IMPORTANT!
READ CAREFULLY BEFORE USE.
KEEP THIS GUIDE FOR FUTURE REFERENCE.
Note: This guide is a reference for a series of products. Therefore some features or
options in this guide may not be available in your product.
Graphics in this book may differ slightly from the product due to differences in operating systems,
operating system versions, or if you installed updated firmware/software for your device. Every
effort has been made to ensure that the information in this manual is accurate.
Related Documentation
•Quick Start Guide
The Quick Start Guide shows how to connect the EMG1302-R10A and access the Web
Configurator. It contains information on setting up your wireless network.
Appendix A Customer Support ............................................................................................167
Appendix B Pop-up Windows, JavaScript and Java Permissions ....................................... 173
Appendix C Wireless LANs.................................................................................................. 185
Appendix D Common Services............................................................................................ 199
Appendix E Legal Information.............................................................................................. 203
Index ...................................................................................................................................... 211
12
EMG1302-R10A User’s Guide
PART I
User’s Guide
13
14
1.1 Overview
This chapter introduces the main features and applications of the EMG1302-R10A.
The EMG1302-R10A Wireless N300 4-port Ethernet Gateway is an Ethernet Gateway that provides
four Ethernet ports meeting the IEEE 802.11 b/g/n wireless standard, and it features TR-069
remote management for telcos, service providers and cable operators as a home network solution
interoperating an FTTx or cable infrastructure.
A range of services such as a firewall and content filtering are also available for secure Internet
computing.
CHAPTER 1
Introduction
1.2 Applications
Your can create the following networks using the EMG1302-R10A:
• Wired. You can connect network devices via the Ethernet ports of the EMG1302-R10A so that
they can communicate with each other and access the Internet.
• Wireless. Wireless clients can connect to the EMG1302-R10A to access network resources.
• WPS. Create an instant network connection with another WPS-compatible device, sharing your
network connection with it.
• WAN. Connect to a broadband modem/router for Internet access.
1.3 Ways to Manage the EMG1302-R10A
Use any of the following methods to manage the EMG1302-R10A.
• WPS (Wi-Fi Protected Setup). You can use the WPS button or the WPS section of the Web
Configurator to set up a wireless network with your ZyXEL Device.
• Web Configurator. This is recommended for everyday management of the EMG1302-R10A using a
(supported) web browser.
1.4 Good Habits for Managing the EMG1302-R10A
Do the following things regularly to make the EMG1302-R10A more secure and to manage the
EMG1302-R10A more effectively.
EMG1302-R10A User’s Guide15
Chapter 1 Introduction
PowerInternetEthernetWLANWAN
• Change the password. Use a password that’s not easy to guess and that consists of different
types of characters, such as numbers and letters.
• Write down the password and put it in a safe place.
• Back up the configuration (and make sure you know how to restore it). Restoring an earlier
working configuration may be useful if the device becomes unstable or even crashes. If you
forget your password, you will have to reset the EMG1302-R10A to its factory default settings. If
you backed up an earlier configuration file, you would not have to totally re-configure the
EMG1302-R10A. You could simply restore your last configuration.
1.5 LEDs
Figure 1 Front Panel
The following table describes the LEDs.
Table 1 Front panel LEDs
16
LEDCOLORSTATUSDESCRIPTION
GreenOnThe EMG1302-R10A is receiving power and functioning properly.
OffThe EMG1302-R10A is not receiving power.
Power
GreenOnThe EMG1302-R10A’s WAN connection is ready.
BlinkingThe EMG1302-R10A is sending/receiving data through the WAN
with a 10/100Mbps transmission rate.
WAN
OffThe WAN connection is not ready, or has failed.
EMG1302-R10A User’s Guide
Table 1 Front panel LEDs (continued)
WPS button
LEDCOLORSTATUSDESCRIPTION
LAN 1-4GreenOnThe EMG1302-R10A’s LAN connection is ready.
OffThe LAN connection is not ready, or has failed.
GreenOnThe EMG1302-R10A is ready, but is not sending/receiving data
WLAN
OffThe wireless LAN is not ready or has failed.
GreenOnInternet (WAN) connection is up (e.g. PPPeE/DHCP Client).
OffInternet connection is down.
Internet
1.6 The WPS Button
Chapter 1 Introduction
BlinkingThe EMG1302-R10A is sending/receiving data through the LAN
with a 10/100Mbps transmission rate.
through the wireless LAN.
BlinkingThe EMG1302-R10A is sending/receiving data through the
wireless LAN.
BlinkingInternet connection established.
Figure 2 Front Panel
Your EMG1302-R10A supports WiFi Protected Setup (WPS), which is an easy way to set up a secure
wireless network. WPS is an industry standard specification, defined by the WiFi Alliance.
WPS allows you to quickly set up a wireless network with strong security, without having to
configure security settings manually. Each WPS connection works between two devices. Both
devices must support WPS (check each device’s documentation to make sure).
Depending on the devices you have, you can either press a button (on the device itself, or in its
configuration utility) or enter a PIN (a unique Personal Identification Number that allows one device
to authenticate the other) in each of the two devices. When WPS is activated on a device, it has two
minutes to find another device that also has WPS activated. Then, the two devices connect and set
up a secure network by themselves.
For more information on using WPS, see Section 6.2 on page 43.
EMG1302-R10A User’s Guide
17
Chapter 1 Introduction
1.7 W all Mounting
You may need screw anchors if mounting on a concrete or brick wall.
Table 2 Wall Mounting Information
Distance between holes (measured from center to
center)
M4 ScrewsTwo
Screw anchors (optional)Two
1Select a position free of obstructions on a wall strong enough to hold the weight of the device.
2Mark two holes on the wall at the appropriate distance apart for the screws.
Be careful to avoid damaging pipes or cables located inside the wall
when drilling holes for the screws.
3If using screw anchors, drill two holes for the screw anchors into the wall. Push the anchors into the
full depth of the holes, then insert the screws into the anchors. Do not insert the screws all the way
in - leave a small gap of about 0.5 cm.
If not using screw anchors, use a screwdriver to insert the screws into the wall. Do not insert the
screws all the way in - leave a gap of about 0.5 cm.
10.25 cm
4Make sure the screws are fastened well enough to hold the weight of the EMG1302-R10A with the
connection cables.
5Align the holes on the back of the EMG1302-R10A with the screws on the wall. Hang the EMG1302-
R10A on the screws.
Figure 3 Wall Mounting Example
18
EMG1302-R10A User’s Guide
2.1 Overview
This chapter describes how to access the EMG1302-R10A Web Configurator and provides an
overview of its screens.
The Web Configurator is an HTML-based management interface that allows easy setup and
management of the EMG1302-R10A via Internet browser. Use Internet Explorer 6.0 and later
versions, Mozilla Firefox 3 and later versions, or Safari 2.0 and later versions. The recommended
screen resolution is 1024 by 768 pixels.
In order to use the Web Configurator you need to allow:
• Web browser pop-up windows from your device. Web pop-up blocking is enabled by default in
Windows XP SP (Service Pack) 2.
• JavaScript (enabled by default).
• Java permissions (enabled by default).
CHAPTER 2
Introducing the Web Configurator
Refer to the Troubleshooting chapter (Chapter 22 on page 161) to see how to make sure these
functions are allowed in Internet Explorer.
2.2 Login Accounts
There are two system accounts that you can use to log in to the EMG1302-R10A: “admin” and
“supervisor”. These two accounts have different privilege levels. The web configurator screens
vary depending on which account you use to log in.
The supervisor accounts allows you full access to all system configurations. The default supervisor
user name is “supervisor” and password is “supervisor”.
With the admin account, you cannot access Remote MGMT. The default username is “admin” and
password is “1234”.
2.3 Accessing the Web Configurator
1Make sure your EMG1302-R10A hardware is properly connected and prepare your computer or
computer network to connect to the EMG1302-R10A (refer to the Quick Start Guide).
2Launch your web browser.
EMG1302-R10A User’s Guide19
Chapter 2 Introducing the Web Configurator
3Type "http://192.168.1.1" as the website address.
Your computer must be in the same subnet in order to access this website address.
4If you are logging in with the “admin” account, type “1234” (default) as the password.
If you are logging in with the “supervisor” account, type “supervisor” (default) as the password.
Then click Login.
Figure 4 Admin Account Login
The following table describes the labels in this screen.
Table 3 Login screen
LABELDESCRIPTION
User NameType “admin” or “supervisor” as the user name.
PasswordType “1234” (default) as the password.
LoginClick Login to enter the EMG1302-R10A’s web configurator.
5You should see a screen asking you to change your password (highly recommended) as shown
next. Type a new password (and retype it to confirm) and click Apply or click Ignore.
Figure 5 Change Password Screen
20
EMG1302-R10A User’s Guide
The following table describes the labels in this screen.
Table 4 Change Password Screen
LABELDESCRIPTION
New PasswordType a new password.
Retype to ConfirmRetype the password for confirmation.
ApplyClick Apply to save your changes back to the EMG1302-R10A.
IgnoreClick Ignore if you do not want to change the password this time.
Note: The management session automatically times out when the time period set in the
Administrator Inactivity Timer field expires (default five minutes; go to Chapter
21 on page 153 to change this). Simply log back into the EMG1302-R10A if this
happens.
2.4 Resetting the EMG1302-R10A
If you forget your password or IP address, or you cannot access the Web Configurator, you will need
to use the RESET button at the back of the EMG1302-R10A to reload the factory-default
configuration file. This means that you will lose all configurations that you had previously saved, the
password will be reset to “supervisor” and the IP address will be reset to “192.168.1.1”.
Chapter 2 Introducing the Web Configurator
2.4.1 Procedure to Use the RESET Button
1Make sure the power LED is on.
2Press and hold the RESET button for at least 1 second to restart/reboot the EMG1302-R10A.
3Press and hold the RESET button for at least 5 seconds to set the EMG1302-R10A back to its
factory-default configurations.
EMG1302-R10A User’s Guide
21
Chapter 2 Introducing the Web Configurator
22
EMG1302-R10A User’s Guide
3.1 Overview
Use the Quick Start screens to configure the ZyXEL Device’s time zone and basic Internet access
and wireless settings.
Note: See the technical reference chapters (starting on page 55) for background
information on the features in this chapter.
3.2 Quick Start Setup
1Click the Wizard icon in the top right corner of the web configurator to open the quick start
screens. Select the time zone of the ZyXEL Device’s location and click Next.
Figure 6 Time Zone
CHAPTER 3
Quick Start
2To change the current password, enter your existing password in the Old Password field and the
new password in the New Password and Retype to Confirm fields.
EMG1302-R10A User’s Guide23
Chapter 3 Quick Start
3Click Next to continue.
Figure 7 Setup Login Password
4Select the time zone for this device from the drop-down menu or click Detect Again to
automatically select the time zone.
5Click Next to continue.
Figure 8 Setup Time Zone
6Setup the WAN type by selecting a configuration type from the WAN Type drop-down menu.
7Enter the device’s IP address in the LAN IP Address field if a static IP address is assigned.
24
EMG1302-R10A User’s Guide
8Click Next to continue.
Figure 9 Select WAN Type
Chapter 3 Quick Start
9Configure the WAN type, select from the following settings:
• Dynamic IP Address (default)
• Static IP Address
• PPP Over Ethernet
• PPTP
10 The WAN Type window as selected above displays. Fill in the respective fields to complete the WAN
Type configuration.
11 Click Next to continue.
Figure 10 Configure Dynamic IP Address
12 In the Wireless settings menu, select Enable to activate the device’s wireless function.
EMG1302-R10A User’s Guide
25
Chapter 3 Quick Start
13 Enter the SSID in the Network ID field to identify this device on the network.
14 Select a channel designation from the drop-down menu or select Auto to allow the device to
automatically assign one.
15 Click Next to continue.
Figure 11 Setup Wireless Settings
16 Select a security mode from the drop-down menu: WPA2-PSK (default) or No Security.
17 Enter a pre-shared key or use the automatically generated key in the Pre-Shared Key field.
18 Click Next to continue.
Figure 12 Setup Wireless Security Settings
The Summary window displays with the selected configuration settings.
26
EMG1302-R10A User’s Guide
Chapter 3 Quick Start
19 If the information does not require modification, select the Do you want to proceed the network
testing? and click Apply Settings.
