IMPORTANT!
READ CAREFULLY BEFORE USE.
KEEP THIS GUIDE FOR FUTURE REFERENCE.
This is a User’s Guide for a system managing a series of products. Not all products support all features.
Menushots and graphics in this book may differ slightly from what you see due to differences in release
versions or your computer operating system. Every effort has been made to ensure that the information
in this manual is accurate.
Related Documentation
•Quick Start Guide
The Quick Start Guide shows how to connect the PMG2006-T20A and get up and running right away.
•More Information
Go to support.zyxel.com to find other information on the PMG2006-T20A.
MAC Filter ............................................................................................................................................ 102
Parental Control ................................................................................................................................. 104
Traffic Status ....................................................................................................................................... 120
System .................................................................................................................................................. 128
User Account ...................................................................................................................................... 129
Time Settings ........................................................................................................................................ 137
12.1.1 What You Can Do in this Chapter ..................................................................................... 95
12.1.2 What You Need to Know ...................................................................................................96
12.2 The Firewall Screen ....................................................................................................................... 96
12.3 The Protocol Screen .................................................................................................................... 97
12.3.1 Add/Edit a Service ............................................................................................................. 98
12.4 The Access Control Screen ......................................................................................................... 99
12.4.1 Add/Edit an ACL Rule ....................................................................................................... 99
12.5 The DoS Screen ........................................................................................................................... 101
Chapter 13
MAC Filter .........................................................................................................................................102
17.1.1 What You Can Do in this Chapter ................................................................................... 117
17.1.2 What You Need To Know ................................................................................................. 117
17.2 The System Log Screen .............................................................................................................. 118
17.3 The Security Log Screen ............................................................................................................. 118
Chapter 18
Traffic Status .....................................................................................................................................120
The PMG2006-T20A is a HGU (Home Gateway Unit); a fiber router with routing features, such as DHCP
and NAT. The PMG2006-T20A combines a fiber optic (GPON) router with a built-in switch to provide you
local fiber-speed Internet access for bandwidth-hungry applications, such as video streaming and
gaming. The PMG2006-T20A supports OMCI (ONT Management Control Interface) to connect to the
ISP’s OLT (Optical Line Terminal)..
1.2 Managing the PMG2006-T20A
Use the PMG2006-T20A’s built-in Web Configurator to manage it. You can connect to it using a web
browser. For details on connecting to it, see the Section 2.1.1 on page 17.
CHAPTER 1
Introduction
1.3 Good Habits for Managing the PMG2006-T20A
Do the following things regularly to make the PMG2006-T20A more secure and to manage the
PMG2006-T20A more effectively.
• Change the password. Use a password that’s not easy to guess and that consists of different types of
characters, such as numbers and letters.
• Write down the password and put it in a safe place.
• Back up the configuration (and make sure you know how to restore it). Restoring an earlier working
configuration may be useful if the device becomes unstable or even crashes. If you forget your
password, you will have to reset the PMG2006-T20A to its factory default settings. If you backed up an
earlier configuration file, you would not have to totally re-configure the PMG2006-T20A. You could
simply restore your last configuration.
1.4 Applications for the PMG2006-T20A
Here are some example uses for which the PMG2006-T20A is well suited.
1.4.1 Internet Access
Your PMG2006-T20A provides shared Internet access by connecting a fiber optic line provided by the
ISP to the PON port. In addition, you can connect computers, IPTVs, gaming consoles, and other
Ethernet devices to the Ethernet ports for fiber-speed Internet access.
PMG2006-T20A User’s Guide
12
Figure 1 PMG2006-T20A Applications
1.5 Hardware
1.5.1 Front Panel
Chapter 1 Introduction
The following graphic displays the front panel of the PMG2006-T20A.
Figure 2 PMG2006-T20A Front Panel
1.5.2 LEDs (Lights)
The following graphic displays the labels of the LEDs.
PMG2006-T20A User’s Guide
13
Chapter 1 Introduction
Figure 3 LEDs (PMG2006-T20A)
None of the LEDs are on if the PMG2006-T20A is not receiving power.
Table 1 LED Descriptions
LEDCOLORSTATUSDESCRIPTION
GreenOnThe PMG2006-T20A is receiving power and ready for use.
BlinkingThe PMG2006-T20A is self-testing.
POWER
PON
INTERNET
LAN 1~4
RedOnThe PMG2006-T20A detected an error while self-testing, or there is a device
malfunction.
OffThe PMG2006-T20A is not receiving power and there is no device
malfunction.
