IMPORTANT!
READ CAREFULLY BEFORE USE.
KEEP THIS GUIDE FOR FUTURE REFERENCE.
This is a User’s Guide for a system managing a series of products. Not all products support all features.
Menushots and graphics in this book may differ slightly from what you see due to differences in release
versions or your computer operating system. Every effort has been made to ensure that the information
in this manual is accurate.
Related Documentation
•Quick Start Guide
The Quick Start Guide shows how to connect the managed device.
•More Information
Go to support.zyxel.com to find other information on the VMG
USB Service .......................................................................................................................................... 191
MAC Filter ............................................................................................................................................ 203
Parental Control ................................................................................................................................. 205
Traffic Status ....................................................................................................................................... 222
System .................................................................................................................................................. 233
User Account ...................................................................................................................................... 234
Time Settings ........................................................................................................................................ 242
15.1.1 What You Can Do in this Chapter ................................................................................... 196
15.1.2 What You Need to Know ................................................................................................. 197
15.2 The Firewall Screen ..................................................................................................................... 197
15.3 The Protocol Screen .................................................................................................................. 198
15.3.1 Add/Edit a Service ........................................................................................................... 199
15.4 The Access Control Screen ....................................................................................................... 200
15.4.1 Add/Edit an ACL Rule ..................................................................................................... 200
15.5 The DoS Screen ........................................................................................................................... 202
Chapter 16
MAC Filter .........................................................................................................................................203
20.1.1 What You Can Do in this Chapter ................................................................................... 219
VMG3625-T20A User’s Guide
10
Table of Contents
20.1.2 What You Need To Know ................................................................................................. 219
20.2 The System Log Screen .............................................................................................................. 220
20.3 The Security Log Screen ............................................................................................................. 220
Chapter 21
Traffic Status .....................................................................................................................................222
The VMG is a wireless VDSL router. It has a DSL port as well as a Ethernet WAN port for Internet access.
The VMG works over the analog telephone system, POTS (Plain Old Telephone Service). The VMG has
one USB port for sharing files via a USB storage device or connecting a cellular dongle for a WAN
backup connection.
Apart from the features listed above, the VMG also supports:
• Packet Transfer Mode (PTM)
• Asynchronous Transfer Mode (ATM)
• ADSL, ADSL2 and ADSL2+
• IEEE 802.11 a/b/g/n/ac
CHAPTER 1
Introducing the VMG
Only use firmware for your VMG’s specific model. Refer to the label on
the bottom of your VMG.
Note: Cellular networks refer to 3G only at the time of writing.
Note: See the product page on Zyxel’s website for the list of compatible cellular USB dongles.
1.2 Ways to Manage the VMG
Use any of the following methods to manage the VMG.
• Web Configurator. This is recommended for everyday management of the VMG using a (supported)
web browser.
1.3 Good Habits for Managing the VMG
Do the following things regularly to make the VMG more secure and to manage the VMG more
effectively.
• Change the password. Use a password that’s not easy to guess and that consists of different types of
characters, such as numbers and letters.
• Write down the password and put it in a safe place.
VMG3625-T20A User’s Guide
15
Chapter 1 Introducing the VMG
• Back up the configuration (and make sure you know how to restore it). Restoring an earlier working
configuration may be useful if the device becomes unstable or even crashes. If you forget your
password, you will have to reset the VMG to its factory default settings. If you backed up an earlier
configuration file, you would not have to totally re-configure the VMG. You could simply restore your
last configuration.
1.4 Applications for the VMG
Here are some example uses for which the VMG is well suited.
1.4.1 Internet Access
Computers can connect to the VMG’s LAN ports (or wirelessly).
You can also configure IP filtering on the VMG for secure Internet access. When the IP filter is on, all
incoming traffic from the Internet to your network is blocked by default unless it is initiated from your
network. This means that probes from the outside to your network are not allowed, but you can safely
browse the Internet and download files.
1.4.1.1 DSL
Your VMG provides shared Internet access by connecting the DSL port to the DSL or MODEM jack on a
splitter or your telephone jack. You can have multiple WAN services over one ADSL or VDSL. The VMG
cannot work in ADSL and VDSL mode at the same time.
Note: The ADSL and VDSL lines share the same WAN (layer-2) interfaces that you configure in
the VMG. Refer to Section 6.2 on page 76 for the Network Setting > Broadband screen.
