background image

VSG-1000 Vantage Service Gateway 

IP and MAC Address Pass Through 

10-1 

This chapter shows you how to configure IP and MAC address pass through.  

10.1 Configuring IP and MAC Address Pass Through 

You can set the VSG to allow the forwarding of packets from a specified LAN device, such as a file server or 
computer, without prompting for a user name and password. You can specify up to 40 IP addresses and 10 MAC 
addresses of LAN devices allowed to pass through the VSG. For example, in an airport VIP room, you can specify 
the IP or MAC addresses of computers that subscribers can use without logging in.  
From the 

Main Menu 

screen, click 

Configure

Pass Through IP & MAC

. A screen displays as shown. 

 

Figure 10-1 IP & MAC Address Pass Through  

The following table describes the labels in this screen.  

Table 10-1 IP & MAC Address Pass Through 

LABEL DESCRIPTION 

No. 

This read-only field displays the index number of the entry. 

IP Address 

Enter the IP address of the device (in dotted decimal notation) whose packets are allowed to pass through the 
VSG. For example, 10.59.1.10. 

MAC Address 

Enter the MAC address of the device (in 6 hexadecimal pairs, for example, 00-50-BA-8D-22-96) whose packets 
are allowed to pass through the VSG.  

Apply 

Click 

Apply 

to save the changes back to VSG and go back to the 

Utility Menu

.  

Clear 

Click 

Clear 

to start configuring this screen again.  

Home 

Click 

Home 

to go back to the 

Main Menu 

screen. The changes you made will not be saved if you have not 

clicked 

Apply

Chapter 10   

IP and MAC Address Pass Through 

Содержание ZyXEL Vantage VSG-1000

Страница 1: ...VSG 1000 Vantage Service Gateway User s Guide Version 1 06 August 2004...

Страница 2: ......

Страница 3: ...n of ZyXEL Communications Corporation Published by ZyXEL Communications Corporation All rights reserved Disclaimer ZyXEL does not assume any liability arising out of the application or use of any prod...

Страница 4: ...limits are designed to provide reasonable protection against harmful interference in a commercial environment This equipment generates uses and can radiate radio frequency energy and if not installed...

Страница 5: ...eplacement as provided under this warranty is the exclusive remedy of the purchaser This warranty is in lieu of all other warranties express or implied including any implied warranty of merchantabilit...

Страница 6: ...Miller St Anaheim CA 92806 2001 U S A support zyxel de 49 2405 6909 0 www zyxel de GERMANY sales zyxel de 49 2405 6909 99 ZyXEL Deutschland GmbH Adenauerstr 20 A2 D 52146 Wuerselen Germany 33 0 4 72...

Страница 7: ...1 Installation Options 2 1 2 1 1 Desktop Installation 2 1 2 1 2 Rack Mount Installation 2 1 2 2 Hardware Connections 2 2 2 2 1 Front Panel 2 2 2 2 2 Front Panel LEDs 2 2 2 2 3 Rear Panel 2 2 2 2 4 Tu...

Страница 8: ...t Page 5 9 5 4 Subscriber Management Screen 5 9 Chapter 6 Local Subscriber Management 6 1 6 1 Introduction 6 1 6 2 Subscriber Management without Billing 6 1 6 2 1 Editing Subscriber Account 6 1 6 2 2...

Страница 9: ...T Main Menu Summary 12 2 12 4 Navigating the SMT Interface 12 2 12 4 1 SMT Screen Breakdown 12 2 12 4 2 The Navigation Keys 12 3 Chapter 13 System Configuration Using the SMT 13 5 13 1 About SMT Syste...

Страница 10: ...ernet Access 15 2 15 5 TFTP File Transfer 15 3 15 6 Administrator Password and Username 15 3 Appendix A IP Address Assignment Conflicts A Appendix B Subscriber Login C Appendix C Cable Types and Cable...

Страница 11: ...igure 5 5 Subscriber Control Built in Authentication 5 4 Figure 5 6 Subscriber Control RADIUS 5 6 Figure 5 7 Subscriber Logout Window Version 1 5 8 Figure 5 8 Subscriber Logout Window Version 2 5 8 Fi...

