IMPORTANT!
READ CAREFULLY BEFORE USE.
KEEP THIS GUIDE FOR FUTURE REFERENCE.
This is a User’s Guide for a system managing a series of products. Not all products support all features.
Menushots and graphics in this book may differ slightly from what you see due to differences in release
versions or your computer operating system. Every effort has been made to ensure that the information
in this manual is accurate.
Related Documentation
•Quick Start Guide
The Quick Start Guide shows how to connect the managed device, such as the Nebula AP, gateway
DNS ....................................................................................................................................................... 143
VLAN Group ........................................................................................................................................ 147
MAC Filter ............................................................................................................................................ 160
Parental Control ................................................................................................................................. 162
Traffic Status ....................................................................................................................................... 178
Multicast Status .................................................................................................................................. 185
System .................................................................................................................................................. 187
User Account ...................................................................................................................................... 188
Time Settings ........................................................................................................................................ 196
14.1.1 What You Can Do in this Chapter ................................................................................... 153
14.1.2 What You Need to Know ................................................................................................. 154
14.2 The Firewall Screen ..................................................................................................................... 154
14.3 The Protocol Screen .................................................................................................................. 155
14.3.1 Add/Edit a Service ........................................................................................................... 156
14.4 The Access Control Screen ....................................................................................................... 157
14.4.1 Add/Edit an ACL Rule ..................................................................................................... 157
14.5 The DoS Screen ........................................................................................................................... 159
Chapter 15
MAC Filter .........................................................................................................................................160
19.1.1 What You Can Do in this Chapter ................................................................................... 175
19.1.2 What You Need To Know ................................................................................................. 175
19.2 The System Log Screen .............................................................................................................. 176
19.3 The Security Log Screen ............................................................................................................. 176
Chapter 20
Traffic Status .....................................................................................................................................178
The EMG is an Ethernet gateway providing triple-play services and optimized HD IPTV services at home
or office. This model offers a Gigabit Ethernet (GbE) WAN with interfaces of Ethernet and WAN ports. The
EMG offers 2.4G and 5G Wi-Fi networks that operate simultaneously, providing a simple and unified
network management.
Only use firmware for your EMG’s specific model.
1.2 Ways to Manage the EMG
Use any of the following methods to manage the EMG.
CHAPTER 1
• Web Configurator. This is recommended for everyday management of the EMG using a (supported)
web browser.
1.3 Good Habits for Managing the EMG
Do the following regularly to make the EMG more secure and to manage the EMG more effectively.
• Back up the configuration (and make sure you know how to restore it). Restoring an earlier working
configuration may be useful if the device becomes unstable or even crashes. If you backed up an
earlier configuration file, you would not have to totally re-configure the EMG. You could simply restore
your last configuration.
1.4 Applications for the EMG
Here are some example uses for which the EMG is well suited.
1.4.1 Internet Access
Computers can connect to the EMG’s LAN ports (or wirelessly).
You can also configure IP filtering on the EMG for secure Internet access. When the IP filter is on, all
incoming traffic from the Internet to your network is blocked by default unless it is initiated from your
network. This means that probes from the outside to your network are not allowed, but you can safely
browse the Internet and download files.
EMG3415-B10A User’s Guide
13
1.4.1.1 Ethernet WAN
If you have another broadband modem or router available, you can connect the WAN port to the
broadband modem or router. This way, you can access the Internet via an Ethernet connection and still
use the QoS, Firewall and parental control functions on the EMG.
Figure 1 EMG’s Internet Access Application: Ethernet WAN
1.4.2 Dual-Band
The EMG is a dual-band gateway and able to function both 2.4G and 5G networks at the same time.
You could use the 2.4 GHz band for regular Intern et surfing and downloading while using the 5 GHz
band for time sensitive traffic like high-definition video, music, and gaming.
Chapter 1 Introducing the EMG
Figure 2 Dual-Band Application
EMG3415-B10A User’s Guide
14
1.4.3 Triple Play
The ISP may provide “triple play” service to the EMG. This allows you to take advantage of such
features as broadband Internet access, and streaming video/audio media, all at the same time with
no noticeable loss in bandwidth.
Figure 3 Triple Play Example
Chapter 1 Introducing the EMG
1.5 LEDs (Lights)
The following graphic displays the labels of the LEDs.
