manualshive.com logo in svg

Comtrend Corporation VG-8050, User Manual

Share
Download
Comtrend Corporation VG-8050 User Manual Download Page 37

 

36 

5.5  Security 

To display this function, you must enable the firewall feature in WAN Setup.   

For detailed descriptions, with examples, please consult 

Appendix A

. 

 

5.5.1  IP Filtering 

This screen sets filter rules that limit IP traffic (Outgoing/Incoming). Multiple filter 

rules can be set and each applies at least one limiting condition. For individual IP 

packets to pass the filter all conditions must be fulfilled. 

 
NOTE: 

This function is not available when in bridge mode. Instead, see 

MAC 

Filtering

 which performs a similar function. 

OUTGOING IP FILTER 

 

By default, all outgoing IP traffic is allowed, but IP traffic can be blocked with filters. 

 

 

 

 

 

To add a filter (to block some outgoing IP traffic), click the Add button. 

On the following screen, enter your filter criteria and then click Apply/Save. 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Summary of Contents for VG-8050

Page 1: ...VG 8050 Wireless Router Access Point User Manual Version 1 1 January 12 2013 261097 011 ...

Page 2: ...s should be placed on the cord In addition do not walk on step on or mistreat the cord Use only the power cord and adapter that are shipped with this device To safeguard the equipment against overheating make sure that all openings in the unit that offer exposure to air are not blocked Avoid using a telephone other than a cordless type during an electrical storm There may be a remote risk of elect...

Page 3: ...RTICULAR PURPOSE See the GNU General Public License for more details You should have received a copy of the GNU General Public License along with this program If not see http www gnu org licenses Protect Our Environment This symbol indicates that when the equipment has reached the end of its useful life it must be taken to a recycling centre and processed separate from domestic waste The cardboard...

Page 4: ...terface 23 5 2 WAN SERVICE 24 5 3 LAN 25 5 3 1 IPv6 Autoconfig 29 5 4 NAT 32 5 4 1 Virtual Servers 32 5 4 2 Port Triggering 33 5 4 3 DMZ Host 35 5 5 SECURITY 36 5 5 1 IP Filtering 36 5 5 2 MAC Filtering 40 5 6 PARENTAL CONTROL 42 5 6 1 Time Restriction 42 5 6 2 URL Filter 43 5 7 ROUTING 45 5 7 1 Default Gateway 45 5 7 2 Static Route 46 5 7 3 Policy Routing 47 5 7 4 RIP 48 5 8 DNS 49 5 8 1 DNS Serv...

Page 5: ...ider 93 7 4 TELEPHONE CALLS 94 CHAPTER 8 DIAGNOSTICS 96 CHAPTER 9 MANAGEMENT 97 9 1 SETTINGS 97 9 1 1 Backup Settings 97 9 1 2 Update Settings 98 9 1 3 Restore Default 98 9 2 SYSTEM LOG 99 9 3 SECURITY LOG 101 9 4 TR 069 CLIENT 102 9 5 INTERNET TIME 104 9 6 ACCESS CONTROL 105 9 6 1 Passwords 105 9 6 2 Service Access 106 9 7 UPDATE SOFTWARE 107 9 8 REBOOT 108 APPENDIX A SPECIFICATIONS 109 APPENDIX ...

Page 6: ...security features such as WPA data encryption Firewall VPN pass through and is designed for both residential and business applications that require wireless and wired connectivity VG 8050 is also designed with TR 068 compliant color panel and LED indicators for easy installation and user friendliness 1 1 Features UPnP Integrated 802 11n 2 4GHz AP Backward compatible with 802 11g b WPA WPA2 and 802...

Page 7: ...6 1 2 Application The following diagram depicts the application of the VG 8050 ...

Page 8: ...pment disconnect all power cords and telephone lines from their outlets Telf For VoIP service connect telephone s to these ports with RJ11 cable Reset Button Restore the default parameters of the device by pressing the Reset button for 5 to 10 seconds After the device has rebooted successfully the front panel should display as expected see section 2 2 LED Indicators NOTE If pressed down for more t...

Page 9: ...tton This button is used to enable disable WiFi and WPS If pushed for 10 seconds or longer it will enable disable the wireless functionality If pushed for less than 10 seconds it will activate the WPS functionality ...

Page 10: ...available Blink LAN activity present traffic in either direction Off Ethernet connection is not available 2 4GHz WiFi Green On WiFi connection is available Blink Negotiation or traffic on line Off WiFi connection is not available 2 4GHz WPS Green On WPS mode exists protected clients Blink WPS mode is on for 120 seconds Off WPS mode is off Red Solid Red 20 sec Problems on WPS Registration FXS1 Gree...

Page 11: ...n Line up Blink 2Hz No line detected Blink 4Hz Line is training Off Router power off Internet Green 2 Hz blinking Green Red round Inform the firmware updating and flash memory writing Red Green Blink PPP DHCP negotiation Solid PPP DHCP Up Quick Blinking Tx Rx traffic on line Red Solid Red Authentication failed ...