Страница 12: ...Figure 12 3 SMT Main Menu 12 2 Figure 12 4 SMT Menu Breakdown 12 3 Figure 13 1 SMT System Configuration 13 5 Figure 13 2 SMT System Status 13 7 Figure 13 3 SMT Change Administrator Password 13 9 Figu...

Страница 13: ...Billing 6 2 Table 6 2 Subscribers List No Billing 6 3 Table 6 3 Add New Subscribers With Billing 6 5 Table 6 4 Add New Subscriber Account Modify 6 5 Table 6 5 Account Modify Account List 6 6 Table 7...

Страница 14: ...VSG 1000 Vantage Service Gateway xiv List of Tables Table 15 8 Troubleshooting TFTP File Transfer 15 3...

Страница 15: ...m 1 IP Address Conflicts Case A A Diagram 2 IP Address Conflicts Case B A Diagram 3 IP Address Conflicts Case C A Diagram 4 IP Address Conflicts Case D B Diagram 5 Subscriber Login Screen C Diagram 6...

Страница 16: ......

Страница 17: ...e g as shorthand for for instance and i e as shorthand for that is or in other words throughout this manual The notation indicates the sequence in which menus should be selected for example click Win...

Страница 18: ......

Страница 19: ...SG 1000 Vantage Service Gateway I Part I Getting Started This part introduces the VSG Vantage Service Gateway hardware installation connections and basic system configuration using the web configurato...

Страница 20: ......

Страница 21: ...s a surrogate DHCP server DHCP Relay where it relays IP address assignment from the actual real DHCP server to the DHCP clients RADIUS Remote Authentication Dial In User Service Client The VSG allows...

Страница 22: ...ding to your business needs The advanced settings allows you to include welcome messages company logo and basic formatting Local Console Management The VSG provides a console port for local management...

Страница 23: ...et access to subscribers Account billing and authentication can be done either using a remote RADIUS server or the built in billing function and local subscriber database Connect an access point AP to...

Страница 24: ......

Страница 25: ...t to each corner on the bottom of the VSG These rubber feet help protect the VSG from shock or vibration and ensure space between devices when stacking Do not block the ventilation holes Leave space b...

Страница 26: ...cable for system configuration The Console Port Local management of the VSG is done through the console port It requires a direct connection between the VSG and a computer via a console cable Refer t...

Страница 27: ...tion 2 3 Figure 2 3 Rear Panel 2 2 4 Turning on the VSG Connect one end of the supplied power cord to the power socket on the back of the VSG and the other end to an appropriate power source When the...

Страница 28: ......

Страница 29: ...ator Step 1 Make sure your VSG is properly connected refer to instructions in the chapter on hardware installtion Step 2 Launch your web browser and type the WAN IP address 192 168 1 1 is the default...

Страница 30: ...er to the Troubleshooting chapter if you forget the administrator username and or password The account manager account is used for subscriber account management only No system configuration is allowed...

Страница 31: ...to save the changes back to VSG and go back to the Utility Menu Clear Click Clear to start configuring this screen again Home Click Home to go back to the Main Menu screen The changes you made will n...

Страница 32: ......

Страница 33: ...VSG 1000 Vantage Service Gateway II Part II Web Configurator System Configuration This part covers system configuration and subscriber management using the web configurator...

Страница 34: ......

Страница 35: ...Dynamic Host Configuration Protocol allows the individual clients Ethernet device to obtain the TCP IP configuration at start up from a centralized DHCP server The VSG has built in DHCP server capabi...

Страница 36: ...lient machines along with the assigned IP address and subnet mask There are two ways that an ISP disseminates the DNS server addresses The first is for an ISP to tell a customer the DNS server address...

Страница 37: ...or more information on IP address translation refer to RFC 1631 The IP Network Address Translator NAT 4 7 3 How NAT Works Each packet has two addresses a source address and a destination address For o...

Страница 38: ...igure below shows an example where the two subscribers S1 and S2 tries to establish secure VPN connections to the same VPN server V1 at the same time For example the VSG is using a public IP address o...

Страница 39: ...destination is different while subscriber S3 maps to a different WAN IP address Figure 4 3 NAT Example One to One and Many to One The following table shows the address mapping Table 4 5 NAT Example On...