GreenOnThe PMG2006-T20A has a PON line connection.
BlinkingThe PMG2006-T20A’s PON port is trying to build the connection.
OffThe PMG2006-T20A’s PON port is not connected. The optical transceiver
may have malfunctioned or the fiber cable may not be connected or may
be broken or damaged enough to break the PON connection.
GreenOnThe PMG2006-T20A has an IP connection but no traffic.
BlinkingThe PMG2006-T20A is sending or receiving IP traffic.
OffThe PMG2006-T20A attempted to make an IP connection but failed.
RedOnThe PMG2006-T20A attempted to get an IP address but failed.
GreenOnThe PMG2006-T20A has a 10/100M/1000M Ethernet connection with
another device (such as a computer) on the Local Area Network (LAN)
through this port.
BlinkingThe PMG2006-T20A is sending/receiving data to/from the LAN through this
port.
OffThe PMG2006-T20A does not have an Ethernet connection with the LAN
through this port.
Refer to Section 1.5.2 on page 13 for information on hardware connections.
1.5.3 Rear Panel
The following graphic displays the rear panel of the PMG2006-T20A.
Figure 4 PMG2006-T20A Rear Panel
PMG2006-T20A User’s Guide
14
The following table describes the items on the rear panel..
Table 2 Rear Panel Ports
LABELDESCRIPTION
PONConnect the fiber optic cable to the PON port for fiber-speed Internet access.
LAN1 ~ LAN4 Connect computers, IPTVs, gaming consoles, and other Ethernet devices to the Ethernet ports for
ResetPress the button in for more than 5 seconds (or until the Power LED starts to blink), then release it to
Power
Button
PowerConnect the power cable and press the power button to start the device.
fiber-speed Internet access.
return the Zyxel Device to the factory defaults (password is 1234, LAN IP address 192.168.1.1 etc.)
Press the power button after the power cable is connected to start the device.
1.5.4 The Reset Button
If you forget your password or cannot access the web configurator, you will need to use the RESET
button at the back of the device to reload the factory-default configuration file. This means that you will
lose all configurations that you had previously and the password will be reset to the default.
1.5.4.1 Using the Reset Button
Chapter 1 Introduction
1Make sure the POWER LED is on (not blinking).
2To set the device back to the factory default settings, press the RESET button for more than 5 seconds or
until the POWER LED begins to blink and then release it. When the POWER LED begins to blink, the defaults
have been restored and the device restarts.
1.6 Wall Mounting
You may need screw anchors if mounting on a concrete or brick wall.
Table 3 Wall Mounting Information
Distance between holes142 mm
M4 ScrewsTwo
Screw anchors (optional)Two
1Select a position free of obstructions on a wall strong enough to hold the weight of the device.
2Mark two holes on the wall at the appropriate distance apart for the screws.
Be careful to avoid damaging pipes or cables located inside the wall
when drilling holes for the screws.
3If using screw anchors, drill two holes for the screw anchors into the wall. Push the anchors into the full
depth of the holes, then insert the screws into the anchors. Do not insert the screws all the way in - leave
a small gap of about 0.5 cm.
If not using screw anchors, use a screwdriver to insert the screws into the wall. Do not insert the screws all
the way in - leave a gap of about 0.5 cm.
PMG2006-T20A User’s Guide
15
Chapter 1 Introduction
4Make sure the screws are fastened well enough to hold the weight of the PMG2006-T20A with the
connection cables.
5Align the holes on the back of the PMG2006-T20A with the screws on the wall. Hang the PMG2006-T20A
on the screws.
Figure 5 Wall Mounting Example
PMG2006-T20A User’s Guide
16
2.1 Overview
The web configurator is an HTML-based management interface that allows easy PMG2006-T20A setup
and management via Internet browser. Use Internet Explorer 8.0 and later versions or Mozilla Firefox 3
and later versions or Safari 2.0 and later versions. The recommended screen resolution is 1024 by 768
pixels.
In order to use the web configurator you need to allow:
• Web browser pop-up windows from your PMG2006-T20A. Web pop-up blocking is enabled by default
in Windows XP SP (Service Pack) 2.
• JavaScript (enabled by default).
• Java permissions (enabled by default).
CHAPTER 2
The Web Configurator
2.1.1 Accessing the Web Configurator
1Make sure your PMG2006-T20A hardware is properly connected (refer to the Quick Start Guide).
2Launch your web browser. If the PMG2006-T20A does not automatically re-direct you to the login
screen, go to http://192.168.1.1.