Page 12: ...e factory default configuration can be restored either by pushing the reset button for more than five seconds until the power indicates LED blinking or by clicking the Restore Default Configuration option in the Restore Settings screen 3 2 IP Configuration DHCP MODE When the VG 8050 powers up the onboard DHCP server will switch on Basically the DHCP server issues and reserves IP addresses for LAN ...

Page 13: ...However the general steps involved are similar for most operating systems OS Check your OS support documentation for further details STEP 1 From the Network Connections window open Local Area Connection You may also access this screen by double clicking the Local Area Connection icon on your taskbar Click the Properties button STEP 2 Select Internet Protocol TCP IP and click the Properties button ...

Page 14: ...field For example if the default IP address is 192 168 1 1 type http 192 168 1 1 NOTE For local administration i e LAN access the PC running the browser must be attached to the Ethernet and not necessarily to the device For remote access i e WAN use the IP address shown on the Device Information screen and login with remote username and password STEP 2 A dialog box will appear such as the one belo...

Page 15: ...14 Click OK to continue NOTE The login password can be changed later see section 9 5 1 STEP 3 After successfully logging in for the first time you will reach this screen ...

Page 16: ...15 ...

Page 17: ...red connection s and user account privileges For example if NAT and Firewall are enabled the main menu will display the NAT and Security submenus If either is disabled their corresponding menu s will also be disabled Device Info is the first selection on the main menu so it will be discussed first Subsequent chapters will introduce the other main menu options in sequence The Device Info Summary sc...

Page 18: ...rnet Group Management Protocol IGMP status MLD Shows Multicast Listener Discovery MLD status NAT Shows Network Address Translation NAT status Firewall Shows the status of Firewall Status Lists the status of DSL link IPv4 Address Shows WAN IPv4 address PPP connect disconnect Shows the PPP connection status IPv6 Address Shows WAN IPv6 address IPv6 Unnumbered Model Shows if unnumbered model is used o...

Page 19: ... Click Reset Statistics to perform a manual update of these statistics 4 2 1 LAN Statistics This screen shows data traffic statistics for each LAN interface Heading Description Interface LAN interface s Received Transmitted Bytes Pkts Errs Drops Number of Bytes Number of Packets Number of packets with errors Number of dropped packets ...

Page 20: ...affic statistics for each WAN interface Heading Description Interface WAN interfaces Description WAN service label Received Transmitted Bytes Pkts Errs Drops Number of Bytes Number of Packets Number of packets with errors Number of dropped packets ...

Page 21: ...tination Flag U route is up reject route G use gateway H target is a host R reinstate route for dynamic routing D dynamically installed by daemon or redirect M modified from routing daemon or redirect Metric The distance to the target usually counted in hops It is not used by recent kernels but may be needed by routing daemons Service Shows the WAN connection label Interface Shows connection inter...

Page 22: ...RP to display the ARP information Field Description IP address Shows IP address of host pc Flags Complete Incomplete Permanent or Publish HW Address Shows the MAC address of host pc Device Shows the connection interface ...

Page 23: ...P Leases Field Description Hostname Shows the device host PC network name MAC Address Shows the Ethernet MAC address of the device host PC IP Address Shows IP address of device host PC Expires In Shows how much time is left for each DHCP Lease ...

Page 24: ...ernet WAN Interface configuration Click Add to create a new connection see Appendix G To remove a connection select its Remove column radio button and click remove Heading Description Interface Name Ethernet WAN Interface Connection Mode Default Mode Single service over one interface Vlan Mux Mode Multiple Vlan services over one interface MSC Mode Multiple Services over one interface Remove Select...

Page 25: ...e Vlan8021p VLAN ID is used for VLAN Tagging IEEE 802 1Q VlanMuxId Shows 802 1Q VLAN ID ConnId Connection ID IGMP Shows Internet Group Management Protocol IGMP status NAT Shows Network Address Translation NAT status Firewall Shows the Security status IPv6 Shows if IPv6 is enabled on this interface or not MLD Shows Multicast Listener Discovery MLD status IPv6 Unnumbered Model Shows if the unnumbere...

Page 26: ... more details GroupName Select an Interface Group IP Address Input the IP address for the LAN port 1st LAN INTERFACE Subnet Mask Input the subnet mask for the LAN port IP Address Input the loopback IP address for the LAN port Loopback IP and Subnetmask Subnetmask Input the loopback subnet mask for the LAN port ...

Page 27: ...ct Enable DHCP server and enter Start and End IP addresses and the Leased Time This setting configures the router to automatically assign IP default gateway and DNS server addresses to every PC on your LAN Primary DNS server The Primary DNS server which is delivered to the LAN site hosts via DHCP protocol Secondary DNS server The Secondary DNS server which is delivered to the LAN site hosts via DH...

Page 28: ...ding Description Vendor Class ID It denotes the vendor of the LAN site hosts which would be recognized via option 60 of DHCP protocol IP range start If the Vendor Class ID is recognized and matched a new DHCP lease pool can be created This table is the start of the pool ...

