ZyXEL Communications EMG3425-Q10A User Manual Download Page 124

Page: 124 / 250

EMG3425-Q10A User’s Guide

124

H A P T E R

1 8

IPv6 Firewall

18.1 Overview

This chapter shows you how to enable and create IPv6 firewall rules to block unwanted IPv6 traffic.

18.2 IPv6 Firewall Screen

Click

Configuration

Security

IPv6 Firewall

. The

Service

screen appears as shown.

Figure 74

Configuration > Security

> IPv6 Firewall

Summary of Contents for EMG3425-Q10A

Page 1: ...Gigabit Ethernet Gateway Version 1 00 Edition 1 08 2015 Copyright 2015 ZyXEL Communications Corporation User s Guide Default Login Details LAN IP Address http 192 168 1 1 Router Mode http 192 168 1 2...

Page 2: ...r computer operating system Every effort has been made to ensure that the information in this manual is accurate Related Documentation Quick Start Guide The Quick Start Guide shows how to connect the...

Page 3: ...e 31 Tutorials 38 Technical Reference 50 Monitor 51 WAN 57 Wireless LAN 68 LAN 88 DHCP Server 94 NAT 99 DDNS 109 Static Route 111 Interface Group 114 Firewall 117 Content Filtering 122 IPv6 Firewall 1...

Page 4: ...EMG3425 Q10A 14 1 5 Resetting the EMG3425 Q10A 14 1 5 1 How to Use the RESET Button 14 1 6 The WPS Button 14 1 7 LEDs 15 1 8 Wall Mounting 17 Chapter 2 Introducing the Web Configurator 19 2 1 Overview...

Page 5: ...8 6 2 Set Up a Wireless Network Using WPS 38 6 2 1 Push Button Configuration PBC 38 6 2 2 PIN Configuration 39 6 3 Connect to EMG3425 Q10A Wireless Network without WPS 40 6 3 1 Configure Your Notebook...

Page 6: ...AP Edit 79 9 5 MAC Filter Screen 81 9 6 Wireless LAN Advanced Screen 83 9 7 Quality of Service QoS Screen 83 9 8 WPS Screen 84 9 9 WPS Station Screen 86 9 10 Scheduling Screen 86 Chapter 10 LAN 88 10...

Page 7: ...12 5 3 Trigger Port Forwarding 107 12 5 4 Trigger Port Forwarding Example 107 12 5 5 Two Points To Remember About Trigger Ports 108 Chapter 13 DDNS 109 13 1 Overview 109 13 1 1 What You Need To Know 1...

Page 8: ...nical Reference 131 19 3 1 Customizing Keyword Blocking URL Checking 131 Chapter 20 Bandwidth Management 133 20 1 Overview 133 20 1 1 What You Can Do in this Chapter 133 20 2 What You Need to Know 133...

Page 9: ...iew 164 23 2 What You Can Do 165 23 3 What You Need To Know 165 23 4 Before You Begin 166 23 5 DLNA Screen 167 23 6 SAMBA Screen 167 23 7 FTP Screen 169 23 8 Example of Accessing Your Shared Files Fro...

Page 10: ...26 2 Power Hardware Connections and LEDs 187 26 3 EMG3425 Q10A Access and Login 188 26 4 Internet Access 189 26 5 Resetting the EMG3425 Q10A to Its Factory Defaults 191 26 6 Wireless Connections 191 2...

Page 11: ...11 PART I User s Guide...

Page 12: ...bute traffic over the EMG3425 Q10A for the best possible performance in a home network There is one USB 2 0 port on the side panel of your EMG3425 Q10A and the other one is on the rear panel of your E...

Page 13: ...ts of the EMG3425 Q10A so that they can communicate with each other and access the Internet Wireless Wireless clients can connect to the EMG3425 Q10A to access network resources You can use WPS Wi Fi...

Page 14: ...had previously saved the user name will be reset to supervisor or admin the password will be reset to supervisor or 1234 and the IP address will be reset to 192 168 1 1 router mode 1 5 1 How to Use th...

Page 15: ...d on another wireless device within two minutes of each other For more information on using WPS see Section 6 2 on page 38 1 7 LEDs Look at the LED lights on the front panel to determine the status of...

Page 16: ...Internet On The EMG3425 Q10A has an IP connection but no traffic Your device has a WAN IP address either static or assigned by a DHCP server PPP negotiation was successfully completed if used and the...

Page 17: ...way in leave a small gap of about 0 5 cm If not using screw anchors use a screwdriver to insert the screws into the wall Do not insert the screws all the way in leave a gap of about 0 5 cm 4 Make sure...

Page 18: ...Chapter 1 Introduction EMG3425 Q10A User s Guide 18 Figure 4 Wall Mounting Example...

Page 19: ...ava permissions enabled by default Refer to the Troubleshooting chapter Chapter 26 on page 187 to see how to make sure these functions are allowed in Internet Explorer 2 2 Login Accounts There are two...

Page 20: ...234 default as the password If you are logging in with the supervisor account type supervisor default as the password Then click Login Figure 5 Login screen The following table describes the labels in...

Page 21: ...ld expires default five minutes go to Chapter 25 on page 176 to change this Simply log back into the EMG3425 Q10A if this happens 2 3 2 1 Weather Edit You can change the temperature unit and select th...

Page 22: ...5 Change Weather LABEL DESCRIPTION Change Unit Choose which temperature unit you want the EMG3425 Q10A to display Change Location Select the location for which you want to know the weather If the city...

Page 23: ...Section 4 2 on page 24 to view the Status screen in this mode Access Point Use this mode if you want to extend your network by allowing network devices to connect to the EMG3425 Q10A wirelessly Go to...

Page 24: ...r mode by default Routers are used to connect the local network to another network for example the Internet In the figure below the EMG3425 Q10A connects the local network LAN1 LAN4 to the Internet Fi...

Page 25: ...Web Configurator Click this icon to view copyright and a link for related product information Select a number of seconds or None from the drop down list box to refresh all screen statistics automatica...

Page 26: ...he IPv6 address of the EMG3425 Q10A on the WAN LAN Information MAC Address This shows the LAN Ethernet adapter MAC Address of your device IP Address This shows the LAN port s IP address IP Subnet Mask...