Figure 13 Setup Summary
The device begins applying the new settings. The process requires a short time to fully complete.
20 Once the process is complete, click the Finish button to return to the Status page.
EMG1302-R10A User’s Guide
27
Chapter 3 Quick Start
28
EMG1302-R10A User’s Guide
4.1 Overview
This chapter discusses read-only information related to the device state of the EMG1302-R10A.
To access the Monitor screens, click . Click open all to show the complete menu.
You can also click the links in the Summary table of the Status screen to view the bandwidth
consumed, packets sent/received as well as the status of clients connected to the EMG1302-R10A.
CHAPTER 4
Monitor
4.2 What You Can Do
•Use the Log screen to see the logs for the activity on the EMG1302-R10A (Section 4.3 on page
30).
•Use the DHCP Table screen to view information related to your DHCP status (Section 4.4 on
page 31).
•Use the Packet Statistics screen to view port statistics and the "system up time" (Section 4.5
on page 32).
•Use the WLAN Station Status screen to view the wireless stations that are currently associated
to the EMG1302-R10A (Section 4.6 on page 33).
EMG1302-R10A User’s Guide29
Chapter 4 Monitor
4.3 The Log Screen
The Web Configurator allows you to look at all of the EMG1302-R10A’s logs in one location.
4.3.1 View Log
Click Monitor > Log to open the View Log screen. You can see the logged messages for the
EMG1302-R10A. The log wraps around and deletes the old entries after it fills. Click Clear Log to
delete all the logs. Click Refresh to renew the log screen.
Figure 14 View Log
30
EMG1302-R10A User’s Guide
4.3.2 Log Setting
You can configure which logs to display in the View Log screen. Click Monitor > Log to open the
Log Setting screen and select the logs you wish to display. You can configure active log and alert
settings.
Figure 15 Log Setting
Chapter 4 Monitor
4.4 DHCP Table
Dynamic Host Configuration Protocol (DHCP), RFC 2131 and RFC 2132 allow individual clients to
obtain TCP/IP configuration at start-up from a server. You can configure the EMG1302-R10A’s LAN
as a DHCP server or disable it. When configured as a server, the EMG1302-R10A provides the
TCP/IP configuration for the clients. If DHCP service is disabled, you must have another DHCP
server on that network, or else the computer must be manually configured.
Click the DHCP Table (Details...) hyperlink in the Status screen or Monitor > DHCP Table.
Read-only information here relates to your DHCP status. The DHCP table shows current DHCP client
information (including Host Name, IP Address, and Mac Address) of all network clients using
the EMG1302-R10A’s DHCP server.
Figure 16 Summary: DHCP Table
The following table describes the labels in this screen.
Table 5 Summary: DHCP Table
LABEL DESCRIPTION
# This is the index number of the host computer.
StatusThis field displays weather the connection to the host computer is up (a yellow bulb) or
Host NameThis field displays the computer host name.
down (a grey bulb).
EMG1302-R10A User’s Guide
31
Chapter 4 Monitor
Table 5 Summary: DHCP Table (continued)
LABEL DESCRIPTION
IP AddressThis field displays the IP address relative to the # field listed above.
MAC AddressThis field shows the MAC address of the computer with the name in the Host Name
field.
Every Ethernet device has a unique MAC (Media Access Control) address which uniquely
identifies a device. The MAC address is assigned at the factory and consists of six pairs
of hexadecimal characters, for example, 00:A0:C5:00:00:02.
ReserveSelect this if you want to reserve the IP address for this specific MAC address.
ApplyClick Apply to save your changes back to the EMG1302-R10A.
CancelClick Cancel to exit this screen without saving.
4.5 Packet Statistics
Click the Packet Statistics (Details...) hyperlink in the Status screen or Monitor > Packet
Statistics. Read-only information here includes port statistics and the "system up time". The Poll
Interval(s) field is configurable and is used for refreshing the screen.
Figure 17 Summary: Packet Statistics
The following table describes the labels in this screen.
Table 6 Summary: Packet Statistics
LABELDESCRIPTION
PortThis is the EMG1302-R10A’s port type.
StatusFor the LAN ports, this displays the port speed and duplex setting or Down when the
line is disconnected.
For the WAN port, it displays the port speed and duplex setting if you’re using Ethernet
encapsulation and Idle (line (ppp) idle), Dial (starting to trigger a call) and Drop
(dropping a call) if you’re using PPPoE or PPTP encapsulation. This field displays Down
when the line is disconnected.
32
For the WLAN, it displays the maximum transmission rate when the WLAN is enabled
and Down when the WLAN is disabled.
TxPkts This is the number of transmitted packets on this port.
RxPkts This is the number of received packets on this port.
EMG1302-R10A User’s Guide
Table 6 Summary: Packet Statistics (continued)
LABELDESCRIPTION
CollisionsThis is the number of collisions on this port.
Tx B/s This displays the transmission speed in bytes per second on this port.
Rx B/sThis displays the reception speed in bytes per second on this port.
Up TimeThis is the total time the EMG1302-R10A has been for each session.
System Up TimeThis is the total time the EMG1302-R10A has been on.
Poll Interval(s)Enter the time interval in seconds for refreshing statistics in this field.
Set IntervalClick this button to apply the new poll interval you entered in the Poll Interval(s)
field.
StopClick Stop to stop refreshing statistics.
4.6 WLAN Station Status
Click the WLAN Station Status (Details...) hyperlink in the Status screen or Monitor > WLAN
Station Status. View the wireless stations that are currently associated to the EMG1302-R10A in
the Association List. Association means that a wireless client (for example, your network or
computer with a wireless network card) has connected successfully to the AP (or wireless router)
using the same SSID, channel and security settings.
Chapter 4 Monitor
Figure 18 Summary: Association List
The following table describes the labels in this screen.
Table 7 Summary: Wireless Association List
LABELDESCRIPTION
# This is the index number of an associated wireless station.
MAC Address This field displays the MAC address of an associated wireless station.
Association TimeThis field displays the time a wireless station first associated with the EMG1302-R10A’s
WLAN network.
EMG1302-R10A User’s Guide
33
Chapter 4 Monitor
34
EMG1302-R10A User’s Guide
5.1 Overview
Modem
The EMG1302-R10A router mode connects the local network to another network (for example, the
Internet). In the figure below, the EMG1302-R10A connects the local network (LAN1 ~ LAN4) to
the Internet.
Figure 19 EMG1302-R10A Network
CHAPTER 5
Router Mode
EMG1302-R10A User’s Guide35
Chapter 5 Router Mode
5.2 Router Mode Status Screen
Click to open the status screen.
Figure 20 Status Screen: Router Mode
The following table describes the icons shown in the Status screen.
Table 8 Status Screen Icon Key: Router Mode
ICONDESCRIPTION
Click this icon to open screens where you can configure the ZyXEL Device’s time zone Internet
access, and wireless settings.
Click this icon to view copyright and a link for related product information.
Click this at any time to exit the Web Configurator.
Select a number of seconds or None from the drop-down list box to refresh all screen statistics
automatically at the end of every time interval or to not refresh the screen statistics.
36
EMG1302-R10A User’s Guide
Chapter 5 Router Mode
Table 8 Status Screen Icon Key: Router Mode (continued)
ICONDESCRIPTION
Click this button to refresh the status screen statistics.
Click this icon to see the Status page. The information in this screen depends on the device
mode you select.
Click this icon to see the Monitor navigation menu.
Click this icon to see the Configuration navigation menu.
Click this icon to see the Maintenance navigation menu.
The following table describes the labels shown in the Status screen.
Table 9 Status Screen: Router Mode
LABELDESCRIPTION
Device Information
Host NameThis is the device’s host name.
Model NumberThis is the device’s model number.
Firmware VersionThis is the firmware version.
WAN Information
- MAC AddressThis shows the WAN Ethernet adapter MAC Address of your device.
- IP AddressThis shows the WAN port’s IP address.
- IP Subnet MaskThis shows the WAN port’s subnet mask.
- Default GatewayThis shows the default gateway address.
- IPv6 AddressThis shows the WAN port's IPv6 address.
LAN Information
- MAC AddressThis shows the LAN Ethernet adapter MAC Address of your device.
- IP AddressThis shows the LAN port’s IP address.
- IP Subnet MaskThis shows the LAN port’s subnet mask.
- DHCPThis shows the LAN port’s DHCP role - Server or Disable.
- IPv6 AddressThis shows the LAN port's IPv6 address.
WLAN Information
- WLAN OP ModeThis shows the device mode to which the EMG1302-R10A’s wireless LAN is set.
- MAC AddressThis shows the wireless adapter MAC Address of your device.
- SSIDThis shows a descriptive name used to identify the EMG1302-R10A in the wireless LAN.
- ChannelThis shows the channel number which you select manually.
- SecurityThis shows the level of wireless security the EMG1302-R10A is using.
FirewallThis shows the firewall enabled or not.
System Status
ItemThis column shows the type of data the EMG1302-R10A is recording.
DataThis column shows the actual data recorded by the EMG1302-R10A.
System Up TimeThis is the total time the EMG1302-R10A has been on.
Current Date/TimeThis field displays your EMG1302-R10A’s presentdate and time.
EMG1302-R10A User’s Guide
37
Chapter 5 Router Mode
Table 9 Status Screen: Router Mode (continued)
LABELDESCRIPTION
System Resource
- CPU UsageThis displays what percentage of the EMG1302-R10A’s processing ability is currently used.
When this percentage is close to 100%, the EMG1302-R10A is running at full load, and the
throughput is not going to improve anymore. If you want some applications to have more
throughput, you should turn off other applications (for example, using bandwidth
management.)
- Memory UsageThis shows what percentage of the heap memory the EMG1302-R10A is using.
Interface Status
InterfaceThis displays the EMG1302-R10A port types. The port types are: WAN, LAN and WLAN.
StatusFor the LAN and WAN ports, this field displays Down (line is down) or Up (line is up or
connected).
For the WLAN, it displays Up when the WLAN is enabled or Down when the WLAN is
disabled.
RateFor the LAN ports, this displays the port speed and duplex setting or N/A when the line is
WANThis shows the WAN status and data transfer rate.
LAN1This shows the LAN1 status and data transfer rate.
LAN2This shows the LAN2 status and data transfer rate.
LAN3This shows the LAN3 status and data transfer rate.
LAN4This shows the LAN4 status and data transfer rate.
WLANThis shows the WLAN status and data transfer rate.
Summary
Packet StatisticsClick Details... to go to the Monitor > Packet Statistics screen (Section 4.5 on page 32).
WLAN Station StatusClick Details... to go to the Monitor > WLAN Station Status screen (Section 4.6 on page
disconnected.
For the WAN port, it displays the port speed and duplex setting if you’re using Ethernet
encapsulation. This field displays N/A when the line is disconnected.
For the WLAN, it displays the maximum transmission rate when the WLAN is enabled and N/A when the WLAN is disabled.
Use this screen to view port status and packet specific statistics.
33). Use this screen to view the wireless stations that are currently associated to the
EMG1302-R10A.
38
EMG1302-R10A User’s Guide
5.2.1 Navigation Panel
Use the sub-menus on the navigation panel to configure EMG1302-R10A features.
Figure 21 Navigation Panel: Router Mode
Chapter 5 Router Mode
The following table describes the sub-menus.
Table 10 Navigation Panel: Router Mode
LINKTABFUNCTION
StatusThis screen shows the EMG1302-R10A’s general device, system and
MONITOR
LogUse this screen to view the list of activities recorded by your EMG1302-
DHCP TableUse this screen to view current DHCP client information.
Packet StatisticsUse this screen to view port status and packet specific statistics.
WLAN Station
Status
CONFIGURATION
Open all | close
all
Network
WANManagement
WAN
Add New
WAN Entries
interface status information. Use this screen to access the summary
statistics tables.
R10A.
Use this screen to view the wireless stations that are currently associated
to the EMG1302-R10A.
Click Open all to see all the sub menus in Configuration section. Click
close all to close all the sub menus in Configuration section.
This screen allows you to configure ISP parameters, WAN IP address
assignment, DNS servers, the WAN MAC address, and VLAN settings.
Click to add new ISP parameters for Internet access.
Wireless LAN GeneralUse this screen to configure wireless LAN and the level of wireless security
LANIPUse this screen to configure LAN IP address and subnet mask.
