADSL and the connection has the following information. General Mode Router Encapsulation PPPoE User Name 1234@DSL-Ex.
Chapter 4 Tutorials Go to Network Setting > Broadband, enter or select these values and click Apply. This completes your DSL WAN connection setting. 4.3 IPv6 Address Configuration If the ISP’s network supports IPv6, the ISP may assign an IPv6 address to the AMG1312-T Series automatically.
Chapter 4 Tutorials IPv6 IPv6 IPv6 In the Network Setting > Broadband screen’s IPv6 Address configuration section, select Obtain an IP Address Automatically. In the DHCP IPv6 field select DHCP to obtain an IPv6 address from a DHCPv6 server. In the DHCP PD field select Enable to have the AMG1312-T Series pass the WAN prefix to LAN hosts. The LAN hosts can then use the prefix to generate their IPv6 addresses. 4.
Chapter 4 Tutorials Click Network Setting > Wireless to open the General screen. Configure the screen using the provided parameters (see page 37). Click Apply. 2 Click Network Setting > Wireless > Advanced and make sure 802.11b+g+n is selected in the 802.11 Mode field. Click Apply. EX AM PL E 1 Thomas can now use the WPS feature to establish a wireless connection between his notebook and the AMG1312-T Series (see Section 4.4.2 on page 38).
Chapter 4 Tutorials Note: The wireless client must be a WPS-aware device (for example, a WPS USB adapter or PCMCIA card). There are two WPS methods to set up the wireless client settings: • Push Button Configuration (PBC) - simply press a button. This is the easier of the two methods. • PIN Configuration - configure a Personal Identification Number (PIN) on the AMG1312-T Series. A wireless client must also use the same PIN in order to download the wireless network settings from the AMG1312-T Series.
Chapter 4 Tutorials Example WPS Process: PBC Method The Device Wireless Client WITHIN 2 MINUTES Press and hold for 5 seconds SECURITY INFO COMMUNICATION PIN Configuration When you use the PIN configuration method, you need to use both the AMG1312-T Series’s web config ur at or and the wireless client’s utility. 40 1 Launch your wireless client’s configuration utility. Go to the WPS settings and select the PIN method to get a PIN number.
Chapter 4 Tutorials 3 Click the Start and Register buttons (or the button next to the PIN field) on both the wireless client utility screen and the AMG1312-T Series’s WPS screen within two minutes. The AMG1312-T Series authenticates the wireless client and sends the proper configuration settings to the wireless client. This may take up to two minutes. The wireless client is then able to communicate with the AMG1312-T Series securely.
Chapter 4 Tutorials Example WPS Process: PIN Method Wireless Client The Device WITHIN 2 MINUTES Authentication by PIN SECURITY INFO COMMUNICATION 4.4.3 Connecting Wirelessly to your AMG1312-T Series This section describes how to connect wirelessly to your AMG1312-T Series. The connection procedure is shown here using Windows XP as an example. 1 42 Right-click the wireless adapter icon which appears in the bottom right of your computer monitor. Click View Available Wireless Networks.
Chapter 4 Tutorials Tutorial: Status 2 Select the AMG1312-T Series’s SSID name and click Connect (A). The SSID “SecureWirelessNetwork” is given here as an example. Tutorial: Status A 3 You are prompted to enter a password. Enter it and click Connect. Tutorial: Status 4 You may have to wait several minutes while your computer connects to the wireless network. 5 You should now be securely connected wirelessly to the AMG1312-T Series.
Chapter 4 Tutorials Congratulations! Your computer is now ready to connect to the Internet wirelessly through your AMG1312-T Series. Note: If you cannot connect wirelessly to the AMG1312-T Series, check you have selected the correct SSID and entered the correct security key. If that does not work, ensure your wireless network adapter is enabled by clicking on the wireless adapter icon and clicking Enable. 4.
Chapter 4 Tutorials C:\>ipconfig /all Ethernet adapter Wireless Network Connection: Media State . . . . . . . . . . . : Media connected Description . . . . . . . . . . . : Wireless USB Adapter Physical Address. . . . . . . . . : 00-1E-52-C3-5C-1B ---------------------------SNAP!-------------------------------- Click Network Setting > Wireless > MAC Authentication. Select the wireless network in the SSID field and then Deny in the MAC Restrict Mode field. 3 Enter the MAC address that you want to deny.
Chapter 4 Tutorials Tutorial: NAT Port Forwarding Setup D=192.168.1.34 LAN WAN port 666 A 4.6.1 Port Forwarding Thomas needs to configure the port settings and IP address on the AMG1312-T Series. Traffic should be forwarded to port 666 of the Doom server computer which has an IP address of 192.168.1.34. Thomas may set up the port settings by configuring the port settings for the Doom server computer (see Section 11.3 on page 149 for more information).
Chapter 4 Tutorials Service Name Select User Define. Start/End Ports Enter 666 as the Start and End port. Server IP Address Enter the IP address of the Doom server (192.168.1.34 for this example). EX AM PL E The screen should look as follows. Click Apply. The port forwarding settings you configured appear in the table. The AMG1312-T Series forwards port 666 traffic to the computer with IP address 192.168.1.34. EX AM PL E 4 Players on the Internet then can have access to Thomas’ Doom server.
Chapter 4 Tutorials Tutorial: NAT Port Forwarding Setup WAN LAN A 2 1 1 Click Security > Firewall and select Custom. Click Apply to save your settings. Tutorial: Advanced > QoS 2 Click the Rules tab. In the Packet Direction field select WAN to LAN and click Add. Tutorial: Advanced > QoS > Queue Setup 3 48 The Add New Firewall Rule screen will appear. Click the Edit Customized Services button to access the following screen. Click Add and configure the following settings.
Chapter 4 Tutorials Tutorial: Advanced > QoS > Queue Setup 4 In the Add New Firewall Rule screen, select Active. In the Available Services field, select the service you configured, My_Service. Click OK.
Chapter 4 Tutorials 5 The firewall rule you configured appears in the table. The AMG1312-T Series allows traffic from the WAN to LAN if it matches port 123. 4.8 Configuring Static Route for Routing to Another Network In order to extend your Intranet and control traffic flowing directions, you may connect a router to the AMG1312-T Series’s LAN. The router may be used to separate two department networks. This tutorial shows how to configure a static routing rule for two network routings.
Chapter 4 Tutorials N1 A R N2 B This tutorial uses the following example IP settings: Table 8 IP Settings in this Tutorial DEVICE / COMPUTER IP ADDRESS The AMG1312-T Series’s WAN 172.16.1.1 The AMG1312-T Series’s LAN 192.168.1.1 A 192.168.1.34 R’s N1 192.168.1.253 R’s N2 192.168.10.2 B 192.168.10.33 To configure a static route to route traffic from N1 to N2: 1 Log into the AMG1312-T Series’s Web Configurator. 2 Click Network Setting > Static Route.
Chapter 4 Tutorials 4d Click OK. Now B should be able to receive traffic from A. You may need to additionally configure B’s firewall settings to allow specific traffic to pass through. 4.9 Port Binding Configuration This tutorial shows you how to configure port binding for WAN connections with different ATM QoS settings for different types of traffic. The port binding feature is used to group each WAN connection with specific LAN ports and WLANs.
EX AM PL E Chapter 4 Tutorials To configure bandwidth for the data connection, select UBR with PCR in the ATM QoS Type field. Click Apply.
Chapter 4 Tutorials To configure dedicated bandwidth of 400 kbps for the VoIP connection, select CBR in the ATM QoS Type field and enter the Peak Cell Rate as 943 (divide the bandwidth 400000 bps by 424). Click Apply to save the settings. To configure variable bandwidth of 2 Mbps for MOD data connection, select Realtime VBR in the ATM QoS Type field.
Chapter 4 Tutorials Configured WAN connections can be viewed by clicking the More Connections tab under Network Setting > Broadband. See the WAN Setup chapter (Chapter 6 on page 68) for more information on configuring WAN connections and ATM QoS settings. 4.9.2 Configuring Port Binding You can then group specific WAN PVCs with LAN ports or WLANs, so traffic from these ports is forwarded through specific WAN PVCs.
Chapter 4 Tutorials A EX 3 LE P M The configured groups can be viewed by clicking the Port Binding Summary button. See the Port Binding chapter (Chapter 12 on page 157) for more details on configuring port binding. 4.10 Configuring QoS to Prioritize Traffic This section contains tutorials on how you can configure the QoS screen. Let’s say you are a team leader of a small sales branch office.
Chapter 4 Tutorials 1 Click Network Setting > QoS and check Active QoS. Click Apply. Tutorial: Advanced > QoS 2 Go to Network Setting > QoS > Queue Setup. Click the Edit icon next to an entry to configure a queue. 3 Select Active and give it a name (Queue1 in this example). Select WAN in the Interface field and 1 in the Priority and Weight fields. Then click OK. Tutorial: Advanced > QoS > Queue Setup 4 Go to Network Setting > QoS > Class Setup and click Add new Classifier.
Chapter 4 Tutorials Tutorial: Advanced > QoS > Class Setup 58 AMG1312-T Series User’s Guide
Chapter 4 Tutorials Interface Select From LAN. To Queue Link this to a queue created in the Network Setting > QoS > Queue Setup screen, which is the 1 queue created in this example. Source MAC Address Type the MAC address of your computer AA:FF:AA:FF:AA:FF. Type the Source Mac Netmask if you know it. Source Port Range Enter the port number to which the rule should be applied 25 for SMTP. Protocol ID Select the IP protocol type - TCP.
Chapter 4 Tutorials 2 Apply for a user account. This tutorial uses UserName1 and 12345 as the username and password. 3 Log into www.dyndns.org using your account. 4 Add a new DDNS host name. This tutorial uses the following settings as an example. • Hostname: zyxelrouter.dyndns.org • Service Type: Host with IP address • IP Address: Enter the WAN IP address that your AMG1312-T Series is currently using. You can find the IP address on the AMG1312-T Series’s Web Configurator Status page.
P ART II Technical Reference 61
C HAPT ER 5 Connection Status and System Info Screens 5.1 Overview After you log into the web configurator, the Connection Status screen appears. This shows the network connection status of the AMG1312-T Series and clients connected to it. Use the System Info screen to look at the current status of the device, system resources and interfaces (LAN, WAN, WLAN). 5.2 The Connection Status Screen Use this screen to view the network connection status of the device and its clients.
Chapter 5 Connection Status and System Info Screens Figure 16 Connection Status: List View In Icon View, if you want to view information about a client, click the client’s name and then click on Info. In List View, you can also view the client’s information. 5.3 The System Info Screen Click Connection Status > System Info to open this screen.
Chapter 5 Connection Status and System Info Screens Each field is described in the following table. Table 10 System Info Screen LABEL DESCRIPTION Refresh Interval Select how often you want the AMG1312-T Series to update this screen from the drop-down list box. Device Information Host Name This field displays the AMG1312-T Series system name. It is used for identification. Model Name This is the model name of your device.
Chapter 5 Connection Status and System Info Screens Table 10 System Info Screen (continued) LABEL DESCRIPTION IPv6 Global IP This is the current global IPv6 address of the AMG1312-T Series. DHCP This field displays what DHCP services the AMG1312-T Series is providing to the LAN. Choices are: Server - The AMG1312-T Series is a DHCP server in the LAN. It assigns IP addresses to other computers in the LAN.
Chapter 5 Connection Status and System Info Screens Table 10 System Info Screen (continued) LABEL DESCRIPTION DSL Up Time This field displays how long the DSL connection has been active. System Up Time This field displays how long the AMG1312-T Series has been running since it last started up. The AMG1312-T Series starts up when you plug it in, when you restart it (Maintenance > Reboot), or when you reset it (see Chapter 1 on page 18).
C HAPT ER 6 Broadband 6.1 Overview This chapter describes the AMG1312-T Series’s Broadband screens. Use these screens to configure your AMG1312-T Series for Internet access. A WAN (Wide Area Network) connection is an outside connection to another network or the Internet. It connects your private networks (such as a LAN (Local Area Network) and other networks, so that a computer in one location can communicate with computers in other locations. Figure 18 LAN and WAN LAN WAN 6.1.
Chapter 6 Broadband WAN IP Address The WAN IP address is an IP address for the AMG1312-T Series, which makes it accessible from an outside network. It is used by the AMG1312-T Series to communicate with other devices in other networks. It can be static (fixed) or dynamically assigned by the ISP each time the AMG1312-T Series tries to access the Internet.
Chapter 6 Broadband Figure 19 Network Setting > Broadband > Internet Connection > Auto Sync Up 70 AMG1312-T Series User’s Guide
Chapter 6 Broadband The following table describes the labels in this screen. Table 11 Network Setting > Broadband > Internet Connection LABEL DESCRIPTION Line Type Select the DSL mode supported by your ISP. Use Auto Sync-Up if you are not sure which mode to choose from. The AMG1312-T Series dynamically diagnoses the mode supported by the ISP and selects the best compatible one for your connection. Other options are ADSL2+, ADSL2, G.DMT, T1.413 and G.lite.