Page 29: ...Class ID is recognized and matched a new Primary DNS server could be assigned via this field Secondary DNS optional If the Vendor Class ID is recognized and matched a new Secondary DNS server could be assigned via this field DHCP Options If the Vendor Class ID is recognized and matched a set of string based DHCP options could be assigned to the client for customization purposes The options are mos...

Page 30: ...29 5 3 1 IPv6 Autoconfig ...

Page 31: ...ID to be assigned to dhcpv6 client Leased Time Second Lease time for dhcpv6 client to use the assigned IP address Heading Description Enable RADVD Enable use of router advertisement daemon RA interval Min sec Minimum time to send router advertisement RA interval Max sec Maximum time to send router advertisement Reachable Time ms The time in milliseconds that a neighbor is reachable after receiving...

Page 32: ...refix table with desired prefix and relative parameters If Static 1 for example then the prefixes set in the Static Prefx table would be used for LAN side hosts to generate an IPv6 address Furthermore if IAPD 1 then the WAN side prefix delegation would be used for LAN side hosts to generate an IPv6 address ...

Page 33: ... you to direct incoming traffic from the WAN side identified by Protocol and External port to the Internal server with private IP addresses on the LAN side The Internal port is required only if the external port needs to be converted to a different port number used by the server on the LAN side A maximum of 32 entries can be configured To add a Virtual Server click Add The following will be displa...

Page 34: ... is selected the port ranges are automatically configured Protocol TCP TCP UDP or UDP Internal Port Start Enter the internal port starting number when you select Custom Server When a service is selected the port ranges are automatically configured Internal Port End Enter the internal port ending number when you select Custom Server When a service is selected the port ranges are automatically confi...

Page 35: ...ion When an application is selected the port ranges are automatically configured Trigger Port End Enter the ending trigger port number when you select custom application When an application is selected the port ranges are automatically configured Trigger Protocol TCP TCP UDP or UDP Open Port Start Enter the starting open port number when you select custom application When an application is selecte...

Page 36: ... WAN that do not belong to any of the applications configured in the Virtual Servers table to the DMZ host computer To Activate the DMZ host enter the DMZ host IP address and click Save Apply To Deactivate the DMZ host clear the IP address field and click Save Apply ...

Page 37: ...applies at least one limiting condition For individual IP packets to pass the filter all conditions must be fulfilled NOTE This function is not available when in bridge mode Instead see MAC Filtering which performs a similar function OUTGOING IP FILTER By default all outgoing IP traffic is allowed but IP traffic can be blocked with filters To add a filter to block some outgoing IP traffic click th...

Page 38: ...DP UDP or ICMP Policy This is to choose to allow or deny the packets that match the criteria Source IP address Enter source IP address Source Port port or port port Enter source port number or range Destination IP address Enter destination IP address Destination Port port or port port Enter destination port number or range ...

Page 39: ...efault all incoming IP traffic is blocked but IP traffic can be allowed with filters To add a filter to allow incoming IP traffic click the Add button On the following screen enter your filter criteria and then click Apply Save ...

Page 40: ...ress Enter source IP address Source Port port or port port Enter source port number or range Destination IP address Enter destination IP address Destination Port port or port port Enter destination port number or range At the bottom of this screen select the WAN and LAN Interfaces to which the filter rule will apply You may select all or just a subset WAN interfaces in bridge mode or without firew...

Page 41: ...ayer frames will be FORWARDED except those matching the MAC filter rules BLOCKED means that all MAC layer frames will be BLOCKED except those matching the MAC filter rules The default MAC Filtering Global policy is FORWARDED It can be changed by clicking the Change Policy button Choose Add or Remove to configure MAC filtering rules The following screen will appear when you click Add Create a filte...

Page 42: ...ype PPPoE IPv4 IPv6 AppleTalk IPX NetBEUI IGMP Destination MAC Address Defines the destination MAC address Source MAC Address Defines the source MAC address Source Destination Interfaces Applies the filter to selected WAN interfaces ...

Page 43: ...ed in section 9 4 so that the scheduled times match your local time Click Add to display the following screen See below for field descriptions Click Save Apply to add a time restriction User Name A user defined label for this restriction Browser s MAC Address MAC address of the PC running the browser Other MAC Address MAC address of another LAN device Days of the Week The days the restrictions app...

Page 44: ...clude radio button to deny access to the websites listed Tick the Include radio button to restrict access to only those listed websites Click Add to display the following screen Select the list type first then input the URL address and port number then click Save Apply to add the entry to the URL filter URL Addresses begin with www as shown in this example ...

Page 45: ...44 A maximum of 100 entries can be added to the URL Filter list ...

Page 46: ...ode the RIP screen is hidden while the Default Gateway and Static Route configuration screens are shown but ineffective 5 7 1 Default Gateway Select a WAN Interface as the default gateway and click Save Apply NOTE After enabling the Automatic Assigned Default Gateway the device must be rebooted to activate the assigned default gateway ...

Page 47: ...ate a new static route Click Remove to delete the selected static route Click the Add button to display the following screen Select the IP Version and input the Destination IP address Select the Interface and input the Gateway IP Address Then click Save Apply to add the entry to the routing table ...