DHCP Server GeneralUse this screen to enable the EMG1302-R10A’s DHCP server.
QoSGeneralUse this screen to enable Wi-Fi Multimedia Quality of Service (WMM QoS).
NATGeneralUse this screen to enable NAT.
DDNSDynamic DNS Use this screen to set up dynamic DNS.
RoutingStatic RouteUse this screen to configure IP static routes.
Interface
Group
Security
FirewallGeneralUse this screen to activate/deactivate the firewall and Anti-Dos Attack.
Content
Filter
IPv6 FirewallServiceUse this screen to enable (disable) and add IPv6 firewall rules.
for the EMG1302-R10A.
More APUse this screen to configure multiple BBs for the EMG1302-R10A.
MAC FilterUse the MAC filter screen to configure the EMG1302-R10A to block access
to devices or block the devices from accessing the EMG1302-R10A.
AdvancedThis screen allows you to configure advanced wireless settings.
QoSUse this screen to enable Wi-Fi Multimedia Quality of Service (WMM QoS).
WPSUse this screen to configure WPS.
WPS StationUse this screen to add a wireless station using WPS.
SchedulingUse this screen to schedule the times the Wireless LAN is enabled.
WDSUse this screen to set up Wireless Distribution System links to other access
AdvancedUse this screen to assign IP addresses to specific individual computers
Client ListUse this screen to view the individual client list.
Rule-based
QoS
Port
Forwarding
Port TriggerUse this screen to change EMG1302-R10A port triggering settings.
ALG
Dynamic
Routing
Interface
Group
ServicesUse this screen to configure ICMP setting of the EMG1302-R10A.
Content Filter Use this screen to block sites containing certain keywords in the URL.
WMM QoS allows you to prioritize wireless traffic according to the delivery
requirements of individual services.
points.
based on their MAC addresses and to have DNS servers assigned by the
DHCP server.
WMM QoS allows you to prioritize wireless traffic according to the delivery
requirements of individual services.
Use this screen to create traffic policies based on QoS features.
Use this screen to make your local servers visible to the outside world.
Use this screen to add a LAN interface or a VLAN ID to a new group.
UPnPUPnPUse this screen to enable UPnP on the EMG1302-R10A.
MAINTENANCE
GeneralGeneralUse this screen to view and change administrative settings such as system
AccountUser Account Use this screen to change the password of your EMG1302-R10A.
TimeTime SettingUse this screen to change your EMG1302-R10A’s time and date.
Firmware
Upgrade
Backup/
Restore
RestartSystem
WWWUse this screen to configure through which interface(s) and from which IP
address(es) users can use HTTP to manage the EMG1302-R10A.
Teln etUse this screen to configure through which interface(s) and from which IP
address(es) users can use Telnet to manage the EMG1302-R10A.
SNMPUse this screen to enable Wake on LAN to remotely turn on a device on the
TR069Use this screen to configure the remote management over the WAN by an
Firmware
Upgrade
Backup/
Restore
Restart
local network.
Auto Configuration Server (ACS).
and domain names.
Use this screen to upload firmware to your EMG1302-R10A.
Use this screen to backup and restore the configuration or reset the factory
defaults to your EMG1302-R10A.
This screen allows you to reboot the EMG1302-R10A without turning the
power off.
EMG1302-R10A User’s Guide
41
Chapter 5 Router Mode
42
EMG1302-R10A User’s Guide
CHAPTER 6
6.1 Overview
This chapter provides tutorials for setting up your EMG1302-R10A.
• Set Up a Wireless Network with WPS
• Configure Wireless Security without WPS
• Using Multiple SSIDs on the EMG1302-R10A
6.2 Set Up a Wireless Network with WPS
This section gives you an example of how to set up wireless network using WPS. This example uses
the EMG1302-R10A as the AP and as the wireless client which connects to a notebook.
Tutorials
Note: The wireless client must be a WPS-aware device (for example, a WPS USB adapter
or PCI card).
There are two WPS methods for creating a secure connection. This tutorial shows you how to do
both.
• Push Button Configuration (PBC) - create a secure wireless network simply by pressing a
button. See Section 6.2.1 on page 43.This is the easier method.
• PIN Configuration - create a secure wireless network simply by entering a wireless client's PIN
(Personal Identification Number) in the EMG1302-R10A’s interface. See Section 6.2.2 on page
44. This is the more secure method, since one device can authenticate the other.
6.2.1 Push Button Configuration (PBC)
1Make sure that your EMG1302-R10A is turned on. Make sure the device is placed within range of
your computer.
2Make sure that you have installed the wireless client (this example uses the ) driver and utility in
your notebook.
3In the wireless client utility, find the WPS settings. Enable WPS and press the WPS button (Start or
WPS button).
4Log into EMG1302-R10A’s Web Configurator and press the Push Button in the Configuration >
Network > Wireless LAN > WPS Station screen.
EMG1302-R10A User’s Guide43
Chapter 6 Tutorials
Wireless Client
Access Point
SECURITY INFO
COMMUNICATION
WITHIN 2 MINUTES
Note: Your EMG1302-R10A has a WPS button located on top panel, as well as a WPS
Note: It doesn’t matter which button is pressed first. You must press the second button
The EMG1302-R10A sends the proper configuration settings to the wireless client. This may take up
to two minutes. Then the wireless client is able to communicate with the EMG1302-R10A securely.
The following figure shows you an example to set up wireless network and security by pressing a
button on both EMG1302-R10A and wireless client (the in this example).
Figure 22 Example WPS Process: PBC Method
button in its configuration utility. Both buttons have exactly the same function; you
can use one or the other.
within two minutes of pressing the first one.
6.2.2 PIN Configuration
When you use the PIN configuration method, you need to use both EMG1302-R10A’s configuration
interface and the client’s utilities.
1Launch your wireless client’s configuration utility. Go to the WPS settings and select the PIN method
to get a PIN number.
2Enter the PIN number to the PIN field in the Configuration > Network > Wireless LAN > WPS
Station screen on the EMG1302-R10A.
44
EMG1302-R10A User’s Guide
Chapter 6 Tutorials
WITHIN 2 MINUTES
Wireless Client
Access Point
3Click Start buttons (or button next to the PIN field) on both the wireless client utility screen and the
EMG1302-R10A’s WPS Station screen within two minutes.
The EMG1302-R10A authenticates the wireless client and sends the proper configuration settings to
the wireless client. This may take up to two minutes. Then the wireless client is able to
communicate with the EMG1302-R10A securely.
The following figure shows you the example to set up wireless network and security on EMG1302R10A and wireless client (ex. in this example) by using PIN method.
Figure 23 Example WPS Process: PIN Method
6.3 Configure Wireless Security without WPS
This example shows you how to configure wireless security settings with the following parameters
on your EMG1302-R10A.
SSIDSSID_Example
Channel6
Security WPA-PSK
(Pre-Shared Key: ThisismyWPA-PSKpre-sharedkey)
Follow the steps below to configure the wireless settings on your EMG1302-R10A.
EMG1302-R10A User’s Guide
45
Chapter 6 Tutorials
The instructions require that your hardware is connected (see the Quick Start Guide) and you are
logged into the Web Configurator through your LAN connection (see Section 2.3 on page 19).
1Make sure the WLAN switch (at the back panel of the EMG1302-R10A) is set to ON.
2Open the Configuration > Network > Wireless LAN > General screen in the AP’s Web
Configurator.
3Confirm that the status of wireless LAN is ON.
4Enter SSID_Example3 as the SSID and select Channel-06 as the channel. Set security to WPA2-
PSK and enter ThisismyWPA-PSKpre-sharedkey in the Pre-Shared Key field. Click Apply.l
46
EMG1302-R10A User’s Guide
Chapter 6 Tutorials
5Open the Status screen. Verify your wireless and wireless security settings under Device
Information and check if the WLAN connection is up under Interface Status.
6.3.1 Configure Your No tebook
Note: We use the ZyXEL M-302 wireless adapter utility screens as an example for the
wireless client. The screens may vary for different models.
1The EMG1302-R10A supports IEEE 802.11b, IEEE 802.11g and IEEE 802.11n wireless clients. Make
sure that your notebook or computer’s wireless adapter supports one of these standards.
2Wireless adapters come with software sometimes called a “utility” that you install on your
computer. See your wireless adapter’s User’s Guide for information on how to do that.
3After you’ve installed the utility, open it. If you cannot see your utility’s icon on your screen, go to
Start > Programs and click on your utility in the list of programs that appears. The utility displays
a list of APs within range, as shown in the example screen below.
EMG1302-R10A User’s Guide
47
Chapter 6 Tutorials
4Select SSID_Example3 and click Connect.
5Select WPA-PSK and type the security key in the following screen. Click Next.
6The Confirm Save window appears. Check your settings and click Save to continue.
7Check the status of your wireless connection in the screen below. If your wireless connection is
weak or you have no connection, see Chapter 22 Troubleshooting section of this User’s Guide.
48
EMG1302-R10A User’s Guide
If your connection is successful, open your Internet browser and enter http://www.zyxel.com or the
URL of any other web site in the address bar. If you are able to access the web site, your wireless
connection is successfully configured.
6.4 Using Multiple SSIDs on the EMG1302-R10A
Chapter 6 Tutorials
You can configure more than one SSID on a EMG1302-R10A when it is operating in access point or
universal repeater mode. This allows you to configure multiple independent wireless networks on
the EMG1302-R10A as if there were multiple APs (virtual APs). Each virtual AP has its own SSID,
wireless security type and MAC filtering settings. That is, each SSID on the EMG1302-R10A
represents a different access point/wireless network to wireless clients in the network.
Clients can associate only with the SSIDs for which they have the correct security settings. Clients
using different SSIDs can access the Internet and the wired network behind the EMG1302-R10A
(such as a printer). You can allow communication between wireless clients of different SSIDs in the
Configuration > Network > Wireless LAN > General screen. See Section 8.4 on page 78 for
more information.
EMG1302-R10A User’s Guide
49
Chapter 6 Tutorials
A
B
C
SSID_Guest
SSID_Worker
SSID_VoIP
For example, you may set up three wireless networks (A, B and C) in your office. A is for workers,
B is for guests and C is specific to a VoIP device in the meeting room.
6.4.1 Configuring Security Settings of Multiple SSIDs
This example shows you how to configure the SSIDs with the following parameters on your
EMG1302-R10A.
SSIDSECURITY TYPEKEYMAC FILTERING
SSID_WorkerWPA2-PSK
WPA Compatible
SSID_VoIPWPA-PSKVoIPOnly12345678Allow
SSID_GuestWPA-PSKkeyexample123Disable
1Connect your computer to the LAN port of the EMG1302-R10A using an Ethernet cable.
2The default IP address of the EMG1302-R10A in router mode is “192.168.1.1”. In this case, your
computer must have an IP address in the range between “192.168.1.2” and “192.168.1.254”.
3Click Start > Run on your computer in Windows. Type “cmd” in the dialog box. Enter “ipconfig” to
show your computer’s IP address. If your computer’s IP address is not in the correct range then see
Appendix C on page 251 for information on changing your computer’s IP address.
4After you’ve set your computer’s IP address, open a web browser such as Internet Explorer and
type “http://192.168.1.1” as the web address in your web browser.
5Enter “1234” (default) as the password and click Login.
DoNotStealMyWirelessNetworkDisable
00:A0:C5:01:23:45
6Type a new password and retype it to confirm, then click Apply. Otherwise, click Ignore.
50
EMG1302-R10A User’s Guide
Chapter 6 Tutorials
7Go to Configuration > Network > Wireless LAN > More AP. Click the Edit icon of the first
entry to configure wireless and security settings for SSID_Worker.
8Configure the screen as follows. In this example, you enable Intra-BSS Traffic for SSID_Worker
to allow wireless clients in the same wireless network to communicate with each other. Click Apply.
9Click the Edit icon of the second entry to configure wireless and security settings for SSID_VoIP.
EMG1302-R10A User’s Guide
51
Chapter 6 Tutorials
10 Configure the screen as follows. You do not enable Intra-BSS Traffic for SSID_VoIP. Click Apply.
11 Click the MAC Filter tab to configure MAC filtering for the SSID_VoIP wireless network. Select
SSID_VoIP from the SSID Select drop-down list, enable MAC address filtering and set the Filter
Action to Allow. Enter the VoIP device’s MAC address in the Mac Address field and click Apply to
allow only the VoIP device to associate with the EMG1302-R10A using this SSID.