Страница 40: ...VSG 1000 Vantage Service Gateway 4 6 System Configuration Figure 4 4 System Configuration The following table describes the fields in this screen...

Страница 41: ...the static WAN IP address assigned to you by your ISP or network administrator Subnet Mask Enter the subnet mask depending on your network needs The default is 255 255 255 0 Refer to the Subnetting a...

Страница 42: ...primary syslog server to which the logs are sent Secondary Server IP Enter the IP address of the secondary syslog server to which the logs are sent Interval Time Enter the time interval in minutes to...

Страница 43: ...vious screen The changes you made will not be saved if you have not clicked Apply The following table describes the system logs you may select in the System Configuration screen Table 4 7 Syslog Descr...

Страница 44: ......

Страница 45: ...criber Control Enable Select Enable to activate subscriber authentication and configure the related fields as described in the following sections Disable Select Disable to allow subscribers Internet a...

Страница 46: ...sage agreement before they can access the Internet Display the Subscriber Control screen as shown Figure 5 2 Subscriber Control User Agreement The following table describes the labels in this screen T...

Страница 47: ...l guest launches a web browser Step 2 The VSG redirects the guest s web browser to a login screen at CAS Step 3 The guest enters the provided access information Once authentication is successful CAS i...

Страница 48: ...you have not clicked Apply 5 2 4 Built in Authentication You can use the local subscriber database on the VSG to set up subscriber information This is useful if you don t have a RADIUS server Billing...

Страница 49: ...counting method allows multiple re logins until the allocated time period or until the subscriber account is invalid The VSG accounts for the time the subscriber logs in for Internet access The Time t...

Страница 50: ...een Table 5 5 Subscriber Control RADIUS FIELD DESCRIPTION Management Type Select RADIUS to use the subscriber database on a remote RADIUS server Primary Server Server IP Enter the IP address of the pr...

Страница 51: ...Time to Finish to allow one time login Accounting Service Select Enable from the drop down list box to activate the accounting feature Otherwise select Disable to de activate the accounting feature A...

Страница 52: ...ion a message is sent to the RADIUS server to stop the accounting process and update the accounting information The following table summarizes the different logout windows and the configuration option...

Страница 53: ...manually log out by entering http 1 1 1 1 Logout in the web browser To display the Internet time usage information enter http 1 1 1 1 Time 5 3 User Agreement Page In cases where user authentication i...

Страница 54: ...e Management Type RADIUS Figure 5 11 Web Configurator Subscriber Management Version 2 Subscriber Control Enable Management Type Built in Authentication Billing Mechanism Enable Figure 5 12 Web Configu...

Страница 55: ...Subscriber Management and Add Subscribers The Add Subscribers screen varies depending on whether the billing mechanism is activated The Built in Authentication management type supports Accumulation a...

Страница 56: ...ave the changes back to VSG and go back to the Utility Menu Clear Click Clear to start configuring this screen again Home Click Home to go back to the Main Menu screen The changes you made will not be...

Страница 57: ...ser name and password pair The user name and password for each account must be separated with a comma Spaces between the comma and the password are allowed An example is shown in the following figure...

Страница 58: ...sed The VSG automatically disconnects the subscriber after the time units are used up For post pay billing the VSG keeps track of how long a subscriber accesses the Internet until the subscriber logs...

Страница 59: ...efer to Section 6 3 3 for more information Home Click Home to go back to the Main Menu screen The changes you made will not be saved if you have not clicked Apply Previous Click Previous to go back to...

Страница 60: ...Click Apply to save the changes back to VSG and go back to the Utility Menu Clear Click Clear to start configuring this screen again Home Click Home to go back to the Main Menu screen The changes you...

Страница 61: ...te a subscriber account click Delete in the selected account entry in the Account Modify screen This removes the account entry immediately from the list To terminate a subscriber account that is curre...

Страница 62: ......

Страница 63: ...Service Gateway III Part III Web Configurator Advanced Configuration This part covers setting the login screen port mapping IP and MAC address pass through wall garden and advertising links using the...

Страница 64: ......