3A password screen displays. To access the administrative web configurator and manage the PMG2006-
T20A, type the default username admin and password 1234 in the password screen and click Login. If
you have changed the password, enter your password and click Login.
Figure 6 Password Screen
4The following screen displays if you have not yet changed your password. Enter a new password, retype
it to confirm and click Apply.
PMG2006-T20A User’s Guide
17
Chapter 2 The Web Configurator
Figure 7 Change Password Screen
5The Quick Start Wizard screen appears. You can configure basic Internet access, and wireless settings.
See Chapter 3 on page 23 for more information.
6After you finished or closed the Quick Start Wizard screen, the Network Map page appears.
Figure 8 Network Map
7Click Status to display the Status screen, where you can view the PMG2006-T20A’s interface and system
information.
PMG2006-T20A User’s Guide
18
Chapter 2 The Web Configurator
C
A
B
2.2 Web Configurator Layout
Figure 9 Screen Layout
As illustrated above, the main screen is divided into these parts:
• A - title bar
• B - main window
• C - navigation panel
2.2.1 Title Bar
The title bar provides some icons in the upper right corner.
The icons provide the following functions.
Table 4 Web Configurator Icons in the Title Bar
ICON DESCRIPTION
Language: Select the language you prefer.
Quick Start: Click this icon to open screens where you can configure the PMG2006-T20A’s time
zone Internet access, and wireless settings.
Logout: Click this icon to log out of the web configurator.
PMG2006-T20A User’s Guide
19
2.2.2 Navigation Panel
Use the menu items on the navigation panel to open screens to configure PMG2006-T20A features. The
following tables describe each menu item.
Table 5 Navigation Panel Summary
LINKTABFUNCTION
Connection StatusThis screen shows the network status of the PMG2006-T20A and
Network Setting
BroadbandBroadbandUse this screen to view and configure ISP parameters, WAN IP address
Home
Networking
RoutingStatic RouteUse this screen to view and set up static routes on the PMG2006-T20A.
NATPort ForwardingUse this screen to make your localservers visible to the outside world.
DNSDNS EntryUse this screen to view and configure DNS routes.
Interface
Grouping
Security
FirewallGeneralUse this screen to configure the security level of your firewall.
LAN SetupUse this screen to configure LAN TCP/IP settings, and other advanced
Static DHCP Use this screen to assign specific IP addresses to individual MAC
UPnPUse this screen to turn UPnP and UPnP NAT-T on or off.
Additional
Subnet
TFTP Server Name Configure a TFTP server name which is sent to clients using DHCP option
DNS RouteUse this screen to forward DNS queries for certain domain names through
Policy Route
RIPUse this screen to configure Routing Information Protocol to exchange
ApplicationsUse this screen to configure servers behind the PMG2006-T20A.
Port TriggeringUse this screen to change your PMG2006-T20A’s port triggering settings.
DMZUse this screen to configure a default server which receives packets from
ALGUse this screen to enable or disable SIP ALG.
Address Mapping Use this screen to change your PMG2006-T20A’s address mapping
SessionsUse this screen to configure the maximum number of NAT sessions each
Dynamic DNSUse this screen to allow a static hostname alias for a dynamic IP address.
Interface
Grouping
ProtocolUse this screen to add Internet services and configure firewall rules.
Access ControlUse this screen to enable specific traffic directions for network services.
DoSUse this screen to activate protection against Denial of Service (DoS)
Chapter 2 The Web Configurator
computers/devices connected to it.
assignment, and other advanced properties. You can also add new
WAN connections.
properties.
addresses.
Use this screen to configure IP alias and public static IP.
66.
a specific WAN interface to its DNS server(s).
Use this screen to configure policy routing on the PMG2006-T20A.
routing information with other routers.
ports that are not specified in the Port Forwarding screen.
settings.
client host is allowed to have through the PMG2006-T20A.
Use this screen to map a port to a PVC or bridge group.
attacks.
PMG2006-T20A User’s Guide
20
Chapter 2 The Web Configurator
Table 5 Navigation Panel Summary (continued)
LINKTABFUNCTION
MAC FilterMAC FilterUse this screen to block or allow traffic from devices of certain MAC
addresses to the PMG2006-T20A.
Parental
Control
Scheduler RuleScheduler RuleUse this screen to configure the days and times when a configured
CertificatesLocal Certificates Use this screen to view a summary list of certificates and manage
System Monitor
LogSystem LogUse this screen to view the status of events that occurred to the
Traffic StatusWANUse this screen to view the status of all network traffic going through the
ARP tableARP tableUse this screen to view the ARP table. It displays the IP and MAC address
Routing TableRouting TableUse this screen to view the routing table on the PMG2006-T20A.