EMG3415-B10A User’s Guide
15
Figure 4 LEDs on the EMG
Chapter 1 Introducing the EMG
None of the LEDs are on if the EMG is not receiving power.
Table 1 LED Descriptions
LEDCOLORSTATUSDESCRIPTION
GreenOnThe EMG is receiving power and ready for use.
Power
RedOnThe EMG detected an error while self-testing, or there is a device
GreenOnThe EMG has an IP connection but no traffic.
Internet
RedOnThe EMG attempted to make an IP connection but failed. Possible causes
GreenOnThe EMG has a successful 10/100/1000 Mbps Ethernet connection on the
WAN
BlinkingThe EMG is self-testing.
malfunction.
BlinkingThe EMG is upgrading its firmware.
OffThe EMG is not receiving power.
BlinkingThe EMG is sending or receiving IP traffic.
OffThere is no Internet connection or the gateway is in bridged mode.
are no response from a DHCP server, no PPPoE response, PPPoE
authentication failed.
WAN.
Blinking The EMG is sending or receiving data to/from the WAN at 10/100/1000
Mbps.
OffThere is no Ethernet connection on the WAN.
EMG3415-B10A User’s Guide
16
Chapter 1 Introducing the EMG
Table 1 LED Descriptions (continued)
LEDCOLORSTATUSDESCRIPTION
GreenOnThe EMG has a successful 1000 Mbps Ethernet connection with a device on
Ethernet 1~4
WiFi 2.4G
WiFi 5G
Blinking The EMG is sending or receiving data to/from the LAN at 1000 Mbps.
OffThe EMG does not have an Ethernet connection with the LAN.
GreenOnThe 2.4 GHz wireless network is activated.
BlinkingThe EMG is communicating with 2.4 GHz wireless clients.
AmberOnThe EMG is setting up a WPS connection with a 2.4 GHz wireless client via
BlinkingThe EMG is setting up a WPS connection with a 2.4 GHz wireless client via
OffThe 2.4 GHz wireless network is not activated.
GreenOnThe 5 GHz wireless network is activated.
BlinkingThe EMG is communicating with 5 GHz wireless clients.
AmberOnThe EMG is setting up a WPS connection with a 5 GHz wireless client via WPS
BlinkingThe EMG is setting up a WPS connection with a 5 GHz wireless client via WPS
OffThe 5 GHz wireless network is not activated.
AmberOnThe 2.4 Ghz or 5 GHz wireless network and WPS are enabled.
OffBoth 2.4 Ghz or 5 GHz wireless network and WPS are disabled.
the Local Area Network (LAN).
WPS method 3.
See Section 6.4 on page 70 to learn each method.
WPS method 1 or 2.
See Section 6.4 on page 70 to learn each method.
method 3.
See Section 6.4 on page 70 to learn each method.
method 1 or 2.
See Section 6.4 on page 70 to learn each method.
WPS
1.6 The RESET Button
You will need to use the RESET button at the back of the device to reload the factory-default
configuration file. This means that you will lose all configurations that you had previously.
1Make sure the POWER LED is on (not blinking).
2To set the device back to the factory default settings, press the RESET button for five seconds or until the
POWER LED begins to blink and then release it. When the POWER LED begins to blink, the defaults have
been restored and the device restarts.
1.7 Wireless Access
You can configure your wireless network in either the built-in Web Configurator, or using the WPS button.
EMG3415-B10A User’s Guide
17
Figure 5 Wireless Access Example
1.7.1 Using the WPS Button
Once the WiFi LED turns green, the wireless network is active. If the wireless network is turned off, see
Section 6.2 on page 65 for how to enable the wireless network on the EMG.
You can also use the WPS button to quickly set up a secure wireless connection between the EMG and
a WPS-compatible client by adding one device at a time.
Chapter 1 Introducing the EMG
To activate WPS:
1Make sure the POWER LED is on and not blinking.
2Press the WPS button for five seconds and release it.
3Press the WPS button on another WPS-enabled device within range of the EMG. The WiFi LED flashes
amber while the EMG sets up a WPS connection with the other wireless device.
4Once the connection is successfully made, the WPS LED shines amber.
The WPS LED turns off when the wireless network is off.