Page 48: ...Routing This option allows for the configuration of static routes by policy Click Add to create a routing policy or Remove to delete one On the following screen complete the form and click Save Apply to create a policy ...

Page 49: ...48 5 7 4 RIP To activate RIP configure the RIP version operation mode and select the Enabled checkbox for at least one WAN interface before clicking Save Apply ...

Page 50: ...io button and then choose a WAN interface from the drop down box For Static DNS select the second radio button and enter the IP Address of the primary and secondary DNS server s Click Save Apply to save the new configuration NOTE You must reboot the router to make the new configuration effective ...

Page 51: ...rious locations on the Internet To add a dynamic DNS service click Add The following screen will display Field Description D DNS provider Select a dynamic DNS provider from the list Hostname Enter the name of the dynamic DNS server Interface Select the interface from the list Username Enter the username of the dynamic DNS server Password Enter the password of the dynamic DNS server ...

Page 52: ...51 5 9 UPnP Select the checkbox provided and click Apply Save to enable UPnP protocol ...

Page 53: ...ame Home will be added to PC s DNS Suffix Search List and the PC can access route with Comtrend Home DNS Relay When DNS Relay is enabled the router will play a role as DNS server that send request to ISP DNS server and cache the information for later access When DNS relay is disabled the computer will pull information from ISP DNS server 5 11 IP Tunnel 5 11 1 IPv6inIPv4 Configure 6in4 tunneling to...

Page 54: ... to display the following Field Description Tunnel Name A name for the tunnel Mechanism The mechanism that is using the tunnel Now only 6RD is supported Associated WAN Interface The WAN interface that would sustain the tunnel ...

Page 55: ...uld use the tunnel to forward the packets IPv4 Mask Length The IPv4 subnet for WAN interface 6rd Prefix with Prefix Length The 6RD prefix and its length for this tunnel Border Relay IPv4 Address A server that can relay the tunneled packets or simply the other tunnel point ...

Page 56: ...55 5 11 2 IPv4inIPv6 Configure 4in6 tunneling to encapsulate IPv4 traffic over an IPv6 only environment Click the Add button to display the following ...

Page 57: ...echanism that is using the tunnel Now only DS Lite is supported Associated WAN Interface The WAN interface that would sustain the tunnel Associated LAN Interface The LAN interface that would use the tunnel to forward the packets Remote IPv6 Address The peer of the tunnel ...

Page 58: ...an add edit or remove IPSec tunnel mode connections from this page Click Add New Connection to add a new IPSec termination rule The following screen will display Field Description IPSec Connection Name User defined label ...

Page 59: ...ter the subnet information for VPN Key Exchange Method Select from Auto IKE or Manual For the Auto IKE key exchange method select Pre shared key or Certificate X 509 authentication For Pre shared key authentication you must enter a key while for Certificate X 509 authentication you must select a certificate from the list See the tables below for a summary of all available options Auto IKE Key Exch...

Page 60: ...change method options are summarized in the table below Manual Key Exchange Method Encryption Algorithm DES 3DES AES aes cbc Encryption Key DES 16 digit Hex 3DES 48 digit Hex Authentication Algorithm MD5 SHA1 Authentication Key MD5 32 digit Hex SHA1 40 digit Hex SPI default is 101 Enter a Hex value from 100 FFFFFFFF ...

Page 61: ...is valid 5 13 1 Local CREATE CERTIFICATE REQUEST Click Create Certificate Request to generate a certificate signing request The certificate signing request can be submitted to the vendor ISP ITSP to apply for a certificate Some information must be included in the certificate signing request Your vendor ISP ITSP will ask you to provide the information they require and to provide the information in ...

Page 62: ...on Name The exact legal name of your organization Do not abbreviate State Province Name The state or province where your organization is located It cannot be abbreviated Country Region Name The two letter ISO abbreviation for your country IMPORT CERTIFICATE Click Import Certificate to paste the certificate content and the private key provided by your vendor ISP ITSP into the corresponding boxes sh...

Page 63: ...wner information of this certificate authority but its purpose is not encryption decryption Its purpose is to sign and issue certificates in order to prove that these certificates are valid Click Import Certificate to paste the certificate content of your trusted CA The CA certificate content will be provided by your vendor ISP ITSP and is used to authenticate the Auto Configuration Server ACS tha...

Page 64: ...63 Enter a certificate name and click Apply to import the CA certificate ...

Page 65: ...enders and receivers of multicast data which is transmitted on IP multicast addresses called groups A multicast address that includes a group and source IP address is often referred to as a channel IGMP Configuration Field Description Default Version Define IGMP using version with video server Query Interval The query interval is the amount of time in seconds between IGMP General Query messages se...

Page 66: ... variable is a way of indicating how susceptible the subnet is to lost packets IGMP can recover from robustness variable minus 1 lost IGMP packets The robustness variable should be set to a value of 2 or greater The default robustness variable value is 2 Maximum Multicast Groups Setting the maximum number of Multicast groups Maximum Multicast Data Sources for IGMPv3 Define the maximum multicast vi...

