IMPORTANT!
READ CAREFULLY BEFORE USE.
KEEP THIS GUIDE FOR FUTURE REFERENCE.
This is a User’s Guide for a system managing a series of products. Not all products support all features.
Menushots and graphics in this book may differ slightly from what you see due to differences in release
versions or your computer operating system. Every effort has been made to ensure that the information
in this manual is accurate.
Related Documentation
•Quick Start Guide
The Quick Start Guide shows how to connect the managed device.
•More Information
Go to support.zyxel.com to find other information on the VMG.
Vlan Group .......................................................................................................................................... 183
USB Service .......................................................................................................................................... 190
MAC Filter ............................................................................................................................................ 202
Parental Control ................................................................................................................................. 204
Traffic Status ....................................................................................................................................... 248
VoIP Status .......................................................................................................................................... 251
Multicast Status .................................................................................................................................. 258
System .................................................................................................................................................. 265
User Account ...................................................................................................................................... 266
Time Settings ........................................................................................................................................ 273
17.1.1 What You Can Do in this Chapter ................................................................................... 195
17.1.2 What You Need to Know ................................................................................................. 196
17.2 The Firewall Screen ..................................................................................................................... 196
17.3 The Protocol Screen .................................................................................................................. 197
17.3.1 Add/Edit a Service ........................................................................................................... 198
17.4 The Access Control Screen ....................................................................................................... 198
17.4.1 Add/Edit an ACL Rule ..................................................................................................... 199
17.5 The DoS Screen ........................................................................................................................... 201
Chapter 18
MAC Filter .........................................................................................................................................202
23.1.1 What You Can Do in this Chapter ................................................................................... 245
23.1.2 What You Need To Know ................................................................................................. 245
23.2 The System Log Screen .............................................................................................................. 246
23.3 The Security Log Screen ............................................................................................................. 246
Chapter 24
Traffic Status .....................................................................................................................................248
The VMG is a wireless VDSL router and Gigabit Ethernet gateway. It has a DSL port and a Gigabit
Ethernet port for super-fast Internet access. The VMG supports both Packet Transfer Mode (PTM) and
Asynchronous Transfer Mode (ATM). It is backward compatible with ADSL, ADSL2 and ADSL2+ in case
VDSL is not available.
Only use firmware for your VMG’s specific model. Refer to the label on
the bottom of your VMG.
The VMG works over the analog or digital telephone system, POTS (Plain Old Telephone Service) for
VMG8924-B10D, and ISDN/T-ISDN for VMG8924-B30D. The VMG has a USB port for sharing files via a USB
storage device or connecting a cellular dongle for a WAN backup connection.
CHAPTER 1
Introducing the VMG
• The VMG8924-B10D works over the analog telephone system, POTS (Plain Old Telephone Service).
• The VMG8924-B30D works over the digital telephone system, ISDN (Integrated Services Digital
Network) or T-ISDN (UR-2).
Note: Cellular networks refer to 3G only at the time of writing.
1.2 Ways to Manage the VMG
Use any of the following methods to manage the VMG.
• Web Configurator. This is recommended for everyday management of the VMG using a (supported)
web browser.
1.3 Good Habits for Managing the VMG
Do the following things regularly to make the VMG more secure and to manage the VMG more
effectively.
• Change the password. Use a password that’s not easy to guess and that consists of different types of
characters, such as numbers and letters.
• Write down the password and put it in a safe place.
VMG8924-B10D/B30D User’s Guide
16
Chapter 1 Introducing the VMG
DSL
DSL
A
A
• Back up the configuration (and make sure you know how to restore it). Restoring an earlier working
configuration may be useful if the device becomes unstable or even crashes. If you forget your
password, you will have to reset the VMG to its factory default settings. If you backed up an earlier
configuration file, you would not have to totally re-configure the VMG. You could simply restore your
last configuration.
1.4 Applications for the VMG
Here are some example uses for which the VMG is well suited.