Page 27: ...ent date and time System Resource CPU Usage This displays what percentage of the EMG3425 Q10A s processing ability is currently used When this percentage is close to 100 the EMG3425 Q10A is running at...

Page 28: ...w current DHCP client information Packet Statistics Use this screen to view port status and packet specific statistics WLAN 2 4G Station Status Use this screen to view the wireless stations that are c...

Page 29: ...IP addresses to specific individual computers based on their MAC addresses and to have DNS servers assigned by the DHCP server Client List Use this screen to view information related to your DHCP stat...

Page 30: ...MBA Use this screen to enable file sharing through the EMG3425 Q10A FTP Use this screen to have the EMG3425 Q10A act as a FTP server Port Configuration Port Configuration Use this screen to change the...

Page 31: ...nternet Access in Access Point Mode Many screens that are available in Router Mode are not available in Access Point Mode such as bandwidth management and firewall 5 2 What You Can Do Use the Status s...

Page 32: ...ow appears Figure 13 Pop up for Access Point mode Click OK Then click Apply The Web Configurator refreshes once the change to Access Point mode is successful 5 3 2 Accessing the Web Configurator in Ac...

Page 33: ...figuring your WLAN and Maintenance Settings The configuration of wireless and maintenance settings in Access Point Mode is the same as for Router Mode See Chapter 9 on page 68 for information on the c...

Page 34: ...channel number which you select manually Security This shows the level of wireless security the EMG3425 Q10A is using WLAN 5G Information MAC Address This shows the 5GHz wireless adapter MAC Address...

Page 35: ...Q10A is running at full load and the throughput is not going to improve anymore If you want some applications to have more throughput you should turn off other applications for example using bandwidth...

Page 36: ...ting is 192 168 1 2 If you change the IP address you will have to log in again with the new IP address Subnet Mask The subnet mask specifies the network number portion of an IP address Your EMG3425 Q1...

Page 37: ...nt Mode EMG3425 Q10A User s Guide 37 Apply Click Apply to save your changes to the EMG3425 Q10A Cancel Click Cancel to reload the previous configuration for this screen Table 10 Network LAN IP continu...

Page 38: ...ure wireless network simply by pressing a button See Section 6 2 1 on page 38 This is the easier method PIN Configuration create a secure wireless network simply by entering a wireless client s PIN Pe...

Page 39: ...ate with the EMG3425 Q10A securely The following figure shows you an example to set up wireless network and security by pressing a button on both EMG3425 Q10A and wireless client the NWD210N in this e...

Page 40: ...the EMG3425 Q10A securely The following figure shows you the example to set up wireless network and security on EMG3425 Q10A and wireless client ex NWD210N in this example by using PIN method Figure...

Page 41: ...your LAN connection see Section 2 3 on page 19 1 Make sure the WIFI switch at the back panel of the EMG3425 Q10A is set to ON 2 Open the Configuration Network Wireless LAN 2 4G General screen in the A...

Page 42: ...Configure Your Notebook Note In this example we use the ZyXEL NWD6505 wireless adapter as the wireless client and use the Windows built in utility Windows Zero Configuration WZC to connect to the wire...

Page 43: ...ve installed the driver and attached the NWD6505 to your computer s USB port right click the Wireless Network Connection icon in your computer s system tray select and click View Available Wireless N...

Page 44: ...e web site your wireless connection is successfully configured 6 4 Using Multiple SSIDs on the EMG3425 Q10A You can configure more than one SSID on a EMG3425 Q10A See Section 9 4 on page 79 This allow...

Page 45: ...omputer must have an IP address in the range between 192 168 1 2 and 192 168 1 254 3 Click Start Run on your computer in Windows Type cmd in the dialog box Enter ipconfig to show your computer s IP ad...

Page 46: ...etwork Wireless LAN 2 4G More AP Click the Edit icon of the first entry to configure wireless and security settings for SSID_Worker 9 Configure the screen as follows In this example you enable Intra B...

Page 47: ...the Edit icon of the third entry to configure wireless and security settings for SSID_Guest 13 Configure the screen as follows In this example you enable Intra BSS Traffic for SSID_Guest to allow wire...

Page 48: ...the SSID_VoIP wireless network Select SSID_VoIP from the SSID Select drop down list enable MAC address filtering and set the Filter Action to Allow Enter the VoIP device s MAC address in the Mac Addr...

Page 49: ...Chapter 6 Tutorials EMG3425 Q10A User s Guide 49...

Page 50: ...50 PART II Technical Reference...

Page 51: ...iew information related to your DHCP status Section 7 4 on page 52 use the Packet Statistics screen to view port status packet specific statistics the system up time and so on Section 7 5 on page 53 U...

Page 52: ...Click Apply to save your settings Click Cancel to start the screen afresh Figure 20 Log Settings 7 4 DHCP Table DHCP Dynamic Host Configuration Protocol RFC 2131 and RFC 2132 allows individual clients...

Page 53: ...he screen Table 11 Monitor DHCP Table LABEL DESCRIPTION This is the index number of the host computer Status This field displays whether the connection to the host computer is up a yellow bulb or down...

Page 54: ...speed and duplex setting if you re using Ethernet encapsulation and Idle line ppp idle Dial starting to trigger a call and Drop dropping a call if you re using PPPoE encapsulation This field displays...

Page 55: ...ch IGMP multicast group and from each LAN host Click Monitor IGMP Statistics to open the following screen Figure 24 Monitor IGMP Statistics Table 13 Monitor WLAN Station Status LABEL DESCRIPTION This...

Page 56: ...he total number of Join packets the EMG3425 Q10A has received for this IGMP multicast group Total Leaves This field displays the total number of Leave packets the EMG3425 Q10A has received for this IG...

Page 57: ...he Internet Connection screen to enter your ISP information and set how the computer acquires its IP DNS and WAN MAC addresses Section 8 4 on page 59 8 3 What You Need To Know The information in this...

Page 58: ...is extremely important because without it you must know the IP address of a computer before you can access it The EMG3425 Q10A can get the DNS server addresses in the following ways 1 The ISP tells yo...

Page 59: ...t Protocol is a network layer protocol used to establish membership in a multicast group it is not used to carry user data The EMG3425 Q10A supports both IGMP version 1 IGMP v1 and IGMP version 2 IGMP...