52
EMG1302-R10A User’s Guide
PART II
Technical Reference
53
54
7.1 Overview
LAN
WAN
This chapter discusses the EMG1302-R10A’s WAN screens. Use these screens to configure your
EMG1302-R10A for Internet access.
A WAN (Wide Area Network) connection is an outside connection to another network or the
Internet. It connects your private networks such as a LAN (Local Area Network) and other
networks, so that a computer in one location can communicate with computers in other locations.
Figure 24 LAN and WAN
CHAPTER 7
WAN
7.2 What You Can Do
•Use the Management WAN screen to enter your ISP information and set how the computer
acquires its IP, DNS and WAN MAC addresses (Section 7.4 on page 59).
•Use the Advanced screen to enable multicasting and auto-IP-change (Section 7.5 on page 72).
EMG1302-R10A User’s Guide55
Chapter 7 WAN
7.3 What You Need To Know
The information in this section can help you configure the screens for your WAN connection, as well
as enable/disable some advanced features of your EMG1302-R10A.
7.3.1 Configuring Your Internet Connection
Encapsulation Method
Encapsulation is used to include data from an upper layer protocol into a lower layer protocol. To set
up a WAN connection to the Internet, you need to use the same encapsulation method used by your
ISP (Internet Service Provider). If your ISP offers a dial-up Internet connection using PPPoE (PPP
over Ethernet) or PPTP (Point-to-Point Tunneling Protocol), they should also provide a username
and password (and service name) for user authentication.
WAN IP Address
The WAN IP address is an IP address for the EMG1302-R10A, which makes it accessible from an
outside network. It is used by the EMG1302-R10A to communicate with other devices in other
networks. It can be static (fixed) or dynamically assigned by the ISP each time the EMG1302-R10A
tries to access the Internet.
If your ISP assigns you a static WAN IP address, they should also assign you the subnet mask and
DNS server IP address(es) (and a gateway IP address if you use the Ethernet or ENET ENCAP
encapsulation method).
DNS Server Address Assignment
Use Domain Name System (DNS) to map a domain name to its corresponding IP address and vice
versa, for instance, the IP address of www.zyxel.com is 204.217.0.2. The DNS server is extremely
important because without it, you must know the IP address of a computer before you can access
it.
The EMG1302-R10A can get the DNS server addresses in the following ways.
1The ISP tells you the DNS server addresses, usually in the form of an information sheet, when you
sign up. If your ISP gives you DNS server addresses, manually enter them in the DNS server fields.
2If your ISP dynamically assigns the DNS server IP addresses (along with the EMG1302-R10A’s WAN
IP address), set the DNS server fields to get the DNS server address from the ISP.
56
EMG1302-R10A User’s Guide
WAN MAC Address
A
B
C
D
Server
The MAC address screen allows users to configure the WAN port's MAC address by either using the
factory default or cloning the MAC address from a computer on your LAN. Choose Factory Default
to select the factory assigned default MAC Address.
Otherwise, click Clone the computer's MAC address and enter the IP address of the computer on
the LAN whose MAC you are cloning. Once it is successfully configured, the address will be copied to
configuration file. It is recommended that you clone the MAC address prior to hooking up the WAN
Port.
Maximum Transmission Unit
A maximum transmission unit (MTU) is the largest size packet or frame, specified in octets (eightbit bytes) that can be sent in a packet- or frame-based network. The Transmission Control Protocol
(TCP) uses the MTU to determine the maximum size of each packet in any transmission. Too large
an MTU size may mean retransmissions if the packet encounters a router that can't handle that
large a packet. Too small an MTU size means relatively more header overhead and more
acknowledgements that have to be sent and handled.
7.3.2 Multicast
Chapter 7 WAN
Traditionally, IP packets are transmitted in one of either two ways - Unicast (1 sender - 1 recipient)
or Broadcast (1 sender - everybody on the network). Multicast delivers IP packets to a group of
hosts on the network - not everybody and not just 1.
Figure 25 Multicast Example
In the multicast example above, systems A and D comprise one multicast group. In multicasting,
the server only needs to send one data stream and this is delivered to systems A and D.
IGMP (Internet Group Multicast Protocol) is a network-layer protocol used to establish membership
in a multicast group - it is not used to carry user data. The EMG1302-R10A supports both IGMP
version 1 (IGMP-v1) and IGMP version 2 (IGMP-v2).
At start up, the EMG1302-R10A queries all directly connected networks to gather group
EMG1302-R10A User’s Guide
membership. After that, the EMG1302-R10A periodically updates this information. IP multicasting
can be enabled/disabled on the EMG1302-R10A LAN and/or WAN interfaces in the Web Configurator
(LAN; WAN). Select None to disable IP multicasting on these interfaces.
57
Chapter 7 WAN
WAN
LAN
192.168.1.23192.168.1.1
10.0.0.1
Auto-IP-Change
When the EMG1302-R10A gets a WAN IP address which is in the same subnet as the LAN IP
address 192.168.1.1, Auto-IP-Change allows the EMG1302-R10A to change its LAN IP address to
10.0.0.1 automatically. If the EMG1302-R10A’s original LAN IP address is 10.0.0.1 and the WAN IP
address is in the same subnet, such as 10.0.0.3, the EMG1302-R10A switches to use 192.168.1.1
as its LAN IP address.
Figure 26 Auto-IP-Change
Auto-IP-Change only works under the following conditions:
• The EMG1302-R10A must be in Router Mode (see Chapter 21 on page 158 for more
information) for Auto-IP-Change to become active.
• The EMG1302-R10A is set to receive a dynamic WAN IP address using the Ethernet or PPPoE
connection type.
58
EMG1302-R10A User’s Guide
7.4 Management WAN
Use this screen to view, change, or add your EMG1302-R10A’s Internet access settings. Click
Configuration > Network > WAN. The following screen opens.
Figure 27 Configuration > Network > Management WAN
The following table describes the labels in this screen.
Table 11 Configuration > Network > Management WAN
LABELDESCRIPTION
Add New WAN Entry Click this to create a new WAN interface entry.
#This is the index number of the connection.
DefaultSelect the WAN interface that you want to configure as default.
NameThis is the service name of the connection.
InterfaceThis is the interface of the connection.
TypeThis shows the type of interface used by this connection.
VLAN IDThis indicates the VLAN ID number assigned to traffic sent through this connection.
IP AddressThis is the WAN IP address used by this connection.
StatusThis shows the status of the connection.
ModifyClick the Edit icon to configure the connection.
Click the Delete icon to delete this connection from the EMG1302-R10A. A window
displays asking you to confirm that you want to delete the connection.
Chapter 7 WAN
EMG1302-R10A User’s Guide
59
Chapter 7 WAN
7.4.1 Add/Edit Internet Connection
Click the Add New WAN Entry in the Configuration > WAN screen or the Edit icon next to the
connection you want to configure. Use this screen to configure a WAN connection. The screen varies
depending on the encapsulation you select.
This screen displays when you select Add New WAN Entry encapsulation.
Figure 28 Configuration > WAN > Add New WAN Entry
60
EMG1302-R10A User’s Guide
Chapter 7 WAN
The following table describes the labels in this screen.
Table 12 Configuration > WAN > Add New WAN Entry
LABELDESCRIPTION
ISP Parameters for Internet Access
WAN NameEnter the name designation for this setting.
Note: Only the following parameters are available in Bridge mode: WAN name,
encapsulation and VID.
EncapsulationSelect the encapsulation type: PPPoE, PPTP, IPoE, or Bridge.
VID (1~4094)Enter a VLAN identifier between 1 to 4094 (the 802.1Q tag specifies only a priority and
IP AddressSelect Obtain an IP Address Automatically to have your ISP assign the parameters.
MTU SizeEnter the Maximum Transmission Unit (MTU) or the largest packet size per frame that
DHCP Option
Enable DHCP Option
121
Enable DHCP Option 60Select Enable DHCP Option 60 to enable and enter the device’s Vendor Class Identifier
DNS Server
First DNS Server
Second DNS Server
WAN MAC Address
WAN MAC AddressThe MAC address section allows users to configure the WAN port's MAC address by
Factory defaultSelect Factory default to use the factory assigned default MAC Address.
Clone the
computer’s MAC
address
Set WAN MAC
Address
ApplyClick Apply to save your changes back to the EMG1302-R10A.
CancelClick Cancel to exit this screen without saving.
is referred to as a priority tag). In bridge mode, VID 1 (the default VLAN ID) is reserved
for a management VLAN.
Select Static IP Address to enter a pre-defined IP Address, Subnet Mask, and
Gateway IP address.
your EMG1302-R10A can receive and process.
Select Enable DHCP Option 121 to enable the classless route option 121.
(VCI).
If you select Get automatically from ISP (Default) in the WAN IP Address Assignment section, this field will automatically be set to From ISP. The field to the
right displays the (read-only) DNS server IP address that the ISP assigns.
If you select Use Fixed IP Address in the WAN IP Address Assignment section,
this field will automatically be set to User-Defined. Enter the DNS server's IP address
in the field to the right.
either using the EMG1302-R10A’s MAC address, copying the MAC address from a
computer on your LAN or manually entering a MAC address.
Select Clone the computer's MAC address and enter the IP address of the computer
on the LAN whose MAC you are cloning.
Select this option and enter the MAC address you want to use.
EMG1302-R10A User’s Guide
61
Chapter 7 WAN
7.4.1.1 PPPoE Encapsulation
The EMG1302-R10A supports PPPoE (Point-to-Point Protocol over Ethernet). PPPoE is an IETF
standard (RFC 2516) specifying how a personal computer (PC) interacts with a broadband modem
(DSL, cable, wireless, etc.) connection. The PPP over Ethernet option is for a dial-up connection
using PPPoE.
For the service provider, PPPoE offers an access and authentication method that works with existing
access control systems (for example Radius).
One of the benefits of PPPoE is the ability to let you access one of multiple network services, a
function known as dynamic service selection. This enables the service provider to easily create and
offer new IP services for individuals.
Operationally, PPPoE saves significant effort for both you and the ISP or carrier, as it requires no
specific configuration of the broadband modem at the customer site.
By implementing PPPoE directly on the EMG1302-R10A (rather than individual computers), the
computers on the LAN do not need PPPoE software installed, since the EMG1302-R10A does that
part of the task. Furthermore, with NAT, all of the LANs’ computers will have access.
62
EMG1302-R10A User’s Guide
This screen displays when you select PPP over Ethernet encapsulation.
Figure 29 Internet Connection: PPP over Ethernet Encapsulation
Chapter 7 WAN
EMG1302-R10A User’s Guide
63
Chapter 7 WAN
The following table describes the labels in this screen.
Table 13 Internet Connection: PPP over Ethernet Encapsulation
LABELDESCRIPTION
ISP Parameters for Internet Access
EncapsulationSelect PPP over Ethernet if you connect to your Internet via dial-up.
IPv4 / IPv6Click the drop-down menu to select either an IPv4 Only or dual stack interface.
Enable VID
VID (1~4094)Enter a VLAN identifier between 1 to 4094 (the 802.1Q tag specifies only a priority and
PPP Information
PPP UsernameEnter the user name to use for logging in to the PPP service.
PPP PasswordEnter the password to associate with the PPP user name (previous field).
MTU SizeEnter the Maximum Transmission Units (MTU) in bytes (default: 1454, range: 68 to
PPP Auto Connect Click to enable the PPP auto connect function when the service is disconnected.
IDLE Timeout
(second)
PPPoE Service
Name
WAN IP Address Assignment
Get automatically
from ISP
Use Fixed IP
Address
My WAN IP Address Enter your WAN IP address in this field if you selected Use Fixed IP Address.
DNS Server
First DNS Server
Second DNS Server
WAN MAC Address
WAN MAC AddressThe MAC address section allows users to configure the WAN port's MAC address by
Factory defaultSelect Factory default to use the factory assigned default MAC Address.
Clone the
computer’s MAC
address
Set WAN MAC
Address
is referred to as a priority tag). In bridge mode, VID 1 (the default VLAN ID) is reserved
for a management VLAN.
1492).
Enter a variable (seconds) to designate the timeout period during an idle session.
Enter the name to designate the service.
Select this option If your ISP did not assign you a fixed IP address. This is the default
selection.