Page 67: ...ost Membership Query message header The default query response interval is 10 seconds and must be less than the query interval Last Member Query Interval The last member query interval is the amount of time in seconds that the IGMP router waits to receive a response to a Group Specific Query message The last member query interval is also the amount of time in seconds between successive Group Speci...

Page 68: ...number Maximum Multicast Group Members Setting the maximum number of groups that ports can accept Fast Leave Enable When you enable IGMP fast leave processing the switch immediately removes a port when it detects an IGMP version 2 leave message on that port LAN to LAN Intra LAN Multicast Enable Allows a multicast server reside on the LAN side receiving IGMP packets for its use ...

Page 69: ...ireless LAN interface hide the network from active scans set the wireless network name also known as SSID and restrict the channel set based on country requirements Click Save Apply to apply the selected wireless options Consult the table below for descriptions of these options Option Description Enable Wireless A checkbox that enables or disables the wireless LAN interface When selected a set of ...

Page 70: ...e Set Identifier All stations must be configured with the correct SSID to access the WLAN If the SSID does not match that user will not be granted access BSSID The BSSID is a 48 bit identity used to identify a particular BSS Basic Service Set within an area In Infrastructure BSS networks the BSSID is the MAC Media Access Control address of the AP Access Point and in Independent BSS or ad hoc netwo...

Page 71: ... allow you to configure security features of the wireless LAN interface Click Apply Save to implement new configuration settings WIRELESS SECURITY Wireless security settings can be configured according to Wi Fi Protected Setup WPS or Manual Setup The WPS method configures security settings automatically ...

Page 72: ...match that client will not be granted access Network Authentication This option specifies whether a network key is used for authentication to the wireless network If network authentication is set to Open then no authentication is provided Despite this the identity of the client is still verified Each authentication type has its own settings For example selecting 802 1X authentication will reveal t...

Page 73: ...d the destination station to alter frame bits thus avoiding disclosure to eavesdroppers Under shared key authentication each wireless station is assumed to have received a secret shared key over a secure channel that is independent from the 802 11 wireless network communications channel Encryption Strength This drop down list box will display when WEP Encryption is enabled The key strength is prop...

Page 74: ...tication modes Other authentication modes do not use WPS so they must be configured manually To configure security settings with WPS follow the procedures below You must choose either the Push Button or PIN configuration method for Steps 6 and 7 I Setup Step 1 Enable WPS by selecting Enabled from the drop down list box shown Step 2 Set the WPS AP Mode Configured is used when the VG 8050 will assig...

Page 75: ...ON The WPS push button configuration provides a semi automated configuration method The WPS button on the rear panel of the router can be used for this purpose or the Web User Interface WUI can be used exclusively The WPS push button configuration is described in the procedure below It is assumed that the Wireless function is Enabled and that the router is configured as the Wireless Access Point A...

Page 76: ...l identification number PIN The PIN can be found on the device itself or within the software The PIN may be generated randomly in the latter case To obtain a PIN number for your client check the device documentation for specific instructions The WPS PIN configuration is described in the procedure below It is assumed that the Wireless function is Enabled and that the router is configured as the Wir...

Page 77: ...figured as the Registrar This is different from the External Registrar function provided in Windows Vista The figure below provides an example of a WPS client PIN function in progress Now go to Step 8 part IV Check Connection to check the WPS connection IV CHECK CONNECTION Step 8 If the WPS setup method was successful you will be able access the wireless AP from the client The client software shou...

Page 78: ...ck the associated button for each interface to enable disable the MAC address control The current MAC control status is shown on the associated buttons After clicking the Add button the following screen appears Input the MAC address in the box provided and click Apply Save ...

Page 79: ...reen allows for the configuration of wireless bridge features of the WLAN interface See the table beneath for detailed explanations of the various options Click Save Apply to implement new configuration settings Feature Description ...

Page 80: ...d Scan enables wireless bridge restriction Only those bridges selected in the Remote Bridges list will be granted access Click Refresh to update the station list when Bridge Restrict is enabled 6 5 Advanced The Advanced screen allows you to configure advanced features of the wireless LAN interface You can select a particular channel on which to operate force the transmission rate to a particular s...

Page 81: ...x devices can coexist in the same network IEEE 802 11g creates data rate parity at 2 4 GHz with the IEEE 802 11a standard which has a 54 Mbps rate at 5 GHz IEEE 802 11a has other differences compared to IEEE 802 11b or g such as offering more channels Channel Drop down menu that allows selection of a specific channel Auto Channel Timer min Auto channel scan timer in minutes 0 to disable ...

Page 82: ...elow before the Rx Chain Power Save feature activates itself RX Chain Power Save PPS The maximum number of packets per seconds that can be processed by the WLAN interface for a duration of Quiet Time described above before the Rx Chain Power Save feature activates itself 54g Rate Drop down menu that specifies the following fixed rates Auto Default Uses the 11 Mbps data rate when possible but drops...

Page 83: ... The default is 100 ms and the acceptable range is 1 65535 The beacon transmissions identify the presence of an access point By default network devices passively scan all RF channels listening for beacons coming from access points Before a station enters power save mode the station needs the beacon interval to know when to wake up to receive the beacon and learn whether there are buffered frames a...