Page 60: ...this to create a new WAN interface entry This is the index number of the connection Default Select the WAN interface that you want to configure as default Name This is the service name of the connect...

Page 61: ...n LABEL DESCRIPTION ISP Parameters for Internet Access WAN Name Enter the name to use for this connection definition Encapsulation You must choose the IPoE option when the WAN port is used as a regula...

Page 62: ...he vendor and functionality of the EMG3425 Q10A in DHCP requests that the EMG3425 Q10A sends to a DHCP server when getting a WAN IP address Vendor ID Enter the Vendor Class Identifier Option 60 such a...

Page 63: ...Clone the computer s MAC address IP Address Select Clone the computer s MAC address IP Address and enter the IP address of the computer on the LAN whose MAC you are cloning Set WAN MAC Address Select...

Page 64: ...dynamic service selection This enables the service provider to easily create and offer new IP services for individuals Operationally PPPoE saves significant effort for both you and the ISP or carrier...

Page 65: ...n LABEL DESCRIPTION ISP Parameters for Internet Access WAN Name Enter the name to use for this connection definition Encapsulation You must choose the PPPoE option when the WAN port is used as a regul...

Page 66: ...IPv4 network When the EMG3425 Q10A has an IPv4 WAN address and you set IPv6 IPv4 mode to IPv4 Only you can enable 6rd to encapsulate IPv6 packets in IPv4 packets to cross the ISP s IPv4 network The EM...

Page 67: ...MAC address Factory default Select Factory default to use the factory assigned default MAC Address Clone the computer s MAC address IP Address Select Clone the computer s MAC address IP Address and en...

Page 68: ...ANs Click Configuration Network Wireless LAN 2 4G or Wireless LAN 5G to configure to do so See the appendices for more detailed information about wireless networks The following figure provides an exa...

Page 69: ...page 86 9 1 2 What You Should Know Every wireless network must follow these basic guidelines Every wireless client in the same wireless network must use the same SSID The SSID is the name of the wirel...

Page 70: ...on However every wireless client in the wireless network has to support IEEE 802 1x to do this For wireless networks there are two typical places to store the user names and passwords for each user In...

Page 71: ...onger encryption with a local user database In this case it is better to set up stronger encryption with no authentication than to set up weaker encryption with the local user database When you select...

Page 72: ...th for your networks A is Guest WLAN and N is home or company network Figure 32 Example Bandwidth for Different Networks WPS WiFi Protected Setup WPS is an industry standard specification defined by t...

Page 73: ...work Wireless LAN 2 4G 5G to open the General screen Figure 33 Network Wireless LAN 2 4G 5G General The following table describes the general wireless LAN labels in this screen Table 19 Network Wirele...

Page 74: ...ng 802 11 Mode If you are in the Wireless LAN 2 4G General screen you can select from the following 802 11b allows either IEEE 802 11b or IEEE 802 11g compliant WLAN devices to associate with the EMG3...

Page 75: ...de Select Static WEP WPA PSK WPA WPA2 PSK or WPA2 to add security on this wireless network The wireless clients which want to associate to this network must have same wireless security settings as thi...

Page 76: ...l Click Cancel to reload the previous configuration for this screen Table 21 Network Wireless LAN 2 4G 5G General WPA PSK WPA2 PSK LABEL DESCRIPTION Security Mode Select WPA PSK or WPA2 PSK to enable...

Page 77: ...PS before you configure WPA or WPA2 in the Wireless LAN 2 4G 5G General screen Figure 36 Network Wireless LAN 2 4G 5G General WPA WPA2 Apply Click Apply to save your changes back to the EMG3425 Q10A C...

Page 78: ...ble only when you select WPA2 Pre authentication enables fast roaming by allowing the wireless client already connecting to an AP to perform IEEE 802 1x authentication with another AP before connectin...

Page 79: ...bels in this screen 9 4 1 More AP Edit Use this screen to edit an SSID profile Click the Edit icon next to an SSID in the More AP screen The following screen displays Table 23 Network Wireless LAN 2 4...

Page 80: ...ore AP Edit LABEL DESCRIPTION Active Select this to activate the SSID profile Name SSID The SSID Service Set IDentity identifies the Service Set with which a wireless client is associated Enter a desc...

Page 81: ...f packets it sends WMM QoS Wifi MultiMedia Quality of Service gives high priority to voice and video which makes them run more smoothly Enable Guest WLAN Select the check box to activate guest wireles...

Page 82: ...on for the list of MAC addresses in the MAC Filter Summary table Select Allow to permit access to the EMG3425 Q10A MAC addresses not listed will be denied access to the EMG3425 Q10A Select Deny to blo...

Page 83: ...reshold number of bytes for the fragmentation boundary for directed messages It is the maximum data fragment size that can be sent This field is not configurable and the EMG3425 Q10A automatically cha...

Page 84: ...ble 27 Network Wireless LAN 2 4G 5G QoS LABEL DESCRIPTION WMM QoS Select Enable to have the EMG3425 Q10A automatically give a service a priority level according to the ToS value in the IP header of pa...

Page 85: ...isplays Configured when the EMG3425 Q10A has connected to a wireless network using WPS or when WPS Enable is selected and wireless or wireless security settings have been changed The current wireless...

Page 86: ...uled to turn on or off on certain days and at certain times To open this screen click Network Wireless LAN 2 4G 5G Scheduling tab Apply Click Apply to save your changes back to the EMG3425 Q10A Cancel...

Page 87: ...ific days to turn the Wireless LAN on or off If you select Everyday you can not select any specific days This field works in conjunction with the For the following times field For the following times...

Page 88: ...screens can help you configure a manage IP address and partition your physical network into logical networks 10 2 What You Can Do Use the IP screen to change the IP address for your EMG3425 Q10A Sect...

Page 89: ...mbedded Web Configurator help regarding what fields need to be configured 10 3 1 IP Pool Setup The EMG3425 Q10A is pre configured with a pool of 32 IP addresses starting from 192 168 1 33 to 192 168 1...

Page 90: ...ure 49 Network LAN IP Alias Table 31 Network LAN IP LABEL DESCRIPTION IP Address Type the IP address of your EMG3425 Q10A in dotted decimal notation IP Subnet Mask The subnet mask specifies the networ...