1.4.1 Internet Access
Your VMG provides shared Internet access by connecting the DSL port to the DSL or MODEM jack on a
splitter or your telephone jack. You can have multiple WAN services over one ADSL or VDSL. The VMG
cannot work in ADSL and VDSL mode at the same time.
Note: The ADSL and VDSL lines share the same WAN (layer-2) interfaces that you configure in
the VMG. Refer to Section 6.2 on page 72 for the Network Setting > Broadband screen.
Computers can connect to the VMG’s LAN ports (or wirelessly).
Figure 1 VMG’s Internet Access Application
You can also configure IP filtering on the VMG for secure Internet access. When the IP filter is on, all
incoming traffic from the Internet to your network is blocked by default unless it is initiated from your
VMG8924-B10D/B30D User’s Guide
17
network. This means that probes from the outside to your network are not allowed, but you can safely
DSL
browse the Internet and download files.
1.4.2 VMG’s USB Support
The USB port of the VMG is used for cellular WAN backup, file-sharing and media server.
Cellular WAN (3G) Backup
Connect a supported cellular USB dongle with an active SIM card to the USB port. This adds a second
WAN interface and allows the VMG to wirelessly access the Internet via a cellular network. The cellular
WAN connection is a backup in case the DSL connection fails.
To set up a cellular connection, click Network Setting > Broadband > Cellular Backup.
To update the supported cellular USB dongle list, download the latest WWAN package from the Zyxel
website and upload it to the VMG using the Maintenance > Firmware Upgrade screen.
File Sharing
Chapter 1 Introducing the VMG
Use the built-in USB 2.0 port to share files on a USB memory stick or a USB hard drive (B). Use FTP to access
the files on the USB device.
Figure 2 USB File Sharing Application
Media Server
You can also use the VMG as a media server. This lets anyone on your network play video, music, and
photos from a USB device (B) connected to the VMG’s USB port (without having to copy them to
another computer).
VMG8924-B10D/B30D User’s Guide
18
Chapter 1 Introducing the VMG
DSL
Figure 3 USB Media Server Application
1.4.3 Wireless Access
The VMG is a wireless Access Point (AP) for wireless clients, such as notebook computers or PDAs and
iPads. It allows them to connect to the Internet without having to rely on inconvenient Ethernet cables.
You can configure your wireless network in either the built-in Web Configurator, or using the WPS button.
See Section 1.5.4 on page 22 for more information about how to set up a wireless network with WLAN
and WPS buttons.
Figure 4 Wireless Access Example
1.5 Hardware
1.5.1 Front and Side Panels
The following graphic displays the front and side panels of the VMG.
VMG8924-B10D/B30D User’s Guide
19
Chapter 1 Introducing the VMG
Figure 5 VMG8924-B10D Front and Side Panels
The following table describes the items on the side panels..
Table 1 Side Panel Buttons
LABELDESCRIPTION
WLANPress the WLAN button for more than two seconds to enable the wireless function.
WPSPress the WPS button for more than five seconds to quickly set up a secure wireless connection
between the device and a WPS-compatible client.
USBThe USB port is used for cellular WAN backup, file-sharing and media server.
1.5.2 Using the WLAN and WPS Buttons
If the wireless network is turned off, press the WLAN On/Off button for more than two seconds. Once the
WLAN/WPS LED turns green, the wireless network is active.
You can also use the WPS On/Off button to quickly set up a secure wireless connection between the
VMG and a WPS-compatible client by adding one device at a time.
To activate WPS:
1Make sure the PWR LED is on and not blinking.
2Press the WPS On/Off button for more than five seconds and release it.
3Press the WPS button on another WPS-enabled device within range of the VMG. The WLAN/WPS LED
flashes orange while the VMG sets up a WPS connection with the other wireless device.
4Once the connection is successfully made, the WLAN/WPS LED shines green. Note that the connection
to the 2.4GHz wireless network has priority.