Chapter 6 Broadband Table 11 Network Setting > Broadband > Internet Connection (continued) LABEL VPI DESCRIPTION This option is available if you select Router in the Mode field. The valid range for the VPI is 0 to 255. Enter the VPI assigned to you. VCI This option is available if you select Router in the Mode field. The valid range for the VCI is 32 to 65535 (0 to 31 is reserved for local management of ATM traffic). Enter the VCI assigned to you.
Chapter 6 Broadband Table 11 Network Setting > Broadband > Internet Connection (continued) LABEL DESCRIPTION WAN Identifier If you selected Manual, enter the WAN Identifier in this field. The WAN identifier should be unique and 64 bits in hexadecimal form. Every 16 bit block should be separated by a colon as in XXXX:XXXX:XXXX:XXXX where X is a hexadecimal character. Blocks of zeros can be represented with double colons as in XXXX:XXXX::XXXX.
Chapter 6 Broadband Figure 20 Network Setting > Broadband > Internet Connection: Advanced Setup The following table describes the labels in this screen. Table 12 Network Setting > Broadband > Internet Connection: Advanced Setup LABEL DESCRIPTION RIP Direction RIP (Routing Information Protocol) allows a router to exchange routing information with other routers. Use this field to control how much routing information the AMG1312-T Series sends and receives on the subnet.
Chapter 6 Broadband Table 12 Network Setting > Broadband > Internet Connection: Advanced Setup (continued) LABEL DESCRIPTION Sustain Cell Rate The Sustain Cell Rate (SCR) sets the average cell rate (long-term) that can be transmitted. Type the SCR, which must be less than the PCR. Note that system default is 0 cells/sec. Maximum Burst Size Maximum Burst Size (MBS) refers to the maximum number of cells that can be sent at the peak rate. Type the MBS, which is less than 65535.
Chapter 6 Broadband The following table describes the labels in this screen. Table 13 Network Setting > Broadband > More Connections LABEL DESCRIPTION ADSL Connections Table # This is an index number indicating the number of the corresponding connection. Active This field indicates whether the connection is active or not. Clear the check box to disable the connection. Select the check box to enable it. Node Name This is the name you gave to the Internet connection.
Chapter 6 Broadband Figure 22 Network Setting > Broadband > More Connections: Edit The following table describes the labels in this screen. Table 14 Network Setting > Broadband > More Connections: Edit LABEL DESCRIPTION General Active AMG1312-T Series User’s Guide Select the check box to activate or clear the check box to deactivate this connection.
Chapter 6 Broadband Table 14 Network Setting > Broadband > More Connections: Edit (continued) LABEL DESCRIPTION Node Name Enter a unique, descriptive name of up to 13 ASCII characters for this connection. Mode Select Router from the drop-down list box if your ISP allows multiple computers to share an Internet account. If you select Bridge, the AMG1312-T Series will forward any packet that it does not route to this remote node; otherwise, the packets are discarded.
Chapter 6 Broadband 6.3.2 Configuring More Connections Advanced Setup Use this screen to edit your AMG1312-T Series's advanced WAN settings. Click the Advanced Setup arrow icon in the More Connections Edit screen. The screen appears as shown. Figure 23 Network Setting > Broadband > More Connections: Edit: Advanced Setup The following table describes the labels in this screen.
Chapter 6 Broadband Table 15 Network Setting > Broadband > More Connections: Edit: Advanced Setup (continued) LABEL DESCRIPTION MTU The Maximum Transmission Unit (MTU) defines the size of the largest packet allowed on an interface or connection. Enter the MTU in this field. For ENET ENCAP, the MTU value is 1500. For PPPoE, the MTU value is 1492. For PPPoA and RFC, the MTU is 100-1500. Apply Click this to save your changes. Cancel Click this to restore your previously saved settings. 6.
Chapter 6 Broadband Note: The actual data rate you obtain varies depending the 3G card you use, the signal strength to the service provider’s base station, and so on. Figure 25 Network Setting > Broadband > 3G Backup The following table describes the labels in this screen. Table 16 Network Setting > Broadband > 3G Backup LABEL DESCRIPTION General 3G Backup Select Enable to have the AMG1312-T Series use the 3G connection as your WAN or a backup when the wired WAN connection fails.
Chapter 6 Broadband Table 16 Network Setting > Broadband > 3G Backup (continued) LABEL DESCRIPTION Dial string Enter the phone number (dial string) used to dial up a connection to your service provider’s base station. Your ISP should provide the phone number. For example, *99# is the dial string to establish a GPRS or 3G connection in Taiwan. APN Enter the APN (Access Point Name) provided by your service provider.
Chapter 6 Broadband 6.5.1.1 ENET ENCAP The MAC Encapsulated Routing Link Protocol (ENET ENCAP) is only implemented with the IP network protocol. IP packets are routed between the Ethernet interface and the WAN interface and then formatted so that they can be understood in a bridged environment. For instance, it encapsulates routed Ethernet frames into bridged ATM cells. ENET ENCAP requires that you specify a gateway IP address in the Gateway IP Address field in the wizard or WAN screen.
Chapter 6 Broadband VC-based Multiplexing In this case, by prior mutual agreement, each protocol is assigned to a specific virtual circuit; for example, VC1 carries IP, etc. VC-based multiplexing may be dominant in environments where dynamic creation of large numbers of ATM VCs is fast and economical. LLC-based Multiplexing In this case one VC carries multiple protocols with protocol identifying information being contained in each packet header.
Chapter 6 Broadband Do not specify a nailed-up connection unless your telephone company offers flat-rate service or you need a constant connection and the cost is of no concern. 6.5.6 NAT NAT (Network Address Translation - NAT, RFC 1631) is the translation of the IP address of a host in a packet, for example, the source address of an outgoing packet, used within one network to a different IP address known within another network. 6.
Chapter 6 Broadband 6.6.1 ATM Traffic Classes These are the basic ATM traffic classes defined by the ATM Forum Traffic Management 4.0 Specification. Constant Bit Rate (CBR) Constant Bit Rate (CBR) provides fixed bandwidth that is always available even if no data is being sent. CBR traffic is generally time-sensitive (doesn't tolerate delay). CBR is used for connections that continuously require a specific amount of bandwidth. A PCR is specified and if traffic exceeds this rate, cells may be dropped.
C HAPT ER 7 Wireless LAN 7.1 Overview This chapter describes how to perform tasks related to setting up and optimizing your wireless network, including the following. • Turning the wireless connection on or off. • Configuring a name, wireless channel and security for the network. • Using WiFi Protected Setup (WPS) to configure your wireless network. • Setting up multiple wireless networks. • Using a MAC (Media Access Control) address filter to restrict access to the wireless network.
Chapter 7 Wireless LAN 7.1.2 What You Need to Know About Wireless Wireless Basics “Wireless” is essentially radio communication. In the same way that walkie-talkie radios send and receive information over the airwaves, wireless networking devices exchange information with one another. A wireless networking device is just like a radio that lets your computer exchange information with radios attached to other computers.
Chapter 7 Wireless LAN Figure 27 Network Setting > Wireless > General The following table describes the labels in this screen. Table 17 Network Setting > Wireless > General LABEL DESCRIPTION Wireless Network Setup Wireless Select Enable Wireless LAN to activate wireless LAN. Wireless Network Settings Wireless Network Name (SSID) The SSID (Service Set IDentity) identifies the service set with which a wireless device is associated.
Chapter 7 Wireless LAN Table 17 Network Setting > Wireless > General (continued) LABEL DESCRIPTION Security Mode Select Basic (WEP) or More Secure (WPA(2)-PSK, WPA(2)) to add security on this wireless network. The wireless clients which want to associate to this network must have same wireless security settings as the AMG1312-T Series. When you select to use a security, additional options appears in this screen.
Chapter 7 Wireless LAN Note: WEP is extremely insecure. Its encryption can be broken by an attacker, using widely-available software. It is strongly recommended that you use a more effective security mechanism. Use the strongest security mechanism that all the wireless devices in your network support. For example, use WPA-PSK or WPA2-PSK if all your wireless devices support it, or use WPA or WPA2 if your wireless devices support it and you have a RADIUS server.
Chapter 7 Wireless LAN Click Network Setting > Wireless to display the General screen. Select More Secure as the security level. Then select WPA-PSK or WPA2-PSK from the Security Mode list. Figure 30 Wireless > General: More Secure: WPA(2)-PSK The following table describes the wireless LAN security labels in this screen. Table 19 Wireless > General: More Secure: WPA(2)-PSK LABEL DESCRIPTION Security Level Select More Secure to enable WPA(2)-PSK data encryption.
Chapter 7 Wireless LAN The WPA security mode is a security subset of WPA2. It requires the presence of a RADIUS server on your network in order to validate user credentials. This encryption standard is slightly older than WPA2 and therefore is more compatible with older devices. Click Network Setting > Wireless to display the General screen. Select More Secure as the security level. Then select WPA or WPA2 from the Security Mode list.
Chapter 7 Wireless LAN Table 20 Wireless > General: More Secure: WPA(2) (continued) LABEL DESCRIPTION Group Key Update Timer The Group Key Update Timer is the rate at which the RADIUS server sends a new group key out to all clients. Encryption Select the encryption type for data encryption. If you choose WPA as the security mode, the AMG1312-T Series uses TKIP for data encryption.
Chapter 7 Wireless LAN Figure 33 More AP: Edit The following table describes the fields in this screen. Table 22 More AP: Edit LABEL DESCRIPTION Wireless Network Setup Wireless Select Enable Wireless LAN to activate wireless LAN. Wireless Network Settings Wireless Network Name (SSID) The SSID (Service Set IDentity) identifies the service set with which a wireless device is associated. Wireless devices associating to the access point (AP) must have the same SSID.
Chapter 7 Wireless LAN 7.4 The MAC Authentication Screen This screen allows you to configure the AMG1312-T Series to give exclusive access to specific devices (Allow) or exclude specific devices from accessing the AMG1312-T Series (Deny). Every Ethernet device has a unique MAC (Media Access Control) address. The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02.
Chapter 7 Wireless LAN 7.5 The WPS Screen Use this screen to configure WiFi Protected Setup (WPS) on your AMG1312-T Series. WPS allows you to quickly set up a wireless network with strong security, without having to configure security settings manually. Set up each WPS connection between two devices. Both devices must support WPS. See Section 7.10.8.3 on page 110 for more information about WPS. Note: The AMG1312-T Series applies the security settings configured in the General screen (see Section 7.
Chapter 7 Wireless LAN Table 24 Network Setting > Wireless > WPS (continued) LABEL DESCRIPTION Add a new device with WPS Method Method 1 PBC WPS Use this section to set up a WPS wireless network using Push Button Configuration (PBC). Click this button to add another WPS-enabled wireless device (within wireless range of the AMG1312-T Series) to your wireless network. This button may either be a physical button on the outside of device, or a menu button similar to the WPS button on this screen.
Chapter 7 Wireless LAN 7.6 The WDS Screen An AP using the Wireless Distribution System (WDS) can function as a wireless network bridge allowing you to wirelessly connect wired network segments. The WDS screen allows you to configure the AMG1312-T Series to connect to other APs wirelessly when WDS is enabled. Use this screen to set up your WDS (Wireless Distribution System) links between the AMG1312-T Series and other wireless APs. You need to know the MAC address of the peer device.
Chapter 7 Wireless LAN 7.7 The WMM Screen Use this screen to enable WiFi MultiMedia (WMM) and WMM Power Save in wireless networks for multimedia applications. Click Network Setting > Wireless > WMM. The following screen displays. Figure 37 Network Setting > Wireless > WMM The following table describes the labels in this screen.
Chapter 7 Wireless LAN The following table describes the labels in this screen. Table 27 Network Setting > Wireless > Scheduling LABEL DESCRIPTION Wireless LAN Scheduling Select Enable or Disable to activate or deactivate wireless LAN scheduling on your AMG1312-T Series. State Select On or Off to enable or disable the wireless LAN. Day Check the day(s) you want to turn the wireless LAN on or off. Time (24-Hour Format) Specify a time frame during which the schedule would apply.
Chapter 7 Wireless LAN Table 28 Network Setting > Wireless> Advanced (continued) LABEL DESCRIPTION 802.11 Mode Select 802.11b Only to allow only IEEE 802.11b compliant WLAN devices to associate with the AMG1312-T Series. Select 802.11g Only to allow only IEEE 802.11g compliant WLAN devices to associate with the AMG1312-T Series. Select 802.11b+g to allow either IEEE 802.11b or IEEE 802.11g compliant WLAN devices to associate with the AMG1312-T Series.
Chapter 7 Wireless LAN • An “infrastructure” type of network has one or more access points and one or more wireless clients. The wireless clients connect to the access points. • An “ad-hoc” type of network is one in which there is no access point. Wireless clients connect to one another in order to exchange information. The following figure provides an example of a wireless network. Figure 40 Example of a Wireless Network The wireless network is the part in the blue circle.