VMG3625-T20A User’s Guide
16
Chapter 1 Introducing the VMG
DSL
DSL
DSL
Figure 1 VMG’s Internet Access Application: DSL
1.4.1.2 Ethernet WAN
If you prefer not to use a DSL line and you have another broadband modem or router (such as ADSL)
available, you can connect the Ethernet WAN port to the broadband modem or router. This way, you
can access the Internet via an Ethernet connection and still use the QoS, Firewall and parental control
functions on the VMG. The VMG cannot have Ethernet WAN and DSL connections at the same time.
Note that an Ethernet WAN connection has priority.
Figure 2 VMG’s Internet Access Application: Ethernet WAN
VMG3625-T20A User’s Guide
17
1.4.2 VMG’s USB Support
DSL
The USB port of the VMG is used for cellular WAN backup, file-sharing and media server.
Cellular WAN (3G) Backup
Connect a supported cellular USB dongle with an active SIM card to the USB port. This adds a second
WAN interface and allows the VMG to wirelessly access the Internet via a cellular network. The cellular
WAN connection is the failover or a backup in case the DSL or Ethernet WAN connection fails.
To set up a cellular connection, click Network Setting > Broadband > Cellular Backup.
To update the supported cellular USB dongle list, download the latest WWAN package from the Zyxel
website and upload it to the VMG using the Maintenance > Firmware Upgrade screen.
Figure 3 VMG’s Internet Access Application: Cellular WAN
Chapter 1 Introducing the VMG
File Sharing
Use the built-in USB 2.0 port to share files on a USB memory stick or a USB hard drive (B). Use FTP to access
the files on the USB device.
Figure 4 USB File Sharing Application
VMG3625-T20A User’s Guide
18
Chapter 1 Introducing the VMG
DSL
Media Server
You can also use the VMG as a media server. This lets anyone on your network play video, music, and
photos from a USB device (B) connected to the VMG’s USB port (without having to copy them to
another computer).
Figure 5 USB Media Server Application
1.5 Wireless Access
The VMG is a wireless Access Point (AP) for wireless clients, such as notebook computers, iPads, smart
phones, etc. It allows them to connect to the Internet without having to rely on inconvenient Ethernet
cables.
You can configure your wireless network in either the built-in Web Configurator, or using the WPS button.
See Section 1.6.4 on page 22 for more information about how to set up a wireless network with WLAN
and WPS buttons.
Figure 6 Wireless Access Example
VMG3625-T20A User’s Guide
19
1.6 Hardware
1.6.1 Front Panel
The following graphic displays the front panel of the VMG.
Figure 7 VMG3625-T20A Front Panel
Chapter 1 Introducing the VMG
1.6.2 LEDs (Lights)
The following graphic displays the labels of the LEDs.
Figure 8 LEDs on the VMG
None of the LEDs are on if the VMG is not receiving power.
Table 1 LED Descriptions
LEDCOLORSTATUSDESCRIPTION
POWER
GreenOnThe VMG is receiving power and ready for use.
BlinkingThe VMG is self-testing.
RedOnThe VMG detected an error while self-testing, or there is a device
malfunction.
BlinkingThe VMG is upgrading firmware.
OffThe VMG is not receiving power.
VMG3625-T20A User’s Guide
20
Chapter 1 Introducing the VMG
Table 1 LED Descriptions (continued)
LEDCOLORSTATUSDESCRIPTION
GreenOnThe VDSL line is up.
DSL
OrangeOnThe ADSL line is up.
GreenOnThe VMG has an IP connection but no traffic.
INTERNET
RedOnThe VMG attempted to make an IP connection but failed. Possible causes
GreenOnThe VMG has a successful 10/100/1000 Mbps Ethernet connection on the
WAN
GreenOnThe VMG has a successful 10/100/1000 Mbps Ethernet connection with a
ETHERNET1~4
GreenOnThe wireless network is activated.
WLAN
OrangeBlinkingThe VMG is setting up a WPS connection with a 2.4 GHz or 5 GHz wireless
GreenOnThe VMG recognizes a USB connection through the USB slot.
USB
BlinkingThe VMG is initializing the VDSL line.
OffThe DSL line is down.
Slow
Blinking
Fast
Blinking
BlinkingThe VMG is sending or receiving IP traffic.
OffThere is no Internet connection or the gateway is in bridged mode.