Page 91: ...IP Subnet Mask The subnet mask specifies the network number portion of an IP address Your EMG3425 Q10A will automatically calculate the subnet mask based on the IP address that you assign Unless you...

Page 92: ...fixes and other configuration information to DHCP clients Static IP Address Select this option to manually enter an IPv6 address if you want to use a static IP address LAN IPv6 Address Enter the LAN I...

Page 93: ...forward multicast packets to a port that joins the multicast group and broadcast unknown multicast packets from the WAN to all LAN ports Select Blocking Mode to have the EMG3425 Q10A block all unknown...

Page 94: ...e 94 Use the Advanced screen to assign IP addresses on the LAN to specific individual computers based on their MAC Addresses Section 11 3 on page 95 Use the Client List screen to view the current DHCP...

Page 95: ...uration Protocol RFC 2131 and RFC 2132 allows individual clients computers to obtain TCP IP configuration at startup from a server Enable the DHCP server unless your ISP instructs you to do otherwise...

Page 96: ...a computer on your LAN IP Address Type the LAN IP address of a computer on your LAN DNS Server DNS Servers Assigned by DHCP Server The EMG3425 Q10A passes a DNS Domain Name System server IP address in...

Page 97: ...lays in the field to the right read only The EMG3425 Q10A tells the DHCP clients on the LAN that the EMG3425 Q10A itself is the DNS server When a computer on the LAN sends a DNS query to the EMG3425 Q...

Page 98: ...ntifies a device The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters for example 00 A0 C5 00 00 02 Reserve Select this if you want to reserve the IP address...

Page 99: ...in the example You assign the LAN IP addresses to the devices A to D connected to your EMG3425 Q10A The ISP assigns the WAN IP address The NAT network appears as a single host on the Internet All tra...

Page 100: ...ess ILA is the IP address of an inside host in a packet when the packet is still in the local network while an inside global address IGA is the IP address of the same inside host when the packet is on...

Page 101: ...source address on the LAN and the IGA Inside Global Address is the source address on the WAN For incoming packets the ILA is the destination address on the LAN and the IGA is the destination address...

Page 102: ...s a Web or FTP server from your location Your ISP may periodically check for servers and may suspend your account if it discovers any active services at your location If you are unsure refer to your I...

Page 103: ...rding summary table Otherwise select User define to manually enter the port number s and select the IP protocol Service Protocol Select the transport layer protocol supported by this virtual server Ch...

Page 104: ...e Name Select User define and type a name of up to 31 printable characters to identify this rule in the first field next to Service Name Otherwise select a predefined service in the second field next...

Page 105: ...the WAN uses when it sends out a particular service The EMG3425 Q10A forwards the traffic with this port or range of ports to the client computer on the LAN that requested the service Port Type a port...

Page 106: ...e than one service for example both FTP and web service it might be better to specify a range of port numbers In addition to the servers for specified services NAT supports a default server A service...

Page 107: ...r and protocol incoming port the EMG3425 Q10A forwards the traffic to the LAN IP address of the computer that sent the request After that computer s connection for that service closes another computer...

Page 108: ...member About Trigger Ports 1 Trigger events only happen on data that is coming from inside the EMG3425 Q10A and going to the outside 2 If an application needs a continuous data stream that port range...

Page 109: ...ervices let you use a fixed domain name with a dynamic IP address Users can always use the same domain name instead of a different dynamic IP address that changes each time to connect to the EMG3425 Q...

Page 110: ...this feature off Service Provider Select the name of your Dynamic DNS service provider Host Name Enter a host names in the field provided You can specify up to two host names in the field separated b...

Page 111: ...ic routes For example the next figure shows a computer A connected to the EMG3425 Q10A s LAN interface The EMG3425 Q10A routes most traffic from A to the Internet through the EMG3425 Q10A s default ga...

Page 112: ...This field displays a name to identify this rule Destination This parameter specifies the IP network address of the final destination Routing is always based on network number Gateway This is the IP...

Page 113: ...55 255 in the subnet mask field to force the network number to be identical to the host ID IP Subnet Mask Enter the IP subnet mask here Use Gateway IP Address Select to enable or disable this rule Gat...

Page 114: ...work Interface Group The following table describes the fields in this screen Table 46 Network Interface Group LABEL DESCRIPTION Add Click this to add a new interface grouping rule You must configure a...

Page 115: ...er a name to identify this group WAN Interfaces used in the group Select a WAN interface to be used in this group Select None to not add a WAN interface to this group Grouped LAN Interfaces Available...

Page 116: ...to the previous screen without saving any changes Apply Click this button to save your settings back to the EMG3425 Q10A Cancel Click Cancel to begin configuring this screen afresh Table 47 Interface...

Page 117: ...to the LAN The following figure illustrates the default firewall action User A can initiate an IM Instant Messaging session from the LAN to the WAN 1 Return traffic for this session is also allowed 2...

Page 118: ...tandard security solutions for enterprises About the EMG3425 Q10A Firewall The EMG3425 Q10A s firewall feature physically separates the LAN and the WAN and acts as a secure gateway for all data passin...

Page 119: ...ral screen Figure 71 Security Firewall General l The following table describes the labels in this screen 16 3 Services Screen If an outside user attempts to probe an unsupported port on your EMG3425 Q...

Page 120: ...Disable is selected Select LAN to reply to incoming LAN Ping requests Select WAN to reply to incoming WAN Ping requests Otherwise select LAN WAN to reply to all incoming LAN and WAN Ping requests Appl...

Page 121: ...are applied in turn Service Name This is a name that identifies or describes the firewall rule MAC address This is the MAC address of the computer for which the firewall rule applies Dest IP This is...

Page 122: ...sted computer This allows the trusted computer to have full access to all features that are configured to be blocked by content filtering Leave this field blank to have no trusted computers Restrict W...

Page 123: ...security administrative control and caching service When a proxy server is located on the WAN it is possible for LAN users to circumvent content filtering by pointing to this proxy server Apply Click...

Page 124: ...Overview This chapter shows you how to enable and create IPv6 firewall rules to block unwanted IPv6 traffic 18 2 IPv6 Firewall Screen Click Configuration Security IPv6 Firewall The Service screen appe...