Chapter 7 Wireless LAN variety of networks to exist in the same place without interfering with one another. When you create a network, you must select a channel to use. Since the available unlicensed spectrum varies from one country to another, the number of available channels also varies. 7.10.2 Additional Wireless Terms The following table describes some wireless network terms and acronyms used in the AMG1312-T Series’s Web Configurator.
Chapter 7 Wireless LAN her favorite movie is Vanishing Point (which you know was made in 1971) you could use “70dodchal71vanpoi” as your security key. The following sections introduce different types of wireless security you can set up in the wireless network. 7.10.3.1 SSID Normally, the AMG1312-T Series acts like a beacon and regularly broadcasts the SSID in the area. You can hide the SSID instead, in which case the AMG1312-T Series does not broadcast the SSID.
Chapter 7 Wireless LAN 7.10.3.4 Encryption Wireless networks can use encryption to protect the information that is sent in the wireless network. Encryption is like a secret code. If you do not know the secret code, you cannot understand the message. The types of encryption you can choose depend on the type of authentication. (See Section 7.10.3.3 on page 105 for information about this.
Chapter 7 Wireless LAN 7.10.5 BSS A Basic Service Set (BSS) exists when all communications between wireless stations or between a wireless station and a wired network client go through one access point (AP). Intra-BSS traffic is traffic between wireless stations in the BSS. When Intra-BSS traffic blocking is disabled, wireless station A and B can access the wired network and communicate with each other.
Chapter 7 Wireless LAN • MBSSID should not replace but rather be used in conjunction with 802.1x security. 7.10.7 Wireless Distribution System (WDS) The AMG1312-T Series can act as a wireless network bridge and establish WDS (Wireless Distribution System) links with other APs. You need to know the MAC addresses of the APs you want to link to. Once the security settings of peer sides match one another, the connection between devices is made.
Chapter 7 Wireless LAN 2 Look for a WPS button on each device. If the device does not have one, log into its configuration utility and locate the button (see the device’s User’s Guide for how to do this - for the AMG1312-T Series, see Section 7.6 on page 99). 3 Press the button on one of the devices (it doesn’t matter which). For the AMG1312-T Series you must press the WPS button for more than three seconds. 4 Within two minutes, press the button on the other device.
Chapter 7 Wireless LAN The following figure shows a WPS-enabled wireless client (installed in a notebook computer) connecting to the WPS-enabled AP via the PIN method. Figure 43 Example WPS Process: PIN Method ENROLLEE REGISTRAR WPS This device’s WPS PIN: 123456 WPS Enter WPS PIN from other device: WPS START WPS START WITHIN 2 MINUTES SECURE EAP TUNNEL SSID WPA(2)-PSK COMMUNICATION 7.10.8.3 How WPS Works When two WPS-enabled devices connect, each device must assume a specific role.
Chapter 7 Wireless LAN Figure 44 How WPS works ACTIVATE WPS ACTIVATE WPS WITHIN 2 MINUTES WPS HANDSHAKE ENROLLEE REGISTRAR SECURE TUNNEL SECURITY INFO COMMUNICATION The roles of registrar and enrollee last only as long as the WPS setup process is active (two minutes). The next time you use WPS, a different device can be the registrar if necessary. The WPS connection process is like a handshake; only two devices participate in each WPS transaction.
Chapter 7 Wireless LAN Figure 45 WPS: Example Network Step 1 ENROLLEE REGISTRAR SECURITY INFO AP1 CLIENT 1 In step 2, you add another wireless client to the network. You know that Client 1 supports registrar mode, but it is better to use AP1 for the WPS handshake with the new client since you must connect to the access point anyway in order to use the network. In this case, AP1 must be the registrar, since it is configured (it already has security information for the network).
Chapter 7 Wireless LAN Figure 47 WPS: Example Network Step 3 EXISTING CONNECTION CLIENT 1 IS EX O GC TIN ION CT E NN AP1 REGISTRAR CLIENT 2 SE CU RIT Y ENROLLEE INF O AP2 7.10.8.5 Limitations of WPS WPS has some limitations of which you should be aware. • WPS works in Infrastructure networks only (where an AP and a wireless client communicate). It does not work in Ad-Hoc networks (where there is no AP). • When you use WPS, it works between two devices only.
Chapter 7 Wireless LAN access point is the WPS registrar, the enrollee, or was not involved in the WPS handshake; a rogue device must still associate with the access point to gain access to the network. Check the MAC addresses of your wireless clients (usually printed on a label on the bottom of the device). If there is an unknown MAC address you can remove it or reset the AP.
C HAPT ER 8 Home Networking 8.1 Overview A Local Area Network (LAN) is a shared communication system to which many networking devices are connected. It is usually located in one immediate area such as a building or floor of a building. Use the LAN screens to help you configure a LAN DHCP server and manage IP addresses. LAN DSL 8.1.1 What You Can Do in the LAN Screens • Use the LAN Setup screen to set the LAN IP address, subnet mask, and DHCP settings of your AMG1312-T Series (Section 8.2 on page 117).
Chapter 8 Home Networking 8.1.2 What You Need To Know 8.1.2.1 About LAN IP Address IP addresses identify individual devices on a network. Every networking device (including computers, servers, routers, printers, etc.) needs an IP address to communicate across the network. These networking devices are also known as hosts. Subnet Mask Subnet masks determine the maximum number of possible hosts on a network. You can also use subnet masks to divide one network into multiple sub-networks.
Chapter 8 Home Networking Cautions with UPnP The automated nature of NAT traversal applications in establishing their own services and opening firewall ports may present network security issues. Network information and configuration may also be obtained and modified by users in some network environments. When a UPnP device joins a network, it announces its presence with a multicast message. For security reasons, the AMG1312-T Series allows multicast messages on the LAN only.
Chapter 8 Home Networking Figure 48 Network Setting > Home Networking > LAN Setup The following table describes the fields in this screen. Table 31 Network Setting > Home Networking > LAN Setup LABEL DESCRIPTION LAN IP Setup IP Address Enter the LAN IP address you want to assign to your AMG1312-T Series in dotted decimal notation, for example, 192.168.1.1 (factory default). Subnet Mask Type the subnet mask of your network in dotted decimal notation, for example 255.255.255.0 (factory default).
Chapter 8 Home Networking Table 31 Network Setting > Home Networking > LAN Setup (continued) LABEL DESCRIPTION DHCP If set to Enable, your AMG1312-T Series can assign IP addresses, an IP default gateway and DNS servers to Windows 95, Windows NT and other systems that support the DHCP client. If set to Disable, the DHCP server will be disabled. If set to DHCP Relay, the AMG1312-T Series acts as a surrogate DHCP server and relays DHCP requests and responses between the remote server and the clients.
Chapter 8 Home Networking The following table describes the labels in this screen. Table 32 Network Setting > Home Networking > Static DHCP LABEL DESCRIPTION Add new static lease Click this to add a new static DHCP entry. # This is the index number of the entry. Active This field displays whether the client is connected to the AMG1312-T Series. MAC Address The MAC (Media Access Control) or Ethernet address on a LAN (Local Area Network) is unique to your computer (six pairs of hexadecimal notation).
Chapter 8 Home Networking When you use IP alias, you can also configure firewall rules to control access to the LAN's logical network (subnet). 8.4.1 Configuring the LAN IP Alias Screen Use this screen to change your AMG1312-T Series’s IP alias settings. Click Network Setting > Home Networking > IP Alias to open the following screen. Figure 51 Network Setting > Home Networking > IP Alias The following table describes the labels in this screen.
Chapter 8 Home Networking The following table describes the labels in this screen. Table 35 Network Setting > Home Networking > UPnP LABEL DESCRIPTION UPnP Select Enable to activate UPnP. Be aware that anyone could use a UPnP application to open the web configurator's login screen without entering the AMG1312-T Series's IP address (although you must still enter the password to access the web configurator). Otherwise, select Disable to deactivate UPnP. Apply Click Apply to save your changes.
Chapter 8 Home Networking The following table describes the labels in this screen. Table 36 Network Setting > Home Networking > IPv6 LAN Setup LABEL DESCRIPTION IPv6 LAN Setup Link Local Address Type Select Manual to manually enter a link local address. Select EUI64 to use the EUI-64 format to generate a link local address from the Ethernet MAC address.
Chapter 8 Home Networking Table 36 Network Setting > Home Networking > IPv6 LAN Setup (continued) LABEL DESCRIPTION Send RA on Select this to have the AMG1312-T Series send router advertisement messages to the LAN hosts. Router advertisement is a response to a router solicitation or a periodical multicast advertisement from a router to advertise its presence and other parameters, such as IPv6 prefix and DNS information.
Chapter 8 Home Networking Table 36 Network Setting > Home Networking > IPv6 LAN Setup (continued) LABEL DESCRIPTION DAD attempts Specify the number of DAD (Duplicate Address Detection) attempts before an IPv6 address is assigned to the AMG1312-T Series LAN interface. Possible values for this field are 1-7. DHCPv6 DHCPv6 Server Use this field to Enable or Disable DHCPv6 server on the AMG1312-T Series.
Chapter 8 Home Networking Each field is described in the following table. Table 37 Network Setting > Home Networking > File Sharing LABEL DESCRIPTION Server Configuration Active the File Sharing Services (SMB) Select Active the File Sharing Services (SMB) to activate file sharing through the AMG1312-T Series. Share Directory Access Level Select Public to allow all users on the network to access the shared files. Select Security to require users to log in to access shared files.
Chapter 8 Home Networking Each field is described in the following table. Table 38 Network Setting > Home Networking > File Sharing > Edit LABEL DESCRIPTION Active Select Active to edit user file sharing through the AMG1312-T Series. User Name Type in the user name of 5 to 15 keyboard characters in length. New Password Type in the new password of 5 to 15 keyboard characters in length. Retype New Password Retype the new password of 5 to 15 keyboard characters in length.
Chapter 8 Home Networking 8.8 Home Networking Technical Reference This section provides some technical background information about the topics covered in this chapter. 8.8.1 LANs, WANs and the AMG1312-T Series The actual physical connection determines whether the AMG1312-T Series ports are LAN or WAN ports. There are two separate IP networks, one inside the LAN network and the other outside the WAN network as shown next. Figure 56 LAN and WAN IP Addresses LAN WAN 8.8.
Chapter 8 Home Networking • Some ISPs choose to disseminate the DNS server addresses using the DNS server extensions of IPCP (IP Control Protocol) after the connection is up. If your ISP did not give you explicit DNS servers, chances are the DNS servers are conveyed through IPCP negotiation. The AMG1312-T Series supports the IPCP DNS server extensions through the DNS proxy feature. Please note that DNS proxy works only when the ISP uses the IPCP DNS server extensions.
Chapter 8 Home Networking • 192.168.0.0 — 192.168.255.255 You can obtain your IP address from the IANA, from an ISP or it can be assigned from a private network. If you belong to a small organization and your Internet access is through an ISP, the ISP can provide you with the Internet addresses for your local networks. On the other hand, if you are part of a much larger organization, you should consult your network administrator for the appropriate IP addresses.
Chapter 8 Home Networking 224.0.0.1 is used for query messages and is assigned to the permanent group of all IP hosts (including gateways). All hosts must join the 224.0.0.1 group in order to participate in IGMP. The address 224.0.0.2 is assigned to the multicast routers group. At start up, the AMG1312-T Series queries all directly connected networks to gather group membership. After that, the AMG1312-T Series periodically updates this information.
C HAPT ER 9 Static Route 9.1 Overview The AMG1312-T Series usually uses the default gateway to route outbound traffic from computers on the LAN to the Internet. To have the AMG1312-T Series send data to devices not reachable through the default gateway, use static routes. For example, the next figure shows a computer (A) connected to the AMG1312-T Series’s LAN interface. The AMG1312-T Series routes most traffic from A to the Internet through the AMG1312-T Series’s default gateway (R1).
Chapter 9 Static Route 9.1.1 What You Can Do in the Static Route Screens • Use the Static Route screens (Section 9.2 on page 133) to view and configure IP static routes on the AMG1312-T Series. • Use the IPv6 Static Route screens (Section 9.3 on page 134) to view and configure IPv6 static routes on the AMG1312-T Series. 9.2 The Static Route Screen Use this screen to view the static route rules. Click Network Setting > Static Route to open the Static Route screen.
Chapter 9 Static Route Figure 59 Network Setting > Static Route Add/Edit The following table describes the labels in this screen. Table 40 Network Setting > Static Route Add/Edit LABEL DESCRIPTION Destination IP Address This parameter specifies the IP network address of the final destination. Routing is always based on network number. If you need to specify a route to a single host, use a subnet mask of 255.255.255.255 in the subnet mask field to force the network number to be identical to the host ID.
Chapter 9 Static Route Table 41 Network Setting > Static Route > IPv6 Static Route (continued) LABEL DESCRIPTION Destination This parameter specifies the IP network address of the final destination. Routing is always based on network number. Prefix Length An IPv6 prefix length specifies how many most significant bits (starting from the left) in the address compose the network address. This field displays the bit number of the IPv6 subnet mask. Device This specifies the LAN or WAN PVC.