BlinkingThe VMG is sending or receiving data to/from the WAN at 10/100/1000
OffThe VMG does not have an Ethernet connection with the WAN.
BlinkingThe VMG is sending or receiving data to/from the LAN at 10/100 Mbps.
OffThe VMG does not have an Ethernet connection with the LAN.
BlinkingThe VMG is communicating with wireless clients.
OffThe wireless network is not activated or down.
BlinkingThe VMG is sending/receiving data to/from the USB device connected to it.
OffThe VMG does not detect a USB connection through the USB slot.
The VMG is detecting carrier signals.
The VMG is initializing the ADSL line.
Your device has a WAN IP address (either static or assigned by a DHCP
server). PPP negotiation was successfully completed (if used) and the DSL
connection is up.
are no response from a DHCP server, no PPPoE response, PPPoE
authentication failed.
WAN.
Mbps.
device on the Local Area Network (LAN).
client.
1.6.3 Side Panel
The following graphics display the side panel of the VMG.
VMG3625-T20A User’s Guide
21
Chapter 1 Introducing the VMG
Figure 9 VMG3625-T20A Side Panel
The following table describes the items on the side panel..
Table 2 Side Panel Buttons
LABELDESCRIPTION
WLANPress the WLAN button for more than two seconds to enable the wireless function.
WPSPress the WPS button for more than five seconds to quickly set up a secure wireless connection
USBThe USB port is used for cellular WAN backup, file-sharing and media server.
between the device and a WPS-compatible client.
1.6.4 Using the WLAN and WPS Buttons
If the wireless network is turned off, press the WLAN button for more than two seconds. Once the WLAN
LEDs turn green, the wireless networks to 2.4GHz and 5GHz are active.
You can also use the WPS button to quickly set up a secure wireless connection between the VMG and
a WPS-compatible client by adding one device at a time.
To activate WPS:
1Make sure the POWER LED is on and not blinking.
2Press the WPS button for more than five seconds and release it.
3Press the WPS button on another WPS-enabled device within range of the VMG. The WLAN LEDs flashe
orange while the VMG sets up a WPS connection with the other wireless device.
4Once the connection is successfully made, the WLAN LEDs shine green. Note that it depends on your
client’s configuration to have a 2.4GHz or 5GHz wireless network.
5If the wireless network is not successfully established via the physical WPS button, please set up with no
WPS method. See Section 4.3.3 on page 44 for more information.
VMG3625-T20A User’s Guide
22
To turn off the wireless network, press the WLAN button for more than two seconds. The WLAN LED turns
off when the wireless network is off.
1.6.5 Rear Panel
The following graphic displays the rear panel of the VMG.
Figure 10 VMG3625-T20A Rear Panel
Chapter 1 Introducing the VMG
The following table describes the items on the rear panel..
Table 3 Rear Panel Ports
LABELDESCRIPTION
Power
Button
PowerConnect the power cable and press the power button to start the device.
ResetPress the button to return theVMG to the factory defaults.
LAN1 ~ LAN4 Connect computers or other Ethernet devices to Ethernet ports for Internet
WANConnect an Ethernet cable to the Ethernet WAN port for Internet access.
DSLConnect a RJ-11 cable to the DSL port for Internet access.
Press the power button after the power cable is connected to start the
device.
access.
1.6.6 The RESET Button
If you forget your password or cannot access the Web Configurator, you will need to use the RESET
button at the back of the device to reload the factory-default configuration file. This means that you will
lose all configurations that you had previously. The password will be reset to “1234”, and the LAN IP
address will be”192.168.1.1”.
1Make sure the POWER LED is on (not blinking).
VMG3625-T20A User’s Guide
23
Chapter 1 Introducing the VMG
2To set the device back to the factory default settings, press the RESET button for five seconds or until the
POWER LED begins to blink and then release it. When the POWER LED begins to blink, the defaults have
been restored and the device restarts.
VMG3625-T20A User’s Guide
24
2.1 Overview
The web configurator is an HTML-based management interface that allows easy VMG setup and
management via Internet browser. Use Internet Explorer 9.0 and later versions or Mozilla Firefox 43 and
later versions or Safari 4.0 and later versions. The recommended screen resolution is 1024 by 768 pixels.
In order to use the web configurator you need to allow:
CHAPTER 2
The Web Configurator
• Web browser pop-up windows from your
Windows XP SP (Service Pack) 2.