Page 84: ...e MAC address of all the stations Associated Lists all the stations that are associated with the Access Point along with the amount of time since packets were transferred to and from each station If a station is idle for too long it is removed from this list Authorized Lists those devices with authorized access SSID Lists which SSID of the modem that the stations connect to Interface Lists which i...

Page 85: ...packet telephony network Signaling allows call information to be carried across network boundaries Session management provides the ability to control the attributes of an end to end call NOTE The SIP standard is set by the Internet Engineering Task Force IETF The SIP standard defines the following agents servers User Agents UA SIP phone clients hardware or software Proxy Server relays data between...

Page 86: ...85 7 1 SIP Basic Setting 7 1 1 Global Parameters A common parameter setting ...

Page 87: ...86 7 1 2 Service Provider This screen contains basic SIP configuration settings ...

Page 88: ...electing the checkbox and setting registrar parameters SIP Registrar Input IP address of the SIP registrar server used for VOIP service SIP Registrar port This value is set by your VoIP provider FYI A proxy is an intermediary program that acts as both a server and a client for the purpose of making requests on behalf of other clients Requests are serviced internally or transferred to other servers...

Page 89: ...88 7 2 SIP Advanced This screen contains the advanced SIP configuration settings 7 2 1 Global Parameters A common parameter setting ...

Page 90: ...89 7 2 2 Service Provider Configure your settings based on your service provider ...

Page 91: ...le this option Anonymous calling Tick the checkbox to enable this option DND Do Not Disturb Tick the checkbox to enable this option Enable T 38 support Enable or disable T 38 Fax mode support with this checkbox You can plug a fax machine into either phone port to send or receive faxes Functionality depends upon FAX support by your VoIP service provider Registration Expire Timeout The time period t...

Page 92: ... by momentarily pressing down the cradle on a telephone Some telephone handsets have a button called flash or recall that sends a timed loop break or calibrated flash which is a hookflash that has a precise timing Enable SIP tag matching Uncheck for Vonage Interop Since CPE rely on the tags for matching purposes implementations which support Replacements MUST support the SIP specification which re...

Page 93: ...92 7 3 SIP Debug This screen contains SIP configuration settings used for debugging 7 3 1 Global Parameters A common parameter setting ...

Page 94: ...Description SIP log server IP address port Enter the IP address and port of the SIP log server Enable Vad Support Select the checkbox to enable VAD support Adjust the volume for incoming Ingress or outgoing Egress gain with the drop down boxes Ingress gain Enhances the volume of speaking the volume heard from the other side Egress gain Enhances the volume of hearing ...

Page 95: ...fy which line at a gateway is called so the gateway always routes IP address dialed calls to the first line Network busy tone fast busy will be played for unknown or unreachable destinations To answer a call pick up the phone or press the hands free button Caller ID The Call Manager delivers Calling Number when placing calls The calling number is transmitted to the analog line for CLASS recognitio...

Page 96: ...te that this does not actually enable forwarding to do so select the call forward action as described below To disable all call forwarding features dial 70 Call Forward No Answer To enable call forward on no answer dial 71 Incoming calls will be forwarded if unanswered for 18 seconds Call Forward Busy To enable call forward if busy dial 72 Incoming calls will be immediately forwarded if the phone ...

Page 97: ...t Diagnostics screen is a dashboard that shows overall connection status If a test displays a fail status click the button to retest and confirm the error If a test continues to fail click Help and follow the troubleshooting procedures ...

Page 98: ...ncludes Backup Settings Update Settings and Restore Default screens 9 1 1 Backup Settings To save the current configuration to a file on your PC click Backup Settings You will be prompted for a location of the backup file This file can later be used to recover settings on the Update Settings screen as described below ...

Page 99: ... the file name including folder path in the Settings File Name box or press Browse to search for the file then click Update Settings to recover settings 9 1 3 Restore Default Click Restore Default Settings to restore factory default settings After Restore Default Settings is clicked the following screen appears ...

Page 100: ...50 board hardware and the boot loader support the reset to default If the Reset button is continuously pressed for more than 5 seconds the boot loader will erase the configuration data saved in flash memory 9 2 System Log This function allows a system log to be kept and viewed upon request Follow the steps below to configure enable and view the system log STEP 1 Click Configure System Log as shown...

Page 101: ...ite the old event By default the log level is Debugging which is the lowest critical level The log levels are defined as follows Emergency system is unusable Alert action must be taken immediately Critical critical conditions Error Error conditions Warning normal but significant condition Notice normal but insignificant condition Informational provides information for reference Debugging debug lev...

Page 102: ...nts saved in the remote system log server When either Remote mode or Both mode is configured the WEB UI will prompt the user to enter the Server IP address and Server UDP port STEP 3 Click View System Log The results are displayed as follows 9 3 Security Log The Security Log dialog allows you to view the Security Log and configure the Security Log options Click View to view the Security Log Click ...

Page 103: ...E MUST attempt to connect with the ACS and call the Inform method ACS URL URL for the CPE to connect to the ACS using the CPE WAN Management Protocol This parameter MUST be in the form of a valid HTTP or HTTPS URL An HTTPS URL indicates that the ACS supports SSL The host portion of this URL is used by the CPE for validating the certificate from the ACS when using certificate based authentication A...