C HAPTER 10 Quality of Service (QoS) 10.1 Overview Use the QoS screen to set up your AMG1312-T Series to use QoS for traffic management. Quality of Service (QoS) refers to both a network’s ability to deliver data with minimum delay, and the networking methods used to control bandwidth. QoS allows the AMG1312-T Series to group and prioritize application traffic and fine-tune network performance. Without QoS, all traffic data are equally likely to be dropped when the network is congested.
Chapter 10 Quality of Service (QoS) • Use the Queue screen (Section 10.3 on page 138) to configure QoS settings on the AMG1312-T Series. • Use the Class Setup screen (Section 10.4 on page 140) to configure QoS settings on the AMG1312-T Series. • Use the Game List screen (Section 10.5 on page 144) to give priority to traffic for specific games. 10.1.2 What You Need to Know About QoS 802.1p QoS is used to prioritize source-to-destination traffic flows.
Chapter 10 Quality of Service (QoS) The following table describes the labels in this screen. Table 43 Network Setting > QoS > General LABEL DESCRIPTION Active QoS Use this field to turn on QoS to improve your network performance. Traffic priority will be automatically assigned by Select how the AMG1312-T Series assigns priorities to various incoming and outgoing traffic flows.
Chapter 10 Quality of Service (QoS) Table 44 Network Setting > QoS > Queue (continued) LABEL DESCRIPTION Rate Limit This shows the maximum transmission rate allowed for traffic on this queue. Modify Click the Edit icon to edit the queue. Click the Delete icon to delete an existing queue. Note that subsequent rules move up by one when you take this action. 10.3.1 Adding a QoS Queue Click the edit icon in the Queue Setup screen to configure a queue.
Chapter 10 Quality of Service (QoS) 10.4 The Class Setup Screen Use this screen to add, edit or delete QoS classifiers. A classifier groups traffic into data flows according to specific criteria such as the source address, destination address, source port number, destination port number or incoming interface. For example, you can configure a classifier to select traffic from the same protocol port (such as Telnet) to form a flow.
Chapter 10 Quality of Service (QoS) Figure 67 QoS > Class Setup Add/Edit AMG1312-T Series User’s Guide 141
Chapter 10 Quality of Service (QoS) The following table describes the labels in this screen. Table 47 QoS > Class Setup Add/Edit LABEL DESCRIPTION Rule Index Select the rule’s index number from the drop-down list box. Class Configuration Active Use this field to enable or disable the QoS class rule. Ether Type Select a predefined application to configure a class for the matched traffic.
Chapter 10 Quality of Service (QoS) Table 47 QoS > Class Setup Add/Edit (continued) LABEL Mac Netmask DESCRIPTION Type the mask for the specified MAC address to determine which bits a packet’s MAC address should match. Enter “f” for each bit of the specified source MAC address that the traffic’s MAC address should match. Enter “0” for the bit(s) of the matched traffic’s MAC address, which can be of any hexadecimal character(s).
Chapter 10 Quality of Service (QoS) Table 47 QoS > Class Setup Add/Edit (continued) LABEL Type Of Service Mark DSCP Mark(0~63) DESCRIPTION Select a type of service to re-assign the priority level to matched traffic. Available options are: Normal service, Minimize delay, Maximize throughput, Maximize reliability and Minimize monetary cost. This field is available only when you select IP in the Ether Type field.
Chapter 10 Quality of Service (QoS) The following table describes the labels in this screen. Table 48 Network Setting > QoS > Game List LABEL DESCRIPTION Enable Game List Select this to have QoS give the highest priority to traffic for the games you specify. This priority is higher than the other QoS queues. Select the games below. Apply Click this to save your changes. Cancel Click this to restore previously saved settings. 10.
Chapter 10 Quality of Service (QoS) 10.6.3 Automatic Priority Queue Assignment If you enable QoS on the AMG1312-T Series, the AMG1312-T Series can automatically base on the IEEE 802.1p priority level, IP precedence and/or packet length to assign priority to traffic which does not match a class. The following table shows you the internal layer-2 and layer-3 QoS mapping on the AMG1312-T Series.
C HAPTER 11 Network Address Translation (NAT) 11.1 Overview This chapter discusses how to configure NAT on the AMG1312-T Series. NAT (Network Address Translation - NAT, RFC 1631) is the translation of the IP address of a host in a packet, for example, the source address of an outgoing packet, used within one network to a different IP address known within another network. 11.1.1 What You Can Do in the NAT Screens • Use the General screen (Section 11.
Chapter 11 Network Address Translation (NAT) Port Forwarding A port forwarding set is a list of inside (behind NAT on the LAN) servers, for example, web or FTP, that you can make visible to the outside world even though NAT makes your whole inside network appear as a single computer to the outside world. Finding Out More See Section 11.6 on page 153 for advanced technical information on NAT. 11.2 The NAT General Screen Use this screen to activate NAT for the default WAN connection (PVC0).
Chapter 11 Network Address Translation (NAT) 11.3 The Port Forwarding Screen Use this screen to forward incoming service requests to the server(s) on your local network. You may enter a single port number or a range of port numbers to be forwarded, and the local IP address of the desired server. The port number identifies a service; for example, web service is on port 80 and FTP on port 21.
Chapter 11 Network Address Translation (NAT) See Appendix F on page 286 for port numbers commonly used for particular services. Note: Make sure NAT is activated on the WAN connection before you configure a port forwarding rule for it. For the default WAN connection (PVC0), activate NAT in the Network Setting > NAT > General screen. For other WAN connections (PVC1~PVC7), activate NAT for an individual WAN connection in the Broadband > More Connections > Edit screen.
Chapter 11 Network Address Translation (NAT) Figure 72 Network Setting > NAT > Port Forwarding: Add/Edit The following table describes the fields in this screen. Table 53 Network Setting > NAT > Port Forwarding: Edit LABEL DESCRIPTION Active Click this check box to enable the rule. Service Name Enter a name to identify this port-forwarding rule. External Start Port Enter a port number in this field. To forward only one port, enter the port number again in the End Port field.
Chapter 11 Network Address Translation (NAT) 11.4 The DMZ Screen If you need to allow packets from a specific WAN connection to your local network, NAT supports a default server IP address. A default server receives packets from the specified WAN connection and the ports that are not specified in the NAT Port Forwarding Setup screen. Figure 73 Network Setting > NAT > DMZ The following table describes the fields in this screen.
Chapter 11 Network Address Translation (NAT) Use this screen to enable and disable the SIP (VoIP) ALG in the AMG1312-T Series. To access this screen, click Network Settings > NAT > ALG. Figure 74 Network Setting > NAT > ALG The following table describes the fields in this screen. Table 55 Network Setting > NAT > ALG LABEL DESCRIPTION ALG Enable the SIP ALG to make sure SIP (VoIP) works correctly with port-forwarding and address-mapping rules. Apply Click Apply to save your changes.
Chapter 11 Network Address Translation (NAT) NAT never changes the IP address (either local or global) of an outside host. 11.6.2 What NAT Does In the simplest form, NAT changes the source IP address in a packet received from a subscriber (the inside local address) to another (the inside global address) before forwarding the packet to the WAN side.
Chapter 11 Network Address Translation (NAT) Figure 76 NAT Application With IP Alias 11.6.5 NAT Mapping Types NAT supports five types of IP/port mapping. They are: • One to One: In One-to-One mode, the AMG1312-T Series maps one local IP address to one global IP address. • Many to One: In Many-to-One mode, the AMG1312-T Series maps multiple local IP addresses to one global IP address.
Chapter 11 Network Address Translation (NAT) The following table summarizes these types.
C HAPTER 12 Port Binding 12.1 Overview This chapter describes how to configure the port binding settings. Port binding allows you to aggregate port connections into logical groups. You may bind WAN PVCs to Ethernet ports and WLANs to specify how traffic is forwarded. Different ATM QoS settings can be specified for each WAN PVC to meet bandwidth requirements for the type of traffic to be transferred.
Chapter 12 Port Binding If a WAN PVC is bound to an ethernet port, traffic from the ethernet port will only be forwarded through the specified WAN PVC and vice versa. If a port is not in a port binding group, traffic to and from the port will be forwarded according to the routing table. See the tutorial section (Section on page 34) for more details on configuring port binding for multiple WAN connections. 12.1.1 What You Can Do in the Port Binding Screens • Use the General screen (Section 12.
Chapter 12 Port Binding Figure 79 Network Setting > Port Binding > Port Binding The following table describes the labels in this screen. Table 59 Network Setting > Port Binding > Port Binding LABEL DESCRIPTION Port Binding Active Activate or deactivate port binding for the port binding group. Group Index Select the index number for the port binding group. When a port is assigned to a port binding group, traffic will be forwarded to the other ports in the group, but not to ports in other groups.
Chapter 12 Port Binding The following table describes the labels in this screen. Table 60 Network Setting > Port Binding > Port Binding Summary LABEL 160 DESCRIPTION Group ID This field displays the group index number. Group port This field displays the ports included in the group.
C HAPTER 13 Dynamic DNS Setup 13.1 Overview Dynamic DNS allows you to update your current dynamic IP address with one or many dynamic DNS services so that anyone can contact you (in NetMeeting, CU-SeeMe, etc.). You can also access your FTP server or Web site on your own computer using a domain name (for instance myhost.dhs.org, where myhost is a name of your choice) that will never change instead of using an IP address that changes each time you reconnect.
Chapter 13 Dynamic DNS Setup Figure 81 Network Setting > Dynamic DNS The following table describes the fields in this screen. Table 61 Network Setting > Dynamic DNS LABEL DESCRIPTION Dynamic DNS Setup Active Dynamic DNS Select this check box to use dynamic DNS. Service Provider This is the website of your Dynamic DNS service provider. Host Name Type the domain name assigned to your AMG1312-T Series by your Dynamic DNS provider.
C HAPTER 14 Filters 14.1 Overview This chapter introduces three types of filters supported by the AMG1312-T Series. You can configure rules to restrict traffic by IP addresses, MAC addresses, IPv6 addresses and/or URLs. 14.1.1 What You Can Do in the Filter Screens • Use the IP/MAC Filter screen (Section 14.2 on page 163) to create IP and MAC filter rules. • Use the IPv6/MAC Filter screen (Section 14.3 on page 166) to create IPv6 and MAC filter rules. 14.1.
Chapter 14 Filters Figure 82 Security > Filter > IP/MAC Filter The following table describes the labels in this screen. Table 62 Security > Filter > IP/MAC Filter LABEL DESCRIPTION Rule Type Rule Type selection Select White List to specify traffic to allow and Black List to specify traffic to disallow. IP / MAC Filter Rule Editing IP / MAC Filter Rule Index Select the index number of the filter rule. Active Use this field to enable or disable the filter rule.
Chapter 14 Filters Table 62 Security > Filter > IP/MAC Filter (continued) LABEL DESCRIPTION Subnet Mask Enter the IP subnet mask for the destination IP address. Port Number Enter the destination port of the packets that you wish to filter. The range of this field is 0 to 65535. This field is ignored if it is 0. Protocol Select ICMP, TCP or UDP for the upper layer protocol. IP / MAC Filter Listing IP / MAC Filter Rule Index Select the index number of the filter set from the drop-down list box.
Chapter 14 Filters 14.3 IPv6/MAC Filter Use this screen to create and apply IPv6 filters. Click Security > Filter > IPv6/MAC Filter. The screen appears as shown. Figure 83 Security > Filter > IPv6/MAC Filter The following table describes the labels in this screen. Table 63 Security > Filter > IPv6/MAC Filter LABEL DESCRIPTION Rule Type Rule Type selection Select White List to specify traffic to allow and Black List to specify traffic to block.
Chapter 14 Filters Table 63 Security > Filter > IPv6/MAC Filter (continued) LABEL DESCRIPTION Destination Prefix Length Enter the prefix length for the destination IPv6 address. ICMPv6 Type Select the ICMPv6 message type to filter.
C HAPTER 15 Firewall 15.1 Overview This chapter shows you how to enable the AMG1312-T Series firewall. Use the firewall to protect your AMG1312-T Series and network from attacks by hackers on the Internet and control access to it. The firewall: • allows traffic that originates from your LAN computers to go to all other networks. • blocks traffic that originates on other networks from going to the LAN. • blocks SYN and port scanner attacks.
Chapter 15 Firewall 15.1.2 What You Need to Know About Firewall SYN Attack A SYN attack floods a targeted system with a series of SYN packets. Each packet causes the targeted system to issue a SYN-ACK response. While the targeted system waits for the ACK that follows the SYN-ACK, it queues up all outstanding SYN-ACK responses on a backlog queue. SYNACKs are moved off the queue only when an ACK comes back or when an internal timer terminates the three-way handshake.
Chapter 15 Firewall Anti-Probing If an outside user attempts to probe an unsupported port on your AMG1312-T Series, an ICMP response packet is automatically returned. This allows the outside user to know the AMG1312-T Series exists. The AMG1312-T Series supports anti-probing, which prevents the ICMP response packet from being sent. This keeps outsiders from discovering your AMG1312-T Series when unsupported ports are probed.