Select this option If the ISP assigned a fixed IP address.
Select Obtained From ISP if your ISP dynamically assigns DNS server information
(and the EMG1302-R10A's WAN IP address). The field to the right displays the (readonly) DNS server IP address that the ISP assigns.
Select User-Defined if you have the IP address of a DNS server. Enter the DNS
server's IP address in the field to the right. If you chose User-Defined, but leave the
IP address set to 0.0.0.0, User-Defined changes to None after you click Apply. If you
set a second choice to User-Defined, and enter the same IP address, the second User-Defined changes to None after you click Apply.
Select None if you do not want to configure DNS servers. If you do not configure a DNS
server, you must know the IP address of a computer in order to access it.
using the EMG1302-R10A’s MAC address, copying the MAC address from a computer on
your LAN or manually entering a MAC address.
Select Clone the computer's MAC address and enter the IP address of the computer
on the LAN whose MAC you are cloning.
Select this option and enter the MAC address you want to use.
64
EMG1302-R10A User’s Guide
Table 13 Internet Connection: PPP over Ethernet Encapsulation (continued)
LABELDESCRIPTION
Passthrough
PPTP Passthrough
L2TP Passthrough
IPSec Passthrough
ApplyClick Apply to save your changes back to the EMG1302-R10A.
CancelClick Cancel to exit this screen without saving.
7.4.1.2 PPTP Encapsulation
Point-to-Point Tunneling Protocol (PPTP) is a network protocol that enables secure transfer of data
from a remote client to a private server, creating a Virtual Private Network (VPN) using TCP/IPbased networks.
PPTP supports on-demand, multi-protocol and virtual private networking over public networks, such
as the Internet.
Chapter 7 WAN
EMG1302-R10A User’s Guide
65
Chapter 7 WAN
This screen displays when you select PPTP encapsulation.
Figure 30 Internet Connection: PPTP Encapsulation
66
EMG1302-R10A User’s Guide
Chapter 7 WAN
The following table describes the labels in this screen.
Table 14 Internet Connection:PPTP Encapsulation
LABELDESCRIPTION
ISP Parameters for Internet Access
EncapsulationSelect PPTP to create a Virtual Private Network (VPN) using TCP/IP-based network.
Enable VID
VID (1~4094)Enter a VLAN identifier between 1 to 4094 (the 802.1Q tag specifies only a priority and
PPTP Information
PPTP UsernameType the username given to you by your ISP.
PPTP PasswordType the password associated with the user name above.
MTU SizeEnter the Maximum Transmission Unit (MTU) or the largest packet size per frame that
PPTP Auto ConnectSelect this check box to enable PPTP Auto Connect.
IDLE Timeout
(second)
PPTP Configuration
PPTP Server IP
Address
Obtain an IP
Address
Automatically
Static IP AddressSelect this option If the ISP assigned a fixed IP address.
IP AddressEnter your WAN IP address in this field if you selected Static IP Address.
Subnet MaskYour EMG1302-R10A will automatically calculate the subnet mask based on the IP
Gateway IP
address
WAN IP Address Assignment
Get automatically
from ISP
Use Fixed IP
Address
My WAN IP Address Enter your WAN IP address in this field if you selected Use Fixed IP Address.
DNS Server
First DNS Server
Second DNS Server
is referred to as a priority tag). In bridge mode, VID 1 (the default VLAN ID) is reserved
for a management VLAN.
your EMG1302-R10A can receive and process.
This value specifies the time in minutes that elapses before the router automatically
disconnects from the PPPoE server.
Type the IP address of the PPTP server.
Select this option If your ISP did not assign you a fixed IP address. This is the default
selection.
address that you assign. Unless you are implementing subnetting, use the subnet mask
computed by the EMG1302-R10A.
Enter a Gateway IP Address (if your ISP gave you one) in this field.
Select this option If your ISP did not assign you a fixed IP address. This is the default
selection.
Select this option If the ISP assigned a fixed IP address.
Select Obtained From ISP if your ISP dynamically assigns DNS server information
(and the EMG1302-R10A's WAN IP address). The field to the right displays the (readonly) DNS server IP address that the ISP assigns.
Select User-Defined if you have the IP address of a DNS server. Enter the DNS
server's IP address in the field to the right. If you chose User-Defined, but leave the
IP address set to 0.0.0.0, User-Defined changes to None after you click Apply. If you
set a second choice to User-Defined, and enter the same IP address, the second User-Defined changes to None after you click Apply.
Select None if you do not want to configure DNS servers. If you do not configure a DNS
server, you must know the IP address of a computer in order to access it.
EMG1302-R10A User’s Guide
67
Chapter 7 WAN
Table 14 Internet Connection:PPTP Encapsulation (continued)
LABELDESCRIPTION
WAN MAC Address
Factory defaultSelect Factory default to use the factory assigned default MAC Address.
Clone the
computer’s MAC
address
Set WAN MAC
Address
Passthrough
PPTP Passthrough
L2TP Passthrough
IPSec Passthrough
ApplyClick Apply to save your changes back to the EMG1302-R10A.
CancelClick Cancel to exit this screen without saving.
7.4.1.3 IPoE Encapsulation
IP over Ethernet is an alternative to PPP encapsulation. In IPoE DHCP extensions and other
protocols, like for example Extensible Authentication Protocol, are combined with DHCP to provide
capabilities similar to PPPoE. You can configure the WAN connection with IPoE to use NAT, firewall or
IGMP proxy in EMG1302-R10A.
Select Clone the computer's MAC address and enter the IP address of the computer
on the LAN whose MAC you are cloning.
Select this option and enter the MAC address you want to use.
68
EMG1302-R10A User’s Guide
This screen displays when you select IPoE encapsulation.
Figure 31 Internet Connection: IPoE Encapsulation
Chapter 7 WAN
EMG1302-R10A User’s Guide
69
Chapter 7 WAN
The following table describes the labels in this screen.
Table 15 Internet Connection: IP over Ethernet Encapsulation
LABELDESCRIPTION
ISP Parameters for Internet Access
EncapsulationYou must choose the IPoE option when the WAN port is used as a regular Ethernet.
IPv4 / IPv6Click the drop down menu to select the available options: IPv4 only, dual stack, or
Enable VID
VID (1~4094)Enter a VLAN identifier between 1 to 4094 (the 802.1Q tag specifies only a priority and
IP Address
Obtain an IP
Address
Automatically
Static IP AddressSelect this option If the ISP assigned a fixed IP address.
IP AddressEnter your WAN IP address in this field if you selected Static IP Address.
Subnet MaskYour EMG1302-R10A will automatically calculate the subnet mask based on the IP
Gateway IP
address
MTU SizeEnter the Maximum Transmission Unit (MTU) or the largest packet size per frame that
DHCP Option
Enable DHCP Option
121
Enable DHCP Option 60Select Enable DHCP Option 60 to enable and enter the device’s Vendor Class Identifier
DNS Server
First DNS Server
Second DNS Server
IPv6.
is referred to as a priority tag). In bridge mode, VID 1 (the default VLAN ID) is reserved
for a management VLAN.
Select this option If your ISP did not assign you a fixed IP address. This is the default
selection.
address that you assign. Unless you are implementing subnetting, use the subnet mask
computed by the EMG1302-R10A.
Enter a Gateway IP Address (if your ISP gave you one) in this field.
your EMG1302-R10A can receive and process.
Select Enable DHCP Option 121 to enable the classless route option 121.
(VCI).
Select Obtained From ISP if your ISP dynamically assigns DNS server information
(and the EMG1302-R10A's WAN IP address). The field to the right displays the (readonly) DNS server IP address that the ISP assigns.
70
Select User-Defined if you have the IP address of a DNS server. Enter the DNS
server's IP address in the field to the right. If you chose User-Defined, but leave the
IP address set to 0.0.0.0, User-Defined changes to None after you click Apply. If you
set a second choice to User-Defined, and enter the same IP address, the second User-Defined changes to None after you click Apply.
Select None if you do not want to configure DNS servers. If you do not configure a DNS
server, you must know the IP address of a computer in order to access it.
WAN MAC Address
WAN MAC AddressThe MAC address section allows users to configure the WAN port's MAC address by
using the EMG1302-R10A’s MAC address, copying the MAC address from a computer on
your LAN or manually entering a MAC address.
Factory defaultSelect Factory default to use the factory assigned default MAC Address.
Clone the
computer’s MAC
address
Set WAN MAC
Address
Select Clone the computer's MAC address and enter the IP address of the computer
on the LAN whose MAC you are cloning.
Select this option and enter the MAC address you want to use.
EMG1302-R10A User’s Guide
Table 15 Internet Connection: IP over Ethernet Encapsulation (continued)
LABELDESCRIPTION
Passthrough
PPTP Passthrough
L2TP Passthrough
IPSec Passthrough
ApplyClick Apply to save your changes back to the EMG1302-R10A.
CancelClick Cancel to exit this screen without saving.
7.4.2 Bridge Encapsulation
This screen displays when you select Bridge encapsulation.
Figure 32 Internet Connection: Bridge Encapsulation
Chapter 7 WAN
The following table describes the labels in this screen.
Table 16 Internet Connection: Bridge Encapsulation
LABELDESCRIPTION
ISP Parameters for Internet Access
EncapsulationSelect Bridge when your ISP provides you more than one IP address and you want the
Enable VID
VID (1~4094)Enter a VLAN identifier between 1 to 4094 (the 802.1Q tag specifies only a priority and
Ignore WAN Vlan ID
when tag frame
reveive from LAN
site
ApplyClick Apply to save your changes back to the EMG1302-R10A.
CancelClick Cancel to exit this screen without saving.
EMG1302-R10A User’s Guide
connected computers to get individual IP address from ISP’s DHCP server directly. If
you select Bridge, you cannot use routing functions, such as DHCP server.
The function is currently available for the IPv4 protocol.
is referred to as a priority tag). In bridge mode, VID 1 (the default VLAN ID) is reserved
for a management VLAN.
71
Chapter 7 WAN
7.5 Advanced WAN Screen
Use this screen to enable Multicast and enable Auto-IP-Change mode.
To change your EMG1302-R10A’s advanced WAN settings, click Configuration > Network > WAN
> Advanced. The screen appears as shown.
Figure 33 Configuration > Network > WAN > Advanced
The following table describes the labels in this screen.
Table 17 Configuration > Network > WAN > Advanced
LABELDESCRIPTION
Multicast Setup
Multicast SetupSelect IGMPv1/v2/v3 to enable multicasting. This applies to traffic routed from the
WAN to the LAN.
Select None to disable this feature. This may cause incoming traffic to be dropped or
sent to all connected network devices.
IGMP SnoopingThe IGMP Snooping allows for listening to Internet Group Management Protocol (IGMP)
network traffic. The feature allows the ZyXEL device to listen in on the IGMP
conversation between hosts and routers. This allows the ZyXEL device to map links to
determine which map links require IP multicast streams.
Select this check box to use the IGMP Snooping function.
Auto-Subnet Configuration
Enable Auto-IP-
Change Mode
ApplyClick Apply to save your changes back to the EMG1302-R10A.
CancelClick Cancel to exit this screen without saving.
Select this option to have the EMG1302-R10A switch to bridge mode automatically
when the EMG1302-R10A gets a WAN IP address in the range of 192.168.x.y (where x
and y are from zero to nine) no matter what the LAN IP address is.
72
EMG1302-R10A User’s Guide
7.6 IPv6 Screen
Use this section to enable and configure IPv6 addresses. By using IPv6, you are able to receive
services such as: quality of service (QoS), end-to-end security, and globally unique addresses.
Figure 34 Configuration > Network > WAN > IPv6
Chapter 7 WAN
The following table describes the labels in this screen.
Table 18 Configuration > Network > WAN > IPv6
LABELDESCRIPTION
IPv6 Setup
IPv6Select a field to Enable or Disable the IPv6 standard.
IPv6 ConnectionSelect the IPv6 connection type: Static IPv6, DHCPv6, PPoE, or 6rd.
IPv6
IPv6 AddressEnter the IPv6 address specified in heaxadecimal using 16-bit values between colons.
Subnet Prefix
Length
Default Gateway Enter the specified gateway to set as default for the IPv6 connection type.
DHCPv6
DNC Setting
PPPoE
Enter the subnet prefix variable, a decimal value to define how many of the high-order
contiguous bits of the address are the prefix.