Page 125: ...mputer Source_IP_Address Enter the IPv6 address of the computer that initializes traffic for the application or service The EMG3425 Q10A applies the firewall rule to traffic initiating from this compu...

Page 126: ...ewall EMG3425 Q10A User s Guide 126 Delete Click Delete to remove the firewall rule Cancel Click Cancel to restore your previously saved settings Table 52 Configuration Security IPv6 Firewall continue...

Page 127: ...ith the URL www zyxel com tw news pressroom php the domain name is www zyxel com tw The file path is the characters that come after the first slash in the URL For example with the URL www zyxel com tw...

Page 128: ...trol rule This shows the index number of the rule Status This indicates whether the rule is active or not A yellow bulb signifies that this rule is active A gray bulb signifies that this rule is not a...

Page 129: ...ol Add Edit new rules The following table describes the fields in this screen Table 54 Security Parental Control Add Edit new rules LABEL DESCRIPTION General Active Select the checkbox to activate thi...

Page 130: ...select Block the EMG3425 Q10A prohibits the users from using the services listed below If you select Allow the EMG3425 Q10A blocks all services except ones listed below Add new service Click this to...

Page 131: ...L Checking Full path URL checking has the EMG3425 Q10A check the characters that come before the last slash in the URL For example with the URL www zyxel com tw news pressroom php full path URL checki...

Page 132: ...3425 Q10A check all of the characters in the URL For example filename URL checking searches for keywords within the URL www zyxel com tw news pressroom php Use the ip urlfilter customize actionFlags 8...

Page 133: ...y than those with low priority if there is congestion allowing time sensitive applications to flow more smoothly Time sensitive applications include both those that require a low level of latency dela...

Page 134: ...ce based on the tag or marker Traffic Shaping Bursty traffic may cause network congestion Traffic shaping regulates packets to be transmitted with a pre configured data transmission rate using buffers...

Page 135: ...pstream Bandwidth Enter the amount of upstream bandwidth for the WAN interfaces that you want to allocate using QoS The recommendation is to set this speed to match the interfaces actual transmission...

Page 136: ...he WAN interfaces actual transmission speed This will cause the EMG3425 Q10A to not use some of the interfaces available bandwidth If you leave this field blank the EMG3425 Q10A automatically sets thi...

Page 137: ...ION Table 58 Management Bandwidth MGMT Queue Setup Add Edit new queue LABEL DESCRIPTION Active Select to enable or disable this queue Name Enter the descriptive name of this queue Note that are not al...

Page 138: ...cify the maximum transmission rate in Kbps allowed for traffic on this queue Back Click this to return to the previous screen Apply Click this to save your changes Cancel Click this to exit this scree...

Page 139: ...creen Figure 82 Management Bandwidth MGMT Class Setup Add Edit new class To Queue This is the name of the queue in which traffic of this classifier is put Modify Click the Edit icon to edit the classi...

Page 140: ...ress If you select 802 1Q you can configure an 802 1p priority level Source Address Select the check box and enter the source IP address in dotted decimal notation A blank source IP address means any...

Page 141: ...only when you select IP in the Ether Type field Select this option and enter the minimum and maximum packet length from 46 to 1500 in the fields provided DSCP This field is available only when you se...

Page 142: ...G3425 Q10A treat all matched traffic untagged and add a second VLAN ID If you select Unchange the EMG3425 Q10A keep the VLAN ID in the packets Step 4 Outgoing queue selection To Queue Index Select a q...

Page 143: ...field DSCP is backward compatible with the three precedence bits in the ToS octet so that non DiffServ compliant ToS enabled network device will not conflict with the DSCP mapping The DSCP value dete...

Page 144: ...et can hold up to b tokens Tokens are generated and added into the bucket at a constant rate The following shows how tokens work with packets A packet can be transmitted if the number of tokens in the...

Page 145: ...level is referred to as red medium is referred to as yellow and low is referred to as green The srTCM is based on the token bucket filter and has two token buckets CBS and EBS Tokens are generated an...

Page 146: ...espectively All packets are evaluated against the PIR If a packet exceeds the PIR it is marked red Otherwise it is evaluated against the CIR If it exceeds the CIR then it is marked yellow Finally if i...

Page 147: ...fy a secure client that can manage the EMG3425 Q10A Section 21 5 on page 151 Your EMG3425 Q10A can act as an SNMP agent which allows a manager station to manage and monitor the EMG3425 Q10A through th...

Page 148: ...A s LAN IP address when configuring from the LAN 21 3 2 System Timeout There is a default system management idle timeout of five minutes three hundred seconds The EMG3425 Q10A automatically logs you o...

Page 149: ...ALL to allow all computers to access the EMG3425 Q10A using the HTTPS service Otherwise select Disable ALL Or you can select Trust Domain to specify the IP address domain of the computer that can acc...

Page 150: ...t can access the EMG3425 Q10A Click Add to add the IP address domain to the trust domain Trust Domain This is available only when you select Trust Domain in the Secured Client IP Address field This di...

Page 151: ...ct Disable ALL Or you can select Trust Domain to specify the IP address domain of the computer that can access the EMG3425 Q10A Click Add to add the IP address domain to the trust domain Trust Domain...

Page 152: ...ce the EMG3425 Q10A An agent translates the local management information from the managed device into a form compatible with SNMP The manager is the console through which network administrators perfor...

Page 153: ...etrieve the next object variable from a table or list within an agent In SNMPv1 when a manager wants to retrieve all elements of a table from an agent it initiates a Get operation followed by a series...

Page 154: ...Secured Ip Select All to allow all computers to access the EMG3425 Q10A Otherwise check Selected and specify the IP address of the computer that can access the EMG3425 Q10A SNMP Enable Select this to...

Page 155: ...figure your EMG3425 Q10A to be managed by an ACS Table 66 Configuration Management Remote MGMT Wake On LAN LABEL DESCRIPTION Wake On LAN over WAN Settings Enable WOL over WAN Select this option to hav...

Page 156: ...the auto configuration server ACS Password Enter the TR 069 password for authentication with the auto configuration server Connection Request Port Enter the connection request port number When the ACS...