Maintenance
SystemSystem
User AccountUser AccountUse this screen to change user password on the PMG2006-T20A.
Remote
Management
SNMPSNMPUse this screen to configure SNMP (Simple Network Management
TimeTimeUse this screen to change your PMG2006-T20A’s time and date.
Parental ControlUse this screen to block web sites with the specific URL.
restriction (such as parental control) is enforced.
certificates and certification requests.
Trusted CA
Security LogUse this screen to view all security related events. You can select level
LANUse this screen to view the status of all network traffic going through the
NATUse this screen to view NAT statistics for connected hosts.
MGMT ServicesUse this screen to enable specific traffic directions for network services.
Trust DomainUse this screen to view a list of public IP addresses which are allowed to
Use this screen to view and manage the list of the trusted CAs.
PMG2006-T20A. You can export or e-mail the logs.
and category of the security events in their proper drop-down list
window.
Levels include:
•Emergency
•Alert
• Critical
• Error
• Warning
•Notice
• Informational
•Debugging
Categories include:
• Account
• Attack
•Firewall
• MAC Filter
WAN port of the PMG2006-T20A.
LAN ports of the PMG2006-T20A.
of each DHCP connection.
Use this screen to set Device name and Domain name.
access the PMG2006-T20A through the services configured in the
Maintenance > Remote Management screen.
Protocol) settings.
PMG2006-T20A User’s Guide
21
Chapter 2 The Web Configurator
Table 5 Navigation Panel Summary (continued)
LINKTABFUNCTION
E-mail
Notification
Log SettingLog SettingUse this screen to change your PMG2006-T20A’s log settings.
Firmware
Upgrade
Backup/Restore Backup/RestoreUse this screen to backup and restore your PMG2006-T20A’s
RebootRebootUse this screen to reboot the PMG2006-T20A without turning the power
DiagnosticPing &
E-mail
Notification
Firmware
Upgrade
Traceroute &
Nslookup
Use this screen to configure up to two mail servers and sender addresses
on the PMG2006-T20A.
Use this screen to upload firmware to your PMG2006-T20A.
configuration (settings) or reset the factory default settings.
off.
Use this screen to identify problems with the DSL connection. You can
use Ping, TraceRoute, or Nslookup to help you identify problems.
PMG2006-T20A User’s Guide
22
3.1 Overview
Use the Quick Start screens to configure the PMG2006-T20A’s time zone, basic Internet access, and
wireless settings.
Note: See the technical reference chapters (starting on Chapter 4 on page 25) for
background information on the features in this chapter.
3.2 Quick Start Setup
1You can click the Quick Start icon in the top right corner of the web configurator to open the quick start
screens. Select the time zone of your location. Click Next.
Figure 10 Quick Start - Welcome
CHAPTER 3
Quick Start
2Enter your Internet connection information in this screen. The screen and fields to enter may vary
depending on your current connection type. Click Save.
PMG2006-T20A User’s Guide
23
Chapter 3 Quick Start
Figure 11 Quick Start - Internet Connection
3Your PMG2006-T20A saves your settings and attempts to connect to the Internet. Click Close to
complete the setup.
Figure 12 Quick Start - Result Summary
PMG2006-T20A User’s Guide
24
4.1 Overview
This chapter shows you how to use the PMG2006-T20A’s various features.
• Setting Up a GPON Connection, see page 25
• Configuring Static Route for Routing to Another Network, see page 28
• Access the PMG2006-T20A Using DDNS, see page 30
• Configuring the MAC Address Filter, see page 31
4.2 Setting Up a GPON Connection
CHAPTER 4
Tutorials
This tutorial shows you how to set up a GPON Internet connection using the Web Configurator.
If you connect to the Internet through a GPON connection, use the information from your Internet
Service Provider (ISP) to configure the PMG2006-T20A. Be sure to contact your service provider for any
information you need to configure the Broadband screens.
1Click Network Setting > Broadband to open the following screen. Click AddNew WAN Interface.
2In this example, the GPON connection has the following information.
General
NameMyGPONConnect
TypeGPON
Connection ModeRouting
EncapsulationPPPoE
IPv6/IPv4 ModeIPv4
Account Information
PPP User Name1234@GPON-Ex.com
PPP PasswordABCDEF!