Chapter 15 Firewall The following table describes the labels in this screen. Table 64 Security > Firewall > General LABEL DESCRIPTION High This setting blocks all traffic to and from the Internet. Only local network traffic and LAN to WAN service (Telnet, FTP, HTTP, HTTPS, DNS, POP3, SMTP) is permitted. Medium This is the recommended setting. It allows traffic to the Internet but blocks anyone from the Internet from accessing any services on your local network.
Chapter 15 Firewall The following table describes the labels in this screen. Table 65 Security > Firewall > Default Action LABEL DESCRIPTION Packet Direction This is the direction of travel of packets (LAN to Router, LAN to WAN, WAN to Router, WAN to LAN). Firewall rules are grouped based on the direction of travel of packets to which they apply. For example, LAN to Router means packets traveling from a computer/subnet on the LAN to the AMG1312-T Series itself.
Chapter 15 Firewall 15.4 The Rules Screen Click Security > Firewall > Rules to display the following screen. This screen displays a list of the configured firewall rules. Note the order in which the rules are listed. Note: The firewall configuration screen shown in this section is specific to the following devices: P-The ordering of your rules is very important as rules are applied in turn. Figure 87 Security > Firewall > Rules The following table describes the labels in this screen.
Chapter 15 Firewall Table 66 Security > Firewall > Rules (continued) LABEL DESCRIPTION Destination Interface This column displays the destination interface to which this firewall rule applies. This is the interface through which the traffic is destined to leave the AMG1312-T Series. Please note that a blank source interface is equivalent to Any. Modify Click the Edit icon to go to the screen where you can edit the rule. Click the Remove icon to delete an existing firewall rule.
Chapter 15 Firewall Figure 88 Security > Firewall > Rules > Add The following table describes the labels in this screen. Table 67 Security > Firewall > Rules > Add LABEL DESCRIPTION Active Select this option to enable this firewall rule. Action for Matched Packets Use the drop-down list box to select whether to discard (Drop), deny and send an ICMP destination-unreachable message to the sender of (Reject) or allow the passage of (Permit) packets that match this rule.
Chapter 15 Firewall Table 67 Security > Firewall > Rules > Add (continued) LABEL DESCRIPTION Address Type Do you want your rule to apply to packets with a particular (single) IP, a range of IP addresses (for instance, 192.168.1.10 to 192.169.1.50), a subnet or any IP address? Select an option from the drop-down list box that includes: Single Address, Range Address, Subnet Address and Any Address. Start IP Address Enter the single IP address or the starting IP address in a range here.
Chapter 15 Firewall Figure 89 Security > Firewall > Rules: Edit: Edit Customized Services The following table describes the labels in this screen. Table 68 Security > Firewall > Rules: Edit: Edit Customized Services LABEL DESCRIPTION # This is the number of your customized port. Name This is the name of your customized service. Protocol This shows the IP protocol (TCP or UDP) that defines your customized service. Port Type This is the port number or range that defines your customized service.
Chapter 15 Firewall The following table describes the labels in this screen. Table 69 Security > Firewall > Rules: Edit: Edit Customized Services: Add/Edit LABEL DESCRIPTION Config Service Name Type a unique name for your custom port. Service Type Choose the IP port (TCP or UDP) that defines your customized port from the drop down list box. Port Configuration 178 Type Click Single to specify one port only or Port Range to specify a span of ports that define your customized service.
Chapter 15 Firewall 15.5 The DoS Screen Use this screen to enable DoS protection. Click Security > Firewall > Dos to display the following screen. Figure 91 Security > Firewall > Dos The following table describes the labels in this screen. Table 70 Security > Firewall > Dos LABEL DESCRIPTION Denial of Services Enable this to protect against DoS attacks. The AMG1312-T Series will drop sessions that surpass maximum thresholds. Apply Click this to save your changes.
Chapter 15 Firewall 15.5.1.1 Threshold Values If everything is working properly, you probably do not need to change the threshold settings as the default threshold values should work for most small offices. Tune these parameters when you believe the AMG1312-T Series has been receiving DoS attacks that are not recorded in the logs or the logs show that the AMG1312-T Series is classifying normal traffic as DoS attacks.
Chapter 15 Firewall The following table describes the labels in this screen. Table 71 Security > Firewall > DoS > Advanced LABEL DESCRIPTION TCP SYN-Request Count This is the rate of new TCP half-open sessions per second that causes the firewall to start deleting half-open sessions. When the rate of new connection attempts rises above this number, the AMG1312-T Series deletes half-open sessions as required to accommodate new connection attempts.
Chapter 15 Firewall • LAN to WAN These rules specify which computers on the LAN can access which computers or services on the WAN. By default, the AMG1312-T Series’s stateful packet inspection drops packets traveling in the following directions: • WAN to LAN These rules specify which computers on the WAN can access which computers or services on the LAN.
Chapter 15 Firewall 11 Protect against IP spoofing by making sure the firewall is active. 12 Keep the firewall in a secured (locked) room. 15.6.3 Security Considerations Note: Incorrectly configuring the firewall may block valid access or introduce security risks to the AMG1312-T Series and your protected network. Use caution when creating or deleting firewall rules and test your rules after you configure them.
Chapter 15 Firewall 1 A computer on the LAN initiates a connection by sending out a SYN packet to a receiving server on the WAN. 2 The AMG1312-T Series reroutes the SYN packet through Gateway A on the LAN to the WAN. 3 The reply from the WAN goes directly to the computer on the LAN without going through the AMG1312-T Series. As a result, the AMG1312-T Series resets the connection, as the connection has not been acknowledged. Figure 95 “Triangle Route” Problem WAN LAN 1 ISP 1 3 2 ISP 2 A 15.6.4.
Chapter 15 Firewall Figure 96 IP Alias Subnet 1 LAN WAN 1 ISP 1 4 2 ISP 2 3 Subnet 2 AMG1312-T Series User’s Guide A 185
C HAPTER 16 Parental Control 16.1 Overview Parental control allows you to block web sites with the specific URL. You can also define time periods and days during which the AMG1312-T Series performs parental control on a specific user. 16.2 The Parental Control Screen Use this screen to enable parental control, view the parental control rules and schedules. Click Security > Parental Control to open the following screen.
Chapter 16 Parental Control Table 72 Security > Parental Control (continued) LABEL DESCRIPTION Website Blocked This shows whether the website block is configured. If not, None will be shown. Modify Click the Edit icon to go to the screen where you can edit the rule. Click the Delete icon to delete an existing rule. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. 16.2.
Chapter 16 Parental Control Table 73 Parental Control: Add/Edit (continued) LABEL DESCRIPTION Parental Control Profile Name Enter a descriptive name for the rule. Home Network User Select the LAN user that you want to apply this rule to from the drop-down list box. If you select Custom, enter the LAN user’s MAC address. If you select All, the rule applies to all LAN users. Internet Access Schedule Day Select check boxes for the days that you want the AMG1312-T Series to perform parental control.
C HAPTER 17 Certificate 17.1 Overview The AMG1312-T Series can use certificates (also called digital IDs) to authenticate users. Certificates are based on public-private key pairs. A certificate contains the certificate owner’s identity and public key. Certificates provide a way to exchange public keys for use in authentication. 17.1.1 What You Can Do in this Chapter • Use the Local Certificates screen to view and import the AMG1312-T Series’s CA-signed certificates (Section 17.3 on page 189).
Chapter 17 Certificate • Web Server - This certificate secures HTTP connections. • SSH - This certificate secures remote connections. Click Security > Certificates to open the Local Certificates screen. Figure 99 Security > Certificates > Local Certificates The following table describes the labels in this screen. Table 74 Security > Certificates > Local Certificates LABEL DESCRIPTION WebServer Click Browse... to find the certificate file you want to upload.
Chapter 17 Certificate 17.4 The Trusted CA Screen Use this screen to view a summary list of certificates of the certification authorities that you have set the AMG1312-T Series to accept as trusted. The AMG1312-T Series accepts any valid certificate signed by a certification authority on this list as being trustworthy; thus you do not need to import any certificate that is signed by one of these certification authorities. Click Security > Certificates > Trusted CA to open the Trusted CA screen.
Chapter 17 Certificate Note: You must remove any spaces from the certificate’s filename before you can import the certificate. Figure 101 Trusted CA > Import The following table describes the labels in this screen. Table 76 Security > Certificates > Trusted CA > Import LABEL DESCRIPTION Certificate File Path Type in the location of the file you want to upload in this field or click Browse to find it. Browse Click Browse to find the certificate file you want to upload.
Chapter 17 Certificate Click Security > Certificates > Trusted CA to open the Trusted CA screen. Click the View icon to open the View Certificate screen. Figure 102 Trusted CA: View The following table describes the labels in this screen. Table 77 Trusted CA: View LABEL DESCRIPTION Certificate Name This field displays the identifying name of this certificate. If you want to change the name, type up to 31 characters to identify this key certificate. You may use any character (not including spaces).
C HAPTER 18 Logs 18.1 Overview The web configurator allows you to choose which categories of events and/or alerts to have the AMG1312-T Series log and then display the logs or have the AMG1312-T Series send them to an administrator (as e-mail) or to a syslog server. 18.1.1 What You Can Do in this Chapter • Use the Log screen to see the system logs for the categories that you select (Section 18.2 on page 195). 18.1.
Chapter 18 Logs Table 78 Syslog Severity Levels (continued) CODE SEVERITY 6 Informational: The syslog contains an informational message. 7 Debug: The message is intended for debug-level purposes. 18.2 The System Log Screen Click System Monitor > Log to open the System Log screen. Use the System Log screen to see the system logs for the categories that you select in the upper left drop-down list box. Figure 103 System Monitor > Log > System Log The following table describes the fields in this screen.
C HAPTER 19 Traffic Status 19.1 Overview Use the Traffic Status screens to look at network traffic status and statistics of the WAN, LAN interfaces and NAT. 19.1.1 What You Can Do in this Chapter • Use the WAN screen to view the WAN traffic statistics (Section 19.2 on page 196). • Use the LAN screen to view the LAN traffic statistics (Section 19.3 on page 197). • Use the NAT screen to view the NAT status of the AMG1312-T Series’s client(s) (Section 19.4 on page 198). 19.
Chapter 19 Traffic Status Table 80 System Monitor > Traffic Status > WAN (continued) LABEL DESCRIPTION Packets Sent Data This indicates the number of transmitted packets on this interface. Error This indicates the number of frames with errors transmitted on this interface. Drop This indicates the number of outgoing packets dropped on this interface. Packets Received Data This indicates the number of received packets on this interface.
Chapter 19 Traffic Status Table 81 System Monitor > Traffic Status > LAN (continued) LABEL DESCRIPTION Data This indicates the number of transmitted packets on this interface. Error This indicates the number of frames with errors transmitted on this interface. Drop This indicates the number of outgoing packets dropped on this interface. Received (Packet) Data This indicates the number of received packets on this interface.
C HAPTER 20 User Account 20.1 Overview You can configure system password for different user accounts in the User Account screen. 20.2 The User Account Screen Use the User Account screen to configure system password. Click Maintenance > User Account to open the following screen. Figure 107 Maintenance > User Account The following table describes the labels in this screen.
C HAPTER 21 TR-069 Client 21.1 Overview The AMG1312-T Series supports TR-069 Amendment 1 (CPE WAN Management Protocol Release 2.0) and TR-069 Amendment 2 (CPE WAN Management Protocol v1.1, Release 3.0). TR-069 is a protocol that defines how your AMG1312-T Series (ZD) can be managed via a management server (MS) such as ZyXEL’s Vantage Access.
Chapter 21 TR-069 Client Figure 109 Maintenance > TR-069 Client The following table describes the fields in this screen. Table 84 Maintenance > TR-069 Client LINK DESCRIPTION CWMP Select Enable to allow the AMG1312-T Series to be managed by a management server or select Disable to not allow the AMG1312-T Series to be managed by a management server. ACS URL Type the IP address or domain name of the management server.
C HAPTER 22 System Settings 22.1 Overview This chapter shows you how to configure system related settings, such as system time, password, name, the domain name and the inactivity timeout interval. 22.1.1 What You Can Do in the System Settings Screens • Use the System screen (Section 22.2 on page 202) to configure system settings. • Use the Time Setting screen (Section 22.3 on page 202) to set the system time. 22.2 The System Screen Use this screen to configure system admin password.
Chapter 22 System Settings Figure 111 Maintenance > System > Time Setting The following table describes the fields in this screen. Table 86 Maintenance > System > Time LABEL DESCRIPTION Current Date/Time Current Time This field displays the time and date of your AMG1312-T Series. Each time you reload this page, the AMG1312-T Series synchronizes the time and date with the time server. Time and Date Setup Manual Select this radio button to enter the time and date manually.
Chapter 22 System Settings Table 86 Maintenance > System > Time (continued) LABEL DESCRIPTION Daylight Savings Daylight saving is a period from late spring to early fall when many countries set their clocks ahead of normal local time by one hour to give more daytime light in the evening. Select this option if you use Daylight Saving Time. Start Date Configure the day and time when Daylight Saving Time starts if you selected Enable Daylight Saving. The o'clock field uses the 24 hour format.