• JavaScript (enabled by default).
• Java permissions (enabled by default).
VMG. Web pop-up blocking is enabled by default in
2.1.1 Accessing the Web Configurator
1Make sure your VMG hardware is properly connected (refer to the Quick Start Guide).
2Launch your web browser. If the VMG does not automatically re-direct you to the login screen, go to
http://192.168.1.1.
3A password screen displays. To access the administrative web configurator and manage the VMG, type
the default username admin and password 1234 in the password screen and click Login. If you have
changed the password, enter your password and click Login.
Figure 11 Password Screen
4The following screen displays if you have not yet changed your password. Enter a new password, retype
it to confirm and click Apply.
VMG3625-T20A User’s Guide
25
Chapter 2 The Web Configurator
Figure 12 Change Password Screen
5The Quick Start Wizard screen appears. You can configure basic Internet access, and wireless settings.
See Chapter 3 on page 32 for more information.
6After you finished or closed the Quick Start Wizard screen, the Network Map page appears.
Figure 13 Network Map
7Click the right arrow icon to display the Status screen, where you can view the VMG’s interface and
system information.
VMG3625-T20A User’s Guide
26
Chapter 2 The Web Configurator
A
B
C
2.2 Web Configurator Layout
Figure 14 Screen Layout
As illustrated above, the main screen is divided into these parts:
• A - title bar
• B - main window
• C - navigation panel
2.2.1 Title Bar
The title bar provides some icons in the upper right corner.
The icons provide the following functions.
Table 4 Web Configurator Icons in the Title Bar
ICON DESCRIPTION
Language: Select the language you prefer.
Quick Start: Click this icon to open screens where you can configure the VMG’s time zone
Internet access, and wireless settings.
Logout: Click this icon to log out of the web configurator.
VMG3625-T20A User’s Guide
27
2.2.2 Main Window
The main window displays information and configuration fields. It is discussed in the rest of this
document.
After you click the right arrow icon on the Connection Status (Network Map) page, the Status screen is
displayed. See Chapter 5 on page 69 for more information about the Status screen.
2.2.3 Navigation Panel
Use the menu items on the navigation panel to open screens to configure VMG features. The following
tables describe each menu item.
Table 5 Navigation Panel Summary
LINKTABFUNCTION
Connection StatusThis screen shows the network status of the VMG and computers/devices
Network Setting
BroadbandBroadbandUse this screen to view and configure ISP parameters, WAN IP address
Cellular BackupUse this screen to configure cellular WAN connection.
AdvancedUse this screen to enable or disable PTM over ADSL, Annex M/Annex J,
WirelessGeneralUse this screen to configure the wireless LAN settings and WLAN
Guest/More APUse this screen to configure multiple BSSs on the VMG.
MAC
Authentication
WPSUse this screen to configure and view your WPS (Wi-Fi Protected Setup)
WMMUse this screen to enable or disable Wi-Fi MultiMedia (WMM).
OthersUse this screen to configure advanced wireless settings.
Channel StatusUse this screen to scan wireless LAN channel noises and view the results.
Home
Networking
LAN SetupUse this screen to configure LAN TCP/IP settings, and other advanced
Static DHCP Use this screen to assign specific IP addresses to individual MAC
UPnPUse this screen to turn UPnP and UPnP NAT-T on or off.
Additional
Subnet
STB Vendor IDUse this screen to configure the Vendor IDs of the connected Set Top Box
Wake on LANUse this screen to remotely turn on a device on the local network.
TFTP Server Name Configure a TFTP server name which is sent to clients using DHCP option
Chapter 2 The Web Configurator
connected to it.
assignment, and other advanced properties. You can also add new
WAN connections.
and DSL PhyR functions.
authentication/security settings.
Use this screen to block or allow wireless traffic from wireless devices of
certain SSIDs and MAC addresses to the VMG.
settings.
properties.
addresses.
Use this screen to configure IP alias and public static IP.
(STB) devices, which have the VMG automatically create static DHCP
entries for the STB devices when they request IP addresses.
66.
VMG3625-T20A User’s Guide
28
Chapter 2 The Web Configurator
Table 5 Navigation Panel Summary (continued)
LINKTABFUNCTION
RoutingStatic RouteUse this screen to view and set up static routes on the VMG.