Page 157: ...to find the certificate you want to upload You cannot import a certificate with the same name as a certificate that is already in the EMG3425 Q10A Upload Click Upload to begin the upload process Appl...

Page 158: ...at device 22 2 1 NAT Traversal UPnP NAT traversal automates the process of allowing an application to operate through NAT UPnP network devices can automatically configure network addressing announce t...

Page 159: ...ave UPnP installed in Windows XP and UPnP activated on the EMG3425 Q10A Make sure the computer is connected to a LAN port of the EMG3425 Q10A Turn on your computer and the EMG3425 Q10A 22 4 1 1 Auto d...

Page 160: ...n the Internet Connection Properties window click Settings to see the port mappings there were automatically created Figure 91 Internet Connection Properties 4 You may edit or delete the port mappings...

Page 161: ...splays in the system tray Figure 94 System Tray Icon 6 Double click on the icon to display your current Internet connection status Figure 95 Internet Connection Status 22 4 2 Web Configurator Easy Acc...

Page 162: ...cription for each UPnP enabled device displays under Local Network 5 Right click on the icon for your EMG3425 Q10A and select Invoke The web configurator login screen displays Figure 97 Network Connec...

Page 163: ...Chapter 22 Universal Plug and Play UPnP EMG3425 Q10A User s Guide 163 Figure 98 Network Connections My Network Places Properties Example...

Page 164: ...l Media Adapters Xboxes or PS3s The media server and clients must have IP addresses in the same subnet The EMG3425 Q10A media server enables you to Publish all folders for everyone to play media files...

Page 165: ...ached USB device Section 23 5 on page 167 Use the SAMBA screen to enable file sharing via the EMG3425 Q10A using Windows Explorer or the workgroup name This screen also allow you to configure the work...

Page 166: ...across the Internet The EMG3425 Q10A uses Common Internet File System CIFS protocol for its file sharing functions CIFS compatible computers can access the USB file storage devices connected to the E...

Page 167: ...to set up file sharing via the EMG3425 Q10A using Windows Explorer or the workgroup name You can also configure the workgroup name and create file sharing user accounts Click Management USB Media Shar...

Page 168: ...ame as the workgroup name to which your computer belongs to Note The EMG3425 Q10A will not be able to join the workgroup if your local area network has restrictions set up that do not allow devices to...

Page 169: ...ers Only letters and numbers are allowed The password is case sensitive USB1 2 Select the USB port s of the EMG3425 Q10A The configured user can access the files on the USB device s connected to the s...

Page 170: ...r a user name that will be allowed to access the shared files You can enter up to 20 characters Only letters and numbers allowed Password Enter the password used to access the shared files You can ent...

Page 171: ...EMG3425 Q10A the default IP address of the EMG3425 Q10A in router mode is 192 168 1 1 and press ENTER A screen asking for password authentication appears Type the user name and password Bob and 1234...

Page 172: ...425 Q10A In this example we use the web browser to share files via FTP from the LAN The way or screen you log into the FTP server on the EMG3425 Q10A varies depending on your FTP client See your FTP c...

Page 173: ...ord authentication appears Enter the user name and password you configured in the USB Media Sharing FTP screen and click Log On 3 The screen changes and shows you the folder for the USB storage device...

Page 174: ...uplex settings Click Configuration Management Port Configuration Figure 104 Management Port Configuration The following table describes the labels on this screen Table 72 Management Port Configuration...

Page 175: ...automatically to obtain the duplex mode that both ends support If the peer port does not support auto negotiation or turns off this feature the EMG3425 Q10A determines the connection speed by detecti...

Page 176: ...10A Section 25 6 on page 180 Use the Backup Restore screen to view information related to factory defaults backup configuration and restoring configuration Section 25 8 on page 183 Use the Restart scr...

Page 177: ...unique name to identify the EMG3425 Q10A in an Ethernet network Domain Name Enter the domain name you want to give to the EMG3425 Q10A Administrator Inactivity Timer Type how many minutes a management...

Page 178: ...ify Click the Edit icon to open the Account Setup screen Account Setup screen allows to change the user account password Table 74 Maintenance Account continued LABEL DESCRIPTION Table 75 Maintenance A...

Page 179: ...Saving at the same time the new time and date you entered has priority and the Time Zone and Daylight Saving settings do not affect it New Time hh mm ss This field displays the last updated time from...

Page 180: ...e 2 in the o clock field Daylight Saving Time starts in the European Union on the last Sunday of March All of the time zones in the European Union start using Daylight Saving Time at the same moment 1...

Page 181: ...Backup configuration allows you to back up save the EMG3425 Q10A s current configuration to a file on your computer Once your EMG3425 Q10A is configured and functioning properly it is highly recommend...

Page 182: ...computer Restore Configuration File Path Click Choose File to browse to the location of the configuration file in your computer Upload Click Upload to begin the upload process Note Do not turn off th...

Page 183: ...re your EMG3425 Q10A as an router or access point You can choose between Router or Access Point Mode depending on your network topology and the features you require from your device The following desc...

Page 184: ...nce Sys OP Mode The following table describes the labels in the Sys OP Mode screen Table 79 Maintenance Sys OP Mode LABEL DESCRIPTION Configuration Mode Router Mode Select Router Mode if your device r...

Page 185: ...IP address Access Point Select Access Point Mode if your device bridges traffic between clients on the same network In Access Point Mode all Ethernet ports have the same IP address All ports on the r...

Page 186: ...Ping The following table describes the labels in the Sys OP Mode screen Table 80 Maintenance Sys OP Mode LABEL DESCRIPTION Type the IP address of a computer that you want to perform ping in order to t...

Page 187: ...e sure you are using the power adaptor or cord included with the EMG3425 Q10A 2 Make sure the power adaptor or cord is connected to the EMG3425 Q10A and plugged in to an appropriate power source Make...

Page 188: ...CP server This information is only available from the DHCP server which allocates IP addresses on your network Find this information directly from the DHCP server or contact your system administrator...

Page 189: ...1 5 on page 14 6 If the problem continues contact the network administrator or vendor or try one of the advanced suggestions Advanced Suggestions Try to access the EMG3425 Q10A using another service s...

Page 190: ...s from your device and follow the directions in the Quick Start Guide again 6 If the problem continues contact your ISP I cannot access the Internet anymore I had access to the Internet with the EMG34...