C HAPTER 23 Firmware Upgrade 23.1 Overview This chapter explains how to upload new firmware to your AMG1312-T Series. You can download new firmware releases from your nearest ZyXEL FTP site (or www.zyxel.com) to use to upgrade your device’s performance. Only use firmware for your device’s specific model. Refer to the label on the bottom of your AMG1312-T Series. 23.2 The Firmware Screen Click Maintenance > Firmware Upgrade to open the following screen.
Chapter 23 Firmware Upgrade Figure 113 Firmware Uploading The AMG1312-T Series automatically restarts in this time causing a temporary network disconnect. In some operating systems, you may see the following icon on your desktop. Figure 114 Network Temporarily Disconnected After two minutes, log in again and check your new firmware version in the Status screen. If the upload was not successful, an error screen will appear. Click OK to go back to the Firmware Upgrade screen.
C HAPTER 24 Backup/Restore 24.1 Overview The Backup/Restore screen allows you to backup and restore device configurations. You can also reset your device settings back to the factory default. 24.2 The Backup/Restore Screen Click Maintenance > Backup/Restore. Information related to factory defaults, backup configuration, and restoring configuration appears in this screen, as shown next.
Chapter 24 Backup/Restore Restore Configuration Restore Configuration allows you to upload a new or previously saved configuration file from your computer to your AMG1312-T Series. Table 88 Restore Configuration LABEL DESCRIPTION File Path Type in the location of the file you want to upload in this field or click Browse... to find it. Browse... Click this to find the file you want to upload. Remember that you must decompress compressed (.ZIP) files before you can upload them.
Chapter 24 Backup/Restore 24.3 The Reboot Screen System restart allows you to reboot the AMG1312-T Series remotely without turning the power off. You may need to do this if the AMG1312-T Series hangs, for example. Click Maintenance > Reboot. Click the Reboot button to have the AMG1312-T Series reboot. This does not affect the AMG1312-T Series's configuration.
C HAPTER 25 Remote Management 25.1 Overview Remote management allows you to determine which services/protocols can access which AMG1312-T Series interface (if any) from which computers. The following figure shows remote management of the AMG1312-T Series coming in from the WAN. Figure 120 Remote Management From the WAN LAN WAN HTTP Telnet Note: When you configure remote management to allow management from the WAN, you still need to configure a IP filter rule to allow access.
Chapter 25 Remote Management • Your AMG1312-T Series can act as an SNMP agent, which allows a manager station to manage and monitor the AMG1312-T Series through the network. Use the SNMP screen (see Section 25.5 on page 214) to configure through which interface(s) and from which IP address(es) users can use SNMP to access the AMG1312-T Series. • Use the DNS screen (Section 25.
Chapter 25 Remote Management Figure 121 Maintenance > RemoteMGMT > WWW The following table describes the labels in this screen. Table 89 Maintenance > RemoteMGMT > WWW LABEL DESCRIPTION Server Port This displays the service port number for accessing the AMG1312-T Series using HTTP or HTTPS. If the number is grayed out, it is not editable. Server Access Select the interface(s) through which a computer may access the AMG1312-T Series using this service.
Chapter 25 Remote Management 25.3 The Telnet Screen You can use Telnet to access the AMG1312-T Series’s command line interface. Specify which interfaces allow Telnet access and from which IP address the access can come. Click Maintenance > RemoteMGMT > Telnet tab to display the screen as shown. Figure 122 Maintenance > RemoteMGMT > Telnet The following table describes the labels in this screen.
Chapter 25 Remote Management Use this screen to specify which interfaces allow FTP access and from which IP address the access can come. To change your AMG1312-T Series’s FTP settings, click Maintenance > RemoteMGMT > FTP. The screen appears as shown. Figure 123 Maintenance > RemoteMGMT > FTP The following table describes the labels in this screen. Table 91 Maintenance > RemoteMGMT > FTP LABEL DESCRIPTION Server Port This displays the service port number for accessing the AMG1312-T Series.
Chapter 25 Remote Management Figure 124 SNMP Management Model An SNMP managed network consists of two main types of component: agents and a manager. An agent is a management software module that resides in a managed device (the AMG1312-T Series). An agent translates the local management information from the managed device into a form compatible with SNMP. The manager is the console through which network administrators perform network management functions.
Chapter 25 Remote Management Figure 125 Maintenance > RemoteMGMT > SNMP The following table describes the labels in this screen. Table 92 Maintenance > RemoteMGMT > SNMP LABEL DESCRIPTION Server Port This displays the port the SNMP agent listens on. If the number is grayed out, it is not editable. Server Access Select the interface(s) through which a computer may access the AMG1312-T Series using this service.
Chapter 25 Remote Management 25.6 The DNS Screen Use DNS (Domain Name System) to map a domain name to its corresponding IP address and vice versa. Use this screen to set from which IP address the AMG1312-T Series will accept DNS queries and on which interface it can send them your AMG1312-T Series’s DNS settings. This feature is not available when the AMG1312-T Series is set to bridge mode. Click Maintenance > RemoteMGMT > DNS to change your AMG1312-T Series’s DNS settings.
Chapter 25 Remote Management packet from being sent. This keeps outsiders from discovering your AMG1312-T Series when unsupported ports are probed. Note: If you want your device to respond to pings and requests for unauthorized services, you will also need to configure the firewall accordingly by disabling SPI. Figure 127 Maintenance > RemoteMGMT > ICMP The following table describes the labels in this screen.
Chapter 25 Remote Management Figure 128 Maintenance > RemoteMGMT > SSH The following table describes the labels in this screen. Table 95 Maintenance > RemoteMGMT > SSH LABEL DESCRIPTION Server Port This displays the service port number for accessing the AMG1312-T Series. If the number is grayed out, it is not editable. Server Access Select the interface(s) through which a computer may access the AMG1312-T Series using this service.
Chapter 25 Remote Management 2 220 A window displays prompting you to store the host key in your computer. Click Yes to continue. 3 Enter your user name and password. 4 The command line interface displays.
C HAPTER 26 Diagnostic 26.1 Overview These read-only screens display information to help you identify problems with the AMG1312-T Series. 26.1.1 What You Can Do in the Diagnostic Screens • Use the Ping screen (Section 26.2 on page 221) to ping an IP address. • Use the DSL Line screen (Section 26.3 on page 222) to view the DSL line statistics and reset the ADSL line. 26.2 The General Screen Use this screen to ping an IP address. Click Maintenance > Diagnostic > Ping to open the screen shown next.
Chapter 26 Diagnostic 26.3 The DSL Line Screen Use this screen to view the DSL line statistics and reset the ADSL line. Click Maintenance > Diagnostic > DSL Line to open the screen shown next. Figure 130 Maintenance > Diagnostic > DSL Line The following table describes the fields in this screen. Table 97 Maintenance > Diagnostic > DSL Line LABEL DESCRIPTION ATM Status Click this to view your DSL connection’s Asynchronous Transfer Mode (ATM) statistics.
Chapter 26 Diagnostic Table 97 Maintenance > Diagnostic > DSL Line (continued) LABEL DESCRIPTION DSL Line Status Click this to view statistics about the DSL connections. noise margin downstream is the signal to noise ratio for the downstream part of the connection (coming into the AMG1312-T Series from the ISP). It is measured in decibels. The higher the number the more signal and less noise there is.
C HAPTER 27 Troubleshooting This chapter offers some suggestions to solve problems you might encounter. The potential problems are divided into the following categories. • Power, Hardware Connections, and LEDs • AMG1312-T Series Access and Login • Internet Access 27.1 Power, Hardware Connections, and LEDs The AMG1312-T Series does not turn on. None of the LEDs turn on. 1 Make sure the AMG1312-T Series is turned on.
Chapter 27 Troubleshooting 4 Turn the AMG1312-T Series off and on. 5 If the problem continues, contact the vendor. 27.2 AMG1312-T Series Access and Login I forgot the IP address for the AMG1312-T Series. 1 The default IP address is 192.168.1.1. 2 If you changed the IP address and have forgotten it, you might get the IP address of the AMG1312T Series by looking up the IP address of the default gateway for your computer.
Chapter 27 Troubleshooting 4 Reset the device to its factory defaults, and try to access the AMG1312-T Series with the default IP address. See Section 1.7 on page 18. 5 If the problem continues, contact the network administrator or vendor, or try one of the advanced suggestions. Advanced Suggestions • Try to access the AMG1312-T Series using another service, such as Telnet.
Chapter 27 Troubleshooting 27.3 Internet Access I cannot access the Internet. 1 Check the hardware connections, and make sure the LEDs are behaving as expected. See the Quick Start Guide and Section 27.1 on page 225. 2 Make sure you entered your ISP account information correctly in the wizard. These fields are casesensitive, so make sure [Caps Lock] is not on.
Chapter 27 Troubleshooting 4 If the problem continues, contact the network administrator or vendor, or try one of the advanced suggestions. Advanced Suggestions • Check the settings for QoS. If it is disabled, you might consider activating it. If it is enabled, you might consider raising or lowering the priority for some applications.
A PPENDIX A Setting up Your Computer’s IP Address All computers must have a 10M or 100M Ethernet adapter and TCP/IP installed. Windows 95/98/Me/NT/2000/XP/Vista, Macintosh OS 7 and later operating systems and all versions of UNIX/LINUX include the software components you need to install and use TCP/IP on your computer. Windows 3.1 requires the purchase of a third-party TCP/IP application package.
Appendix A Setting up Your Computer’s IP Address Installing Components The Network window Configuration tab displays a list of installed components. You need a network adapter, the TCP/IP protocol and Client for Microsoft Networks. If you need the adapter: 1 In the Network window, click Add. 2 Select Adapter and then click Add. 3 Select the manufacturer and model of your network adapter and then click OK. If you need TCP/IP: 1 In the Network window, click Add. 2 Select Protocol and then click Add.
Appendix A Setting up Your Computer’s IP Address Figure 132 Windows 95/98/Me: TCP/IP Properties: IP Address 3 Click the DNS Configuration tab. • If you do not know your DNS information, select Disable DNS. • If you know your DNS information, select Enable DNS and type the information in the fields below (you may not need to fill them all in). Figure 133 Windows 95/98/Me: TCP/IP Properties: DNS Configuration 4 Click the Gateway tab.
Appendix A Setting up Your Computer’s IP Address • If you do not know your gateway’s IP address, remove previously installed gateways. • If you have a gateway IP address, type it in the New gateway field and click Add. 5 Click OK to save and close the TCP/IP Properties window. 6 Click OK to close the Network window. Insert the Windows CD if prompted. 7 Turn on your AMG1312-T Series and restart your computer when prompted. Verifying Settings 1 Click Start and then Run.
Appendix A Setting up Your Computer’s IP Address Figure 135 Windows XP: Control Panel 3 Right-click Local Area Connection and then click Properties. Figure 136 Windows XP: Control Panel: Network Connections: Properties 4 Select Internet Protocol (TCP/IP) (under the General tab in Win XP) and then click Properties.
Appendix A Setting up Your Computer’s IP Address Figure 137 Windows XP: Local Area Connection Properties 5 The Internet Protocol TCP/IP Properties window opens (the General tab in Windows XP). • If you have a dynamic IP address click Obtain an IP address automatically. • If you have a static IP address click Use the following IP Address and fill in the IP address, Subnet mask, and Default gateway fields. • Click Advanced.
Appendix A Setting up Your Computer’s IP Address 6 If you do not know your gateway's IP address, remove any previously installed gateways in the IP Settings tab and click OK. Do one or more of the following if you want to configure additional IP addresses: • In the IP Settings tab, in IP addresses, click Add. • In TCP/IP Address, type an IP address in IP address and a subnet mask in Subnet mask, and then click Add. • Repeat the above two steps for each IP address you want to add.
Appendix A Setting up Your Computer’s IP Address Figure 140 Windows XP: Internet Protocol (TCP/IP) Properties 8 Click OK to close the Internet Protocol (TCP/IP) Properties window. 9 Click Close (OK in Windows 2000/NT) to close the Local Area Connection Properties window. 10 Close the Network Connections window (Network and Dial-up Connections in Windows 2000/NT). 11 Turn on your AMG1312-T Series and restart your computer (if prompted).
Appendix A Setting up Your Computer’s IP Address Figure 141 Windows Vista: Start Menu 2 In the Control Panel, double-click Network and Internet. Figure 142 Windows Vista: Control Panel 3 Click Network and Sharing Center. Figure 143 Windows Vista: Network And Internet 4 Click Manage network connections.
Appendix A Setting up Your Computer’s IP Address 5 Right-click Local Area Connection and then click Properties. Note: During this procedure, click Continue whenever Windows displays a screen saying that it needs your permission to continue. Figure 145 Windows Vista: Network and Sharing Center 6 Select Internet Protocol Version 4 (TCP/IPv4) and click Properties.