VMG8924-B10D/B30D User’s Guide
20
To turn off the wireless network, press the WLAN On/Off button for more than five seconds. The WLAN/
WPS LED turns off when the wireless network is off.
1.5.3 LEDs (Lights)
The following graphic displays the labels of the LEDs.
Figure 6 LEDs on the VMG
None of the LEDs are on if the VMG is not receiving power.
Table 2 LED Descriptions
LEDCOLORSTATUSDESCRIPTION
PowerGreenOnThe VMG is receiving power and ready for use.
DSLGreenOnThe VDSL line is up.
InternetGreenOnThe VMG has an IP connection but no traffic.
WANGreenOnThe VMG has a successful 10/100/1000 Mbps Ethernet connection on the
Chapter 1 Introducing the VMG
BlinkingThe VMG is self-testing.
RedOnThe VMG detected an error while self-testing, or there is a device
BlinkingThe VMG is upgrading firmware.
OffThe VMG is not receiving power.
Slow
Blinking
Fast
Blinking
OrangeOnThe ADSL line is up.
Slow
Blinking
Fast
Blinking
OffThe DSL line is down.
BlinkingThe VMG is sending or receiving IP traffic.
OffThere is no Internet connection or the gateway is in bridged mode.
RedOnThe VMG attempted to make an IP connection but failed. Possible causes
Blinking The VMG is sending or receiving data to/from the WAN at 10/100/1000
OffThere is no Ethernet connection on the WAN.
malfunction.
The VMG is detecting carrier signals.
The VMG is initializing the VDSL line.
The VMG is detecting carrier signals.
The VMG is initializing the ADSL line.
Your device has a WAN IP address (either static or assigned by a DHCP
server), PPP negotiation was successfully completed (if used) and the DSL
connection is up.
are no response from a DHCP server, no PPPoE response, PPPoE
authentication failed.
WAN.
Mbps.
VMG8924-B10D/B30D User’s Guide
21
Chapter 1 Introducing the VMG
Table 2 LED Descriptions (continued)
LEDCOLORSTATUSDESCRIPTION
LAN1~4GreenOnThe VMG has a successful 10/100/1000 Mbps Ethernet connection with a
device on the Local Area Network (LAN).
Blinking The VMG is sending or receiving data to/from the LAN at 10/100/1000
Mbps.
OffThe VMG does not have an Ethernet connection with the LAN.
WLAN/WPSGreenOnThe 2.4 GHz or 5 GHz wireless network is activated.
BlinkingThe VMG is communicating with 2.4 GHz or 5 GHz wireless clients.
OrangeBlinkingThe VMG is setting up a WPS connection with a 2.4 GHz or 5 GHz wireless
OffThe 2.4 GHz or 5 GHz wireless network is not activated.
Phone1,
Phone2
USBGreenOnThe VMG recognizes a USB connection through the USB slot.
GreenOnA SIP account is registered for the phone port.
BlinkingA telephone connected to the phone port has its receiver off of the hook or
OrangeOnA SIP account is registered for the phone port and there is a voice message
BlinkingA telephone connected to the phone port has its receiver off of the hook
OffThe phone port does not have a SIP account registered.
BlinkingThe VMG is sending/receiving data to /from the USB device connected to
OffThe VMG does not detect a USB connection through the USB slot.
client.
there is an incoming call.
in the corresponding SIP account.
and there is a voice message in the corresponding SIP account.
it.
1.5.4 Rear Panel
The following graphic displays the rear panel of the VMG.
Figure 7 VMG8924-B10D Rear Panel
VMG8924-B10D/B30D User’s Guide
22
The following table describes the items on the rear panel..
Table 3 Rear Panel Ports
LABELDESCRIPTION
DSLConnect a RJ-11 cable to the DSL port for Internet access.
LAN1 ~ LAN4 Connect computers or other Ethernet devices to Ethernet ports for Internet
WANConnect an Ethernet cable to the Ethernet WAN port for Internet access.