DNS Route
Policy Route
RIPUse this screen to configure Routing Information Protocol to exchange
QoSGeneralUse this screen to enable QoS and traffic prioritizing. You can also
Queue SetupUse this screen to configure QoS queues.
Classification
Setup
Shaper SetupUse this screen to limit outgoing traffic rate on the selected interface.
Policer Setup
NATPort ForwardingUse this screen to make your localservers visible to the outside world.
ApplicationsUse this screen to configure servers behind the VMG.
Port TriggeringUse this screen to change your VMG’s port triggering settings.
DMZUse this screen to configure a default server which receives packets from
ALGUse this screen to enable or disable SIP ALG.
Address Mapping Use this screen to change your VMG’s address mapping settings.
SessionsUse this screen to configure the maximum number of NAT sessions each
DNSDNS EntryUse this screen to view and configure DNS routes.
Dynamic DNSUse this screen to allow a static hostname alias for a dynamic IP address.
Interface
Grouping
USB ServiceFile SharingUse this screen to enable file sharing via the VMG.
Security
FirewallGeneralUse this screen to configure the security level of your firewall.
MAC FilterMAC FilterUse this screen to block or allow traffic from devices of certain MAC
Parental
Control
Scheduler RuleScheduler RuleUse this screen to configure the days and times when a configured
CertificatesLocal Certificates Use this screen to view a summary list of certificates and manage
System Monitor
Interface
Grouping
Media ServerUse this screen to use the VMG as a media server.
ProtocolUse this screen to add Internet services and configure firewall rules.
Access ControlUse this screen to enable specific traffic directions for network services.
DoSUse this screen to activate protection against Denial of Service (DoS)
Parental ControlUse this screen to block web sites with the specific URL.
Trusted CA
Use this screen to forward DNS queries for certain domain names through
a specific WAN interface to its DNS server(s).
Use this screen to configure policy routing on the VMG.
routing information with other routers.
configure the QoS rules and actions.
Use this screen to define a classifier.
ports that are not specified in the Port Forwarding screen.
client host is allowed to have through the VMG.
Use this screen to map a port to a PVC or bridge group.
attacks.
addresses to the VMG.
restriction (such as parental control) is enforced.
certificates and certification requests.
Use this screen to view and manage the list of the trusted CAs.
VMG3625-T20A User’s Guide
29
Chapter 2 The Web Configurator
Table 5 Navigation Panel Summary (continued)
LINKTABFUNCTION
LogSystem LogUse this screen to view the status of events that occurred to the VMG.
You can export or e-mail the logs.
Security LogUse this screen to view all security related events. You can select level
and category of the security events in their proper drop-down list
window.
Levels include:
•Emergency
•Alert
• Critical
• Error
• Warning
•Notice
• Informational
•Debugging
Categories include:
• Account
• Attack
•Firewall
• MAC Filter
Traffic StatusWANUse this screen to view the status of all network traffic going through the
WAN port of the VMG.
LANUse this screen to view the status of all network traffic going through the
NATUse this screen to view NAT statistics for connected hosts.
ARP tableARP tableUse this screen to view the ARP table. It displays the IP and MAC address
Routing TableRouting TableUse this screen to view the routing table on the VMG.
xDSL StatisticsxDSL StatisticsUse this screen to view the VMG’s xDSL traffic statistics.
Cellular
Statistics
Maintenance
SystemSystem
User AccountUser AccountUse this screen to change user password on the VMG.
Remote
Management
SNMPSNMPUse this screen to configure SNMP (Simple Network Management
TimeTimeUse this screen to change your VMG’s time and date.
Email
Notification
Log SettingLog SettingUse this screen to change your VMG’s log settings.
Firmware
Upgrade
Backup Restore Backup/RestoreUse this screen to backup and restore your VMG’s configuration
Cellular StatisticsUse this screen to look at cellular Internet connection status.
MGMT ServicesUse this screen to enable specific traffic directions for network services.
Trust DomainUse this screen to configure a list of public IP addresses which are
Email Notification Use this screen to configure up to two mail servers and sender addresses
Firmware
Upgrade
LAN ports of the VMG.
of each DHCP connection.
Use this screen to set Device name and Domain name.
allowed to access the VMG.
Protocol) settings.
on the VMG.
Use this screen to upload firmware to your VMG.
(settings) or reset the factory default settings.
VMG3625-T20A User’s Guide
30
Loading...
+ 274 hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.