Appendix A Setting up Your Computer’s IP Address • If you have a static IP address click Use the following IP address and fill in the IP address, Subnet mask, and Default gateway fields. • Click Advanced. Figure 147 Windows Vista: Internet Protocol Version 4 (TCP/IPv4) Properties 8 If you do not know your gateway's IP address, remove any previously installed gateways in the IP Settings tab and click OK.
Appendix A Setting up Your Computer’s IP Address Figure 148 Windows Vista: Advanced TCP/IP Properties 9 In the Internet Protocol Version 4 (TCP/IPv4) Properties window, (the General tab): • Click Obtain DNS server address automatically if you do not know your DNS server IP address(es). • If you know your DNS server IP address(es), click Use the following DNS server addresses, and type them in the Preferred DNS server and Alternate DNS server fields.
Appendix A Setting up Your Computer’s IP Address Figure 149 Windows Vista: Internet Protocol Version 4 (TCP/IPv4) Properties 10 Click OK to close the Internet Protocol Version 4 (TCP/IPv4) Properties window. 11 Click Close to close the Local Area Connection Properties window. 12 Close the Network Connections window. 13 Turn on your AMG1312-T Series and restart your computer (if prompted). Verifying Settings 1 Click Start, All Programs, Accessories and then Command Prompt.
Appendix A Setting up Your Computer’s IP Address Figure 150 Macintosh OS 8/9: Apple Menu 2 Select Ethernet built-in from the Connect via list. Figure 151 Macintosh OS 8/9: TCP/IP 242 3 For dynamically assigned settings, select Using DHCP Server from the Configure: list.
Appendix A Setting up Your Computer’s IP Address • From the Configure box, select Manually. • Type your IP address in the IP Address box. • Type your subnet mask in the Subnet mask box. • Type the IP address of your AMG1312-T Series in the Router address box. 5 Close the TCP/IP Control Panel. 6 Click Save if prompted, to save changes to your configuration. 7 Turn on your AMG1312-T Series and restart your computer (if prompted).
Appendix A Setting up Your Computer’s IP Address Figure 153 Macintosh OS X: Network 4 For statically assigned settings, do the following: • From the Configure box, select Manually. • Type your IP address in the IP Address box. • Type your subnet mask in the Subnet mask box. • Type the IP address of your AMG1312-T Series in the Router address box. 5 Click Apply Now and close the window. 6 Turn on your AMG1312-T Series and restart your computer (if prompted).
Appendix A Setting up Your Computer’s IP Address Using the K Desktop Environment (KDE) Follow the steps below to configure your computer IP address using the KDE. 1 Click the Red Hat button (located on the bottom left corner), select System Setting and click Network. Figure 154 Red Hat 9.0: KDE: Network Configuration: Devices 2 Double-click on the profile of the network card you wish to configure. The Ethernet Device General screen displays as shown. Figure 155 Red Hat 9.
Appendix A Setting up Your Computer’s IP Address 4 If you know your DNS server IP address(es), click the DNS tab in the Network Configuration screen. Enter the DNS server information in the fields provided. Figure 156 Red Hat 9.0: KDE: Network Configuration: DNS 5 Click the Devices tab. 6 Click the Activate button to apply the changes. The following screen displays. Click Yes to save the changes in all screens. Figure 157 Red Hat 9.
Appendix A Setting up Your Computer’s IP Address Figure 158 Red Hat 9.0: Dynamic IP Address Setting in ifconfig-eth0 DEVICE=eth0 ONBOOT=yes BOOTPROTO=dhcp USERCTL=no PEERDNS=yes TYPE=Ethernet • If you have a static IP address, enter static in the BOOTPROTO= field. Type IPADDR= followed by the IP address (in dotted decimal notation) and type NETMASK= followed by the subnet mask. The following example shows an example where the static IP address is 192.168.1.10 and the subnet mask is 255.255.255.0.
Appendix A Setting up Your Computer’s IP Address Figure 162 Red Hat 9.0: Checking TCP/IP Properties [root@localhost]# ifconfig eth0 Link encap:Ethernet HWaddr 00:50:BA:72:5B:44 inet addr:172.23.19.129 Bcast:172.23.19.255 Mask:255.255.255.0 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:717 errors:0 dropped:0 overruns:0 frame:0 TX packets:13 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:100 RX bytes:730412 (713.2 Kb) TX bytes:1570 (1.
A PPENDIX B IP Addresses and Subnetting This appendix introduces IP addresses and subnet masks. IP addresses identify individual devices on a network. Every networking device (including computers, servers, routers, printers, etc.) needs an IP address to communicate across the network. These networking devices are also known as hosts. Subnet masks determine the maximum number of possible hosts on a network. You can also use subnet masks to divide one network into multiple sub-networks.
Appendix B IP Addresses and Subnetting Figure 163 Network Number and Host ID How much of the IP address is the network number and how much is the host ID varies according to the subnet mask. Subnet Masks A subnet mask is used to determine which bits are part of the network number, and which bits are part of the host ID (using a logical AND operation). The term “subnet” is short for “sub-network”. A subnet mask has 32 bits.
Appendix B IP Addresses and Subnetting Subnet masks are expressed in dotted decimal notation just like IP addresses. The following examples show the binary and decimal notation for 8-bit, 16-bit, 24-bit and 29-bit subnet masks. Table 99 Subnet Masks BINARY DECIMAL 1ST OCTET 2ND OCTET 3RD OCTET 4TH OCTET 8-bit mask 11111111 00000000 00000000 00000000 255.0.0.0 16-bit mask 11111111 11111111 00000000 00000000 255.255.0.0 24-bit mask 11111111 11111111 11111111 00000000 255.255.255.
Appendix B IP Addresses and Subnetting Table 101 Alternative Subnet Mask Notation (continued) SUBNET MASK ALTERNATIVE NOTATION LAST OCTET (BINARY) LAST OCTET (DECIMAL) 255.255.255.224 /27 1110 0000 224 255.255.255.240 /28 1111 0000 240 255.255.255.248 /29 1111 1000 248 255.255.255.252 /30 1111 1100 252 Subnetting You can use subnetting to divide one network into multiple sub-networks.
Appendix B IP Addresses and Subnetting Figure 165 Subnetting Example: After Subnetting In a 25-bit subnet the host ID has 7 bits, so each sub-network has a maximum of 27 – 2 or 126 possible hosts (a host ID of all zeroes is the subnet’s address itself, all ones is the subnet’s broadcast address). 192.168.1.0 with mask 255.255.255.128 is subnet A itself, and 192.168.1.127 with mask 255.255.255.128 is its broadcast address.
Appendix B IP Addresses and Subnetting Table 103 Subnet 2 IP/SUBNET MASK NETWORK NUMBER LAST OCTET BIT VALUE IP Address 192.168.1. 64 IP Address (Binary) 11000000.10101000.00000001. 01000000 Subnet Mask (Binary) 11111111.11111111.11111111. 11000000 Subnet Address: 192.168.1.64 Lowest Host ID: 192.168.1.65 Broadcast Address: 192.168.1.127 Highest Host ID: 192.168.1.126 Table 104 Subnet 3 IP/SUBNET MASK NETWORK NUMBER LAST OCTET BIT VALUE IP Address 192.168.1.
Appendix B IP Addresses and Subnetting Subnet Planning The following table is a summary for subnet planning on a network with a 24-bit network number. Table 107 24-bit Network Number Subnet Planning NO. “BORROWED” HOST BITS SUBNET MASK NO. SUBNETS NO. HOSTS PER SUBNET 1 255.255.255.128 (/25) 2 126 2 255.255.255.192 (/26) 4 62 3 255.255.255.224 (/27) 8 30 4 255.255.255.240 (/28) 16 14 5 255.255.255.248 (/29) 32 6 6 255.255.255.252 (/30) 64 2 7 255.255.255.
Appendix B IP Addresses and Subnetting Once you have decided on the network number, pick an IP address for your AMG1312-T Series that is easy to remember (for instance, 192.168.1.1) but make sure that no other device on your network is using that IP address. The subnet mask specifies the network number portion of an IP address. Your AMG1312-T Series will compute the subnet mask automatically based on the IP address that you entered.
A PPENDIX C Pop-up Windows, JavaScripts and Java Permissions In order to use the web configurator you need to allow: • Web browser pop-up windows from your device. • JavaScripts (enabled by default). • Java permissions (enabled by default). Note: Internet Explorer 6 screens are used here. Screens for other Internet Explorer versions may vary. Internet Explorer Pop-up Blockers You may have to disable pop-up blocking to log into your device.
Appendix C Pop-up Windows, JavaScripts and Java Permissions Figure 167 Internet Options: Privacy 3 Click Apply to save this setting. Enable Pop-up Blockers with Exceptions Alternatively, if you only want to allow pop-up windows from your device, see the following steps. 258 1 In Internet Explorer, select Tools, Internet Options and then the Privacy tab. 2 Select Settings…to open the Pop-up Blocker Settings screen.
Appendix C Pop-up Windows, JavaScripts and Java Permissions Figure 168 Internet Options: Privacy 3 Type the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.167.1. 4 Click Add to move the IP address to the list of Allowed sites.
Appendix C Pop-up Windows, JavaScripts and Java Permissions 5 Click Close to return to the Privacy screen. 6 Click Apply to save this setting. JavaScripts If pages of the web configurator do not display properly in Internet Explorer, check that JavaScripts are allowed. 1 In Internet Explorer, click Tools, Internet Options and then the Security tab. Figure 170 Internet Options: Security 260 2 Click the Custom Level... button. 3 Scroll down to Scripting.
Appendix C Pop-up Windows, JavaScripts and Java Permissions Figure 171 Security Settings - Java Scripting Java Permissions 1 From Internet Explorer, click Tools, Internet Options and then the Security tab. 2 Click the Custom Level... button. 3 Scroll down to Microsoft VM. 4 Under Java permissions make sure that a safety level is selected. 5 Click OK to close the window.
Appendix C Pop-up Windows, JavaScripts and Java Permissions Figure 172 Security Settings - Java JAVA (Sun) 1 From Internet Explorer, click Tools, Internet Options and then the Advanced tab. 2 Make sure that Use Java 2 for
Appendix C Pop-up Windows, JavaScripts and Java Permissions Mozilla Firefox Mozilla Firefox 2.0 screens are used here. Screens for other versions may vary. You can enable Java, Javascripts and pop-ups in one screen. Click Tools, then click Options in the screen that appears. Figure 174 Mozilla Firefox: Tools > Options Click Content to show the screen below. Select the check boxes as shown in the following screen.
A PPENDIX D Wireless LANs Wireless LAN Topologies This section discusses ad-hoc and infrastructure wireless LAN topologies. Ad-hoc Wireless LAN Configuration The simplest WLAN configuration is an independent (Ad-hoc) WLAN that connects a set of computers with wireless adapters (A, B, C). Any time two or more wireless adapters are within range of each other, they can set up an independent network, which is commonly referred to as an ad-hoc network or Independent Basic Service Set (IBSS).
Appendix D Wireless LANs Figure 177 Basic Service Set ESS An Extended Service Set (ESS) consists of a series of overlapping BSSs, each containing an access point, with each access point connected together by a wired network. This wired connection between APs is called a Distribution System (DS). This type of wireless LAN topology is called an Infrastructure WLAN. The Access Points not only provide communication with the wired network but also mediate wireless network traffic in the immediate neighborhood.
Appendix D Wireless LANs Figure 178 Infrastructure WLAN Channel A channel is the radio frequency(ies) used by wireless devices to transmit and receive data. Channels available depend on your geographical area. You may have a choice of channels (for your region) so you should use a channel different from an adjacent AP (access point) to reduce interference. Interference occurs when radio signals from different access points overlap causing interference and degrading performance.
Appendix D Wireless LANs Figure 179 RTS/CTS When station A sends data to the AP, it might not know that the station B is already using the channel. If these two stations send data at the same time, collisions may occur when both sets of data arrive at the AP at the same time, resulting in a loss of messages for both stations. RTS/CTS is designed to prevent collisions due to hidden nodes.
Appendix D Wireless LANs Preamble Type Preamble is used to signal that data is coming to the receiver. Short and long refer to the length of the synchronization field in a packet. Short preamble increases performance as less time sending preamble means more time for sending data. All IEEE 802.11 compliant wireless adapters support long preamble, but not all support short preamble.
Appendix D Wireless LANs The following figure shows the relative effectiveness of these wireless security methods available on your AMG1312-T Series. Table 110 Wireless Security Levels SECURITY LEVEL Least Secure SECURITY TYPE Unique SSID (Default) Unique SSID with Hide SSID Enabled MAC Address Filtering WEP Encryption IEEE802.
Appendix D Wireless LANs RADIUS is a simple package exchange in which your AP acts as a message relay between the wireless client and the network RADIUS server. Types of RADIUS Messages The following types of RADIUS messages are exchanged between the access point and the RADIUS server for user authentication: • Access-Request Sent by an access point requesting authentication. • Access-Reject Sent by a RADIUS server rejecting access. • Access-Accept Sent by a RADIUS server allowing access.