1.8 Wall Mounting
You may need screw anchors if mounting on a concrete or brick wall.
Table 2 Wall Mounting Information
Distance between holes90 mm
M4 ScrewsTwo
Screw anchors (optional)Two
5Select a position free of obstructions on a wall strong enough to hold the weight of the device.
6Mark two holes on the wall at the appropriate distance apart for the screws.
Be careful to avoid damaging pipes or cables located inside the wall
when drilling holes for the screws.
EMG3415-B10A User’s Guide
18
Chapter 1 Introducing the EMG
7If using screw anchors, drill two holes for the screw anchors into the wall. Push the anchors into the full
depth of the holes, then insert the screws into the anchors. Do not insert the screws all the way in - leave
a small gap of about 0.5 cm.
If not using screw anchors, use a screwdriver to insert the screws into the wall. Do not insert the screws all
the way in - leave a gap of about 0.5 cm.
8Make sure the screws are fastened well enough to hold the weight of the EMG with the connection
cables.
9Align the holes on the back of the EMG with the screws on the wall. Hang the EMG on the screws.
Figure 6 Wall Mounting Example
EMG3415-B10A User’s Guide
19
2.1 Overview
The web configurator is an HTML-based management interface that allows easy EMG setup and
management via Internet browser. Use Internet Explorer 8.0 and later versions or Mozilla Firefox 3 and
later versions or Safari 2.0 and later versions.* The recommended screen resolution is 1024 by 768 pixels.
In order to use the web configurator you need to allow:
CHAPTER 2
The Web Configurator
• Web browser pop-up windows from your
Windows XP SP (Service Pack) 2.
• JavaScript (enabled by default).
• Java permissions (enabled by default).
EMG. Web pop-up blocking is enabled by default in
2.1.1 Accessing the Web Configurator
1Make sure your EMG hardware is properly connected (refer to the Quick Start Guide).
2Launch your web browser. If the EMG does not automatically re-direct you to the login screen, go to
http://192.168.200.1.
3The Terms and Conditions screen displays. To access the administrative Web Configurator and manage
the EMG, click on the I Agree button as shown below.
Figure 7 The Terms and Conditions Screen
4The Network Map page appears.
EMG3415-B10A User’s Guide
20
Chapter 2 The Web Configurator
Figure 8 The Network Map Screen
5Click Status to display the Status screen, where you can view the EMG’s interface and system
information.
EMG3415-B10A User’s Guide
21
Chapter 2 The Web Configurator
A
B
C
2.2 Web Configurator Layout
Figure 9
As illustrated above, the main screen is divided into these parts:
• A - title bar
• B - main window
• C - navigation panel
2.2.1 Title Bar
The title bar provides some icons in the upper right corner.
The icons provide the following functions.
Table 3 Web Configurator Icons in the Title Bar
ICON DESCRIPTION
Language: Select the language you prefer.
Logout: Click this icon to log out of the web configurator.
EMG3415-B10A User’s Guide
22
2.2.2 Navigation Panel
Use the menu items on the navigation panel to open screens to configure EMG features. The following
tables describe each menu item.
Table 4 Navigation Panel Summary
LINKTABFUNCTION
Connection StatusThis screen shows the network status of the EMG and computers/devices
Network Setting
BroadbandBroadbandUse this screen to view and configure ISP parameters, WAN IP address
WirelessGeneralUse this screen to configure the wireless LAN settings and WLAN
MAC
Authentication
WPSUse this screen to configure and view your WPS (Wi-Fi Protected Setup)
WMMUse this screen to enable or disable Wi-Fi MultiMedia (WMM).
OthersUse this screen to configure advanced wireless settings.
Channel StatusUse this screen to scan wireless LAN channel noises and view the results.
Home
Networking
RoutingStatic RouteUse this screen to view and set up static routes on the EMG.
QoSGeneralUse this screen to enable QoS and traffic prioritizing. You can also
LAN SetupUse this screen to configure LAN TCP/IP settings, and other advanced
Static DHCP Use this screen to assign specific IP addresses to individual MAC
UPnPUse this screen to turn UPnP and UPnP NAT-T on or off.
Additional
Subnet
STB Vendor IDUse this screen to configure the Vendor IDs of the connected Set Top Box
Wake on LANUse this screen to remotely turn on a device on the local network.