PMG2006-T20A User’s Guide
25
Chapter 4 Tutorials
PPPoE Service NameMyGPON
Static IP Address192.168.1.32
OthersAuthentication Method: AUTO
PPPoE Passthrough: Disabled
NAT: Enabled
IGMP Multicast Proxy: Enabled
Apply as Default Gateway: Enabled
VLAN: Disabled
3Select Enable in the Active field. Enter the General and Account Information settings as provided
above.
Choose the Encapsulation specified by your DSL service provider. For this example, the service provider
requires a username and password to establish Internet connection. Therefore, select PPPoE as the WAN
encapsulation type.
Set the IPv6/IPv4 Mode to IPv4 Only.
4Enter the account information provided to you by your DSL service provider.
5Configure this rule as your default Internet connection by selecting the Apply as Default Gateway check
box. Then select DNS as Static and enter the DNS server addresses provided to you, such as 192.168.5.2
(DNS server1)/192.168.5.1 (DNS server2).
6Leave the rest of the fields to the default settings.
7Click Apply to save your settings.
PMG2006-T20A User’s Guide
26
Chapter 4 Tutorials
8You should see a summary of your new GPON connection setup in the Broadband screen as follows.
Try to connect to a website to see if you have correctly set up your Internet connection. Be sure to
contact your service provider for any information you need to configure the WAN screens.
PMG2006-T20A User’s Guide
27
Chapter 4 Tutorials
4.3 Configuring Static Route for Routing to Another
Network
In order to extend your Intranet and control traffic flowing directions, you may connect a router to the
PMG2006-T20A’s LAN. The router may be used to separate two department networks. This tutorial shows
how to configure a static routing rule for two network routings.
In the following figure, router R is connected to the PMG2006-T20A’s LAN. R connects to two networks,
N1 (192.168.1.x/24) and N2 (192.168.10.x/24). If you want to send traffic from computer A (in N1 network)
to computer B (in N2 network), the traffic is sent to the PMG2006-T20A’s WAN default gateway by
default. In this case, B will never receive the traffic.
You need to specify a static routing rule on the PMG2006-T20A to specify R as the router in charge of
forwarding traffic to N2. In this case, the PMG2006-T20A routes traffic from A to R and then R routes the
traffic to B.
PMG2006-T20A User’s Guide
28
Chapter 4 Tutorials
This tutorial uses the following example IP settings:
To configure a static route to route traffic from N1 to N2:
1Log into the PMG2006-T20A’s Web Configurator in advanced mode.
2Click Network Setting > Routing.
3Click Add new Static Route in the Static Route screen.
4Configure the Static Route Setup screen using the following settings:
4aSelect Enable in Active field. Enter the Route Name as R.
4bSet IP Type to IPv4.
4cType 192.168.10.0 and subnet mask 255.255.255.0 for the destination, N2.
4dSelect Enable in the Use Gateway IP Address field. Type 192.168.1.253 (R’s N1 address) in the
Gateway IP Address field.
4eSelect Default/GPON as the Use Interface.
PMG2006-T20A User’s Guide
29
Chapter 4 Tutorials
4aClick OK.
Now B should be able to receive traffic from A. You may need to additionally configure B’s firewall
settings to allow specific traffic to pass through.
4.4 Access the PMG2006-T20A Using DDNS
If you connect your PMG2006-T20A to the Internet and it uses a dynamic WAN IP address, it is
inconvenient for you to manage the device from the Internet. The PMG2006-T20A’s WAN IP address
changes dynamically. Dynamic DNS (DDNS) allows you to access the PMG2006-T20A using a domain
name.
To use this feature, you have to apply for DDNS service at www.dyndns.org.
This tutorial covers:
• Registering a DDNS Account on www.dyndns.org
• Configuring DDNS on Your PMG2006-T20A
• Testing the DDNS Setting
Note: If you have a private WAN IP address, then you cannot use DDNS.
4.4.1 Registering a DDNS Account on www.dyndns.org
1Open a browser and type http://www.dyndns.org.
2Apply for a user account. This tutorial uses UserName1 and 12345 as the username and password.
3Log into www.dyndns.org using your account.
4Add a new DDNS host name. This tutorial uses the following settings as an example.
• Hostname: zyxelrouter.dyndns.org
• Service Type: Host with IP address
• IP Address: Enter the WAN IP address that your PMG2006-T20A is currently using. You can find the IP
address on the PMG2006-T20A’s Web Configurator Status page.
Then you will need to configure the same account and host name on the PMG2006-T20A later.
PMG2006-T20A User’s Guide
30
Loading...
+ 151 hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.