Page 104: ...f the device Connection Request Authorization Tick the checkbox to enable User Name Username used to authenticate an ACS making a Connection Request to the CPE Password Password used to authenticate an ACS making a Connection Request to the CPE URL Universal Resource Locator The Get RPC Methods button forces the CPE to establish an immediate connection to the ACS This may be used to discover the s...

Page 105: ...nization tick the corresponding checkbox choose your preferred time server s select the correct time zone offset and click Save Apply NOTE Internet Time must be activated to use Parental Control In addition this menu item is not displayed when in Bridge mode since the router would not be able to connect to the NTP timeserver ...

Page 106: ... passwords for the device Access to the VG 8050 is controlled through the following three user accounts 1234 this has unrestricted access to change and view the configuration Use the fields below to change password settings Click Save Apply to continue NOTE Passwords must be 16 characters or less ...

Page 107: ...106 9 6 2 Service Access Select each listbox and click Apply Save to configure your Settings Note If you enable firewall you still need to add an incoming filter rule for those services ...

Page 108: ...wse button to locate the image file STEP 3 Click the Update Software button once to upload and install the file NOTE The update process will take about 2 minutes to complete The device will reboot and the browser window will refresh to the default screen upon successful installation It is recommended that you compare the Software Version at the top of the Device Information screen with the firmwar...

Page 109: ... save the current configuration and reboot the router click Save Reboot NOTE You may need to close the browser window and wait for 2 minutes before reopening it It may also be necessary to reset your PC IP configuration ...

Page 110: ...WPA WPA2 Yes IEEE 802 1x Yes Tx Beamforming Yes WMM Yes Management Telnet Web based management Configuration backup and restoration Software upgrade via HTTP TFTP FTP server Routing Functions PPPoE IPoA Static route NAT PAT DHCP Server Client DNS Relay ARP Security Functions Authentication protocol PAP CHAP Port Triggering Forwarding Packet filtering SSH Access Control Voice SIP RFC 3261 MGCP RFC ...

Page 111: ...0 50 degrees Celsius Relative humidity 5 95 non condensing Dimensions 280mm W x 48mm H x 210mm D Kit Weight 1 VG 8050 1 RJ 11 cable 2 RJ 45 cable 1 Power Adapter 1 CD ROM 1KG Certifications CE NOTE Specifications are subject to change without notice ...

Page 112: ...111 Appendix B Pin Assignments ETHERNET Ports RJ45 Pin Definition Pin Definition 1 Transmit data 5 NC 2 Transmit data 6 Receive data 3 Receive data 7 NC 4 NC 8 NC ...

Page 113: ...t enable SSH access for the LAN or WAN from the Management Access Control Services menu in the web user interface To access the router using the Linux ssh client For LAN access type ssh l root 192 168 1 1 For WAN access type ssh l support WAN IP address To access the router using the Windows putty ssh client For LAN access type putty ssh l root 192 168 1 1 For WAN access type putty ssh l support W...

Page 114: ... allowed By setting up one or more filters specific packet types coming from the LAN can be dropped Example 1 Filter Name Out_Filter1 Protocol TCP Source IP address 192 168 1 45 Source Subnet Mask 255 255 255 0 Source Port 80 Dest IP Address NA Dest Subnet Mask NA Dest Port NA This filter will Drop all TCP packets coming from the LAN with IP Address Subnet Mask of 192 168 1 45 24 having a source p...

Page 115: ...2 168 1 45 24 and a destination port in the range of 6060 to 7070 All other incoming packets on this interface are DROPPED MAC LAYER FILTER These rules help in the filtering of Layer 2 traffic MAC Filtering is only effective in Bridge mode After a Bridge mode connection is created navigate to Advanced Setup Security MAC Filtering in the WUI Example 1 Global Policy Forwarded Protocol Type PPPoE Des...

Page 116: ...es Example User Name FilterJohn Browser s MAC Address 00 25 46 78 63 21 Days of the Week Mon Wed Fri Start Blocking Time 14 00 End Blocking Time 18 00 With this rule a LAN device with MAC Address of 00 25 46 78 63 21 will have no access to the WAN on Mondays Wednesdays and Fridays from 2pm to 6pm On all other days and times this device will have access to the outside Network ...

Page 117: ...g system Step 1 Enable UPnP on the Advanced Setup Upnp screen in the WUI NOTE A PVC must exist and NAT enabled to see this option Step 2 On the Wireless Security screen 2 4G Band enable WPS by selecting Enabled from the drop down list box and set the WPS AP Mode to Unconfigured Click the Apply Save button at the bottom of the screen to save your new wireless security settings ...

Page 118: ...117 ...

Page 119: ...118 Step 3 When the screen refreshes click the ConfigAP button ...

Page 120: ...119 Step 4 Open the Network folder in Vista and look for the BroadcomAP icon ...