• Click Obtain DNS server address automatically if you do not know your
DNS server IP address(es)
• If you know your DNS server IP address(es), click Use the following DNS
server addresses, and type them in the Primary DNS server and
Secondary DNS server fields.
.
EMG1302-R10A User’s Guide
73
Chapter 7 WAN
Table 18 Configuration > Network > WAN > IPv6 (continued)
LABELDESCRIPTION
Address ModeClick Dynamic IP if your ISP assigs an IP address.
If you have a fixed IP address assigned to you, click Static IP, and type the IP
Address, Username and Password in the following fields.
UsernameEnter the username as it is assigned for this account.
PasswordEnter the designated password for the username in the previous field..
Service NameEnter a name to assign this service.
Reconnect Mode Select Auto Reconnect (always-on) to have the Reconnect Mode continuously
connected.
Select Connect-on-Demand to have the Reconnect Mode only active when WAN
service is active.
Select Manually to only allow WAN reconnection if manually initiated by a user.
Maximum Idle
Time
Remote IPv4
Address
Remote PREFIXEnter the IPv6 prefix for the PPPoE tunnel.
6RD
Remote IPv4
Address
Remote PREFIXEnter the IPv6 prefix for the 6RD tunnel. This is only available if 6RD Static-type is
Primary DNS
Address
Secondary DNS
Address
LAN IPv6 Address Enter the static IPv6 address assigned to this device.
LAN IPv6 Link-Local
Address
AutoconfigurationEnable/Disable the auto IP address configuration setting.
Autoconfiguration
Type
Router
Advertisement
Lifetime
ApplyClick Apply to save your changes back to the EMG1302-R10A.
CancelClick Cancel to exit this screen without saving.
This value specifies the time in seconds that elapses before the router automatically
disconnects from the PPPoE server.
Enter the designated IPv4 address to allow tunneling across ISP network.
Enter the designated IPv4 address to allow tunneling across an ISP network.
designated.
Enter the primary DNS server address assigned by the ISP.
Enter the secondary DNS server address assigned by the ISP.
The system assigns a local address designed for use on a single link.
If autoconfiguration is enabled, the following types are available: IP address, stateful,
and stateless.
The device refreshes the preferred and valid time with each advertisement message.
The device is configured with a valid lifetime value for each network prefix, broadcasted
in the advertisement message.
74
EMG1302-R10A User’s Guide
8.1 Overview
This chapter discusses how to configure the wireless network settings in your EMG1302-R10A. See
the appendices for more detailed information about wireless networks.
The following figure provides an example of a wireless network.
Figure 35 Example of a Wireless Network
CHAPTER 8
Wireless LAN
The wireless network is the part in the blue circle. In this wireless network, devices A and B are
called wireless clients. The wireless clients use the access point (AP) to interact with other devices
(such as the printer) or with the Internet. Your EMG1302-R10A is the AP.
8.2 What You Can Do
•Use the General screen to enter the SSID, select the channel, and configure wireless security
(Section 8.4 on page 78).
•Use the More AP screen to enable and configure multiple wireless networks (Section 8.6 on page
83)
•Use the MAC Filter screen to allow or deny wireless stations based on their MAC addresses from
connecting to the EMG1302-R10A (Section 8.7 on page 85).
•Use the Advanced screen to allow intra-BSS network and set the RTS/CTS Threshold (Section
8.8 on page 86).
EMG1302-R10A User’s Guide75
Chapter 8 Wireless LAN
•Use the QoS screen to ensure Quality of Service (QoS) in your wireless network (Section 8.9 on
page 87).
•Use the WPS screen to quickly set up a wireless network with strong security, without having to
configure security settings manually (Section 8.10 on page 88).
•Use the WPS Station screen to add a wireless station using WPS (Section 8.11 on page 89).
•Use the Scheduling screen to set the times your wireless LAN is turned on and off (Section 8.12
on page 90).
•Use the WDS screen to set up Wireless Distribution System (WDS) (Section 8.13 on page 91).
8.3 What You Should Know
Every wireless network must follow these basic guidelines.
• Every wireless client in the same wireless network must use the same SSID.
The SSID is the name of the wireless network. It stands for Service Set IDentity.
• If two wireless networks overlap, they should use different channels.
Like radio stations or television channels, each wireless network uses a specific channel, or
frequency, to send and receive information.
• Every wireless client in the same wireless network must use security compatible with the AP.
Security stops unauthorized devices from using the wireless network. It can also protect the
information that is sent in the wireless network.
Wireless Security Overview
The following sections introduce different types of wireless security you can set up in the wireless
network.
SSID
Normally, the AP acts like a beacon and regularly broadcasts the SSID in the area. You can hide the
SSID instead, in which case the AP does not broadcast the SSID. In addition, you should change
the default SSID to something that is difficult to guess.
This type of security is fairly weak, however, because there are ways for unauthorized devices to
get the SSID. In addition, unauthorized devices can still see the information that is sent in the
wireless network.
MAC Address Filter
Every wireless client has a unique identification number, called a MAC address.1 A MAC address is
usually written using twelve hexadecimal characters
1.Some wireless devices, such as scanners, can detect wireless networks but cannot use wireless
networks. These kinds of wireless devices might not have MAC addresses.
2
; for example, 00A0C5000002 or
76
2.Hexadecimal characters are 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, A, B, C, D, E, and F.
EMG1302-R10A User’s Guide
Chapter 8 Wireless LAN
00:A0:C5:00:00:02. To get the MAC address for each wireless client, see the appropriate User’s
Guide or other documentation.
You can use the MAC address filter to tell the AP which wireless clients are allowed or not allowed to
use the wireless network. If a wireless client is allowed to use the wireless network, it still has to
have the correct settings (SSID, channel, and security). If a wireless client is not allowed to use the
wireless network, it does not matter if it has the correct settings.
This type of security does not protect the information that is sent in the wireless network.
Furthermore, there are ways for unauthorized devices to get the MAC address of an authorized
wireless client. Then, they can use that MAC address to use the wireless network.
User Authentication
You can make every user log in to the wireless network before they can use it. This is called user
authentication.
For wireless networks, there are two typical places to store the user names and passwords for each
user.
• In the AP: this feature is called a local user database or a local database.
• In a RADIUS server: this is a server used in businesses more than in homes.
If your AP does not provide a local user database and if you do not have a RADIUS server, you
cannot set up user names and passwords for your users.
Unauthorized devices can still see the information that is sent in the wireless network, even if they
cannot use the wireless network. Furthermore, there are ways for unauthorized wireless users to
get a valid user name and password. Then, they can use that user name and password to use the
wireless network.
Local user databases also have an additional limitation that is explained in the next section.
Encryption
Wireless networks can use encryption to protect the information that is sent in the wireless
network. Encryption is like a secret code. If you do not know the secret code, you cannot
understand the message.
The types of encryption you can choose depend on the type of user authentication. (See page 77
for information about this.)
Table 19 Types of Encryption for Each Type of Authentication
NO AUTHENTICATIONRADIUS SERVER
WeakestNo SecurityWPA
Static WEP
WPA-PSK
StrongestWPA2-PSKWPA2
For example, if the wireless network has a RADIUS server, you can choose WPA or WPA2. If users
do not log in to the wireless network, you can choose no encryption, Static WEP, WPA-PSK, or WPA2-PSK.
EMG1302-R10A User’s Guide
77
Chapter 8 Wireless LAN
Usually, you should set up the strongest encryption that every wireless client in the wireless
network supports. For example, suppose the AP does not have a local user database, and you do
not have a RADIUS server. Therefore, there is no user authentication. Suppose the wireless network
has two wireless clients. Device A only supports WEP, and device B supports WEP and WPA.
Therefore, you should set up Static WEP in the wireless network.
Note: It is recommended that wireless networks use WPA-PSK, WPA, or stronger
encryption. IEEE and WEP encryption are better than none at all, but it is still
possible for unauthorized devices to figure out the original information pretty
quickly.
Note: It is not possible to use WPA-PSK, WPA or stronger encryption with a local user
database. In this case, it is better to set up stronger encryption with no
authentication than to set up weaker encryption with the local user database.
When you select WPA2-PSK in your EMG1302-R10A, you can also select an option (WPA Compatible) to support WPA as well. In this case, if some wireless clients support WPA and some
support WPA2, you should set up WPA2-PSK (depending on the type of wireless network login)
and select the WPA Compatible option in the EMG1302-R10A.
Many types of encryption use a key to protect the information in the wireless network. The longer
the key, the stronger the encryption. Every wireless client in the wireless network must have the
same key.
WPS
WiFi Protected Setup (WPS) is an industry standard specification, defined by the WiFi Alliance. WPS
allows you to quickly set up a wireless network with strong security, without having to configure
security settings manually. Depending on the devices in your network, you can either press a
button (on the device itself, or in its configuration utility) or enter a PIN (Personal Identification
Number) in the devices. Then, they connect and set up a secure network by themselves. See how
to set up a secure wireless network using WPS in the Section 6.2 on page 43.
8.4 General Wireless LAN Screen
Use this screen to configure the SSID of the wireless LAN and configure the wireless security mode.
The screen varies depending on what you select in the Security Mode field.
Note: If you are configuring the EMG1302-R10A from a computer connected to the
wireless LAN and you change the EMG1302-R10A’s SSID, channel or security
settings, you will lose your wireless connection when you press Apply to confirm.
You must then change the wireless settings of your computer to match the
EMG1302-R10A’s new settings.
78
EMG1302-R10A User’s Guide
Chapter 8 Wireless LAN
Click Configuration > Network > Wireless LAN to open the General screen.
Figure 36 Configuration > Network > Wireless LAN > General
The following table describes the general wireless LAN labels in this screen.
Table 20 Configuration > Network > Wireless LAN > General
LABELDESCRIPTION
Wireless Setup
Wireless LAN Status This is turned on by default.
You can enable or disable the wireless LAN by using the WLAN switch located on the
back panel of the EMG1302-R10A. The current wireless state is reflected in this field.
Name (SSID)The SSID (Service Set IDentity) identifies the Service Set with which a wireless client is
associated. Enter a descriptive name (up to 32 printable characters found on a typical
English language keyboard) for the wireless LAN.
Hide SSIDSelect this check box to hide the SSID in the outgoing beacon frame so a station cannot
obtain the SSID through scanning using a site survey tool.
Green APOnce Green AP is enabled, if there are no client connections to the AP, the device
switches to 1T1R settings.
Channel SelectionSet the operating frequency/channel depending on your particular region.
Select a channel from the drop-down list box. The options vary depending on the
frequency band and the country you are in.
This option is only available if Auto Channel Selection is disabled.
Auto Channel
Selection
Operating Channel This displays the channel the EMG1302-R10A is currently using.
Select this check box for the EMG1302-R10A to automatically choose the channel with
the least interference. Deselect this check box if you wish to manually select the
channel using the Channel Section field.
EMG1302-R10A User’s Guide
79
Chapter 8 Wireless LAN
Table 20 Configuration > Network > Wireless LAN > General (continued)
LABELDESCRIPTION
Channel WidthSelect whether the EMG1302-R10A uses a wireless channel width of 20MHz or Auto. If
802.11 ModeSelect 802.11b Only to allow only IEEE 802.11b compliant WLAN devices to associate
Auto is selected, the EMG1302-R10A will use 40MHz if it is supported.
A standard 20MHz channel offers transfer speeds of up to 150Mbps whereas a 40MHz
channel uses two standard channels and offers speeds of up to 300 Mbps.
40MHz (channel bonding or dual channel) bonds two adjacent radio channels to
increase throughput. The wireless clients must also support 40 MHz. It is often better to
use the 20 MHz setting in a location where the environment hinders the wireless signal.
Select 20MHz if you want to lessen radio interference with other wireless devices in
your neighborhood or the wireless clients do not support channel bonding.
This field is available only when you set the 802.11 Mode to 802.11n or
802.11b+g+n in the Advanced Setup screen.
with the EMG1302-R10A.
Select 802.11g Only to allow only IEEE 802.11g compliant WLAN devices to associate
with the EMG1302-R10A.
Select 802.11b+g to allow either IEEE 802.11b or IEEE 802.11g compliant WLAN
devices to associate with the EMG1302-R10A. The transmission rate of your EMG1302R10A might be reduced.