TFTP Server Name Configure a TFTP server name which is sent to clients using DHCP option
DNS Route
Policy Route
RIPUse this screen to configure Routing Information Protocol to exchange
Queue SetupUse this screen to configure QoS queues.
Classification
Setup
Shaper SetupUse this screen to limit outgoing traffic rate on the selected interface.
Policer SetupUse this screen to configure QoS policers.
Chapter 2 The Web Configurator
connected to it.
assignment, and other advanced properties. You can also add new
WAN connections.
authentication/security settings.
Use this screen to block or allow wireless traffic from wireless devices of
certain SSIDs and MAC addresses to the EMG.
settings.
properties.
addresses.
Use this screen to configure IP alias and public static IP.
(STB) devices, which have the EMG automatically create static DHCP
entries for the STB devices when they request IP addresses.
66.
Use this screen to forward DNS queries for certain domain names through
a specific WAN interface to its DNS server(s).
Use this screen to configure policy routing on the EMG.
routing information with other routers.
configure the QoS rules and actions.
Use this screen to define a classifier.
EMG3415-B10A User’s Guide
23
Chapter 2 The Web Configurator
Table 4 Navigation Panel Summary (continued)
LINKTABFUNCTION
NATPort ForwardingUse this screen to make your localservers visible to the outside world.
Applications
Port TriggeringUse this screen to change your EMG’s port triggering settings.
DMZUse this screen to configure a default server which receives packets from
ALGUse this screen to enable or disable SIP ALG.
Address Mapping Use this screen to change your EMG’s address mapping settings.
SessionsUse this screen to configure the maximum number of NAT sessions each
DNSDNS EntryUse this screen to view and configure DNS routes.
Dynamic DNSUse this screen to allow a static hostname alias for a dynamic IP address.
Vlan GroupVlan GroupUse this screen to group and tag VLAN IDs to outgoing traffic from the
Interface
Grouping
Security
FirewallGeneralUse this screen to configure the security level of your firewall.
MAC FilterMAC FilterUse this screen to block or allow traffic from devices of certain MAC
Parental
Control
Scheduler RulesScheduler RulesUse this screen to configure the days and times when a configured
CertificatesLocal Certificates Use this screen to view a summary list of certificates and manage
System Monitor
Interface
Grouping
ProtocolUse this screen to add Internet services and configure firewall rules.
Access ControlUse this screen to enable specific traffic directions for network services.
DoSUse this screen to activate protection against Denial of Service (DoS)
Parental ControlUse this screen to block web sites with the specific URL.
Trusted CA
Use this screen to configure servers behind the EMG.
ports that are not specified in the Port Forwarding screen.
client host is allowed to have through the EMG.
specified interface.
Use this screen to map a port to a PVC or bridge group.
attacks.
addresses to the EMG.
restriction (such as parental control) is enforced.
certificates and certification requests.
Use this screen to view and manage the list of the trusted CAs.
EMG3415-B10A User’s Guide
24
Chapter 2 The Web Configurator
Table 4 Navigation Panel Summary (continued)
LINKTABFUNCTION
LogSystem LogUse this screen to view the status of events that occurred to the EMG.
You can export or e-mail the logs.
Security LogUse this screen to view all security related events. You can select level
and category of the security events in their proper drop-down list
window.
Levels include:
•Emergency
•Alert
•Critical
•Error
•Warning
•Notice
•Informational
•Debugging
Categories include:
•Account
•Attack
•Firewall
•MAC Filter
Traffic StatusWANUse this screen to view the status of all network traffic going through the
WAN port of the EMG.
LANUse this screen to view the status of all network traffic going through the
NATUse this screen to view NAT statistics for connected hosts.
ARP tableARP tableUse this screen to view the ARP table. It displays the IP and MAC address
Routing TableRouting TableUse this screen to view the routing table on the EMG.
Multicast StatusIGMP StatusUse this screen to view the status of all IGMP settings on the EMG.
MLD StatusUse this screen to view the status of all MLD settings on the EMG.
Maintenance
SystemSystem
User AccountUser AccountUse this screen to change user password on the EMG.
Remote
Management
SNMPSNMPUse this screen to configure SNMP (Simple Network Management
TimeTimeUse this screen to change your EMG’s time and date.