Страница 65: ...tion Subscriber Management and Customize Login Screen There are three ways in which you can customize the login screen Standard Advanced and Frame 7 2 Standard Login Screen The standard login screen i...

Страница 66: ...he color specified for example enter 000000 for black Click View Color Grid to display a list of web friendly colors and corresponding hexadecimal values Article Enter a block of text up to 1024 chara...

Страница 67: ...changes you made will not be saved if you have not clicked Apply You can enter simple HTML tags such as b in the text box for formatting purposes The following figure shows an example of an advanced s...

Страница 68: ...ld for example http www zyxel com Down Frame Specify the color of the frame background For example enter 000000 for black Click View Color Grid to display a list of web friendly color and correspondin...

Страница 69: ...VSG 1000 Vantage Service Gateway Subscriber Login Screen 7 5 Figure 7 6 Frame Subscriber Login Screen Example Refer to the next chapter to configure walled garden and advertisement links...

Страница 70: ......

Страница 71: ...ndow or activate the walled garden feature for generating on line advertising revenues 8 2 The Portal Page and Advertisement Links You can set the VSG to direct a subscriber to a specified portal web...

Страница 72: ...w displays randomly one at a time URL Link 1 10 Enter the web site addresses in the fields provided Walled Garden Select Enable to activate this feature Refer to Section 8 3 for more information Selec...

Страница 73: ...FIELD DESCRIPTION Walled Garden Select Enable to activate this feature and set the field s below Select Disable to de activate this feature Link 1 3 In the Prompt field enter a descriptive name up to...

Страница 74: ......

Страница 75: ...NAT enabled device that makes your whole inside network appear as a single computer to the outside world 9 1 1 Port Mapping To make LAN devices behind the VSG visible to the outside world you configu...

Страница 76: ...enu Clear Click Clear to start configuring this screen again Home Click Home to go back to the Main Menu screen The changes you made will not be saved if you have not clicked Apply Previous Click Prev...

Страница 77: ...o access an inside server on the LAN enter the WAN IP address of your VSG and the virtual port number of the inside server separated by a colon In this example to access the FTP server enter http 172...

Страница 78: ......

Страница 79: ...P MAC A screen displays as shown Figure 10 1 IP MAC Address Pass Through The following table describes the labels in this screen Table 10 1 IP MAC Address Pass Through LABEL DESCRIPTION No This read o...

Страница 80: ...teway 10 2 IP and MAC Address Pass Through Table 10 1 IP MAC Address Pass Through LABEL DESCRIPTION Previous Click Previous to go back to the previous screen The changes you made will not be saved if...

Страница 81: ...tion name of the VSG for identification purposes Consol Port Speed This field displays the speed of the console port on the VSG Date This field displays the current date in yyyy mm dd format Time This...

Страница 82: ...P Address This field displays the IP address of the secondary DNS server Home Click Home to go back to the Main Menu screen The changes you made will not be saved if you have not clicked Apply Previou...

Страница 83: ...g to sort the entries if applicable Figure 11 3 Web Configurator Status Current User The following table describes the labels in this screen Table 11 3 Web Configurator Status Current User LABEL DESCR...

Страница 84: ......

Страница 85: ...e Gateway IV Part IV The SMT System Maintenance and Additional Information This part contains information on the SMT System Management Terminal configuration and firmware maintenance troubleshooting a...

Страница 86: ......

Страница 87: ...Establishing a Console Port Connection After the VSG is directly connected to a computer using the console port turn on the computer and run a terminal emulation program for example Hyper Terminal in...

Страница 88: ...current configuration of the VSG 3 Utilities Use this menu to perform firmware upgrade and change login password 4 Restart Use this menu to restart your VSG 5 Logout Use this menu to log out of the SM...

Страница 89: ...KEY DESCRIPTION ENTER To move to the next configuration field in the menu ESC Press ESC to discard any changes and return to the previous screen Firmware Upgrade TFTP Server IP Address 10 10 10 10 Dow...

Страница 90: ......

Страница 91: ...e same change to the terminal emulator software Auto Logout Timer Specify how many minutes between 0 and 60 the SMT session can be left idle before the session times out The default is 10 minutes Afte...