Select 802.11n to allow only IEEE 802.11n compliant WLAN devices to associate with
the EMG1302-R10A.
Select 802.11g+n to allow either IEEE 802.11g or IEEE 802.11n compliant WLAN
devices to associate with the EMG1302-R10A. The transmission rate of your EMG1302R10A might be reduced.
Select 802.11b+g+n to allow IEEE 802.11b, IEEE 802.11g or IEEE802.11n compliant
WLAN devices to associate with the EMG1302-R10A. The transmission rate of your
EMG1302-R10A might be reduced.
Security
Security ModeChoose the security mode from the drop-down list box. See Section 8.5 on page 81 for
WPA-PSK
Compatible
Pre-Shared KeyWPA-PSK/WPA2-PSK uses a simple common password for authentication.
Group Key Update
Timer
ApplyClick Apply to save your changes back to the EMG1302-R10A.
CancelClick Cancel to exit this screen without saving.
more information on wireless security settings.
This field appears when you choose WPA2-PSK as the Security Mode.
Check this field to allow wireless devices using WPA-PSK security mode to connect to
your EMG1302-R10A.
Type a pre-shared key from 8 to 63 case-sensitive keyboard characters.
The Group Key Update Timer is the rate at which the AP sends a new group key out to
all clients.
The default is 3600 seconds (60 minutes).
80
See the rest of this chapter for information on the other labels in this screen.
EMG1302-R10A User’s Guide
8.5 Wireless Security
Use this part of the General screen to select the wireless security mode. Click Network >
Wireless LAN to open the General screen. The screen varies depending on what you select in the
Security Mode field.
8.5.1 No Security
Select No Security to allow wireless clients to communicate with the access points without any
data encryption.
Note: If you do not enable any wireless security on your EMG1302-R10A, your network is
accessible to any wireless network device that is within range.
Figure 37 Wireless LAN > General: Security: No Security
Chapter 8 Wireless LAN
The following table describes the labels in this screen.
Table 21 Wireless LAN > General: Security: No Security
LABELDESCRIPTION
Security ModeChoose No Security from the drop-down list box.
ApplyClick Apply to save your changes back to the EMG1302-R10A.
CancelClick Cancel to exit this screen without saving.
EMG1302-R10A User’s Guide
81
Chapter 8 Wireless LAN
8.5.2 WPA2-PSK
Select WPA2-PSK from the Security Mode list.
Figure 38 Wireless LAN > General: Security: WPA2-PSK
The following table describes the labels in this screen.
Table 22 Wireless LAN > General: Security: WPA-PSK/WPA2-PSK
LABELDESCRIPTION
Security ModeSelect WPA-PSK or WPA2-PSK to enable data encryption.
WPA-PSK
Compatible
Pre-Shared KeyWPA-PSK/WPA2-PSK uses a simple common password for authentication.
Group Key Update
Timer
ApplyClick Apply to save your changes back to the EMG1302-R10A.
CancelClick Cancel to exit this screen without saving.
This field appears when you choose WPA2-PSK as the Security Mode.
Type a pre-shared key from 8 to 63 case-sensitive keyboard characters.
The Group Key Update Timer is the rate at which the AP sends a new group key out to
all clients.
The default is 3600 seconds (60 minutes).
82
EMG1302-R10A User’s Guide
8.6 More AP
This screen allows you to enable and configure multiple wireless networks on the EMG1302-R10A.
Select Configuration > Network > Wireless LAN > More AP. The screen appears as shown.
Figure 39 Wireless LAN > More AP
The following table describes the labels in this screen.
Table 23 Wireless LAN > More AP
LABELDESCRIPTION
#This is the index number of each SSID profile.
StatusShows the status of the SSID.
SSIDThe SSID (Service Set IDentifier) identifies the Service Set with which a wireless device
SecurityThis field indicates the security mode of the SSID profile.
EditClick the Edit icon to configure SSID profile.
Chapter 8 Wireless LAN
is associated.
This field displays the name of the wireless profile on the network. When a wireless
client scans for an AP to associate with, this is the name that is broadcast and seen in
the wireless client utility.
EMG1302-R10A User’s Guide
83
Chapter 8 Wireless LAN
8.6.1 More AP Edit
Use this screen to edit an SSID profile. Click the Edit icon next to an SSID in the Configuration >
Network > Wireless LAN > More AP screen. The following screen displays.
Figure 40 Wireless LAN > More AP: Edit
The following table describes the labels in this screen.
Table 24 Wireless LAN > More AP
LABELDESCRIPTION
Wireless Setup
ActiveClick the check box to activate wireless LAN.
Name (SSID)The SSID (Service Set IDentity) identifies the Service Set with which a wireless client is
Hide SSIDSelect this check box to hide the SSID in the outgoing beacon frame so a station cannot
Intra-BSS TrafficIntra-BSS traffic is traffic between wireless stations in the BSS. Select this check box to
WMM QoSCheck this to have the EMG1302-R10A automatically give a service a priority level
Security
Security ModeThis field indicates the security mode of the SSID profile.
WPA-PSK
Compatible
Pre-Shared KeyEnter an 8 to 64 (case-sensitive keyboard) characters to define the pre-shared key for
associated. Enter a descriptive name (up to 32 printable characters found on a typical
English language keyboard) for the wireless LAN.
obtain the SSID through scanning using a site survey tool.
enable Intra-BSS Traffic.
according to the ToS value in the IP header of packets it sends. WMM QoS (Wifi
MultiMedia Quality of Service) gives high priority to voice and video, which makes them
run more smoothly.
This field appears when you choose WPA2-PSK as the Security Mode. Check this field
to allow wireless devices using WPA-PSK security mode to connect to your ZyXEL
Device.
the security setting.
84
EMG1302-R10A User’s Guide
Table 24 Wireless LAN > More AP (continued)
LABELDESCRIPTION
Group Key Update
Timer
ApplyClick Apply to save your changes back to the EMG1302-R10A.
CancelClick Cancel to exit this screen without saving.
8.7 MAC Filter
The MAC filter screen allows you to configure the EMG1302-R10A to give exclusive access to
devices (Allow) or exclude devices from accessing the EMG1302-R10A (Deny). Every Ethernet
device has a unique MAC (Media Access Control) address. The MAC address is assigned at the
factory and consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02. You
need to know the MAC address of the devices to configure this screen.
To change your EMG1302-R10A’s MAC filter settings, click Configuration > Network > Wireless LAN > MAC Filter. The screen appears as shown.
Chapter 8 Wireless LAN
The Group Key Update Timer is the rate at which the RADIUS server sends a new
group key out to all clients.
Note: No Security and WPA2-PSK can be configured when WPS is enabled.
Figure 41 Configuration > Network > Wireless LAN > MAC Filter
EMG1302-R10A User’s Guide
85
Chapter 8 Wireless LAN
The following table describes the labels in this menu.
Table 25 Configuration > Network > Wireless LAN > MAC Filter
LABELDESCRIPTION
MAC Address FilterSelect Disable to deactivate the MAC filtering rule you configure below.
Filter ActionSelect Allow to permit access to the EMG1302-R10A, MAC addresses not listed will be
MAC Filter Summary
SetThis is the index number of the MAC address.
MAC AddressThis is the MAC address of the wireless station that are allowed or denied access to the
ApplyClick Apply to save your changes back to the EMG1302-R10A.
CancelClick Cancel to exit this screen without saving.
denied access to the EMG1302-R10A.
Select Deny to block access to the EMG1302-R10A, MAC addresses not listed will be
allowed to access the EMG1302-R10A
EMG1302-R10A.
8.8 Wireless LAN Advanced Screen
Use this screen to allow wireless advanced features, such as the output power, RTS/CTS Threshold
and high-throughput physical mode settings.
Click Configuration > Network > Wireless LAN > Advanced. The screen appears as shown.
Figure 42 Configuration > Network > Wireless LAN > Advanced
The following table describes the labels in this screen.
Table 26 Configuration > Network > Wireless LAN > Advanced
LABELDESCRIPTION
Wireless Advanced Setup
RTS/CTS ThresholdData with its frame size larger than this value will perform the RTS (Request To Send)/
CTS (Clear To Send) handshake.
86
Fragmentation
Threshold
Enter a value between 1 and 2347.
The threshold (number of bytes) for the fragmentation boundary for directed messages.
It is the maximum data fragment size that can be sent. Enter an even number between
256 and 2346.
Intra-BSS TrafficA Basic Service Set (BSS) exists when all communications between wireless clients or
between a wireless client and a wired network client go through one access point (AP).
Intra-BSS traffic is traffic between wireless clients in the BSS. When Intra-BSS is
enabled, wireless client A and B can access the wired network and communicate with
each other. When Intra-BSS is disabled, wireless client A and B can still access the
wired network but cannot communicate with each other.
Tx PowerSet the Tx power of the EMG1302-R10A in this field. If there is a high density of APs in
an area, decrease the output power of the EMG1302-R10A to reduce interference with
other APs. Select one of the following 100%, 90%, 75%, 50%, 25% or 10%. See
the product specifications for more information on your EMG1302-R10A’s output power.
ApplyClick Apply to save your changes back to the EMG1302-R10A.
CancelClick Cancel to exit this screen without saving.
8.9 Quality of Service (QoS) Screen
The QoS screen allows you to automatically give a service (such as VoIP and video) a priority level.
Chapter 8 Wireless LAN
Click Configuration > Network > Wireless LAN > QoS. The following screen appears.
Figure 43 Configuration > Network > Wireless LAN > QoS
The following table describes the labels in this screen.
Table 27 Configuration > Network > Wireless LAN > QoS
LABELDESCRIPTION
WMM QoSCheck Enable to have the EMG1302-R10A automatically give a service a priority level
according to the ToS value in the IP header of packets it sends. Check Disable to
disable the function.
WMM QoS (Wifi MultiMedia Quality of Service) gives high priority to voice and video,
which makes them run more smoothly.
ApplyClick Apply to save your changes to the EMG1302-R10A.
CancelClick Cancel to exit this screen without saving.
EMG1302-R10A User’s Guide
87
Chapter 8 Wireless LAN
8.10 WPS Screen
Use this screen to enable/disable WPS, view or generate a new PIN number and check current WPS
status. To open this screen, click Configuration > Network > Wireless LAN > WPS.
Note: With WPS, wireless clients can only connect to the wireless network using the first
SSID on the EMG1302-R10A.
Figure 44 Configuration > Network > Wireless LAN > WPS
The following table describes the labels in this screen.
Table 28 Configuration > Network > Wireless LAN > WPS
LABELDESCRIPTION
WPS Setup
Enable WPSSelect this to enable the WPS feature.
PIN CodeSelect this to enable PIN code.
PIN NumberThis displays the last PIN number generated by the system, if any. Click Generate to
WPS Status
StatusThis displays Configured when the EMG1302-R10A has connected to a wireless
802.11 ModeThis is the 802.11 mode used. Only compliant WLAN devices can associate with the
SSIDThis is the name of the wireless network (the EMG1302-R10A’s first SSID).
SecurityThis is the type of wireless security employed by the network.
generate a new PIN number.
network using WPS or when Enable WPS is selected and wireless or wireless security
settings have been changed. The current wireless and wireless security settings also
appear in the screen.
This displays Unconfigured if WPS is disabled and there are no wireless or wireless
security changes on the EMG1302-R10A or you click Release Configuration to
remove the configured wireless and wireless security settings.
ApplyClick Apply to save your changes back to the EMG1302-R10A.
CancelClick Cancel to exit this screen without saving.
8.11 WPS Station Screen
Use this screen when you want to add a wireless station using WPS. To open this screen, click
Configuration > Network > Wireless LAN > WPS Station.
Note: After you click Push Button on this screen, you have to press a similar button in
the wireless station utility within 2 minutes. To add the second wireless station, you
have to press these buttons on both device and the wireless station again after the
first 2 minutes.
Figure 45 Configuration > Network > Wireless LAN > WPS Station
Chapter 8 Wireless LAN
The following table describes the labels in this screen.
Table 29 Configuration > Network > Wireless LAN > WPS Station
LABELDESCRIPTION
Push ButtonUse this button when you use the PBC (Push Button Configuration) method to configure
Or input station’s
PIN number
wireless stations’s wireless settings.
Click this to start WPS-aware wireless station scanning and the wireless security
information synchronization.
Use this button when you use the PIN Configuration method to configure wireless
station’s wireless settings.
Type the same PIN number generated in the wireless station’s utility. Then click Start
to associate to each other and perform the wireless security information
synchronization.
EMG1302-R10A User’s Guide
89
Chapter 8 Wireless LAN
8.12 Scheduling Screen
Use this screen to set the times your wireless LAN is turned on and off. Wireless LAN scheduling is
disabled by default. The wireless LAN can be scheduled to turn on or off on certain days and at
certain times. To open this screen, click Configuration > Network > Wireless LAN >
Scheduling.
Figure 46 Configuration > Network > Wireless LAN > Scheduling
The following table describes the labels in this screen.
Table 30 Configuration > Network > Wireless LAN > Scheduling
LABELDESCRIPTION
Enable Wireless LAN
Scheduling
PolicySelect On to activate the selected schedule.
Scheduling
DaySelect Everyday or the specific days to turn the Wireless LAN on or off. If you select
For the following
times (24-Hour
Format)
ApplyClick Apply to save your changes back to the EMG1302-R10A.
CancelClick Cancel to exit this screen without saving.
Select this to enable Wireless LAN scheduling.
Select Off to deactivate the selected schedule.
Everyday you can not select any specific days. This field works in conjunction with the
For the following times field.
Select a begin time using the first set of hour and minute (min) drop down boxes and
select an end time using the second set of hour and minute (min) drop down boxes. If
you have chosen On earlier for the WLAN Status the Wireless LAN will turn on between
the two times you enter in these fields. If you have chosen Off earlier for the WLAN
Status the Wireless LAN will turn off between the two times you enter in these fields.
90
EMG1302-R10A User’s Guide
8.13 WDS
A Wireless Distribution System is a wireless connection between two or more APs. Use this screen
to set the operating mode of your EMG1302-R10A to AP + Bridge or Bridge Only and establish
wireless links with other APs. You need to know the MAC address of the peer device, which also
must be in bridge mode.
Note: You must enable the same wireless security settings on the EMG1302-R10A and on
To open this screen, click Configuration > Network > Wireless LAN > WDS.
Figure 47 Configuration > Network > Wireless LAN > WDS
Chapter 8 Wireless LAN
all wireless clients that you want to associate with it.
The following table describes the labels in this screen.
Table 31 Configuration > Network > Wireless LAN > WDS
LABELDESCRIPTION
WDS Setup
Basic SettingsSelect the operating mode for your EMG1302-R10A.
• AP + Bridge - The EMG1302-R10A functions as a bridge and access point
simultaneously.
• Bridge Only - The EMG1302-R10A acts as a wireless network bridge and
establishes wireless links with other APs. You need to know the MAC address of the
peer device, which also must be in bridge mode. The EMG1302-R10A can establish
up to five wireless links with other APs.
Local MAC AddressThis is the MAC address of your EMG1302-R10A.
PHY Mode (Bridge
only)
Remote MAC
Address (AP+Bridge
/ Bridge only)
Security
EncrypTypeSelect whether to use TKIP or AES encryption for your WDS connection in this field.
ApplyClick Apply to save your changes back to the EMG1302-R10A.
ResetClick Reset to reload the previous configuration for this screen.
Select CCK (11b mode), OFDM (11g mode), HTMIX (11b/g/n mixed mode) or
GREENFIELD (11n mode) from the drop-down menu. All AP devices should be setup to
the same Phy mode.
This is the MAC address of a remote device.
Otherwise, select No Security.
EMG1302-R10A User’s Guide
91
Chapter 8 Wireless LAN
92
EMG1302-R10A User’s Guide
9.1 Overview
WLAN
LAN
firewall
This chapter describes how to configure LAN settings.
A Local Area Network (LAN) is a shared communication system to which many computers are
attached. A LAN is a computer network limited to the immediate area, usually the same building or
floor of a building. The LAN screens can help you configure a LAN DHCP server, manage IP
addresses, and partition your physical network into logical networks.
Figure 48 LAN Example
CHAPTER 9
LAN
The LAN screens can help you manage IP addresses.
9.2 What You Can Do
•Use the IP screen to change the IP address for your EMG1302-R10A (Section 9.4 on page 95).
EMG1302-R10A User’s Guide93
Chapter 9 LAN
9.3 What You Need To Know
The actual physical connection determines whether the EMG1302-R10A ports are LAN or WAN
ports. There are two separate IP networks, one inside the LAN network and the other outside the
WAN network as shown next.
Figure 49 LAN and WAN IP Addresses
The LAN parameters of the EMG1302-R10A are preset in the factory with the following values:
• IP address of 192.168.1.1 with subnet mask of 255.255.255.0 (24 bits)
• DHCP server enabled with 32 client IP addresses starting from 192.168.1.33.
These parameters should work for the majority of installations. If your ISP gives you explicit DNS
server address(es), read the embedded Web Configurator help regarding what fields need to be
configured.
9.3.1 IP Pool Setup
The EMG1302-R10A is pre-configured with a pool of 32 IP addresses starting from 192.168.1.33 to
192.168.1.64. This configuration leaves 31 IP addresses (excluding the EMG1302-R10A itself) in
the lower range (192.168.1.2 to 192.168.1.32) for other server computers, for instance, servers for
mail, T, web, etc., that you may have.
9.3.2 LAN TCP/IP
The EMG1302-R10A has built-in DHCP server capability that assigns IP addresses and DNS servers
to systems that support DHCP client capability.
94
EMG1302-R10A User’s Guide
9.4 LAN IP Screen
Use this screen to change the IP address for your EMG1302-R10A. Click Configuration >
Network > LAN > IP.
Figure 50 Configuration > Network > LAN > IP
The following table describes the labels in this screen.
Table 32 Configuration > Network > LAN > IP
LABELDESCRIPTION
IP AddressType the IP address of your EMG1302-R10A in dotted decimal notation.
IP Subnet MaskThe subnet mask specifies the network number portion of an IP address. Your
EMG1302-R10A will automatically calculate the subnet mask based on the IP address
that you assign. Unless you are implementing subnetting, use the subnet mask
computed by the EMG1302-R10A.
ApplyClick Apply to save your changes back to the EMG1302-R10A.
CancelClick Cancel to begin configuring this screen afresh.
Chapter 9 LAN
EMG1302-R10A User’s Guide
95
Chapter 9 LAN
96
EMG1302-R10A User’s Guide
10.1 Overview
Dynamic Host Configuration Protocol (DHCP), RFC 2131 and RFC 2132 allow individual clients to
obtain TCP/IP configuration at start-up from a server. You can configure the EMG1302-R10A’s LAN
as a DHCP server or disable it. When configured as a server, the EMG1302-R10A provides the TCP/
IP configuration for the clients. If DHCP service is disabled, you must have another DHCP server on
your LAN, or else the computer must be manually configured.
10.2 What You Can Do
•Use the General screen to enable the DHCP server (Section 10.4 on page 98).
•Use the Advanced screen to assign IP addresses on the LAN to specific individual computers
based on their MAC Addresses (Section 10.5 on page 99).
•Use the Client List screen to view DHCP client list (Section 10.6 on page 100).
CHAPTER 10
DHCP Server
10.3 What You Need To Know
The following terms and concepts may help as you read through this chapter.
MAC Addresses
Every Ethernet device has a unique MAC (Media Access Control) address. The MAC address is
assigned at the factory and consists of six pairs of hexadecimal characters, for example,
00:A0:C5:00:00:02. Find out the MAC addresses of your network devices if you intend to add them
to the DHCP Client List screen.
EMG1302-R10A User’s Guide97
Chapter 10 DHCP Server
10.4 The DHCP General Screen
Use this screen to enable the DHCP server. Click Configuration > Network > DHCP Server. The
General screen displays.
Figure 51 Configuration > Network > DHCP Server > General
The following table describes the labels in this screen.
Table 33 Configuration > Network > DHCP Server > General
LABELDESCRIPTION
Enable DHCP Server Select the checkbox to enable DHCP for LAN.
DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual
clients (computers) to obtain TCP/IP configuration at startup from a server. Leave the
Enable DHCP Server check box selected unless your ISP instructs you to do
otherwise. Clear it to disable the EMG1302-R10A acting as a DHCP server. When
configured as a server, the EMG1302-R10A provides TCP/IP configuration for the
clients. If not, DHCP service is disabled and you must have another DHCP server on
your LAN, or else the computers must be manually configured. When set as a server, fill
in the following four fields.
IP Pool Starting
Address
Pool SizeThis field specifies the size, or count of the IP address pool for LAN.
DHCP RelaySelect the checkbox to enable DHCP relay and forward a DHCP request to the DHCP
DHCP Server IPEnter the IP address of the DHCP server.
Lease TimeEnter the in seconds the designated lease time for a DHCP assignment.
ApplyClick Apply to save your changes back to the EMG1302-R10A.
CancelClick Cancel to begin configuring this screen afresh.
This field specifies the first of the contiguous addresses in the IP address pool for LAN.
server.
98
EMG1302-R10A User’s Guide
10.5 The DHCP Advanced Screen
This screen allows you to assign IP addresses on the LAN to specific individual computers based on
their MAC addresses. You can also use this screen to configure the DNS server information that the
EMG1302-R10A sends to the DHCP clients.
To change your EMG1302-R10A’s static DHCP settings, click Configuration > Network > DHCP Server > Advanced. The following screen displays.
Figure 52 Configuration > Network > DHCP Server > Advanced
Chapter 10 DHCP Server
The following table describes the labels in this screen.
Table 34 Configuration > Network > DHCP Server > Advanced
LABELDESCRIPTION
Static DHCP Table
#This is the index number of the static IP table entry (row).
MAC AddressType the MAC address (with colons) of a computer on your LAN.
IP AddressType the LAN IP address of a computer on your LAN.
DNS Server
DNS Servers
Assigned by DHCP
Server
EMG1302-R10A User’s Guide
The EMG1302-R10A passes a DNS (Domain Name System) server IP address (in the
order you specify here) to the DHCP clients. The EMG1302-R10A only passes this
information to the LAN DHCP clients when you select the Enable DHCP Server check
box. When you clear the Enable DHCP Server check box, DHCP service is disabled
and you must have another DHCP sever on your LAN, or else the computers must have
their DNS server addresses manually configured.
ApplyClick Apply to save your changes back to the EMG1302-R10A.
CancelClick Cancel to begin configuring this screen afresh.
Select From ISP if your ISP dynamically assigns DNS server information (and the
EMG1302-R10A's WAN IP address). The field to the right displays the (read-only) DNS
server IP address that the ISP assigns.
Select User-Defined if you have the IP address of a DNS server. Enter the DNS
server's IP address in the field to the right. If you chose User-Defined, but leave the
IP address set to 0.0.0.0, User-Defined changes to None after you click Apply. If you
set a second choice to User-Defined, and enter the same IP address, the second
User-Defined changes to None after you click Apply.
Select DNS Relay to have the EMG1302-R10A act as a DNS proxy. The EMG1302R10A's LAN IP address displays in the field to the right (read-only). The EMG1302-R10A
tells the DHCP clients on the LAN that the EMG1302-R10A itself is the DNS server.
When a computer on the LAN sends a DNS query to the EMG1302-R10A, the EMG1302R10A forwards the query to the EMG1302-R10A's system DNS server (configured in the
WAN > Internet Connection screen) and relays the response back to the computer.
You can only select DNS Relay for one of the three servers; if you select DNS Relay
for a second or third DNS server, that choice changes to None after you click Apply.
Select None if you do not want to configure DNS servers. If you do not configure a DNS
server, you must know the IP address of a computer in order to access it.
10.6 The DHCP Client List Screen
This screen allows you to review the list of the devices currently connected to the EMG1302-R10A.
To view your EMG1302-R10A’s DHCP client list, click Configuration > Network > DHCP Server > Client List. The following screen displays.
Figure 53 Configuration > Network > DHCP Server > Client List
The following table describes the labels in this screen.
Table 35 Configuration > Network > DHCP Server > Client List
LABELDESCRIPTION
DHCP Client Table
#This is the index number of the client device.
StatusThis shows the status of the connected device.
Host NameThis indicates the device’s host name.
IP AddressThis indicates the IP address assigned to this client device.
100
EMG1302-R10A User’s Guide
Loading...
+ hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.