Page 191: ...ons If the EMG3425 Q10A restarts automatically wait for the EMG3425 Q10A to finish restarting and log in to the Web Configurator The password is 1234 If the EMG3425 Q10A does not restart automatically...

Page 192: ...after I switched to AP mode When you change from router mode to AP mode your computer must have an IP address in the range between 192 168 1 3 and 192 168 1 254 Refer to Appendix B on page 203 for in...

Page 193: ...ce that is connected to the EMG3425 Q10A 1 Disconnect the problematic USB device then reconnect it to the EMG3425 Q10A 2 Ensure that the USB device has power 3 Check your cable connections 4 Restart t...

Page 194: ...pop up blocking to log into your device Either disable pop up blocking enabled by default in Windows XP SP Service Pack 2 or allow pop up blocking and create an exception for your device s IP address...

Page 195: ...Privacy 3 Click Apply to save this setting Enable Pop up Blockers with Exceptions Alternatively if you only want to allow pop up windows from your device see the following steps 1 In Internet Explorer...

Page 196: ...de 196 Figure 120 Internet Options Privacy 3 Type the IP address of your device the web page that you do not want to have blocked with the prefix http For example http 192 168 167 1 4 Click Add to mov...

Page 197: ...lay properly in Internet Explorer check that JavaScript are allowed 1 In Internet Explorer click Tools Internet Options and then the Security tab Figure 122 Internet Options Security 2 Click the Custo...

Page 198: ...123 Security Settings Java Scripting Java Permissions 1 From Internet Explorer click Tools Internet Options and then the Security tab 2 Click the Custom Level button 3 Scroll down to Microsoft VM 4 U...

Page 199: ...5 Q10A User s Guide 199 Figure 124 Security Settings Java JAVA Sun 1 From Internet Explorer click Tools Internet Options and then the Advanced tab 2 Make sure that Use Java 2 for applet under Java Sun...

Page 200: ...ons may vary slightly The steps below apply to Mozilla Firefox 3 0 as well You can enable Java Javascript and pop ups in one screen Click Tools then click Options in the screen that appears Figure 126...

Page 201: ...slightly Allowing Pop Ups From Opera click Tools then Preferences In the General tab go to Choose how you prefer to handle pop ups and select Open all pop ups Figure 128 Opera Allowing Pop Ups Enablin...

Page 202: ...a Permissions EMG3425 Q10A User s Guide 202 Figure 129 Opera Enabling Java To customize JavaScript behavior in the Opera browser click JavaScript Options Figure 130 Opera JavaScript Options Select the...

Page 203: ...sions of UNIX LINUX include the software components you need to use TCP IP on your computer If you manually assign IP information instead of using a dynamic IP make sure that your network s computers...

Page 204: ...P Address EMG3425 Q10A User s Guide 204 2 In the Control Panel click the Network Connections icon 3 Right click Local Area Connection and then select Properties 4 On the General tab select Internet Pr...

Page 205: ...Appendix B Setting Up Your Computer s IP Address EMG3425 Q10A User s Guide 205 5 The Internet Protocol TCP IP Properties window opens...

Page 206: ...ator or ISP You may also have to enter a Preferred DNS server and an Alternate DNS server if that information was provided 7 Click OK to close the Internet Protocol TCP IP Properties window 8 Click OK...

Page 207: ...0A User s Guide 207 Windows Vista This section shows screens from Windows Vista Professional 1 Click Start Control Panel 2 In the Control Panel click the Network and Internet icon 3 Click the Network...

Page 208: ...uide 208 5 Right click Local Area Connection and then select Properties Note During this procedure click Continue whenever Windows displays a screen saying that it needs your permission to continue 6...

Page 209: ...Appendix B Setting Up Your Computer s IP Address EMG3425 Q10A User s Guide 209 7 The Internet Protocol Version 4 TCP IPv4 Properties window opens...

Page 210: ...ISP You may also have to enter a Preferred DNS server and an Alternate DNS server if that information was provided Click Advanced 9 Click OK to close the Internet Protocol TCP IP Properties window 10...

Page 211: ...dows 7 This section shows screens from Windows 7 Enterprise 1 Click Start Control Panel 2 In the Control Panel click View network status and tasks under the Network and Internet category 3 Click Chang...

Page 212: ...P Address EMG3425 Q10A User s Guide 212 Note During this procedure click Continue whenever Windows displays a screen saying that it needs your permission to continue 5 Select Internet Protocol Version...

Page 213: ...Appendix B Setting Up Your Computer s IP Address EMG3425 Q10A User s Guide 213 6 The Internet Protocol Version 4 TCP IPv4 Properties window opens...

Page 214: ...to you by your network administrator or ISP You may also have to enter a Preferred DNS server and an Alternate DNS server if that information was provided Click Advanced if you want to configure adva...

Page 215: ...s IP Address EMG3425 Q10A User s Guide 215 Mac OS X 10 3 and 10 4 The screens in this section are from Mac OS X 10 4 but can also apply to 10 3 1 Click Apple System Preferences 2 In the System Prefer...

Page 216: ...5 Q10A User s Guide 216 3 When the Network preferences pane opens select Built in Ethernet from the network connection type list and then click Configure 4 For dynamically assigned settings select Usi...

Page 217: ...Manually In the IP Address field type your IP address In the Subnet Mask field type your subnet mask In the Router field type the IP address of your device 6 Click Apply Now and close the window Verif...

Page 218: ...MG3425 Q10A User s Guide 218 Figure 131 Mac OS X 10 4 Network Utility Mac OS X 10 5 and 10 6 The screens in this section are from Mac OS X 10 5 but can also apply to 10 6 1 Click Apple System Preferen...

Page 219: ...mputer s IP Address EMG3425 Q10A User s Guide 219 3 When the Network preferences pane opens select Ethernet from the list of available connection types 4 From the Configure list select Using DHCP for...

Page 220: ...lly In the IP Address field enter your IP address In the Subnet Mask field enter your subnet mask In the Router field enter the IP address of your EMG3425 Q10A 6 Click Apply and close the window Verif...

Page 221: ...depending on your specific distribution release version and individual configuration The following screens use the default Ubuntu 8 installation Note Make sure you are logged in as the root administra...