Страница 92: ...set the VSG to automatically obtain an IP address and other network information DNS information etc from a DHCP server on the LAN network Enter R Relay to set the VSG to forward network configuration...

Страница 93: ...2 SMT System Status The following table describes the fields in this screen Table 13 2 SMT System Status FIELD DESCRIPTION System Name This field displays the name of the VSG for identification purpos...

Страница 94: ...ress of the DHCP server Agent IP Address This field is visible when the DHCP Service field displays Relay This field displays the IP address of the DHCP relay agent Start IP Address This field is visi...

Страница 95: ...action and return to the main menu 13 6Reset the VSG to Factory Defaults If you forgot your login user name and password you have to reset the VSG back to factory defaults Resetting the VSG restores a...

Страница 96: ...ge Service Gateway 13 10 System Configuration Using the SMT Figure 13 5 SMT Reset to Factory Defaults Are you sure you want to reset the device back to the factory defaults Y N Enter the command key a...

Страница 97: ...fy any name or file extension for the firmware and the configuration files However it is recommended to use the bin file extension for the firmware file and rom for the configuration file for manageme...

Страница 98: ...omplete Check the firmware version in the login screen Figure 14 4 SMT Successful Firmware File Transfer 14 3 2 Firmware Upgrade Using the Web Configurator Follow the steps below to upload the firmwar...

Страница 99: ...re Upgrade Successful Step 7 After the VSG finishes restarting access the web configurator again Check the firmware version number in the login screen 14 4Configuration File Maintenance You can only u...

Страница 100: ...current configuration before restoring a previous back up configuration please do not attempt to restore unless you have a backup configuration file stored on disk Step 1 Run a TFTP server program on...

Страница 101: ...ed to an Ethernet device Table 15 2 Troubleshooting LAN LEDs STEPS CORRECTIVE ACTION 1 Make sure you are using the correct Ethernet cable Connect the LAN port to a hub switch using a crossover Etherne...

Страница 102: ...in the SMT 3 Make sure you entered the correct username and password The default username is admin and the default password is 1234 The username and password are case sensitive If you have forgotten y...

Страница 103: ...tings do not prevent any file transfer 15 6Administrator Password and Username If you have forgotten the administrator password and username you cannot access the VSG You must reload the firmware to t...

Страница 104: ...tings and enter n Otherwise enter y to change the settings again 1 Run Monitor 2 Restart system 3 Erase entire FLASH 4 SDRAM Testing Enter selection 3 Erasing flash 0 block 0 OK Erasing flash 0 block...

Страница 105: ...s any key to continue prompt press any key to display the SMT login screen Enter admin as the username and 1234 as the password to access the VSG TFTP download parameters IP address 10 59 1 1 TFTP ser...

Страница 106: ......

Страница 107: ...use a public WAN IP address Case B The VSG LAN IP address conflicts with the DHCP client IP address In the following figure the VSG is acting as a DHCP server The VSG assigns an IP address which is t...

Страница 108: ...situations where two or more subscribers are using the same private IP address This may happen when a subscriber is configured to use a static or fixed IP address that is the same as the IP address th...

Страница 109: ...uch as www zyxel com in a web browser The login screen displays prompting you to enter the user name and password Diagram 5 Subscriber Login Screen Enter a user name and password and click Enter Depen...

Страница 110: ...describes the Ethernet cable pin assignment for the WAN port Chart B WAN Port Cable Ping Assignments PIN NO RJ 45 SIGNAL ASSIGNMENT DESIGNATION 1 Output Transmit Data TD 2 Output Transmit Data TD 3 I...

Страница 111: ...in the figure ETHERNET DEVICE COMPUTER UPLINK PORT VANTAGE SERVICE GATEWAY 1 TD 1 RD 2 TD 2 RD 3 RD 3 TD 6 RD 6 TD Diagram 7 LAN Port Cable Pin Assignments Serial Console Port The following table desc...

Страница 112: ...manually assign IP information instead of using dynamic assignment make sure that your computers have IP addresses that place them in the same subnet as the VSG s LAN port for Internet access or WAN...

Страница 113: ...he list of network clients and then click OK e Restart your computer so the changes you made take effect Configuring 1 In the Network window Configuration tab select your network adapter s TCP IP entr...