Phone1 ~
Phone2
PowerConnect the power cable can press the power button to start the device.
ResetPress the button to return the VMG to the factory defaults.
access.
Connect analog phones to the phone ports to make phone calls.
1.5.5 The RESET Button
If you forget your password or cannot access the Web Configurator, you will need to use the RESET
button at the back of the device to reload the factory-default configuration file. This means that you will
lose all configurations that you had previously. The password will be reset to “1234”, and the LAN IP
address will be “192.168.1.1”.
Chapter 1 Introducing the VMG
1Make sure the PWR LED is on (not blinking).
2To set the device back to the factory default settings, press the RESET button for five seconds or until the
PWR LED begins to blink and then release it. When the PWR LED begins to blink, the defaults have been
restored and the device restarts.
VMG8924-B10D/B30D User’s Guide
23
2.1 Overview
The screens are based on VMG8924-B10D.
CHAPTER 2
The Web Configurator
The web configurator is an HTML-based management interface that allows easy
management via Internet browser. Use Internet Explorer 8.0 and later versions or Mozilla Firefox 3 and
later versions or Safari 2.0 and later versions. The recommended screen resolution is 1024 by 768 pixels.
In order to use the web configurator you need to allow:
• Web browser pop-up windows from your
Windows XP SP (Service Pack) 2.
• JavaScript (enabled by default).
• Java permissions (enabled by default).
VMG. Web pop-up blocking is enabled by default in
2.1.1 Accessing the Web Configurator
1Make sure your VMG hardware is properly connected (refer to the Quick Start Guide).
2Launch your web browser. If the VMG does not automatically re-direct you to the login screen, go to
http://192.168.1.1.
3A password screen displays. To access the administrative web configurator and manage the VMG, type
the default username admin and password 1234 in the password screen and click Login. If advanced
account security is enabled (see Section 32.2 on page 266) the number of dots that appears when you
type the password changes randomly to prevent anyone watching the password field from knowing the
length of your password. If you have changed the password, enter your password and click Login.
Figure 8 Password Screen
VMG setup and
VMG8924-B10D/B30D User’s Guide
24
Chapter 2 The Web Configurator
4The following screen displays if you have not yet changed your password. Enter a new password, retype
it to confirm and click Apply.Figure 9 Change Password Screen
5Configure basic Internet access, and wireless settings. The Network Map page appears.
Figure 10 Network Map
6Click Status to display the Status screen, where you can view the VMG’s interface and system
information.
VMG8924-B10D/B30D User’s Guide
25
Chapter 2 The Web Configurator
C
A
B
2.2 Web Configurator Layout
Figure 11 Screen Layout
As illustrated above, the main screen is divided into these parts:
• A - title bar
• B - main window
• C - navigation panel
2.2.1 Title Bar
The title bar provides some icons in the upper right corner.
The icons provide the following functions.
Table 4 Web Configurator Icons in the Title Bar
ICON DESCRIPTION
Language: Select the language you prefer.
Quick Start: Click this icon to open screens where you can configure the VMG’s time zone
Internet access, and wireless settings.
Logout: Click this icon to log out of the web configurator.
VMG8924-B10D/B30D User’s Guide
26
2.2.2 Navigation Panel
Use the menu items on the navigation panel to open screens to configure VMG features. The following
tables describe each menu item.
Table 5 Navigation Panel Summary
LINKTABFUNCTION
Connection StatusThis screen shows the network status of the VMG and computers/devices
Network Setting
BroadbandBroadbandUse this screen to view and configure ISP parameters, WAN IP address
Cellular BackupUse this screen to configure 3G WAN connection.
AdvancedUse this screen to enable or disable PTM over ADSL, Annex M/Annex J,
WirelessGeneralUse this screen to configure the wireless LAN settings and WLAN
Guest/More APUse this screen to configure multiple BSSs on the VMG.
MAC
Authentication
WPSUse this screen to configure and view your WPS (Wi-Fi Protected Setup)
WMMUse this screen to enable or disable Wi-Fi MultiMedia (WMM).
OthersUse this screen to configure advanced wireless settings.
Channel StatusUse this screen to scan wireless LAN channel noises and view the results.
Home
Networking
RoutingStatic RouteUse this screen to view and set up static routes on the VMG.
LAN SetupUse this screen to configure LAN TCP/IP settings, and other advanced
Static DHCP Use this screen to assign specific IP addresses to individual MAC
UPnPUse this screen to turn UPnP and UPnP NAT-T on or off.
Additional
Subnet
STB Vendor IDUse this screen to configure the Vendor IDs of the connected Set Top Box
Wake on LanUse this screen to remotely turn on a device on the local network.
TFTP Server Name Use DHCP option 66 to identify a TFTP server name.
DNS RouteUse this screen to forward DNS queries for certain domain names through
Policy Route
RIPUse this screen to configure Routing Information Protocol to exchange
Chapter 2 The Web Configurator
connected to it.
assignment, and other advanced properties. You can also add new
WAN connections.
and DSL PhyR functions.
authentication/security settings.
Use this screen to block or allow wireless traffic from wireless devices of
certain SSIDs and MAC addresses to the VMG.
settings.
properties.
addresses.
Use this screen to configure IP alias and public static IP.
(STB) devices, which have the VMG automatically create static DHCP
entries for the STB devices when they request IP addresses.
a specific WAN interface to its DNS server(s).
Use this screen to configure policy routing on the VMG.
routing information with other routers.
VMG8924-B10D/B30D User’s Guide
27
Chapter 2 The Web Configurator
Table 5 Navigation Panel Summary (continued)
LINKTABFUNCTION
QoSGeneralUse this screen to enable QoS and traffic prioritizing. You can also
configure the QoS rules and actions.
Queue SetupUse this screen to configure QoS queues.
Classification
Setup
Shaper SetupUse this screen to limit outgoing traffic rate on the selected interface.
Policer SetupUse this screen to configure QoS policers.
NATPort ForwardingUse this screen to make your localservers visible to the outside world.
ApplicationsUse this screen to configure servers behind the VMG.
Port TriggeringUse this screen to change your VMG’s port triggering settings.
DMZUse this screen to configure a default server which receives packets from
ALGUse this screen to enable or disable SIP ALG.
Address Mapping Use this screen to change your VMG’s address mapping settings.
SessionsUse this screen to configure the maximum number of NAT sessions each
DNSDNS EntryUse this screen to view and configure DNS routes.
Dynamic DNSUse this screen to allow a static hostname alias for a dynamic IP address.
IGMP/MLDIGMP/MLDUse this screen to configure multicast settings (IGMP for IPv4 and MLD for
Vlan GroupVlan GroupUse this screen to group and tag VLAN IDs to outgoing traffic from the
Interface
Grouping
USB ServiceFile SharingUse this screen to enable file sharing via the VMG.
Security
FirewallGeneralUse this screen to configure the security level of your firewall.
MAC FilterMAC FilterUse this screen to block or allow traffic from devices of certain MAC
Parental
Control
Scheduler RuleScheduler RuleUse this screen to configure the days and times when a configured
CertificatesLocal Certificates Use this screen to view a summary list of certificates and manage
VoIP
Interface
Grouping
Media ServerUse this screen to use the VMG as a media server.
ProtocolUse this screen to add Internet services and configure firewall rules.
Access ControlUse this screen to enable specific traffic directions for network services.
DoSUse this screen to activate protection against Denial of Service (DoS)
Parental ControlUse this screen to block web sites with the specific URL.
Trusted CA
Use this screen to define a classifier.
ports that are not specified in the Port Forwarding screen.
client host is allowed to have through the VMG.
IPv6 multicast groups) on the WAN.
specified interface.
Use this screen to map a port to a PVC or bridge group.
attacks.
addresses to the VMG.
restriction (such as parental control) is enforced.
certificates and certification requests.
Use this screen to view and manage the list of the trusted CAs.
VMG8924-B10D/B30D User’s Guide
28
Chapter 2 The Web Configurator
Table 5 Navigation Panel Summary (continued)
LINKTABFUNCTION
SIPSIP AccountUse this screen to set up information about your SIP account and
configure audio settings such as volume levels for the phones
connected to the VMG.
SIP Service
Provider
PhonePhone Device
Region
Call RuleSpeed Dial
Call HistoryCall HistoryUse this screen to view a call history list.
Call SummaryUse this screen to view the summary of received, dialed and missed calls.
System Monitor
LogSystem LogUse this screen to view the status of events that occurred to the VMG.
Security LogUse this screen to view all security related events. You can select level
Traffic StatusWANUse this screen to view the status of all network traffic going through the
LANUse this screen to view the status of all network traffic going through the
NATUse this screen to view NAT statistics for connected hosts.
VoIP StatusVoIP StatusUse this screen to view VoIP registration, current call statust and phone
ARP tableARP tableUse this screen to view the ARP table. It displays the IP and MAC address
Routing TableRouting TableUse this screen to view the routing table on the VMG.
Multicast StatusIGMP StatusUse this screen to view the status of all IGMP settings on the VMG.
MLD StatusUse this screen to view the status of all MLD settings on the VMG.
xDSL StatisticsxDSL StatisticsUse this screen to view the VMG’s xDSL traffic statistics.
Cellular
Statistics
Maintenance
Cellular StatisticsUse this screen to look at cellular Internet connection status.
Use this screen to configure the SIP server information, QoS for VoIP calls,
the numbers for certain phone functions, and dialing plan.
Use this screen to view detailed information of the phone devices.
Use this screen to select your location and a call service mode.
Use this screen to configure speed dial for SIP phone numbers that you
call often.
You can export or e-mail the logs.
and category of the security events in their proper drop-down list
window.
Levels include:
•Emergency
•Alert
• Critical
• Error
• Warning
•Notice
• Informational
•Debugging
Categories include:
• Account
• Attack
•Firewall
• MAC Filter
WAN port of the VMG.
LAN ports of the VMG.
numbers for the phone ports.
of each DHCP connection.
VMG8924-B10D/B30D User’s Guide
29
Chapter 2 The Web Configurator
Table 5 Navigation Panel Summary (continued)
LINKTABFUNCTION
SystemSystem
User AccountUser AccountUse this screen to change user password on the VMG.
Remote
Management
SNMPSNMPUse this screen to configure SNMP (Simple Network Management
TimeTimeUse this screen to change your VMG’s time and date.
Email
Notification
Log SettingLog SettingUse this screen to change your VMG’s log settings.
Firmware
Upgrade
Backup/Restore Backup/RestoreUse this screen to backup and restore your VMG’s configuration
RebootRebootUse this screen to reboot the VMG without turning the power off.
DiagnosticPing&Traceroute
MGMT ServicesUse this screen to enable specific traffic directions for network services.
Trust DomainUse this screen to view a list of public IP addresses which are allowed to
Email Notification Use this screen to configure up to two mail servers and sender addresses
Firmware
Upgrade
&Nslookup
802.1agUse this screen to configure CFM (Connectivity Fault Management) MD
OAM PingUse this screen to view information to help you identify problems with the
Use this screen to set Device name and Domain name.
access the VMG through the services configured in the Maintenance >
Remote Management screen.
Protocol) settings.
on the VMG.
Use this screen to upload firmware to your VMG.
(settings) or reset the factory default settings.
Use this screen to identify problems with the DSL connection. You can
use Ping, TraceRoute, or Nslookup to help you identify problems.
(maintenance domain) and MA (maintenance association), perform
connectivity tests and view test reports.
DSL connection.
VMG8924-B10D/B30D User’s Guide
30
Loading...
+ 312 hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.