Page 222: ...ess EMG3425 Q10A User s Guide 222 3 In the Authenticate window enter your admin account name and password then click the Authenticate button 4 In the Network Settings window select the connection that...

Page 223: ...the Configuration list select Static IP address if you have a static IP address Fill in the IP address Subnet mask and Gateway address fields 6 Click OK to save the changes and close the Properties d...

Page 224: ...the Close button to apply the changes Verifying Settings Check your TCP IP properties by clicking System Administration Network Tools and then selecting the appropriate Network device from the Devices...

Page 225: ...ent KDE using the openSUSE 10 3 Linux distribution The procedure screens and file locations may vary depending on your specific distribution release version and individual configuration The following...

Page 226: ...ter s IP Address EMG3425 Q10A User s Guide 226 2 When the Run as Root KDE su dialog opens enter the admin password and click OK 3 When the YaST Control Center window opens select Network Devices and t...

Page 227: ...EMG3425 Q10A User s Guide 227 4 When the Network Settings window opens click the Overview tab select the appropriate connection Name from the list and then click the Configure button 5 When the Netwo...

Page 228: ...amic IP address Select Statically assigned IP Address if you have a static IP address Fill in the IP address Subnet mask and Hostname fields 7 Click Next to save the changes and close the Network Card...

Page 229: ...dow Verifying Settings Click the KNetwork Manager icon on the Task bar to check your TCP IP properties From the Options sub menu select Show Connection Information Figure 135 openSUSE 10 3 KNetwork Ma...

Page 230: ...Appendix B Setting Up Your Computer s IP Address EMG3425 Q10A User s Guide 230 Figure 136 openSUSE Connection Status KNetwork Manager...

Page 231: ...ns in which this service is used Table 81 Commonly Used Services NAME PROTOCOL PORT S DESCRIPTION AH IPSEC_TUNNEL User Defined 51 The IPSEC AH Authentication Header tunneling protocol uses this servic...

Page 232: ...t sends out ICMP echo requests to test whether or not a remote host is reachable POP3 TCP 110 Post Office Protocol version 3 lets a client computer get e mail from a POP3 server through a temporary co...

Page 233: ...UDP 49 Login Host Protocol used for Terminal Access Controller Access Control System TELNET TCP 23 Telnet is the login and terminal emulation protocol common on the Internet and in UNIX environments...

Page 234: ...ice must accept any interference received including interference that may cause undesired operation Changes or modifications not expressly approved by the party responsible for compliance could void t...

Page 235: ...radiation exposure limits set forth for an uncontrolled environment This equipment should be installed and operated with a minimum distance of 20cm between the radiator and your body D claration d ex...

Page 236: ...uires a general authorization Please check http www sviluppoeconomico gov it for more details Questo prodotto conforme alla specifiche di Interfaccia Radio Nazionali e rispetta il Piano Nazionale di r...

Page 237: ...oduct where anyone can walk on the power adaptor or cord Do NOT use the device if the power adaptor or cord is damaged as it might cause electrocution If the power adaptor or cord is damaged remove it...

Page 238: ...o llegue el momento de desechar el producto la recogida por separado ste y o su bater a ayudar a salvar los recursos naturales y a proteger la salud humana y medioambiental Le symbole ci dessous signi...

Page 239: ...Appendix D Legal Information EMG3425 Q10A User s Guide 239 Environmental Product Declaration...

Page 240: ...ot apply if the product has been modified misused tampered with damaged by an act of God or subjected to abnormal working conditions Note Repair or replacement as provided under this warranty is the e...

Page 241: ...e have the following information ready when you contact an office Required Information Product model and serial number Warranty Information Date that you received your device Brief description of the...

Page 242: ...l com pk Philipines ZyXEL Philippines http www zyxel com ph Singapore ZyXEL Singapore Pte Ltd http www zyxel com sg Taiwan ZyXEL Communications Corporation http www zyxel com Thailand ZyXEL Thailand C...

Page 243: ...ications Czech s r o http www zyxel cz Denmark ZyXEL Communications A S http www zyxel dk Estonia ZyXEL Estonia http www zyxel com ee et Finland ZyXEL Communications http www zyxel fi France ZyXEL Fra...

Page 244: ...XEL Communications http www zyxel no Poland ZyXEL Communications Poland http www zyxel pl Romania ZyXEL Romania http www zyxel com ro ro Russia ZyXEL Russia http www zyxel ru Slovakia ZyXEL Communicat...

Page 245: ...Latin America Argentina ZyXEL Communication Corporation http www zyxel com ec es Ecuador ZyXEL Communication Corporation http www zyxel com ec es Middle East Egypt ZyXEL Communication Corporation http...

Page 246: ...Appendix E Customer Support EMG3425 Q10A User s Guide 246 Oceania Australia ZyXEL Communications Corporation http www zyxel com au en Africa South Africa Nology Pty Ltd http www zyxel co za...

Page 247: ...lso Dynamic DNS service providers 109 124 DHCP 52 94 DHCP server see also Dynamic Host Configuration Protocol DHCP server 89 94 Differentiated Services see DiffServ 143 DiffServ 143 marking rule 143 D...

Page 248: ...73 Guest WLAN 71 Guest WLAN Bandwidth 72 Guide Quick Start 2 I IGMP 59 see also Internet Group Multicast Protocol version IGMP version 59 Internet Group Multicast Protocol 59 IP Address 90 91 102 IP...

Page 249: ...er Ethernet 60 Pool Size 95 Port forwarding 102 106 default server 102 106 example 106 local server 102 port numbers services port speed 27 35 PPPoE 60 dial up connection product registration 240 Q Qo...

Page 250: ...versal Plug and Play 158 Application 158 Security issues 158 UPnP 158 USB media sharing 164 user authentication 70 local user database 70 RADIUS server 70 User Name 110 W Wake On LAN 154 WAN Wide Area...

Search results

Summary of Contents for EMG3425-Q10A

Reviews:

Related manuals for EMG3425-Q10A

Brands by name

Popular brands

ZyXEL Communications EMG3425-Q10A, User Manual

Search results

Summary of Contents for EMG3425-Q10A

Reviews:

Related manuals for EMG3425-Q10A

Brands by name

Popular brands