Страница 114: ...IP address remove previously installed gateways If you have a gateway IP address type it in the New gateway field and click Add 5 Click OK to save and close the TCP IP Properties window 6 Click OK to...

Страница 115: ...indows 2000 NT XP 1 For Windows XP click start Control Panel In Windows 2000 NT click Start Settings Control Panel 2 For Windows XP click Network Connections For Windows 2000 NT click Network and Dial...

Страница 116: ...XP and click Properties 5 The Internet Protocol TCP IP Properties window opens the General tab in Windows XP If you have a dynamic IP address click Obtain an IP address automatically If you have a sta...

Страница 117: ...tric Click Add Repeat the previous three steps for each default gateway you want to add Click OK when finished 7 In the Internet Protocol TCP IP Properties window the General tab in Windows XP Click O...

Страница 118: ...igned settings select Using DHCP Server from the Configure list 4 For statically assigned settings do the following From the Configure box select Manually Type your IP address in the IP Address box Ty...

Страница 119: ...ilt in Ethernet from the Show list Click the TCP IP tab 3 For dynamically assigned settings select Using DHCP from the Configure list 4 For statically assigned settings do the following From the Confi...

Страница 120: ...are used for multicasting There is also a class E address It is reserved for future use Chart 5 Classes of IP Addresses IP ADDRESS OCTET 1 OCTET 2 OCTET 3 OCTET 4 Class A 0 Network number Host ID Host...

Страница 121: ...wed by a continuous sequence of zeros for a total number of 32 bits Since the mask is always a continuous number of ones beginning from the left followed by a continuous number of zeros for the remain...

Страница 122: ...8 Subnet Mask Binary 11111111 11111111 11111111 10000000 Subnet Address 192 168 1 128 Lowest Host ID 192 168 1 129 Broadcast Address 192 168 1 255 Highest Host ID 192 168 1 254 The remaining 7 bits de...

Страница 123: ...BIT VALUE IP Address 192 168 1 128 IP Address Binary 11000000 10101000 00000001 10000000 Subnet Mask Binary 11111111 11111111 11111111 11000000 Subnet Address 192 168 1 128 Lowest Host ID 192 168 1 12...

Страница 124: ...h Class A and Class B Networks For class A and class B addresses the subnet mask also determines which bits are part of the network number and which are part of the host ID A class B address has two h...

Страница 125: ...IP Subnetting S Chart 17 Class B Subnet Planning NO BORROWED HOST BITS SUBNET MASK NO SUBNETS NO HOSTS PER SUBNET 12 255 255 255 240 28 4096 14 13 255 255 255 248 29 8192 6 14 255 255 255 252 30 16384...

Страница 126: ...client AAA Web based authentication RADIUS AAA Secondary RADIUS server Global roaming support Built in authentication and accounting Proprietary CAS Central Authentication Service Security L2 isolati...

Страница 127: ...ecifications U PHYSICAL ENVIRONMENT Dimension 440 W x 116 L x 44 H mm Temperature 0 to 50C Humidity 10 to 95 non condensing Power 100 220 V AC 50 60 Hz Maximum power consumption 20W Certification FCC...

Страница 128: ...stem password 13 8 Changing System password 3 2 class A iv classes of IP addresses O configuration and firmware files filename convention 14 1 configuration file backup 14 3 restore 14 4 configuration...

Страница 129: ...P and MAC address pass through 10 1 IP subnetting O ipconfig L L LAN Local Area Network 4 1 LAN device 9 1 LAN device management 9 1 example 9 2 LAN port E LEDs 2 2 local subscriber database 1 1 5 4 l...

Страница 130: ...5 4 RADIUS 5 5 Subscriber Management screen 5 9 subscriber manual logout 5 9 super user account 5 2 Syntax Conventions xvii syslog 4 2 4 8 4 9 syslog format 4 2 system information 13 7 11 1 system Mai...

Страница 131: ...VSG 1000 Vantage Service Gateway Index Y type of system login accounts 3 2 winipcfg I www zyxel com v Z ZyXEL Limited Warranty v ZyXEL Web Page xvii ZyXEL website v...

Отзывы: