IMPORTANT!
READ CAREFULLY BEFORE USE.
KEEP THIS GUIDE FOR FUTURE REFERENCE.
Screenshots and graphics in this book may differ slightly from your product due to differences in
your product firmware or your computer operating system. Every effort has been made to ensure
that the information in this manual is accurate.
Related Documentation
•Quick Start Guide
The Quick Start Guide shows how to connect the VMG and get up and running right away.
•More Information
Go to support.zyxel.com to find other information on the
DNS Setup ............................................................................................................................................ 173
VLAN Group ..........................................................................................................................................180
Interface Group ..................................................................................................................................... 183
USB Service ..........................................................................................................................................188
MAC Filter .............................................................................................................................................200
Parental Control .................................................................................................................................... 202
Traffic Status ........................................................................................................................................218
Multicast Status ....................................................................................................................................225
System ..................................................................................................................................................232
User Account .........................................................................................................................................233
Time Settings ........................................................................................................................................240
17.1.1 What You Can Do in this Chapter ........................................................................................193
17.1.2 What You Need to Know ......................................................................................................194
17.2 The Firewall Screen ......................................................................................................................194
17.3 The Protocol Screen ....................................................................................................................195
17.3.1 Add/Edit a Protocol .............................................................................................................196
17.4 The Access Control Screen ..........................................................................................................197
17.4.1 Add/Edit an ACL Rule ........................................................................................................197
17.5 The DoS Screen ............................................................................................................................199
Chapter 18
MAC Filter..........................................................................................................................................200
Part III: Appendices.......................................................................................265
Appendix A Customer Support ........................................................................................................266
Appendix B Wireless LANs..............................................................................................................272
Appendix C IPv6 ..............................................................................................................................285
Appendix D Services .......................................................................................................................293
Appendix E Legal Information..........................................................................................................297
Index ..................................................................................................................................................304
VMG3925-B10A User’s Guide
13
PART I
User’s Guide
14
1.1 Overview
The VMG is a wireless VDSL router and Gigabit Ethernet gateway. It has a DSL port and a Gigabit
Ethernet port for super-fast Internet access. The VMG supports both Packet Transfer Mode (PTM)
and Asynchronous Transfer Mode (ATM). It is backward compatible with ADSL, ADSL2 and ADSL2+
in case VDSL is not available.
Only use firmware for your VMG’s specific model. Refer to the label on
the bottom of your VMG.
The VMG works over the analog telephone system, POTS (Plain Old Telephone Service). The VMG
has two USB ports for sharing files via a USB storage device or connecting a 3G dongle for a WAN
backup connection.
CHAPTER 1
Introducing the VMG
1.2 Ways to Manage the VMG
Use any of the following methods to manage the VMG.
• Web Configurator. This is recommended for everyday management of the VMG using a
(supported) web browser.
• TR-069. This is an auto-configuration server used to remotely configure your device.
1.3 Good Habits for Managing the VMG
Do the following things regularly to make the VMG more secure and to manage the VMG more
effectively.
• Change the password. Use a password that’s not easy to guess and that consists of different
types of characters, such as numbers and letters.
• Write down the password and put it in a safe place.
• Back up the configuration (and make sure you know how to restore it). Restoring an earlier
working configuration may be useful if the device becomes unstable or even crashes. If you
forget your password, you will have to reset the VMG to its factory default settings. If you backed
up an earlier configuration file, you would not have to totally re-configure the VMG. You could
simply restore your last configuration.
VMG3925-B10A User’s Guide
15
Chapter 1 Introducing the VMG
ADSL / VDSL
WLAN
PPPoE
IPoE
Bridging
WAN
ADSL
IPoA
WAN
LAN
LAN
WLAN
A
A
PPPoA
IPoE
PPPoE
Bridging
1.4 Applications for the VMG
Here are some example uses for which the VMG is well suited.
1.4.1 Internet Access
Your VMG provides shared Internet access by connecting the DSL port to the DSL or MODEM jack
on a splitter or your telephone jack. You can have multiple WAN services over one ADSL or VDSL.
The VMG cannot work in ADSL and VDSL mode at the same time.
Note: The ADSL and VDSL lines share the same WAN (layer-2) interfaces that you
configure in the VMG. Refer to Section 6.2 on page 63 for the Network Setting > Broadband screen.
Computers can connect to the VMG’s LAN ports (or wirelessly).
Figure 1 VMG’s Internet Access Application
You can also configure IP filtering on the VMG for secure Internet access. When the IP filter is on, all
incoming traffic from the Internet to your network is blocked by default unless it is initiated from
your network. This means that probes from the outside to your network are not allowed, but you
can safely browse the Internet and download files.
1.4.2 VMG’s USB Support
The USB port of the VMG is used for file-sharing and media server.
VMG3925-B10A User’s Guide
16
Chapter 1 Introducing the VMG
B
A
B
A
File Sharing
Use the built-in USB 2.0 port to share files on a USB memory stick or a USB hard drive (B). You can
connect one USB hard drive to the VMG at a time. Use FTP to access the files on the USB device.
Figure 2 USB File Sharing Application
Media Server
You can also use the VMG as a media server. This lets anyone on your network play video, music,
and photos from a USB device (B) connected to the VMG’s USB port (without having to copy them
to another computer).
Figure 3 USB Media Server Application
1.5 LEDs (Lights)
The following graphic displays the labels of the LEDs.
VMG3925-B10A User’s Guide
17
Figure 4 LEDs on the VMG
Chapter 1 Introducing the VMG
None of the LEDs are on if the VMG is not receiving power.
Table 1 LED Descriptions
LEDCOLORSTATUSDESCRIPTION
GreenOnThe VMG is receiving power and ready for use.
Power/
System
2.4G WLAN/
WPS
RedOnThe VMG detected an error while self-testing, or there is a device
GreenOnThe 2.4 GHz wireless network is activated.
OrangeBlinkingThe VMG is setting up a WPS connection with a 2.4 GHz wireless client.
BlinkingThe VMG is self-testing.
malfunction.
OffThe VMG is not receiving power.
BlinkingThe VMG is communicating with 2.4 GHz wireless clients.
OffThe 2.4 GHz wireless network is not activated.
VMG3925-B10A User’s Guide
18
Chapter 1 Introducing the VMG
Table 1 LED Descriptions (continued)
LEDCOLORSTATUSDESCRIPTION
GreenOnThe 5 GHz wireless network is activated.
5G WLAN/
WPS
LAN1~4
Internet
DSL
Ethernet
WAN
USB
OrangeBlinkingThe VMG is setting up a WPS connection with a 5 GHz wireless client.
GreenOnThe VMG has a successful 1000 Mbps Ethernet connection with a device
GreenOnThe VMG has an IP connection but no traffic.
RedOnThe VMG attempted to make an IP connection but failed. Possible
GreenOnThe ADSL line is up.
OrangeOnThe VDSL line is up.
GreenOnThe VMG has a successful 1000 Mbps Ethernet connection on the WAN.
GreenOnThe VMG recognizes a USB connection through the USB slot.
BlinkingThe VMG is communicating with 5 GHz wireless clients.
OffThe 5 GHz wireless network is not activated.
on the Local Area Network (LAN).
Blinking The VMG is sending or receiving data to/from the LAN at 1000 Mbps.
OffThe VMG does not have an Ethernet connection with the LAN.
Your device has a WAN IP address (either static or assigned by a DHCP
server), PPP negotiation was successfully completed (if used) and the
DSL connection is up.
BlinkingThe VMG is sending or receiving IP traffic.
OffThere is no Internet connection or the gateway is in bridged mode.
causes are no response from a DHCP server, no PPPoE response, PPPoE
authentication failed.
BlinkingThe VMG is initializing the ADSL line.
BlinkingThe VMG is initializing the VDSL line.
OffThe DSL line is down.
Blinking The VMG is sending or receiving data to/from the WAN at 1000 Mbps.
OffThere is no Ethernet connection on the WAN.
BlinkingThe VMG is sending/receiving data to/from the USB device connected to
it.
OffThe VMG does not detect a USB connection through the USB slot.
1.6 The RESET Button
If you forget your password or cannot access the Web Configurator, you will need to use the RESET
button at the back of the device to reload the factory-default configuration file. This means that you
will lose all configurations that you had previously and the password will be reset to “1234”.
1Make sure the PWR/SYS LED is on (not blinking).
2To set the device back to the factory default settings, press the RESET button for ten seconds or
until the PWR/SYS LED begins to blink and then release it. When the PWR/SYS LED begins to
blink, the defaults have been restored and the device restarts.
VMG3925-B10A User’s Guide
19
1.7 Wireless Access
The VMG is a wireless Access Point (AP) for wireless clients, such as notebook computers or PDAs
and iPads. It allows them to connect to the Internet without having to rely on inconvenient Ethernet
cables.
You can configure your wireless network in either the built-in Web Configurator, or using the WPS
button.
Figure 5 Wireless Access Example
Chapter 1 Introducing the VMG
1.7.1 Using the Wi-Fi and WPS Buttons
If the wireless network is turned off, press the WPS button for one second. Once the 2.4 G WLAN/
WPS or 5G WLAN/WPS LED turns green, the wireless network is active.
You can also use the WPS On/Off button to quickly set up a secure wireless connection between
the VMG and a WPS-compatible client by adding one device at a time.
To activate WPS:
1Make sure the PWR/SYS LED is on and not blinking.
2Press the WPS button for two seconds and release it.
3Press the WPS button on another WPS-enabled device within range of the VMG. The 2.4G WLA N/
WPS or 5G WLAN/WPS LED flashes orange while the VMG sets up a WPS connection with the
other wireless device.
4Once the connection is successfully made, the 2.4G WLAN/WPS or 5G WLAN/WPS LED shines
green.
To turn off the wireless network, press the WPS button for one to five seconds. The 2.4G WLAN/WPS or 5G WLAN/WPS LED turns off when the wireless network is off.
VMG3925-B10A User’s Guide
20
2.1 Overview
The web configurator is an HTML-based management interface that allows easy VMG setup and
management via Internet browser. Use Internet Explorer 8.0 and later versions or Mozilla Firefox 3
and later versions or Safari 2.0 and later versions. The recommended screen resolution is 1024 by
768 pixels.
In order to use the web configurator you need to allow:
CHAPTER 2
The Web Configurator
• Web browser pop-up windows from your
Windows XP SP (Service Pack) 2.
• JavaScript (enabled by default).
• Java permissions (enabled by default).
2.1.1 Accessing the Web Configurator
1Make sure your VMG hardware is properly connected (refer to the Quick Start Guide).
2Launch your web browser. If the VMG does not automatically re-direct you to the login screen, go to
http://192.168.1.1.
3A password screen displays. To access the administrative web configurator and manage the VMG,
type the default username admin and password 1234 in the password screen and click Login. If
advanced account security is enabled (see Section 30.2 on page 233) the number of dots that
appears when you type the password changes randomly to prevent anyone watching the password
field from knowing the length of your password. If you have changed the password, enter your
password and click Login.
Figure 6 Password Screen
VMG. Web pop-up blocking is enabled by default in
4The Quick Start Wizard screen appears. You can configure basic Internet access, and wireless
settings. See Chapter 3 on page 29 for more information.
VMG3925-B10A User’s Guide
21
Chapter 2 The Web Configurator
5After you finished or closed the Quick Start Wizard screen, the Network Map page appears.
Figure 7 Network Map
6Click Status to display the Status screen, where you can view the VMG’s interface and system
information.
VMG3925-B10A User’s Guide
22
Chapter 2 The Web Configurator
C
A
B
2.2 Web Configurator Layout
Figure 8 Screen Layout
As illustrated above, the main screen is divided into these parts:
• A - title bar
• B - main window
• C - navigation panel
2.2.1 Title Bar
The title bar provides some icons in the upper right corner.
The icons provide the following functions.
Table 2 Web Configurator Icons in the Title Bar
ICON DESCRIPTION
Language: Select the language you prefer.
VMG3925-B10A User’s Guide
23
Table 2 Web Configurator Icons in the Title Bar
ICON DESCRIPTION
2.2.2 Main Window
The main window displays information and configuration fields. It is discussed in the rest of this
document.
After you click Status on the Connection Status (Network Map) page, the Status screen is
displayed. See Chapter 5 on page 56 for more information about the Status screen.
If you click Virtual Device on the Status screen, a visual graphic appears, showing the connection
status of the VMG’s ports. The connected ports are in color and disconnected ports are gray.
Figure 9 Virtual Device
Chapter 2 The Web Configurator
Quick Start: Click this icon to open screens where you can configure the VMG’s time zone
Internet access, and wireless settings.
Logout: Click this icon to log out of the web configurator.
VMG3925-B10A User’s Guide
24
2.2.3 Navigation Panel
Use the menu items on the navigation panel to open screens to configure VMG features. The
following tables describe each menu item.
Table 3 Navigation Panel Summary
LINKTABFUNCTION
Connection StatusThis screen shows the network status of the VMG and computers/
Network Setting
BroadbandBroadbandUse this screen to view and configure ISP parameters, WAN IP
3G BackupUse this screen to configure 3G WAN connection.
AdvancedUse this screen to enable or disable PTM over ADSL, Annex M/Annex
802.1xUse this screen to view and configure the IEEE 802.1x settings on the
WirelessGeneralUse this screen to configure the wireless LAN settings and WLAN
Guest/More APUse this screen to configure multiple BSSs on the VMG.
MAC
Authentication
WPSUse this screen to configure and view your WPS (Wi-Fi Protected
WMMUse this screen to enable or disable Wi-Fi MultiMedia (WMM).
WDSUse this screen to set up Wireless Distribution System (WDS) links to
OthersUse this screen to configure advanced wireless settings.
Channel StatusUse this screen to scan wireless LAN channel noises and view the
Home
Networking
RoutingStatic RouteUse this screen to view and set up static routes on the VMG.
LAN SetupUse this screen to configure LAN TCP/IP settings, and other advanced
Static DHCP Use this screen to assign specific IP addresses to individual MAC
UPnPUse this screen to turn UPnP and UPnP NAT-T on or off.
Additional
Subnet
STB Vendor IDUse this screen to configure the Vendor IDs of the connected Set Top
Wake on LANUse this screen to remotely turn on a device on the local network.
TFTP Server
Name
DNS RouteUse this screen to forward DNS queries for certain domain names
Policy Route
RIPUse this screen to configure Routing Information Protocol to
Chapter 2 The Web Configurator
devices connected to it.
address assignment, and other advanced properties. You can also add
new WAN connections.
J, and DSL PhyR functions.
VMG.
authentication/security settings.
Use this screen to block or allow wireless traffic from wireless devices
of certain SSIDs and MAC addresses to the VMG.
Setup) settings.
other access points.
results.
properties.
addresses.
Use this screen to configure IP alias and public static IP.
Box (STB) devices, which have the VMG automatically create static
DHCP entries for the STB devices when they request IP addresses.
Use DHCP option 66 to identify a TFTP server name.
through a specific WAN interface to its DNS server(s).
Use this screen to configure policy routing on the VMG.
exchange routing information with other routers.
VMG3925-B10A User’s Guide
25
Chapter 2 The Web Configurator
Table 3 Navigation Panel Summary (continued)
LINKTABFUNCTION
QoSGeneralUse this screen to enable QoS and traffic prioritizing. You can also
configure the QoS rules and actions.
Queue SetupUse this screen to configure QoS queues.
Classification
Setup
Shaper SetupUse this screen to limit outgoing traffic rate on the selected interface.
Policer SetupUse this screen to configure QoS policers.
NATPort ForwardingUse this screen to make your localservers visible to the outside
Applications
Port TriggeringUse this screen to change your VMG’s port triggering settings.
DMZUse this screen to configure a default server which receives packets
ALGUse this screen to enable or disable SIP ALG.
Address Mapping Use this screen to change your VMG’s address mapping settings.
SessionsUse this screen to configure the maximum number of NAT sessions
DNSDNS EntryUse this screen to view and configure DNS routes.
Dynamic DNSUse this screen to allow a static hostname alias for a dynamic IP
IGMP/MLDIGMP/MLDUse this screen to configure multicast settings (IGMP for IPv4 and
Vlan GroupVlan GroupUse this screen to group and tag VLAN IDs to outgoing traffic from
Interface
Grouping
USB ServiceFile SharingUse this screen to enable file sharing via the VMG.
Security
FirewallGeneralUse this screen to configure the security level of your firewall.
MAC FilterMAC FilterUse this screen to block or allow traffic from devices of certain MAC
Parental
Control
Scheduler
Rules
CertificatesLocal Certificates Use this screen to view a summary list of certificates and manage
System Monitor
Interface
Grouping
Media ServerUse this screen to use the VMG as a media server.
ProtocolUse this screen to add Internet services and configure firewall rules.
Access ControlUse this screen to enable specific traffic directions for network
DoSUse this screen to activate protection against Denial of Service (DoS)
Parental ControlUse this screen to block web sites with the specific URL.
Scheduler RulesUse this screen to configure the days and times when a configured
Trusted CA
Use this screen to define a classifier.
world.
Use this screen to configure servers behind the VMG.
from ports that are not specified in the Port Forwarding screen.
each client host is allowed to have through the VMG.
address.
MLD for IPv6 multicast groups) on the WAN.
the specified interface.
Use this screen to map a port to a PVC or bridge group.
services.
attacks.
addresses to the VMG.
restriction (such as parental control) is enforced.
certificates and certification requests.
Use this screen to view and manage the list of the trusted CAs.
VMG3925-B10A User’s Guide
26
Chapter 2 The Web Configurator
Table 3 Navigation Panel Summary (continued)
LINKTABFUNCTION
LogSystem LogUse this screen to view the status of events that occurred to the VMG.
You can export or e-mail the logs.
Security LogUse this screen to view all security related events. You can select
level and category of the security events in their proper drop-down
list window.
Levels include:
•Emergency
•Alert
•Critical
•Error
•Warning
•Notice
•Informational
•Debugging
Categories include:
•Account
•Attack
•Firewall
•MAC Filter
Traffic StatusWANUse this screen to view the status of all network traffic going through
the WAN port of the VMG.
LANUse this screen to view the status of all network traffic going through
NATUse this screen to view NAT statistics for connected hosts.
ARP tableARP tableUse this screen to view the ARP table. It displays the IP and MAC
Routing TableRouting TableUse this screen to view the routing table on the VMG.
Multicast
Status
xDSL StatisticsxDSL StatisticsUse this screen to view the VMG’s xDSL traffic statistics.
3G Statistics3G StatisticsUse this screen to look at 3G Internet connection status.
Maintenance
SystemSystem
User AccountUser AccountUse this screen to change user password on the VMG.
Remote
Management
SNMPSNMPUse this screen to configure SNMP (Simple Network Management
TimeTimeUse this screen to change your VMG’s time and date.
E-mail
Notification
Log SettingLog SettingUse this screen to change your VMG’s log settings.
Firmware
Upgrade
IGMP StatusUse this screen to view the status of all IGMP settings on the VMG.
MLD StatusUse this screen to view the status of all MLD settings on the VMG.
MGMT ServicesUse this screen to enable specific traffic directions for network
Trust D o mainUse this screen to view and manage a list of public IP addresses
E-mail
Notification
Firmware
Upgrade
the LAN ports of the VMG.
address of each DHCP connection.
Use this screen to set Device name and Domain name.
services.
which are allowed to access the VMG through a configured service.
Protocol) settings.
Use this screen to configure up to two mail servers and sender
addresses on the VMG.
Use this screen to upload firmware to your VMG.
VMG3925-B10A User’s Guide
27
Chapter 2 The Web Configurator
Table 3 Navigation Panel Summary (continued)
LINKTABFUNCTION
Backup/
Restore
RebootRebootUse this screen to reboot the VMG without turning the power off.
DiagnosticPing&Traceroute
Backup/RestoreUse this screen to backup and restore your VMG’s configuration
(settings) or reset the factory default settings.
Use this screen to identify problems with the DSL connection. You can
&Nslookup
802.1agUse this screen to configure CFM (Connectivity Fault Management)
OAM PingUse this screen to view information to help you identify problems with
use Ping, TraceRoute, or Nslookup to help you identify problems.
MD (maintenance domain) and MA (maintenance association),
perform connectivity tests and view test reports.
the DSL connection.
VMG3925-B10A User’s Guide
28
3.1 Overview
Use the Quick Start screens to configure the VMG’s time zone, basic Internet access, and wireless
settings.
Note: See the technical reference chapters (starting on Chapter 4 on page 31) for
background information on the features in this chapter.
3.2 Quick Start Setup
1The Quick Start Wizard appears automatically after login. Or you can click the Quick Start icon in
the top right corner of the web configurator to open the quick start screens. Select the time zone of
your location. Click Next.
Figure 10 Quick Start - Welcome
CHAPTER 3
Quick Start
2Enter your Internet connection information in this screen. The screen and fields to enter may vary
depending on your current connection type. Click Next.
VMG3925-B10A User’s Guide
29
Chapter 3 Quick Start
Figure 11 Quick Start - Internet Connection
3Turn the wireless LAN on or off. If you keep it on, record the security settings so you can configure
your wireless clients to connect to the VMG. Click Save.
Figure 12 Quick Start - Wireless
4Your VMG saves your settings and attempts to connect to the Internet.
VMG3925-B10A User’s Guide
30
Loading...
+ 279 hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.