Appendix D Wireless LANs EAP-MD5 (Message-Digest Algorithm 5) MD5 authentication is the simplest one-way authentication method. The authentication server sends a challenge to the wireless client. The wireless client ‘proves’ that it knows the password by encrypting the password with the challenge and sends back the information. Password is not sent in plain text. However, MD5 authentication has some weaknesses.
Appendix D Wireless LANs If this feature is enabled, it is not necessary to configure a default encryption key in the wireless security configuration screen. You may still configure and store keys, but they will not be used while dynamic WEP is enabled. Note: EAP-MD5 cannot be used with Dynamic WEP Key Exchange For added security, certificate-based authentications (EAP-TLS, EAP-TTLS and PEAP) use dynamic keys for data encryption.
Appendix D Wireless LANs called Rijndael. They both include a per-packet key mixing function, a Message Integrity Check (MIC) named Michael, an extended initialization vector (IV) with sequencing rules, and a re-keying mechanism. WPA and WPA2 regularly change and rotate the encryption keys so that the same encryption key is never used twice.
Appendix D Wireless LANs WPA(2) with RADIUS Application Example To set up WPA(2), you need the IP address of the RADIUS server, its port number (default is 1812), and the RADIUS shared secret. A WPA(2) application example with an external RADIUS server looks as follows. "A" is the RADIUS server. "DS" is the distribution system. 1 The AP passes the wireless client's authentication request to the RADIUS server.
Appendix D Wireless LANs 4 The AP and wireless clients use the TKIP or AES encryption process, the PMK and information exchanged in a handshake to create temporal encryption keys. They use these keys to encrypt data exchanged between them. Figure 181 WPA(2)-PSK Authentication Security Parameters Summary Refer to this table to see what other security parameters you should configure for each authentication method or key management protocol type.
Appendix D Wireless LANs Antenna Characteristics Frequency An antenna in the frequency of 2.4GHz (IEEE 802.11b and IEEE 802.11g) or 5GHz (IEEE 802.11a) is needed to communicate efficiently in a wireless LAN Radiation Pattern A radiation pattern is a diagram that allows you to visualize the shape of the antenna’s coverage area. Antenna Gain Antenna gain, measured in dB (decibel), is the increase in coverage within the RF beam width.
A PPENDIX E IPv6 Overview IPv6 (Internet Protocol version 6), is designed to enhance IP address size and features. The increase in IPv6 address size to 128 bits (from the 32-bit IPv4 address) allows up to 3.4 x 1038 IP addresses. IPv6 Addressing The 128-bit IPv6 address is written as eight 16-bit hexadecimal blocks separated by colons (:). This is an example IPv6 address 2001:0db8:1a2b:0015:0000:0000:1a2f:0000. IPv6 addresses can be abbreviated in two ways: • Leading zeros in a block can be omitted.
Appendix E IPv6 Global Address A global address uniquely identifies a device on the Internet. It is similar to a “public IP address” in IPv4. A global unicast address starts with a 2 or 3. Unspecified Address An unspecified address (0:0:0:0:0:0:0:0 or ::) is used as the source address when a device does not have its own address. It is similar to “0.0.0.0” in IPv4. Loopback Address A loopback address (0:0:0:0:0:0:0:1 or ::1) allows a host to send packets to itself. It is similar to “127.0.0.1” in IPv4.
Appendix E IPv6 Table 115 Reserved Multicast Address (continued) MULTICAST ADDRESS FF08:0:0:0:0:0:0:0 FF09:0:0:0:0:0:0:0 FF0A:0:0:0:0:0:0:0 FF0B:0:0:0:0:0:0:0 FF0C:0:0:0:0:0:0:0 FF0D:0:0:0:0:0:0:0 FF0E:0:0:0:0:0:0:0 FF0F:0:0:0:0:0:0:0 Subnet Masking Both an IPv6 address and IPv6 subnet mask compose of 128-bit binary digits, which are divided into eight 16-bit blocks and written in hexadecimal notation. Hexadecimal uses four bits for each character (1 ~ 10, A ~ F).
Appendix E IPv6 address which combines its interface ID and global and subnet information advertised from the router. This is a routable global IP address. DHCPv6 The Dynamic Host Configuration Protocol for IPv6 (DHCPv6, RFC 3315) is a server-client protocol that allows a DHCP server to assign and pass IPv6 network addresses, prefixes and other configuration information to DHCP clients. DHCPv6 servers and clients exchange DHCP messages using UDP.
Appendix E IPv6 such as the system name. The interface-ID option provides slot number, port information and the VLAN ID to the DHCPv6 server. The remote-ID option (if any) is stripped from the Relay-Reply messages before the relay agent sends the packets to the clients. The DHCP server copies the interface-ID option from the Relay-Forward message into the Relay-Reply message and sends it to the relay agent. The interface-ID should not change even after the relay agent restarts.
Appendix E IPv6 On the AMG1312-T Series, you can either set up a configured tunnel or an automatic 6to4 tunnel. The following describes each method. Configured Tunnel A configured tunnel is a point-to-point tunnelling mechanism that encapsulates an IPv6 address with an IPv4 address. Routers (A and B) on both IPv6 networks (1 and 2) each must have an interface that connects to the IPv4 network (with an IPv4 address). This allows the router to send and receive IPv6 data over the IPv4 network.
Appendix E IPv6 For example, if you have an IPv4 address of 192.168.1.1 (first converted to binary notation and then to the colon hexadecimal representation of c0a8:0101), then the 6to4 addresses is 2002:c0a8:0101::1/ 64. Example - Enabling IPv6 on Windows XP/2003/Vista By default, Windows XP and Windows 2003 support IPv6. This example shows you how to use the ipv6 install command on Windows XP/2003 to enable IPv6. This also displays how to use the ipconfig command to see auto-generated IP addresses.
Appendix E IPv6 5 Click Start and then OK. 6 Now your computer can obtain an IPv6 address from a DHCPv6 server. Example - Enabling IPv6 on Windows 7 Windows 7 supports IPv6 by default. DHCPv6 is also enabled when you enable IPv6 on a Windows 7 computer. To enable IPv6 in Windows 7: 284 1 Select Control Panel > Network and Sharing Center > Local Area Connection. 2 Select the Internet Protocol Version 6 (TCP/IPv6) checkbox to enable it. 3 Click OK to save the change.
Appendix E IPv6 4 Click Close to exit the Local Area Connection Status screen. 5 Select Start > All Programs > Accessories > Command Prompt. 6 Use the ipconfig command to check your dynamic IPv6 address. This example shows a global address (2001:b021:2d::1000) obtained from a DHCP server. C:\>ipconfig Windows IP Configuration Ethernet adapter Local Area Connection: Connection-specific DNS IPv6 Address. . . . . . Link-local IPv6 Address IPv4 Address. . . . . . Subnet Mask . . . . . .
A PPENDIX F Services The following table lists some commonly-used services and their associated protocols and port numbers. • Name: This is a short, descriptive name for the service. You can use this one or create a different one, if you like. • Protocol: This is the type of IP protocol used by the service. If this is TCP/UDP, then the service uses the same port number with TCP and UDP. If this is USER-DEFINED, the Port(s) is the IP protocol number, not the port number.
Appendix F Services Table 116 Examples of Services NAME PORT(S) DESCRIPTION AH (IPSEC_TUNNEL) User-Defined 51 The IPSEC AH (Authentication Header) tunneling protocol uses this service. AIM TCP 5190 AOL’s Internet Messenger service. AUTH TCP 113 Authentication protocol used by some servers. BGP TCP 179 Border Gateway Protocol. BOOTP_CLIENT UDP 68 DHCP Client. BOOTP_SERVER UDP 67 DHCP Server.
Appendix F Services Table 116 Examples of Services (continued) 288 NAME PROTOCOL PORT(S) DESCRIPTION NEW-ICQ TCP 5190 An Internet chat program. NEWS TCP 144 A protocol for news groups. NFS UDP 2049 Network File System - NFS is a client/ server distributed file service that provides transparent file sharing for network environments. NNTP TCP 119 Network News Transport Protocol is the delivery mechanism for the USENET newsgroup service.
Appendix F Services Table 116 Examples of Services (continued) NAME PROTOCOL PORT(S) DESCRIPTION SQL-NET TCP 1521 Structured Query Language is an interface to access data on many different types of database systems, including mainframes, midrange systems, UNIX systems and network servers. SSDP UDP 1900 The Simple Service Discovery Protocol supports Universal Plug-and-Play (UPnP). SSH TCP/UDP 22 Secure Shell Remote Login Program. STRM WORKS UDP 1558 Stream Works Protocol.
A PPENDIX G Legal Information Copyright Copyright © 2013 by ZyXEL Communications Corporation. The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation.
Appendix G Legal Information Notices Changes or modifications not expressly approved by the party responsible for compliance could void the user's authority to operate the equipment. This Class B digital apparatus complies with Canadian ICES-003. Cet appareil numérique de la classe B est conforme à la norme NMB-003 du Canada. Viewing Certifications Go to www.zyxel.com to view the product’s documents and certifications.
Appendix G Legal Information [Hungarian] Alulírott, ZyXEL nyilatkozom, hogy a berendezés megfelel a vonatkozó alapvetõ követelményeknek és az 1999/5/EK irányelv egyéb elõírásainak. [Polish] Niniejszym ZyXEL oświadcza, że sprzęt jest zgodny z zasadniczymi wymogami oraz pozostałymi stosownymi postanowieniami Dyrektywy 1999/5/EC. [Portuguese] ZyXEL declara que este equipamento está conforme com os requisitos essenciais e outras disposições da Directiva 1999/5/EC.
Appendix G Legal Information This product meets the National Radio Interface and the requirements specified in the National Frequency Allocation Table for Italy. Unless this wireless LAN product is operating within the boundaries of the owner's property, its use requires a “general authorization.” Please check http://www.sviluppoeconomico.gov.it/ for more details.
Index Index Numbers B 802.
Index CWMP 200 DHCP 119 IP alias 121 IP precedence 143 IP/MAC filter 164 port forwarding 149 reset 208 restoring 208 static route 133, 135 WAN 69 wizard 28 dynamic DNS 161 activation 162 wildcard 161 activation 162 Dynamic Host Configuration Protocol, see DHCP dynamic WEP key exchange 271 DYNDNS wildcard 161 activation 162 connection nailed-up 84 E copyright 290 EAP Authentication 270 CPE WAN Management Protocol, see CWMP encapsulation 68, 71, 78 ENET ENCAP 83 PPPoA 83 PPPoE 83 RFC 1483 83 CTS (Cle
Index logs 175 P2P 180 packet direction 172 Ping of Death 169 rules 181 security 182 SYN attack 169 three-way handshake 179 triangle route 183 solutions 184 firmware 205 forwarding ports 148, 149 activation 151 configuration 149 example 149 rules 150 fragmentation threshold 101, 104, 267 FTP 14, 213 G Independent Basic Service Set See IBSS 264 initialization vector (IV) 273 Inside Global Address, see IGA Inside Local Address, see ILA Internet Control Message Protocol, see ICMP Internet Protocol version 6
Index subnet mask 116, 129 LAND attack 169 limitations wireless LAN 106 WPS 113 Local Area Network, see LAN login passwords 19 logout 20 automatic 20 logs 194 firewalls 175 M MAC 65 MAC address 96, 120 filter 96, 105 MAC authentication 96 Management Information Base (MIB) 215 managing the device using FTP. See FTP.
Index summary screen 159 ICMP 217 limitations 211 NAT 211 SSH 218 Telnet 213 WWW 211 port forwarding 148, 149 activation 151 configuration 149 example 149 rules 150 PPPoA 71, 78, 83 reset 18, 208 PPPoE 71, 78, 83 restart 209 preamble 101, 104 restoring configuration 208 preamble mode 268 RFC 1483 71, 78, 83 private IP address 129 RFC 3164 194 probing, firewalls 170 RIP 74, 130 product registration 291 Routing Information Protocol, see RIP PSK 273 push button 17 RTS (Request To Send) 267 th
Index versions 214 trusted CAs, and certificates 191 SPI 169 SSH 218 SSID 105 activation 94 MBSSID 107 static route 132 configuration 133, 135 example 132 status 63 ATM 222 DSL connections 223 WPS 98 U UBR 74, 79, 86 unicast 69 Universal Plug and Play, see UPnP upgrading firmware 205 UPnP 121 cautions 117 NAT traversal 116 subnet 249 URL 163 subnet mask 116, 129, 250 URL filter URL 163 subnetting 252 Sustain Cell Rate, see SCR SYN attack 169 syslog protocol 194 severity levels 194 V system 202 fi
Index setup 69 traffic shaping 85 example 85 VCI 71, 78, 84 VPI 71, 78, 84 warranty 291 note 291 WDS 99, 108 compatibility 99 example 108 Web Configurator 19 web configurator 14 passwords 19 WEP 106 WEP Encryption 91, 92 WEP encryption 91 WEP key 91 Wide Area Network, see WAN WiFi Protected Access 272 WiFi Protected Setup, see WPS wireless client configuration 42 wireless client WPA supplicants 273 Wireless Distribution System, see WDS wireless LAN 87, 102 authentication 104, 105 BSS 107 example 107 channe