Page 121: ...log box will appear asking for the Device PIN number Enter the Device PIN as shown on the Wireless Security screen Click Next Step 6 Windows Vista will attempt to configure the wireless security settings Step 7 If successful the security settings will match those in Windows Vista ...

Page 122: ...nnection modes as they determine the number and types of connections that may be configured DEFAULT MODE In this mode there is a 1 1 relationship between interfaces and WAN connections in that an interface in default mode supports just one connection However unlike the multiple connection modes described below it supports all five connection types The figure below shows the connection type availab...

Page 123: ... Layer2 Interface ETH Interface This table is provided here for ease of reference Heading Description Interface Name ETH WAN Interface Connection Mode Default Mode Single service over one connection Vlan Mux Mode Multiple Vlan service over one connection Remove Select the checkbox and click Remove to remove the connection STEP 2 Click Add to proceed to the next screen STEP 3 Select a Connection Mo...

Page 124: ...123 To add a WAN connection go to G2 WAN Connections ...

Page 125: ...C support up to 16 connections To setup a WAN connection follow these instructions STEP 1 Go to the Advanced Setup WAN Service screen STEP 2 Click Add to create a WAN connection The following screen will display STEP 3 Choose a layer 2 interface from the drop down box and click Next The WAN Service Configuration screen will display as shown below ...

Page 126: ... For VLAN Mux Connections only you must enter Priority VLAN ID tags STEP 5 You will now follow the instructions specific to the WAN service type you wish to establish This list should help you locate the correct procedure 1 For G2 1 PPP over ETHERNET PPPoE go to page 109 2 For G2 2 IP over ETHERNET IPoE go to page 115 3 For G2 3 Bridging go to page 119 The subsections that follow continue the WAN ...

Page 127: ...er Ethernet radio button and click Next You can also enable IPv6 by ticking the checkbox at the bottom of this screen STEP 2 On the next screen enter the PPP settings as provided by your ISP Click Next to continue or click Back to return to the previous step ...

Page 128: ...ers and the password a maximum of 32 characters in length For Authentication Method choose from AUTO PAP CHAP and MSCHAP ENABLE FULLCONE NAT This option becomes available when NAT is enabled Known as one to one NAT all requests from the same internal IP address and port are mapped to the same external IP address and port An external host can send a packet to the internal host by sending a packet t...

Page 129: ...n the LAN can be connected to the remote since the DHCP server within the device has only a single IP address to assign to a LAN device ENABLE NAT If the LAN is configured with a private IP address the user should select this checkbox The NAT submenu will appear in the Advanced Setup menu after reboot On the other hand if a private IP address is not used on the LAN side i e the LAN side is using a...

Page 130: ...ast group memberships to any neighboring multicast routers ENABLE MLD MULTICAST PROXY This option displays when IPv6 is enabled Tick the checkbox to enable Multicast Listener Discovery MLD This protocol is used by IPv6 hosts to report their multicast group memberships to any neighboring multicast routers NO MULTICAST VLAN FILTER Tick the checkbox to Enable Disable multicast VLAN filter STEP 3 Choo...

Page 131: ...red STEP 5 Click Next to continue or click Back to return to the previous step STEP 6 The WAN Setup Summary screen shows a preview of the WAN service you have configured Check these settings and click Apply Save if they are correct or click Back to modify them ...

Page 132: ...131 After clicking Apply Save the new service should appear on the main screen To activate it you must reboot Go to Management Reboot and click Reboot ...

Page 133: ...tom of this screen STEP 2 The WAN IP settings screen provides access to the DHCP server settings You can select the Obtain an IP address automatically radio button to enable DHCP use the DHCP Options only if necessary However if you prefer you can instead use the Static IP address method to assign WAN IP address Subnet Mask and Default Gateway manually ...

Page 134: ...ck Back to return to the previous step STEP 3 This screen provides access to NAT Firewall and IGMP Multicast settings Enable each by selecting the appropriate checkbox Click Next to continue or click Back to return to the previous step ...

Page 135: ...x should not be selected so as to free up system resources for better performance ENABLE IGMP MULTICAST Tick the checkbox to enable Internet Group Membership Protocol IGMP multicast IGMP is a protocol used by IPv4 hosts to report their multicast group memberships to any neighboring multicast routers STEP 4 Choose an interface to be the default gateway Click Next to continue or click Back to return...

Page 136: ...inue or click Back to return to the previous step STEP 7 The WAN Setup Summary screen shows a preview of the WAN service you have configured Check these settings and click Apply Save if they are correct or click Back to modify them ...

Page 137: ...136 After clicking Apply Save the new service should appear on the main screen To activate it you must reboot Go to Management Reboot and click Reboot ...

Page 138: ...rnet WAN interface STEP 1 Select the Bridging radio button and click Next STEP 2 The WAN Setup Summary screen shows a preview of the WAN service you have configured Check these settings and click Apply Save if they are correct or click Back to return to the previous screen ...

Page 139: ...hould appear on the main screen To activate it you must reboot Go to Management Reboot and click Reboot NOTE If this bridge connection is your only WAN service the VG 8050 will be inaccessible for remote management or technical support from the WAN ...

Reviews:

No comments

Brands by name

Popular brands

Load more brands