E-mail
Notification
Log SettingLog SettingUse this screen to change your EMG’s log settings.
Firmware
Upgrade
MGMT ServicesUse this screen to enable specific traffic directions for network services.
Trust DomainUse this screen to view a list of public IP addresses which are allowed to
E-mail
Notification
Firmware
Upgrade
LAN ports of the EMG.
of each DHCP connection.
Use this screen to set Device name and Domain name.
access the EMG through the services configured in the Maintenance >
Remote Management screen.
Protocol) settings.
Use this screen to configure up to two mail servers and sender addresses
on the EMG.
Use this screen to upload firmware to your EMG.
EMG3415-B10A User’s Guide
25
Chapter 2 The Web Configurator
Table 4 Navigation Panel Summary (continued)
LINKTABFUNCTION
Backup/Restore Backup/RestoreUse this screen to backup and restore your EMG’s configuration (settings)
or reset the factory default settings.
ROM-DUse this screen to save and/or clean the configuration to/from the ROM-
D file which can store customized default settings.
RebootRebootUse this screen to reboot the EMG without turning the power off.
DiagnosticPing&Traceroute
&Nslookup
Use this screen to identify problems with the Ethernet WAN connection.
You can use Ping, TraceRoute, or Nslookup to help you identify problems.
EMG3415-B10A User’s Guide
26
3.1 Overview
This chapter shows you how to use the EMG’s various features.
• Setting Up a New WAN Connection, see page 27
• Setting Up a Secure Wireless Network, see page 30
• Configuring Static Route for Routing to Another Network, see page 36
• Configuring QoS Queue and Class Setup, see page 38
• Access the EMG Using DDNS, see page 41
• Configuring the MAC Address Filter, see page 42
CHAPTER 3
Tutorials
3.2 Setting Up a New WAN Connection
This tutorial shows you how to set up a new WAN Internet connection using the Web Configurator.
If you have another broadband modem or router available, you can connect the WAN port to the
router and access the Internet via an Ethernet connection.
1Click Network Setting > Broadband to open the following screen. Click AddNew WAN Interface.
2In this example, the Ethernet WAN connection has the following information.
General
NameMyWANConnection
TypeEthernet
Connection ModeRouting
EncapsulationPPPoE
IPv6/IPv4 ModeIPv4
Account Information
EMG3415-B10A User’s Guide
27
Chapter 3 Tutorials
PPP User Name1234@WAN-Ex.com
PPP PasswordABCDEF!
PPPoE Service NameMyWAN
Static IP Address192.168.1.32
OthersAuthentication Method: AUTO
PPPoE Passthrough: Disabled
NAT: Enabled
IGMP Multicast Proxy: Enabled
Apply as Default Gateway: Enabled
VLAN: Enabled
3Select the Active check box. Enter the General and Account Information settings as provided above.
Set the Type to Ethernet.
Choose the Encapsulation specified by your service provider. For this example, the service provider
requires a username and password to establish Internet connection. Therefore, select PPPoE as the WAN
encapsulation type.
Set the IPv6/IPv4 Mode to IPv4 Only.
4Enter the account information provided to you by your service provider.
5Configure this rule as your default Internet connection by selecting the Apply as Default Gateway check
box. Then select DNS as Static and enter the DNS server addresses provided to you, such as 192.168.5.2
(DNS server1)/192.168.5.1 (DNS server2).
6Leave the rest of the fields to the default settings.
7Click Apply to save your settings.
EMG3415-B10A User’s Guide
28
Chapter 3 Tutorials
8You should see a summary of your new WAN connection setup in the Broadband screen as follows.
Try to connect to a website to see if you have correctly set up your Internet connection.
EMG3415-B10A User’s Guide
29
Chapter 3 Tutorials
3.3 Setting Up a Secure Wireless Network
Thomas wants to set up a wireless network so that he can use his notebook to access the Internet. In this
wireless network, the EMG serves as an access point (AP), and the notebook is the wireless client. The
wireless client can access the Internet through the AP.
Thomas has to configure the wireless network settings on the EMG. Then he can set up a wireless network
using WPS (Section 3.3.2 on page 32) or manual configuration (Section 3.3.3 on page 35).
3.3.1 Configuring the Wireless Network Settings
This example uses the following parameters to set up a wireless network.