IMPORTANT!
READ CAREFULLY BEFORE USE.
KEEP THIS GUIDE FOR FUTURE REFERENCE.
Screenshots and graphics in this book may differ slightly from your product due to differences in your
product firmware or your computer operating system. Every effort has been made to ensure that the
information in this manual is accurate.
Related Documentation
•Quick Start Guide
The Quick Start Guide shows how to connect the EMG3435-Q20A and access the Web Configurator
wizards. It contains information on setting up your network and configuring for Internet access.
•More Information
Go to support.zyxel.com to find other information on the EMG3435-Q20A
Status ...................................................................................................................................................... 59
WAN ....................................................................................................................................................... 72
Wireless LAN .......................................................................................................................................... 93
LAN ....................................................................................................................................................... 112
3.2 Accessing the eaZy 123 Wizard .................................................................................................... 17
3.3 Internet Type ................................................................................................................................... 19
3.3.1 WAN Selection Type: Automatic - DHCP ........................................................................... 20
3.3.2 WAN Selection Type: PPPoE ................................................................................................. 20
3.3.3 WAN Selection Type: Static .................................................................................................. 21
5.6 Control Panel .................................................................................................................................. 30
5.6.5 LED .......................................................................................................................................... 34
7.5 LAN Screen ...................................................................................................................................... 45
WAN ....................................................................................................................................................72
This chapter introduces the main features and applications of the EMG3435-Q20A.
The EMG3435-Q20A extends the range of your existing wired network without additional wiring,
providing easy network access to mobile users. You can set up a wireless network with other IEEE
802.11a/b/g/n/ac compatible devices. The EMG3435-Q20A is able to function both 2.4GHz and 5GHz
networks at the same time.
A range of services such as a firewall and content filtering are also available for secure Internet
computing.
1.2 Applications
CHAPTER 1
Introduction
Your can have the following networks with the EMG3435-Q20A:
• Wired. You can connect network devices via the Ethernet ports of the EMG3435-Q20A so that they
can communicate with each other and access the Internet.
• Wireless. Wireless clients can connect to the EMG3435-Q20A to access network resources. You can
use WPS (Wi-Fi Protected Setup) to create an instant network connection with another WPScompatible device.
• WAN. Connect to a broadband modem/router for Internet access.
1.3 Ways to Manage the EMG3435-Q20A
Use any of the following methods to manage the EMG3435-Q20A.
• WPS (Wi-Fi Protected Setup). You can use the WPS button or the WPS section of the Web Configurator
to set up a wireless network with your EMG3435-Q20A.
• Web Configurator. This is recommended for everyday management of the EMG3435-Q20A using a
(supported) web browser.
1.4 Good Habits for Managing the EMG3435-Q20A
Do the following things regularly to make the EMG3435-Q20A more secure and to manage the
EMG3435-Q20A more effectively.
EMG3435-Q20A User’s Guide
10
Page 11
Chapter 1 Introduction
• Change the password. Use a password that’s not easy to guess and that consists of different types of
characters, such as numbers and letters.
• Write down the password and put it in a safe place.
• Back up the configuration (and make sure you know how to restore it). Restoring an earlier working
configuration may be useful if the device becomes unstable or even crashes. If you forget your
password, you will have to reset the EMG3435-Q20A to its factory default settings. If you backed up
an earlier configuration file, you would not have to totally re-configure the EMG3435-Q20A. You could
simply restore your last configuration.
1.5 Resetting the EMG3435-Q20A
If you forget your password or IP address, or you cannot access the Web Configurator, you will need to
use the RESET button at the back of the EMG3435-Q20A to reload the factory-default configuration file.
This means that you will lose all configurations that you had previously saved, the password will be reset
to “1234” and the IP address will be reset to “192.168.1.1”.
1.5.1 How to Use the RESET Button
1Make sure the power LED is on.
2Press the RESET button for one to four seconds to restart/reboot the EMG3435-Q20A.
3Press the RESET button for longer than five seconds to set the EMG3435-Q20A back to its factory-default
configurations.
1.6 The WPS Button
Your EMG3435-Q20A supports Wi-Fi Protected Setup (WPS), which is an easy way to set up a secure
wireless network. WPS is an industry standard specification, defined by the Wi-Fi Alliance.
WPS allows you to quickly set up a wireless network with strong security, without having to configure
security settings manually. Each WPS connection works between two devices. Both devices must
support WPS (check each device’s documentation to make sure).
Depending on the devices you have, you can either press a button (on the device itself, or in its
configuration utility) or enter a PIN (a unique Personal Identification Number that allows one device to
authenticate the other) in each of the two devices. When WPS is activated on a device, it has two
minutes to find another device that also has WPS activated. Then, the two devices connect and set up
a secure network by themselves.
You can use the WPS button on the rear panel of the EMG3435-Q20A to activate WPS in order to quickly
set up a wireless network with strong security.
1Make sure the power LED is on (not blinking).
2Press the WPSbutton for more than three seconds and release it. Press the WPS button on another WPS-
enabled device within range of the EMG3435-Q20A.
EMG3435-Q20A User’s Guide
11
Page 12
Note: You must activate WPS in the EMG3435-Q20A and in another wireless device within two
WAN
DC IN
1.7 LEDs
The following figure shows the rear panel of the EMG3435-Q20A.
Figure 1 Rear Panel
Chapter 1 Introduction
minutes of each other.
For more information on using WPS, see Section 8.2 on page 48.
1.8 Hardware Installation
This chapter shows you how to mount the EMG3435-Q20A to a pole or on a wall.
Note: At the time of writing, the holes with grounding icons on the bottom don’t work.
1.8.1 Pole Mounting
You can mount the EMG3435-Q20A to a pole using the following parts.
Table 1 Pole Mounting Parts
1EMG3435-Q20A
2Bracket for angle adjustment
3U-bolt
4M5 screw
5• M6 Screw
• Spring Washer
•Washer
6Bracket
The following figure introduces the specifications of the parts.
EMG3435-Q20A User’s Guide
12
Page 13
Figure 2 Specifications
Chapter 1 Introduction
Follow the listed steps to mount the EMG3435-Q20A to a pole.
Figure 3 Pole Mounting Example
1Use 3 and 4 to attach 6 to the pole.
2Use 5 to attach the EMG3435-Q20A to 6 on the pole.
3Use 2 to adjust the EMG3435-Q20A. You can have the EMG3435-Q20A tilt up, face forward, or tilt down.
EMG3435-Q20A User’s Guide
13
Page 14
2.1 Overview
This chapter describes how to access the EMG3435-Q20A Web Configurator and provides an overview
of its screens.
The Web Configurator is an HTML-based management interface that allows easy setup and
management of the EMG3435-Q20A via Internet browser. Use a browser that supports HTML5, such as
Internet Explorer 9.0 and later versions, Mozilla Firefox 21 and later versions, Safari 6.0 and later versions or
Google Chrome 26.0 and later versions. The recommended screen resolution is 1024 by 768 pixels.
In order to use the Web Configurator you need to allow:
CHAPTER 2
Introducing the Web
Configurator
• Web browser pop-up windows from your device. Web pop-up blocking is enabled by default in
Windows 7.
• JavaScript (enabled by default).
• Java permissions (enabled by default).
Refer to the Troubleshooting chapter (Chapter 16 on page 160) to see how to make sure these functions
are allowed in Internet Explorer.
2.2 Accessing the Web Configurator
1Make sure your EMG3435-Q20A hardware is properly connected and prepare your computer or
computer network to connect to the EMG3435-Q20A (refer to the Quick Start Guide).
2Launch your web browser.
3The EMG3435-Q20A is in router mode by default. Type "http://192.168.1.1 or http://myrouter" as the
website address. If the EMG3435-Q20A obtains a WAN IP address or a DNS server IP address in the same
subnet as the LAN IP address 192.168.1.1, the default LAN IP address will be changed to 10.0.0.1
automatically. See Auto-IP Change on page 74 for more information.
If the EMG3435-Q20A is in access point, the IP address is 192.168.1.2. See Chapter 4 on page 26 for more
information about the modes of the EMG3435-Q20A.
Your computer must be in the same subnet in order to access this website address.
EMG3435-Q20A User’s Guide
14
Page 15
2.2.1 Login Screen
Note: If this is the first time you are accessing the Web Configurator, you may be redirected to
the eaZy123 wizard. Refer to Chapter 3 on page 17 for the eaZy123 setup screens.
The Web Configurator initially displays the following login screen.
Figure 4 Login screen
Chapter 2 Introducing the Web Configurator
The following table describes the labels in this screen.
Table 2 Login screen
LABELDESCRIPTION
PasswordType "1234" (default) as the password. Click Login.
2.2.2 Change Default Password Screen
You should see a screen asking you to change your password (highly recommended) as shown next.
EMG3435-Q20A User’s Guide
15
Page 16
Chapter 2 Introducing the Web Configurator
Figure 5 Change Default Password Screen
The following table describes the labels in this screen.
Table 3 Change Default Password Screen
LABELDESCRIPTION
Enter your new
password here
Confirm passwordRetype the password for confirmation.
SkipClick Skip if you do not want to change the password this time.
ChangeClick Change to save your changes back to the EMG3435-Q20A.
Type a new password.
Note: The management session automatically times out when the time period set in the
Administrator Inactivity Timer field expires (default five minutes; go to Chapter 15 on
page 146 to change this). Simply log back into the EMG3435-Q20A if this happens.
EMG3435-Q20A User’s Guide
16
Page 17
eaZy 123 Wizard
3.1 Overview
This chapter provides information on the eaZy 123 setup screens in the Web Configurator.
The Web Configurator’s eaZy 123 setup wizard helps you configure your device to access the Internet.
Refer to your ISP for your Internet account information. Leave a field blank if you don’t have that
information.
3.2 Accessing the eaZy 123 Wizard
Launch your web browser and type "http://192.168.1.1 or http://myrouter" as the website address. Type
"1234" (default) as the password and click Login.
CHAPTER 3
Note: The eaZy 123 wizard appears automatically when the EMG3435-Q20A is accessed for
the first time or when you reset the EMG3435-Q20A to its default factory settings. If you
didn’t configure the wizard screens, you will be redirected to the login page when you
connect to the Internet.
If you have already configured the wizard screens and want to open it again, click on the upper
right corner of any Web Configurator screen. The eaZy 123 wizard attempts to detect which WAN
connection type you are using.
If the eaZy 123 wizard does not detect a connection type, you must select one from the drop-down list
box. Check with your ISP to make sure you use the correct type.
If you do not have the Internet connection, the following screen opens.
EMG3435-Q20A User’s Guide
17
Page 18
Chapter 3 eaZy 123 Wizard
Figure 6 Unable to continue: WAN
If you do not press the Wi-Fi button located on the EMG3435-Q20A’s back panel, the following screen
opens.
Figure 7 Unable to continue: Wi-Fi
Note: If you get an error message, check your hardware connections. Make sure your Internet
connection is up and running.
The wizard screen opens.
EMG3435-Q20A User’s Guide
18
Page 19
Chapter 3 eaZy 123 Wizard
Figure 8 Detecting your Internet Connection Type
Figure 9 eaZy 123 Setup
3.3 Internet Type
The EMG3435-Q20A offers three WAN selection types. They are Automatic - DHCP, PPPoE or Static.
Configure the Internet type settings on your EMG3435-Q20A in the first part. The following screen
depends on your Internet connection type. Enter the details provided by your Internet Service Provider
(ISP) in the fields (if any).
Check with your ISP to make sure you use the correct type. This wizard screen varies according to the
connection type that you select.
EMG3435-Q20A User’s Guide
19
Page 20
Chapter 3 eaZy 123 Wizard
3.3.1 WAN Selection Type: Automatic - DHCP
Select the Automatic - DHCP option if your ISP did not assign you a fixed IP address.
Figure 10 WAN Selection Type: Automatic - DHCP
3.3.2 WAN Selection Type: PPPoE
Point-to-Point Protocol over Ethernet (PPPoE) functions as a dial-up connection. PPPoE is an IETF (Internet
Engineering Task Force) standard specifying how a host personal computer interacts with a broadband
modem (for example DSL, cable, wireless, etc.) to achieve access to high-speed data networks.
For the service provider, PPPoE offers an access and authentication method that works with existing
access control systems (for instance, RADIUS).
One of the benefits of PPPoE is the ability to let end users access one of multiple network services, a
function known as dynamic service selection. This enables the service provider to easily create and offer
new IP services for specific users.
Operationally, PPPoE saves significant effort for both the subscriber and the ISP/carrier, as it requires no
specific configuration of the broadband modem at the subscriber's site.
By implementing PPPoE directly on the EMG3435-Q20A (rather than individual computers), the
computers on the LAN do not need PPPoE software installed, since the EMG3435-Q20A does that part of
the task. Furthermore, with NAT, all of the LAN's computers will have Internet access.
EMG3435-Q20A User’s Guide
20
Page 21
Chapter 3 eaZy 123 Wizard
Figure 11 WAN Selection Type: PPPoE
The following table describes the labels in this screen.
Table 4 WAN Selection Type: PPPoE
LABELDESCRIPTION
WAN SelectionSelect the PPPoE (Point-to-Point Protocol over Ethernet) option for a dial-up connection.
PPPoE UsernameType the user name given to you by your ISP.
PPPoE Password Type the password associated with the user name above.
Static IP (Optional)Enter the WAN IP address assigned by your ISP.
Note: If you get an error message, make sure you have entered the correct information
provided by your ISP.
3.3.3 WAN Selection Type: Static
Choose Static as the WAN Selection Type when the WAN port is used as a regular Ethernet. Click Next.
EMG3435-Q20A User’s Guide
21
Page 22
Chapter 3 eaZy 123 Wizard
Figure 12 WAN Selection Type: Static
The following table describes the labels in this screen.
Table 5 WAN Selection Type: Static
LABELDESCRIPTION
WAN SelectionSelect the Static option when the WAN port is using a fixed IP address.
IP AddressEnter the IP address provided by your ISP.
Subnet MaskEnter the IP subnet mask in this field.
Gateway IP Address
(Optional)
DNS ServerEnter the DNS server IP address in this field.
Enter the gateway IP address in this field.
Note: If you get an error screen, make sure your Internet connection is working and select the
right WAN Selection Type. Contact your ISP if you are not sure of your Internet
Connection type.
3.4 Wireless Network
Configure the wireless network settings on your EMG3435-Q20A in the second part. The default wireless
security setting is WPA2-PSK.
EMG3435-Q20A User’s Guide
22
Page 23
Figure 13 Wireless Network
Chapter 3 eaZy 123 Wizard
The following table describes the labels in this screen.
Table 6 Wireless Network
LABELDESCRIPTION
Wireless Name
(SSID)
Enter a descriptive name for the wireless LAN.
Note: The setting here applies to 2.4 GHz wireless radios.
If you change this field on the EMG3435-Q20A, make sure all wireless stations use the same SSID
in order to access the network.
Wireless
Password
(WPA2)
Edit 5 GHz
wireless network
5GHz Wireless
Name (SSID)
5GHz Wireless
Password
(WPA2)
Type from 8 to 63 case-sensitive ASCII characters. You can set up the most secure wireless
connection by configuring WPA in the wireless LAN screens.
Select this check box to configure different SSID and wireless security settings for the EMG3435Q20A’s 5 GHz wireless network.
If you do not select this option, the EMG3435-Q20A uses the same SSID and Wi-Fi key (you
configured above) for the 5 GHZ wireless network.
Enter a descriptive name for the wireless LAN.
If you change this field on the EMG3435-Q20A, make sure all wireless stations use the same SSID
in order to access the network.
Type from 8 to 63 case-sensitive ASCII characters. You can set up the most secure wireless
connection by configuring WPA in the wireless LAN screens.
Click the Apply button in the third part to save your settings.
EMG3435-Q20A User’s Guide
23
Page 24
Chapter 3 eaZy 123 Wizard
Figure 14 Apply your Wi-Fi settings
Congratulations! Open a web browser, such as Internet Explorer, to visit your favorite website.
Note: If you cannot access the Internet when your computer is connected to one of the
EMG3435-Q20A’s LAN ports, check your connections. Then turn the EMG3435-Q20A off,
wait for a few seconds then turn it back on. If that does not work, log in to the web
configurator again and check you have typed all information correctly. See the User’s
Guide for more suggestions.
Figure 15 Congratulations
You can click the myZyXELcloud button to go to https://mycloud.zyxel.com, where you can create an
account and register your EMG3435-Q20A. At the time of writing, you can have free DDNS service to get
EMG3435-Q20A User’s Guide
24
Page 25
Chapter 3 eaZy 123 Wizard
a domain name mapped to the EMG3435-Q20A’s dynamic IP address. With DDNS, you can use the
domain name to remotely access the EMG3435-Q20A’s Web Configurator through the Internet.
You have successfully set up your EMG3435-Q20A to operate on your network and access the Internet.
EMG3435-Q20A User’s Guide
25
Page 26
EMG3435-Q20A Modes
4.1 Overview
This chapter introduces the different modes available on your EMG3435-Q20A. First, the term “mode”
refers to two things in this User’s Guide.
• Web Configurator mode. This refers to the Web Configurator interface you want to use for editing
EMG3435-Q20A features.
• Device mode. This is the operating mode of your EMG3435-Q20A, or simply how the EMG3435-Q20A is
being used in the network.
4.1.1 Web Configurator Modes
This refers to the configuration interface of the Web Configurator, which has two modes:
CHAPTER 4
• Easy: The Web Configurator shows this mode by default. Refer to Chapter 5 on page 27 for more
information on the screens in this mode. This interface may be sufficient for users who just want to use
the device.
• Expert: Advanced users can change to this mode to customize all the functions of the EMG3435Q20A. Click > Expert Mode after logging into the Web Configurator. The User’s Guide Chapter 9 on
page 59 through Chapter 15 on page 158 discusses the screens in this mode.
4.1.2 Device Modes
This refers to the operating mode of the EMG3435-Q20A, which can act as a:
• Router: This is the default device mode of the EMG3435-Q20A. Use this mode to connect the local
network to another network, like the Internet. Go to Section 6.2 on page 35 to view the Status screen
in this mode.
• Access Point: Use this mode if you want to extend your network by allowing network devices to
connect to the EMG3435-Q20A wirelessly. Go to Section 7.4 on page 43 to view the Status screen in
this mode.
For more information on these modes and to change the mode of your EMG3435-Q20A, refer to
Chapter 15 on page 158.
The menu for changing device modes is available in Expert Mode only.
Note: Choose your device mode carefully to avoid having to change it later.
When changing to another mode, the IP address of the EMG3435-Q20A changes. The running
applications and services of the network devices connected to the EMG3435-Q20A can be interrupted.
EMG3435-Q20A User’s Guide
26
Page 27
5.1 Overview
Network Map
Navigation Panel
Control Panel
Go to
Status
Screen
(Expert
Mode)
The Web Configurator is set to Easy Mode by default. You can configure several key features of the
EMG3435-Q20A in this mode. This mode is useful to users who are not fully familiar with some features
that are usually intended for network administrators.
When you log in to the Web Configurator, the following screen opens.
Figure 16 Easy Mode
CHAPTER 5
Easy Mode
5.2 What You Can Do
You can do the following in this mode:
• Use this Navigation Panel to open the eaZy123 wizard or log out the EMG3435-Q20A (Section 5.4 on
page 28).
• Use the Network Map screen to check if your EMG3435-Q20A is connected to the Internet (Section 5.5
on page 29).
EMG3435-Q20A User’s Guide
27
Page 28
Chapter 5 Easy Mode
• Use the Control Panel to configure and enable EMG3435-Q20A features, including guest Wi-Fi, wireless
security, parental control and so on (Section 5.6 on page 30).
5.3 What You Need to Know
Between the different device modes, the Control Panel (Section 5.6 on page 30) changes depending
on which features are applicable to the mode:
• Router Mode: All Control Panel features are available.
• Access Point Mode: Parental Control and Notification are not available.
5.4 Navigation Panel
Use this navigation panel to opt out of the Easy mode.
Figure 17 Easy Mode: Navigation Panel
The following table describes the labels in this screen.
Table 7 Easy Mode: Navigation Panel
ITEMDESCRIPTION
Click this icon to open a screen where you can click Check here to redirect your
Firmware Notification
WizardClick this icon to open the eaZy123 wizard for the EMG3435-Q20A.
LogoutClick this to end the Web Configurator session.
This icon only displays when new firmware is released.
EMG3435-Q20A User’s Guide
28
Page 29
5.5 Network Map
When you log into the Web Configurator, the Network Map is shown as follows.
Figure 19 Easy Mode: Network Map
Chapter 5 Easy Mode
This screen displays whether the EMG3435-Q20A connects to the Internet. It also shows the devices
connected to the EMG3435-Q20A, including those connecting wirelessly. Click the Refresh button to
refresh the network map.
The following table describes the icons in this screen.
Table 8 Easy Mode: Network Map
ITEMDESCRIPTION
This icon shows the EMG3435-Q20A’s connection status.
This icon is grayed out if the user is unable to access the Internet.
Click this button to refresh the EMG3435-Q20A’s connection status and the network
map.
InfoClick this to view the device’s information that is currently connected to the EMG3435-
Q20A.
BlockClick this to block the device from accessing the Internet through the EMG3435-Q20A.
Rename / IconClick this to rename the device or change the device’s icon.
EMG3435-Q20A User’s Guide
29
Page 30
Chapter 5 Easy Mode
Figure 20 Easy Mode: Network Map: Info
Figure 21 Easy Mode: Network Map: Rename / Icon
Click Apply to save your changes back to the EMG3435-Q20A. Click Cancel to reload the previous
configuration for this screen.
5.6 Control Panel
The features configurable in Easy Mode are shown in the Control Panel.
Figure 22 Easy Mode: Control Panel
Switch ON to enable the feature. Otherwise, switch OFF. If the feature is turned on, the green light
flashes. If it is turned off, the blue light flashes.
Additionally, click the feature to open a screen where you can edit its settings.
EMG3435-Q20A User’s Guide
30
Page 31
The following table describes the labels in this screen.
Table 9 Easy Mode: Control Panel
ITEMDESCRIPTION
Wi-FiClick this to configure wireless radio, SSID, security mode and wireless password for the
Guest Wi-FiClick this to configure wireless and wireless security settings for the guest Wi-Fi network.
Parental ControlSwitch ON to enable parental control, and click this to view the parental control rules.
NotificationSwitch ON to have the EMG3435-Q20A send e-mail notifications when the user(s) is
LEDSwitch ON to have the EMG3435-Q20A's LEDs (lights) stay lit/blinking. Otherwise, switch
5.6.1 Wi-Fi
Chapter 5 Easy Mode
EMG3435-Q20A's default Wi-Fi network.
Refer to Section 5.6.1 on page 31 to see this screen.
Otherwise, switch OFF.
Refer to Section 5.6.3 on page 33 to see this screen.
connected to the EMG3435-Q20A for Internet access during the specified time periods.
Otherwise, switch OFF.
Refer to Section 5.6.4 on page 34 to see this screen.
OFF.
Use this screen to configure security for the EMG3435-Q20A's default wireless LAN. You can enter the
SSID and select the wireless security mode in the following screen. See Chapter 14 on page 140 for how
to configure wireless network.
Note: You can enable the wireless function of your EMG3435-Q20A by first turning on the WIFI
switch in the rear panel.
Figure 23 Easy Mode: Wi-Fi
EMG3435-Q20A User’s Guide
31
Page 32
The following table describes the labels in this screen.
Table 10 Easy Mode: Wi-Fi
LABELDESCRIPTION
Wireless RadioChoose whether you want to apply the wireless security to 2.4G Hz, 5G Hz or Both wireless
Network Name
(SSID)
Security Mode Select WPA2-PSK to enable data encryption. Or Select No Security to allow wireless clients to
Password This field appears when you choose wither WPA2-PSK as the security mode.
Verify PasswordType the password again to confirm.
Cancel Click Cancel to reload the previous configuration for this screen.
ApplyClick Apply to save your changes back to the EMG3435-Q20A.
5.6.2 Guest Wi-Fi
This screen allows you to configure guest wireless network settings on the EMG3435-Q20A. Users
connected to the guest wireless network can access the Internet via the EMG3435-Q20A, but not other
networks connected to the EMG3435-Q20A.
the guest wireless network.
Figure 24 Easy Mode: Guest Wi-Fi
Chapter 5 Easy Mode
radios.
(Service Set IDentity) The SSID identifies the Service Set with which a wireless station is
associated. Wireless stations associating to the access point (AP) must have the same
SSID. Enter a descriptive name (up to 32 keyboard characters) for the wireless LAN.
communicate with the access points without any data encryption.
Type a pre-shared key from 8 to 63 case-sensitive keyboard characters.
See Chapter 11 on page 93 for how to enable and set up
EMG3435-Q20A User’s Guide
32
Page 33
The following table describes the labels in this screen.
Table 11 Easy Mode: Guest Wi-Fi
LABELDESCRIPTION
Wireless RadioChoose whether you want to apply the wireless settings to the 2.4G Hz or 5G Hz wireless
Network Name
(SSID)
Security Mode Select WPA2-PSK to enable data encryption. Or select No Security to allow wireless clients to
Password This field appears when you choose WPA2-PSK as the security mode.
Verify PasswordType the password again to confirm.
Cancel Click Cancel to reload the previous configuration for this screen.
ApplyClick Apply to save your changes back to the EMG3435-Q20A.
5.6.3 Parental Control
Use this screen to view the parental control rules configured on the EMG3435-Q20A. See Section 13.2 on
page 119 for how to enable and configure parental control rules.
Chapter 5 Easy Mode
radio.
The SSID (Service Set IDentity) identifies the Service Set with which a wireless client is
associated. Enter a descriptive name (up to 32 printable characters found on a typical
English language keyboard) for the guest wireless network.
communicate with the EMG3435-Q20A without any data encryption.
Type a pre-shared key from 8 to 63 case-sensitive keyboard characters.
Figure 25 Easy Mode: Parental Control
The following table describes the labels in this screen.
Table 12 Easy Mode: Parental Control
LABELDESCRIPTION
StatusThis indicates whether the rule is active or not.
A yellow bulb signifies that this rule is active. A gray bulb signifies that this rule is not active.
User NameThis shows the name of the user to which this rule applies.
ScheduleThis shows whether the user is allowed to access the Internet (Allow) or not (Block).
BonusIf the user is currently not permitted to access the Internet, you can click the Bonus to allow
Remaining time This field displays the amount of Internet access time that remains for each user before the
access for a specified period of time. A screen then displays allowing you to set how long (in
minutes) the user is allowed to access the Internet.
This button is grayed out if the user is now able to access the Internet.
EMG3435-Q20A blocks the user from accessing the Internet.
None means there is no extra Internet access time.
EMG3435-Q20A User’s Guide
33
Page 34
5.6.4 Notification
Use this screen to view the e-mail notification rules configured on the EMG3435-Q20A. See Section 13.2.2
on page 122 for how to configure e-mail notification rules and e-mail settings.
Figure 26 Easy Mode: Notification
The following table describes the labels in this screen.
Table 13 Easy Mode: Notification
LABELDESCRIPTION
Notification
StatusThis indicates whether the rule is active or not.
User NameThis shows the name of the user to which this rule applies.
NotificationThis shows the e-mail address to which the notification is sent.
Chapter 5 Easy Mode
A yellow bulb signifies that this rule is active. A gray bulb signifies that this rule is not active.
5.6.5 LED
Switch ON to turn on the LEDs (lights) on the EMG3435-Q20A. Otherwise, switch OFF.
EMG3435-Q20A User’s Guide
34
Page 35
6.1 Overview
Modem
The EMG3435-Q20A is set to router mode by default. Routers are used to connect the local network to
another network (for example, the Internet). In the figure below, the EMG3435-Q20A connects the local
network (LAN1 ~ LAN4) to the Internet.
Figure 27 EMG3435-Q20A Network
CHAPTER 6
Router Mode
Note: After clicking Login, the Easy Mode appears. Refer to Chapter 5 on page 27 for the
Easy Mode screens. Change to Expert Mode to see the screens described in the
sections following this.
6.2 Router Mode Status Screen
Click Expert Mode > Status > System Status to open the status screen.
EMG3435-Q20A User’s Guide
35
Page 36
Chapter 6 Router Mode
Figure 28 Expert Mode: Status > System Status: Router Mode
The following table describes the labels shown in the Status screen.
Table 14 Expert Mode: Status > System Status: Router Mode
LABELDESCRIPTION
Device Information
ItemThis column shows the type of data the EMG3435-Q20A is recording.
DataThis column shows the actual data recorded by the EMG3435-Q20A.
Host NameThis is the System Name you enter in the Maintenance > General screen. It is for identification
Model NumberThis is the model name of your device.
Firmware VersionThis is the firmware version.
Sys OP ModeThis is the device mode (Section 4.1.2 on page 26) to which the EMG3435-Q20A is set - Router
WAN Information
MAC AddressThis shows the WAN Ethernet adapter MAC Address of your device.
IP AddressThis shows the WAN port’s IP address.
IP Subnet MaskThis shows the WAN port’s subnet mask.
Default GatewayThis shows the WAN port’s gateway IP address.
IPv6 AddressThis shows the IPv6 address of the EMG3435-Q20A on the WAN.
LAN Information
purposes.
Mode.
EMG3435-Q20A User’s Guide
36
Page 37
Chapter 6 Router Mode
Table 14 Expert Mode: Status > System Status: Router Mode (continued)
LABELDESCRIPTION
MAC AddressThis shows the LAN Ethernet adapter MAC Address of your device.
IP AddressThis shows the LAN port’s IP address.
IP Subnet MaskThis shows the LAN port’s subnet mask.
DHCPThis shows the LAN port’s DHCP role - Server or Disable.
IPv6 AddressThis shows the IPv6 address of the EMG3435-Q20A on the LAN.
WLAN 2.4G Information
WLAN OP ModeThis is the device mode (Section 4.1.2 on page 26) to which the EMG3435-Q20A’s wireless LAN is
set - Access Point Mode.
MAC AddressThis shows the 2.4GHz wireless adapter MAC Address of your device.
SSIDThis shows a descriptive name used to identify the EMG3435-Q20A in the 2.4GHz wireless LAN.
ChannelThis shows the channel number which you select manually.
SecurityThis shows the level of wireless security the EMG3435-Q20A is using.
WLAN 5G Information
WLAN OP ModeThis is the device mode (Section 4.1.2 on page 26) to which the EMG3435-Q20A’s wireless LAN is
MAC AddressThis shows the 5GHz wireless adapter MAC Address of your device.
SSIDThis shows a descriptive name used to identify the EMG3435-Q20A in the 5GHz wireless LAN.
ChannelThis shows the channel number which you select manually.
SecurityThis shows the level of wireless security the EMG3435-Q20A is using.
FirewallThis shows whether the firewall is enabled or not.
System Status
System Up TimeThis is the total time the EMG3435-Q20A has been on.
Current Date/TimeThis field displays your EMG3435-Q20A’s presentdate and time.
System Resource
- CPU UsageThis displays what percentage of the EMG3435-Q20A’s processing ability is currently used. When
- Memory UsageThis shows what percentage of the heap memory the EMG3435-Q20A is using.
Interface Status
InterfaceThis displays the EMG3435-Q20A port types. The port types are: WAN, LAN and WLAN.
StatusFor the LAN and WAN ports, this field displays Down (line is down) or Up (line is up or connected).
set - Access Point Mode.
this percentage is close to 100%, the EMG3435-Q20A is running at full load, and the throughput is
not going to improve anymore. If you want some applications to have more throughput, you
should turn off other applications (for example, using bandwidth management.)
For the 2.4GHz/5GHz WLAN, it displays Up when the 2.4GHz/5GHz WLAN is enabled or Down
when the 2.4G/5G WLAN is disabled.
RateFor the LAN ports, this displays the port speed and duplex setting or is left blank when the line is
disconnected.
For the WAN port, it displays the port speed and duplex setting if you’re using Ethernet
encapsulation. This field displays N/A when the line is disconnected.
For the 2.4GHz/5GHz WLAN, it displays the maximum transmission rate when the 2.4GHz/5GHz
WLAN is enabled and N/A when the WLAN is disabled.
EMG3435-Q20A User’s Guide
37
Page 38
Chapter 6 Router Mode
Table 14 Expert Mode: Status > System Status: Router Mode (continued)
LABELDESCRIPTION
Printer Information
Printer NameThe EMG3435-Q20A can act as a print server and allows you to share a USB printer on your LAN.
This displays the
name of the printer connected to the EMG3435-Q20A's USB port.
Note: You need to manually install the printer driver in your computer and add the
printer to your printer list.
6.2.1 Navigation Panel
Use the sub-menus on the navigation panel to configure EMG3435-Q20A features.
Use this screen to configure servers behind the EMG3435-Q20A and forward
incoming service requests to the server(s) on your local network.
Port TriggerUse this screen to change your EMG3435-Q20A’s port triggering settings.
PassthroughUse this screen to enable ALGs (Application Layer Gateway) and VPN pass-
through settings.
Dynamic DNSUse this screen to set up dynamic DNS.
Wireless
WirelessUse this screen to enable the wireless LAN and configure wireless LAN and
Guest WirelessUse this screen to configure multiple BSSs on the EMG3435-Q20A.
MAC FilterUse the MAC filter screen to configure the EMG3435-Q20A to block access to
AdvancedThis screen allows you to configure advanced wireless settings.
WPSUse this screen to configure WPS.
SchedulingUse this screen to schedule the times the Wireless LAN is enabled.
LAN
LAN IPUse this screen to configure LAN IP address and subnet mask.
Static DHCPThis screen allows you to assign IP addresses on the LAN to specific individual
IPv6 LANUse this screen to configure the IPv6 address for your EMG3435-Q20A on the
Applications
Parental ControlGeneralUse this screen to enable parental control, set parental controls rules/
NotificationUse this screen to send e-mail notifications, configure e-mail notification rules
Bandwidth
Management
USB Media
Sharing
UPnPUse this screen to enable UPnP on the EMG3435-Q20A.
File SharingSAMBA Use this screen to enable file sharing through the EMG3435-Q20A.
One ConnectUse this screen to enable or disable Wi-Fi auto-configuration.
Security
IPv4 FirewallUse this screen to configure IPv4 firewall rules.
IPv6 FirewallUse this screen to configure IPv6 firewall rules.
Maintenance
BandwidthUse this screen to enable StreamBoost.
PrioritiesUse this screen to change the priority of the connected devices.
FTP Use this screen to have the EMG3435-Q20A act as a FTP server.
wireless security settings.
devices or block the devices from accessing the EMG3435-Q20A.
Use this screen to configure the IPv6 address for the EMG3435-Q20A on the
LAN.
Use this screen to enable the EMG3435-Q20A’s DHCP server.
computers based on their MAC addresses.
LAN.
schedules and block web sites containing certain keywords in the URL.
and e-mail settings.
Use this screen to configure the maximum allowable bandwidth and enable
automatic update.
Use this screen to have the EMG3435-Q20A function as a DLNA-compliant
media server, that lets DLNA-compliant media clients play video, audio, and
photo content files stored on the connected USB storage device.
GeneralUse this screen to view and change administrative settings such as system and
domain names.
Password Use this screen to change the password of your EMG3435-Q20A.
Time Use this screen to change your EMG3435-Q20A’s time and date.
Firmware
Upgrade
Backup/RestoreUse this screen to backup and restore the configuration or reset the factory
RestartThis screen allows you to reboot the EMG3435-Q20A without turning the power
LanguageThis screen allows you to select the language you prefer.
Remote
Management
LogUse this screen to view the list of activities recorded by your EMG3435-Q20A.
Operation ModeThis screen allows you to select whether your device acts as a router, or an
Remote
Access
Wake On LAN Use this screen to enable Wake on LAN to remotely turn on a device on the
Use this screen to upload firmware to your EMG3435-Q20A.
defaults to your EMG3435-Q20A.
off.
Use this screen to configure through which interface(s) and from which IP
address(es) users can use Telnet and HTTP/HTTPS to manage the EMG3435Q20A.
local network.
access point.
EMG3435-Q20A User’s Guide
40
Page 41
7.1 Overview
Use your EMG3435-Q20A as an access point (AP) if you already have a router or gateway on your
network. In this mode your EMG3435-Q20A bridges a wired network (LAN) and wireless LAN (WLAN) in
the same subnet. See the figure below for an example.
Figure 30 Wireless Internet Access in Access Point Mode
CHAPTER 7
Access Point Mode
Many screens that are available in Router Mode are not available in Access Point Mode, such as
bandwidth management and firewall.
7.2 What You Can Do
• Use the Status screen to view read-only information about your EMG3435-Q20A (Section 7.4 on page
43).
• Use the LAN screen to set the IP address for your EMG3435-Q20A acting as an access point (Section
7.5 on page 45).
7.3 What You Need to Know
See Chapter 8 on page 48 for a tutorial on setting up a network with the EMG3435-Q20A as an access
point.
EMG3435-Q20A User’s Guide
41
Page 42
Chapter 7 Access Point Mode
7.3.1 Setting your EMG3435-Q20A to AP Mode
1Log into the Web Configurator if you haven’t already. See the Quick start Guide for instructions on how
to do this.
2To use your EMG3435-Q20A as an access point, go to Expert Mode > Maintenance > Operation Mode
and select Access Point Mode.
Figure 31 Changing to Access Point mode
Note: You have to log in to the Web Configurator again when you change modes. As soon as
you do, your EMG3435-Q20A is already in Access Point mode.
3When you select Access Point Mode, the following pop-up message window appears.
Figure 32 Pop up for Access Point mode
Click OK. Then click Apply. The Web Configurator refreshes once the change to Access Point mode is
successful.
7.3.2 Accessing the Web Configurator in Access Point Mode
Log in to the Web Configurator in Access Point mode, do the following:
1Connect your computer to the LAN port of the EMG3435-Q20A.
2The default IP address of the EMG3435-Q20A is “192.168.1.2”. In this case, your computer must have an
IP address in the range between “192.168.1.3” and “192.168.1.254”.
3Click Start > Run on your computer in Windows. Type “cmd” in the dialog box. Enter “ipconfig” to show
your computer’s IP address. If your computer’s IP address is not in the correct range then see Appendix
B on page 173 for information on changing your computer’s IP address.
EMG3435-Q20A User’s Guide
42
Page 43
Chapter 7 Access Point Mode
4After you’ve set your computer’s IP address, open a web browser such as Internet Explorer and type
“192.168.1.2” as the web address in your web browser.
Note: After clicking Login, the Easy Mode appears. Refer to Section on page 27 for the Easy
Mode screens. Change to Expert Mode to see the screens described in the sections
following this.
7.3.3 Configuring your WLAN and Maintenance Settings
The configuration of wireless and maintenance settings in Access Point Mode is the same as for Router
Mode.
•See Chapter 11 on page 93 for information on the configuring your wireless network.
•See Chapter 15 on page 146 for information on configuring your maintenance settings.
7.4 AP Mode Status Screen
Click Expert Mode > Status to open the Status screen.
Figure 33 Expert Mode: Status > System Status: Access Point Mode
EMG3435-Q20A User’s Guide
43
Page 44
Chapter 7 Access Point Mode
The following table describes the labels shown in the Status screen.
Table 16 Expert Mode: Status > System Status: Access Point Mode
LABELDESCRIPTION
Device Information
Host NameThis is the System Name you enter in the Maintenance > General screen. It is for identification
purposes.
Model NumberThis is the model name of your device.
Firmware VersionThis is the firmware version.
Sys OP ModeThis is the device mode (Section 4.1.2 on page 26) to which the EMG3435-Q20A is set - AP Mode.
LAN Information
MAC AddressThis shows the LAN Ethernet adapter MAC Address of your device.
IP AddressThis shows the LAN port’s IP address.
IP Subnet MaskThis shows the LAN port’s subnet mask.
DHCPThis shows the LAN port’s DHCP role - Client or None.
IPv6 AddressThis shows the IPv6 address of the EMG3435-Q20A on the LAN.
WLAN 2.4G Information
WLAN OP ModeThis is the device mode (Section 4.1.2 on page 26) to which the EMG3435-Q20A’s wireless LAN is
set - Access Point Mode.
MAC AddressThis shows the 2.4GHz wireless adapter MAC Address of your device.
SSIDThis shows a descriptive name used to identify the EMG3435-Q20A in the 2.4GHz wireless LAN.
ChannelThis shows the channel number which you select manually.
SecurityThis shows the level of wireless security the EMG3435-Q20A is using.
WLAN 5G Information
WLAN OP ModeThis is the device mode (Section 4.1.2 on page 26) to which the EMG3435-Q20A’s wireless LAN is
MAC AddressThis shows the 5GHz wireless adapter MAC Address of your device.
SSIDThis shows a descriptive name used to identify the EMG3435-Q20A in the 5GHz wireless LAN.
ChannelThis shows the channel number which you select manually.
SecurityThis shows the level of wireless security the EMG3435-Q20A is using.
System Status
ItemThis column shows the type of data the EMG3435-Q20A is recording.
DataThis column shows the actual data recorded by the EMG3435-Q20A.
System Up TimeThis is the total time the EMG3435-Q20A has been on.
Current Date/TimeThis field displays your EMG3435-Q20A’s presentdate and time.
System Resource
- CPU UsageThis displays what percentage of the EMG3435-Q20A’s processing ability is currently used. When
- Memory UsageThis shows what percentage of the heap memory the EMG3435-Q20A is using.
Interface Status
InterfaceThis displays the EMG3435-Q20A port types. The port types are: LAN and WLAN.
StatusFor the LAN ports, this field displays Down (line is down) or Up (line is up or connected).
set - Access Point Mode.
this percentage is close to 100%, the EMG3435-Q20A is running at full load, and the throughput is
not going to improve anymore. If you want some applications to have more throughput, you
should turn off other applications.
For the 2.4GHz/5GHz WLAN, it displays Up when the 2.4GHz/5GHz WLAN is enabled or Down
when the 2.4G/5G WLAN is disabled.
EMG3435-Q20A User’s Guide
44
Page 45
Chapter 7 Access Point Mode
Table 16 Expert Mode: Status > System Status: Access Point Mode (continued)
LABELDESCRIPTION
RateFor the LAN ports, this displays the port speed and duplex setting or is left blank when the line is
disconnected.
For the 2.4GHz/5GHz WLAN, it displays the maximum transmission rate when the 2.4GHz/5GHz
WLAN is enabled and N/A when the WLAN is disabled.
Printer Information
Printer NameThe EMG3435-Q20A can act as a print server and allows you to share a USB printer on your LAN.
This displays the
Note: You need to manually install the printer driver in your computer and add the
printer to your printer list.
name of the printer connected to the EMG3435-Q20A's USB port.
7.4.1 Navigation Panel
Use the menu in the navigation panel to configure EMG3435-Q20A features in Access Point Mode.
Figure 34 Expert Mode: Navigation Panel: Access Point Mode
Refer to Table 15 on page 38 for descriptions of the labels shown in the navigation panel.
7.5 LAN Screen
Use this section to configure your LAN settings while in Access Point Mode.
Click Expert Mode > LAN to see the screen below.
Note: If you change the IP address of the EMG3435-Q20A in the screen below, you will need
to log into the EMG3435-Q20A again using the new IP address.
EMG3435-Q20A User’s Guide
45
Page 46
Chapter 7 Access Point Mode
Figure 35 LAN > LAN IP
The table below describes the labels in the screen.
Table 17 LAN > LAN IP
LABELDESCRIPTION
IP Address
Obtain an IP Address
Automatically
When you enable this, the EMG3435-Q20A gets its IP address from the network’s DHCP
server (for example, your ISP). Users connected to the EMG3435-Q20A can now access
the network (i.e., the Internet if the IP address is given by the ISP).
The Web Configurator may no longer be accessible unless you know the IP address
assigned by the DHCP server to the EMG3435-Q20A. You need to reset the EMG3435Q20A to be able to access the Web Configurator again (see Section 15.7 on page 151
for details on how to reset the EMG3435-Q20A).
Also when you select this, you cannot enter an IP address for your EMG3435-Q20A in
the field below.
Static IP AddressClick this if you want to specify the IP address of your EMG3435-Q20A. Or if your ISP or
IP AddressType the IP address in dotted decimal notation. The default setting is 192.168.1.2. If you
Subnet MaskThe subnet mask specifies the network number portion of an IP address. Your EMG3435-
Default GatewayEnter a gateway IP address (if your ISP or network administrator gave you one) in this
DNS Server
First DNS Server
Second DNS Server
Third DNS Server
network administrator gave you a static IP address to access the network or the
Internet.
change the IP address you will have to log in again with the new IP address.
Q20A will automatically calculate the subnet mask based on the IP address that you
assign. Unless you are implementing subnetting, use the subnet mask computed by the
EMG3435-Q20A.
field.
Select Obtained From ISP if your ISP dynamically assigns DNS server information (and
the EMG3435-Q20A's WAN IP address). The field to the right displays the (read-only) DNS
server IP address that the ISP assigns.
Select User-Defined if you have the IP address of a DNS server. Enter the DNS server's IP
address in the field to the right. If you chose User-Defined, but leave the IP address set
to 0.0.0.0, User-Defined changes to None after you click Apply. If you set a second
choice to User-Defined, and enter the same IP address, the second User-Defined
changes to None after you click Apply.
Select None if you do not want to configure DNS servers. If you do not configure a DNS
server, you must know the IP address of a computer in order to access it.
EMG3435-Q20A User’s Guide
46
Page 47
Chapter 7 Access Point Mode
Table 17 LAN > LAN IP (continued)
LABELDESCRIPTION
ApplyClick Apply to save your changes to the EMG3435-Q20A.
CancelClick Cancel to reload the previous configuration for this screen.
EMG3435-Q20A User’s Guide
47
Page 48
CHAPTER 8
8.1 Overview
This chapter provides tutorials for setting up your EMG3435-Q20A.
• Set Up a Wireless Network Using WPS
• Connect to EMG3435-Q20A Wireless Network without WPS
• Using Guest SSIDs on the EMG3435-Q20A
8.2 Set Up a Wireless Network Using WPS
This section gives you an example of how to set up wireless network using WPS. This example uses the
EMG3435-Q20A as the AP and NWD210N as the wireless client which connects to a notebook.
Tutorials
Note: The wireless client must be a WPS-aware device (for example, a WPS USB adapter ).
There are two WPS methods for creating a secure connection via the web configurator or utility. This
tutorial shows you how to do both.
• Push Button Configuration (PBC) - create a secure wireless network simply by pressing a button. See
Section 8.2.1 on page 48. This is the easier method.
• PIN Configuration - create a secure wireless network simply by entering a wireless client's PIN (Personal
Identification Number) in the EMG3435-Q20A’s interface. See Section 8.2.2 on page 49. This is the
more secure method, since one device can authenticate the other.
8.2.1 Push Button Configuration (PBC)
1Make sure that your EMG3435-Q20A is turned on. Make sure the WIFI button (at the back panel of the
EMG3435-Q20A) is pushed in, and that the device is placed within range of your notebook.
2Make sure that you have installed the wireless client (this example uses the NWD210N) driver and utility in
your notebook.
3In the wireless client utility, find the WPS settings. Enable WPS and press the WPS button (Start or WPS
button)
4Log into EMG3435-Q20A’s Web Configurator and press the Push Button in the Expert > Wireless > WPS
screen.
EMG3435-Q20A User’s Guide
48
Page 49
Chapter 8 Tutorials
Wireless Client
Access Point
SECURITY INFO
COMMUNICATION
WITHIN 2 MINUTES
WPS
START
Note: Your EMG3435-Q20A has a WPS button located on its rear panel, as well as a WPS
button in its configuration utility. Both buttons have exactly the same function; you can
use one or the other.
Note: It doesn’t matter which button is pressed first. You must press the second button within
two minutes of pressing the first one.
The EMG3435-Q20A sends the proper configuration settings to the wireless client. This may take up to
two minutes. Then the wireless client is able to communicate with the EMG3435-Q20A securely.
The following figure shows you an example to set up wireless network and security by pressing a button
on both EMG3435-Q20A and wireless client (the NWD210N in this example).
Figure 36 Example WPS Process: PBC Method
8.2.2 PIN Configuration
When you use the PIN configuration method, you need to use both EMG3435-Q20A’s configuration
interface and the client’s utilities.
1Launch your wireless client’s configuration utility. Go to the WPS settings and select the PIN method to
get a PIN number.
2Enter the PIN number to the PIN field in the Expert > Wireless > WPS screen on the EMG3435-Q20A.
EMG3435-Q20A User’s Guide
49
Page 50
Chapter 8 Tutorials
WITHIN 2 MINUTES
Wireless Client
Access Point
3Click Start buttons (or button next to the PIN field) on both the wireless client utility screen and the
EMG3435-Q20A’s WPS screen within two minutes.
The EMG3435-Q20A authenticates the wireless client and sends the proper configuration settings to the
wireless client. This may take up to two minutes. Then the wireless client is able to communicate with the
EMG3435-Q20A securely.
The following figure shows you the example to set up wireless network and security on EMG3435-Q20A
and wireless client (ex. NWD210N in this example) by using PIN method.
Figure 37 Example WPS Process: PIN Method
8.3 Connect to EMG3435-Q20A Wireless Network without
WPS
This example shows you how to configure wireless security settings with the following parameters on your
EMG3435-Q20A and connect your computer to the EMG3435-Q20A wireless network.
Follow the steps below to configure the wireless settings on your EMG3435-Q20A.
The instructions require that your hardware is connected (see the Quick Start Guide) and you are
logged into the Web Configurator through your LAN connection (see Section 2.2 on page 14).
1Make sure the WIFI switch (at the back panel of the EMG3435-Q20A) is set to ON.
2Open the Expert >Wireless > Wireless screen in the AP’s Web Configurator.
3Confirm that the wireless LAN is enabled on the EMG3435-Q20A.
4Select to configure the wireless settings for the 2.4GHz wireless radio.
5Enter SSID_Example3 as the SSID and select Channel-06 as the channel. Set security mode to WPA2-PSK
and enter ThisismyWPA-PSKpre-sharedkey in the Pre-Shared Key field. Click Apply.
6Click Expert > Status to open the Status screen. Verify your wireless and wireless security settings under
Device Information and check if the WLAN connection is up under Interface Status.
EMG3435-Q20A User’s Guide
51
Page 52
Chapter 8 Tutorials
8.3.1 Configure Your Notebook
Note: In this example, we use the Zyxel NWD6505 wireless adapter as the wireless client and
use the Windows built-in utility (Windows Zero Configuration (WZC)) to connect to the
wireless network.
wireless clients. Make sure that your notebook or computer’s wireless adapter supports one of these
standards.
2Wireless adapters come with software sometimes called a “utility” that you install on your computer. See
your wireless adapter’s User’s Guide for information on how to do that.
3After you’ve installed the driver and attached the NWD6505 to your computer’s USB port, right-click the
Wireless Network Connection icon in your computer’s system tray, select and click View Available
Wireless Networks.
4The Wireless Network Connection screen displays. Click Refresh network list to view the available wireless
APs within range.
EMG3435-Q20A User’s Guide
52
Page 53
Chapter 8 Tutorials
5Select SSID_Example3 and click Connect.
6Type the security key in the following screen. Click Connect.
EMG3435-Q20A User’s Guide
53
Page 54
Chapter 8 Tutorials
7Check the status of your wireless connection in the screen below.
8If the wireless client keeps trying to connect to or acquiring an IP address from the EMG3435-Q20A,
make sure you entered the correct security key.
If the connection has limited or no connectivity, make sure the DHCP server is enabled on the EMG3435Q20A.
If your connection is successful, open your Internet browser and enter http://www.zyxel.com or the URL
of any other web site in the address bar. If you are able to access the web site, your wireless connection
is successfully configured.
8.4 Using Guest SSIDs on the EMG3435-Q20A
You can configure more than one guest SSID on a EMG3435-Q20A. See Section 11.4 on page 104.
This allows you to configure multiple independent wireless networks on the EMG3435-Q20A as if there
were multiple APs (virtual APs). Each guest SSID has its own wireless security type. That is, each SSID on
the EMG3435-Q20A represents a different access point/wireless network to wireless clients in the
network.
Clients can associate only with the SSIDs for which they have the correct security settings. Clients using
different SSIDs can access the Internet and the wired network behind the EMG3435-Q20A (such as a
printer).
EMG3435-Q20A User’s Guide
54
Page 55
Chapter 8 Tutorials
A
B
C
SSID_Guest
SSID_Worker
SSID_VoIP
For example, you may set up three wireless networks (A, B and C) in your office. A is for workers, B is for
guests and C is specific to a VoIP device in the meeting room.
8.4.1 Configuring Security Settings of Guest SSIDs
The EMG3435-Q20A is in router mode by default.
This example shows you how to configure the SSIDs with the following parameters on your EMG3435Q20A (in router mode).
SSIDSECURITY TYPEKEY
SSID_WorkerWPA2-PSK
WPA Compatible
SSID_VoIPWPA-PSKVoIPOnly12345678
SSID_GuestWPA-PSKkeyexample123
1Connect your computer to the LAN port of the EMG3435-Q20A using an Ethernet cable.
2The default IP address of the EMG3435-Q20A in router mode is “192.168.1.1”. In this case, your computer
must have an IP address in the range between “192.168.1.2” and “192.168.1.254”.
3Click Start > Run on your computer in Windows. Type “cmd” in the dialog box. Enter “ipconfig” to show
your computer’s IP address. If your computer’s IP address is not in the correct range then see Appendix
B on page 173 for information on changing your computer’s IP address.
4After you’ve set your computer’s IP address, open a web browser such as Internet Explorer and type
“http://192.168.1.1” as the web address in your web browser.
5Enter “1234” (default) as the password and click Login.
DoNotStealMyWirelessNetwork
6Type a new password and retype it to confirm, then click Apply. Otherwise, click Ignore.
EMG3435-Q20A User’s Guide
55
Page 56
Chapter 8 Tutorials
7The Easy Mode appears.
8Go to Expert > Wireless > Guest Wireless. Click the Edit icon of the first entry to configure wireless and
security settings for SSID_Worker.
9Configure the screen as follows. In this example, you enable Intra-BSS Traffic for SSID_Worker to allow
wireless clients in the same wireless network to communicate with each other. Click Apply.
10 Click the Edit icon of the second entry to configure wireless and security settings for SSID_VoIP.
11 Configure the screen as follows. You do not enable Intra-BSS Traffic for SSID_VoIP. Click Apply.
EMG3435-Q20A User’s Guide
56
Page 57
Chapter 8 Tutorials
12 Click the Edit icon of the third entry to configure wireless and security settings for SSID_Guest.
13 Configure the screen as follows. In this example, you enable Intra-BSS Traffic for SSID_Guest to allow
wireless clients in the same wireless network to communicate with each other. Select Enable Guest
WLAN to allow clients to access the Internet only. Click Apply.
EMG3435-Q20A User’s Guide
57
Page 58
PART II
Technical Reference
58
Page 59
9.1 Overview
This chapter discusses read-only information related to the device state of the EMG3435-Q20A.
9.1.1 What You Can Do
• Use the Live NetworkMonitor screen to view transmission data rates between the EMG3435-Q20A and
the Internet or connected devices (Section 9.2 on page 59).
• Use the Usage Monitor screen to view transmission data and bandwidth usage between the
EMG3435-Q20A and applications or connected devices (Section 9.3 on page 62).
• Use the Common Usage screen to view the top five traffic flows transmitting from/to the selected LAN
device(s) (Section Figure 48 on page 68).
• Use the Download Traffic Statistics screen to view the type and percentage of most download traffic
(Section 9.5 on page 69).
• Use the Client Tables screen to view the online clients information (Section 9.6 on page 70).
CHAPTER 9
Status
9.2 Live Network Monitor Screen
Use this screen to view the current upstream and downstream transmission speeds between the
EMG3435-Q20A and the Internet and/or between the EMG3435-Q20A and the connected device(s)
(represented by icons indicating the kind of network device), including those connecting wirelessly.
Click Expert Mode > Status > Live Network Monitor. The following screen displays. You can move your
mouse over a device icon to view information about the device, such as the name, IP address, MAC
address, device type and connection type.
EMG3435-Q20A User’s Guide
59
Page 60
Chapter 9 Status
Figure 38 Expert Mode > Status > Live Network Monitor
Click a device icon to go to a screen that displays the upstream/downstream bandwidth as a line
graph. If you click the EMG3435-Q20A’s icon, it also shows the transmission rate between the EMG3435Q20A and each connected device. If you click a connected device’s icon, you can see the current
transmission rate for a traffic type. The green ball indicates the traffic flow is given enough bandwidth.
EMG3435-Q20A User’s Guide
60
Page 61
Chapter 9 Status
Figure 39 Expert Mode > Status > Live Network Monitor: Traffic Statistics (EMG3435-Q20A)
EMG3435-Q20A User’s Guide
61
Page 62
Chapter 9 Status
Figure 40 Expert Mode > Status > Live Network Monitor: Traffic Statistics (Connected Device)
9.3 Usage Monitor Screens
• Use the Internet Data Usage Monitor screen to view the current amount of bandwidth being
transmitted from/to the connected devices or applications (Section 9.3.1 on page 62).
• Use the Bandwidth History screen to view the upload/download peak being transmitted from/to the
connected devices or applications (Section 9.3.2 on page 63).
• Use the Time Tracker screen to view the time period over which the traffic flow occurred from
connected devices (Section 9.3.3 on page 65).
• Use the Data Usage Alert screen to view the amount of bandwidth and configure your data plan
(Section 9.3.4 on page 65).
9.3.1 Internet Data Usage Monitor
Use this screen to view the current amount of bandwidth being transmitted from/to the connected LAN
device(s) or applications. Select the device(s) or applications radio button to view the amount of uplink
and downlink traffic by device(s) or applications.
Click Expert Mode > Status > Usage Monitor > Internet Data Usage Monitor. The following screen displays.
EMG3435-Q20A User’s Guide
62
Page 63
Chapter 9 Status
Figure 41 Expert Mode > Status > Usage Monitor > Internet Data Usage Monitor: Device
Figure 42 Expert Mode > Status > Usage Monitor > Internet Data Usage Monitor: Applications
9.3.2 Bandwidth History
Use this screen to view the peak upload (green) and download (blue) bandwidth in the past day, week,
month, or quarter. Bandwidth history can be displayed by selecting the connected LAN device(s) or
applications radio button. Select the time period and device(s) (or applications) from the drop-down list
box to view the corresponding upload/download bandwidth. You can put your mouse in the gray bar
and drag it to view the peak upload and download bandwidth. You can also put your cursor in the
graph to view graph details.
Click Expert Mode > Status > Usage Monitor > Bandwidth History. The following screen displays.
Use this screen to view the time period over which the traffic flow occurred and the amount of uplink
and downlink traffic generated in the past day, week, month, or quarter. Select the connected LAN
device(s) from the drop-down list box and specify the time period to view the upload/download
bandwidth. You can click the calendar icon () to choose the specified date.
Click Expert Mode > Status > Usage Monitor > Time Tracker. The following screen displays.
Figure 45 Expert Mode > Status > Usage Monitor > Time Tracker
Chapter 9 Status
9.3.4 Data Usage Alert
View data usage, data history and configure a data plan from this screen.
Data Usage Alert
Use this screen to view the upload (green) and download (blue) bandwidth in the past day, week,
month, or quarter. Data usage can be displayed by selecting the connected LAN device(s) or
applications radio button. Select the time period and device(s) (or applications) from the drop-down list
box to view the corresponding upload/download bandwidth. You can put your mouse in the gray bar
and drag it to view the upload and download bandwidth. You can also put your cursor in the graph to
view graph details.
Click Expert Mode > Status > Usage Monitor > Data Usage Alert. The following screen displays.
EMG3435-Q20A User’s Guide
65
Page 66
Chapter 9 Status
Figure 46 Expert Mode > Status > Usage Monitor > Data Usage Alert
Data History
Click Data Usage to view the remaining data usage allowed and remaining days to access the Internet.
Use the Data History screen to view the upload (green) and download (blue) bandwidth in the past
day, week, month, or quarter. Data history can be displayed by selecting the connected LAN device(s)
or applications radio button. Select the time period and device(s) (or applications) from the drop-down
list box to view the corresponding upload/download bandwidth. The following screen displays.
EMG3435-Q20A User’s Guide
66
Page 67
Chapter 9 Status
Figure 47 Expert Mode > Status > Usage Monitor > Data Usage Alert > Data Usage
Data Plan
Click the data plan icon () to specify a data limit per month and the date data amounts used are
reset. Data Usage displays the amount of data used from beginning. Average Used displays the
average amount of data used from the beginning date to the current date, and Expected Used
displays the expected amount data that will be used this month based on the Average Used. The
following screen displays.
EMG3435-Q20A User’s Guide
67
Page 68
Chapter 9 Status
Figure 48 Expert Mode > Status > Usage Monitor > Data Usage Alert > Data Usage > Plan
9.4 Common Usage Screen
Use this screen to view the top five traffic flows transmitting from/to the selected LAN device(s) in the
past day, week or month.
Click Expert Mode > Status > Common Usage to open the Common Usage screen.
The y-axis shows the time period over which the traffic flow occurred. The x-axis shows the type of the
traffic flow.
EMG3435-Q20A User’s Guide
68
Page 69
Chapter 9 Status
Figure 49 Expert Mode > Status > Common Usage
9.5 Download Traffic Statistics Screen
Use this screen to view the type and percentage of most download traffic on the EMG3435-Q20A.
Click Expert Mode > Status > Download Traffic Statistics to open the Download Traffic Statistics screen.
EMG3435-Q20A User’s Guide
69
Page 70
Chapter 9 Status
Figure 50 Expert Mode > Status > Download Traffic Statistics
9.6 Client Tables Screen
You can configure the EMG3435-Q20A’s LAN as a DHCP server or disable it. When configured as a
server, the EMG3435-Q20A assigns IP addresses to the clients. If DHCP service is disabled, you must have
another DHCP server on that network, or else the computer must be manually configured.
Use this screen to view the online clients information (including Host Name, IP Address, MAC Address,
Interface/Rssi, and Lease time) of all network clients using the EMG3435-Q20A’s DHCP server.
Click Expert Mode > Status > Client Tables to open the Client Tables screen.
Figure 51 Expert Mode > Status > Client Tables
EMG3435-Q20A User’s Guide
70
Page 71
Chapter 9 Status
The following table describes the labels in this screen.
Table 18 Expert Mode > Status > DHCP Table
LABEL DESCRIPTION
InterfaceSelect the interface from the drop-down list box to display current DHCP client information.
# This is the index number of the host computer.
OnlineThis field displays whether the connection to the host computer is up (a yellow bulb) or down (a
gray bulb).
Host NameThis field displays the computer host name.
IP AddressThis field displays the IP address relative to the # field listed above.
MAC AddressThis field shows the MAC address of the computer with the name in the Ho st Name field.
Every Ethernet device has a unique MAC (Media Access Control) address which uniquely
identifies a device. The MAC address is assigned at the factory and consists of six pairs of
hexadecimal characters, for example, 00:A0:C5:00:00:02.
Interface/RssiThis field displays the device’s interface type or received signal strength indicator (RSSI) that is
Lease timeThis field displays the amount of time that the IP address is valid.
ReserveSelect this if you want to reserve the IP address for this specific MAC address.
ApplyClick Apply to save your changes back to the EMG3435-Q20A.
CancelClick Cancel to reload the previous configuration for this screen.
currently connected to the EMG3435-Q20A.
EMG3435-Q20A User’s Guide
71
Page 72
10.1 Overview
This chapter discusses the EMG3435-Q20A’s WAN screens. Use these screens to configure your EMG3435Q20A for Internet access.
A WAN (Wide Area Network) connection is an outside connection to another network or the Internet. It
connects your private networks such as a LAN (Local Area Network) and other networks, so that a
computer in one location can communicate with computers in other locations.
Figure 52 LAN and WAN
CHAPTER 10
WAN
10.2 What You Can Do
• Use the Internet Connection screen to enter your ISP information and set how the computer acquires
its IP, DNS and WAN MAC addresses (Section 10.4 on page 75).
• Use the NAT > General screen to enable NAT, set a default server and change your EMG3435-Q20A’s
port forwarding settings (Section 10.5.1 on page 87).
• Use the NAT > Port Trigger screen to configure your EMG3435-Q20A’s trigger port settings (Section
10.5.2 on page 89).
• Use the NAT > Passthrough screen to configure your EMG3435-Q20A’s ALGs and VPN pass-through
settings (Section 10.5.3 on page 89).
• Use the Dynamic DNS screen to change your EMG3435-Q20A’s DDNS settings (Section 10.6 on page
91).
10.3 What You Need To Know
The information in this section can help you configure the screens for your WAN connection, as well as
enable/disable some advanced features of your EMG3435-Q20A.
EMG3435-Q20A User’s Guide
72
Page 73
Chapter 10 WAN
10.3.1 Configuring Your Internet Connection
Encapsulation Method
Encapsulation is used to include data from an upper layer protocol into a lower layer protocol. To set up
a WAN connection to the Internet, you need to use the same encapsulation method used by your ISP
(Internet Service Provider). If your ISP offers a dial-up Internet connection using PPPoE (PPP over
Ethernet) or PPTP (Point-to-Point Tunneling Protocol), they should also provide a username and password
(and service name) for user authentication.
WAN IP Address
The WAN IP address is an IP address for the EMG3435-Q20A, which makes it accessible from an outside
network. It is used by the EMG3435-Q20A to communicate with other devices in other networks. It can
be static (fixed) or dynamically assigned by the ISP each time the EMG3435-Q20A tries to access the
Internet.
If your ISP assigns you a static WAN IP address, they should also assign you the subnet mask and DNS
server IP address(es) (and a gateway IP address if you use the Ethernet or ENET ENCAP encapsulation
method).
DNS Server Address Assignment
Use Domain Name System (DNS) to map a domain name to its corresponding IP address and vice versa,
for instance, the IP address of www.zyxel.com is 204.217.0.2. The DNS server is extremely important
because without it, you must know the IP address of a computer before you can access it.
The EMG3435-Q20A can get the DNS server addresses in the following ways.
1The ISP tells you the DNS server addresses, usually in the form of an information sheet, when you sign up.
If your ISP gives you DNS server addresses, manually enter them in the DNS server fields.
2If your ISP dynamically assigns the DNS server IP addresses (along with the EMG3435-Q20A’s WAN IP
address), set the DNS server fields to get the DNS server address from the ISP.
WAN MAC Address
The MAC address screen allows users to configure the WAN port's MAC address by either using the
factory default or cloning the MAC address from a computer on your LAN. Choose Factory Default to
select the factory assigned default MAC Address.
Otherwise, click Clone the computer's MAC address - IP Address and enter the IP address of the
computer on the LAN whose MAC you are cloning. Once it is successfully configured, the address will be
copied to configuration file. It is recommended that you clone the MAC address prior to hooking up the
WAN Port.
EMG3435-Q20A User’s Guide
73
Page 74
Chapter 10 WAN
192.168.1.1
192.168.1.23
10.0.0.1
Multicast
Traditionally, IP packets are transmitted in one of either two ways - Unicast (1 sender - 1 recipient) or
Broadcast (1 sender - everybody on the network). Multicast delivers IP packets to a group of hosts on
the network - not everybody and not just 1.
Figure 53 Multicast Example
In the multicast example above, systems A and D comprise one multicast group. In multicasting, the
server only needs to send one data stream and this is delivered to systems A and D.
IGMP (Internet Group Multicast Protocol) is a network-layer protocol used to establish membership in a
multicast group - it is not used to carry user data. The EMG3435-Q20A supports both IGMP version 1
(IGMP-v1) and IGMP version 2 (IGMP-v2).
At start up, the EMG3435-Q20A queries all directly connected networks to gather group membership.
After that, the EMG3435-Q20A periodically updates this information. IP multicasting can be enabled/
disabled on the EMG3435-Q20A WAN interface in the Web Configurator (WAN). Select None to disable
IP multicasting on these interfaces.
Auto-IP Change
When the EMG3435-Q20A gets a WAN IP address or a DNS server IP address which is in the same subnet
as the LAN IP address 192.168.1.1, Auto-IP-Change allows the EMG3435-Q20A to change its LAN IP
address to 10.0.0.1 automatically. If the EMG3435-Q20A’s original LAN IP address is 10.0.0.1 and the WAN
IP address is in the same subnet, such as 10.0.0.3, the EMG3435-Q20A switches to use 192.168.1.1 as its
LAN IP address.
Figure 54 Auto-IP-Change Example
EMG3435-Q20A User’s Guide
74
Page 75
Chapter 10 WAN
Auto-IP-Change only works under the following conditions:
• The EMG3435-Q20A must be in Router Mode (see Section 15.12 on page 157 for more information) for
Auto-IP-Change to become active.
• The EMG3435-Q20A is set to receive a dynamic WAN IP address.
10.4 Internet Connection Screen
Use this screen to change your EMG3435-Q20A’s Internet access settings. Click Expert Mode > WAN >
Internet Connection.
10.4.1 IPoE Encapsulation
This screen displays when you select IPoE encapsulation.
EMG3435-Q20A User’s Guide
75
Page 76
Chapter 10 WAN
Figure 55 Expert Mode > WAN > Internet Connection: IPoE Encapsulation (IPv4 Only)
EMG3435-Q20A User’s Guide
76
Page 77
Chapter 10 WAN
The following table describes the labels in this screen.
Table 19 Network > WAN > Internet Connection: IPoE Encapsulation
LABELDESCRIPTION
ISP Parameters for Internet Access
EncapsulationYou must choose the IPoE option when the WAN port is used as a regular Ethernet.
IPv4 / IPv6Select IPv4 Only if you want the EMG3435-Q20A to run IPv4 only.
Select Dual Stack to allow the EMG3435-Q20A to run IPv4 and IPv6 at the same time.
Select IPv6 Only if you want the EMG3435-Q20A to run IPv6 only.
IP Address
Obtain an IP Address
Automatically
(DHCP)
Static IP Address Select this option If the ISP assigned a fixed IP address.
IP AddressEnter your WAN IP address in this field if you selected Static IP Address.
Subnet MaskEnter the Subnet Mask in this field.
Default Gateway Enter a gateway IP address (if your ISP gave you one) in this field.
MTU SizeEnter the MTU (Maximum Transmission Unit) size for each packet. If a larger packet arrives,
DNS Server
First DNS Server
Second DNS Server
Third DNS Server
Select this option If your ISP did not assign you a fixed IP address. This is the default selection.
the EMG3435-Q20A divides it into smaller fragments.
Select Obtained From ISP if your ISP dynamically assigns DNS server information (and the
EMG3435-Q20A's WAN IP address). The field to the right displays the (read-only) DNS server
IP address that the ISP assigns.
Select User-Defined if you have the IP address of a DNS server. Enter the DNS server's IP
address in the field to the right.
Select None if you do not want to configure DNS servers. If you do not configure a DNS
server, you must know the IP address of a computer in order to access it.
WAN MAC Address
Once the WAN MAC address is successfully configured, the address will be copied to the configuration file. It will
not change unless you change the setting or upload a different configuration file.
Factory defaultSelect this option to have the WAN interface use the factory assigned default MAC address.
By default, the EMG3435-Q20A uses the factory assigned MAC address to identify itself.
Clone the
computer's MAC
address - IP Address
Set WAN MAC
Address
IPv6 Tunneling
Use IPv6 tunneling when the local network uses IPv6 and the ISP has an IPv4 network. When the EMG3435-Q20A has
an IPv4 WAN address and you set IPv4/IPv6 mode to IPv4 Only, you can enable IPv6 tunneling to encapsulate IPv6
packets in IPv4 packets to cross the ISP’s IPv4 network.
Select this option to have the WAN interface use a different MAC address by cloning the
MAC address of another device or computer. Enter the IP address of the device or
computer whose MAC you are cloning.
Select this option to have the WAN interface use a manually specified MAC address. Enter
the MAC address in the fields.
EMG3435-Q20A User’s Guide
77
Page 78
Chapter 10 WAN
Table 19 Network > WAN > Internet Connection: IPoE Encapsulation (continued)
LABELDESCRIPTION
IPv6 TunnelingSelect None to not allow IPv6 packets to cross IPv4 networks.
Select 6RD to enable 6RD. IPv6 Rapid Deployment (6RD) is an IPv6 transitioning process for
stateless tunneling of IPv6 over IPv4. Enable 6RD to allow tunneling across an ISP's IPv4 only
access network.
Select 6to4 to transmit IPv6 packets over an IPv4 network. A 6to4 relay router is required to
route 6to4 packets to a native IPv6 network.
Select 6in4 if the EMG3435-Q20A has a public IPv4 address and you want to transmit your
IPv6 packets to one and only one remote site whose LAN network is also an IPv6 network.
You must know the WAN IP address of the remote gateway.
6RD
The EMG3435-Q20A generates a global IPv6 prefix from its IPv4 WAN address and tunnels IPv6 traffic to the ISP’s
Border Relay router to connect to the native IPv6 Internet. The local network can also use IPv4 services. The
EMG3435-Q20A uses its configured IPv4 WAN IP to route IPv4 traffic to the IPv4 Internet.
This is available only when you select IPv4 Only in the IPv4/IPv6 field.
Automatically
configured by
DHCPC
Manually Configured Select this if you have the IPv4 address of the relay server.
Border Relay IPv4
Address
Service Provider IPv6
Prefix
Service Provider IPv6
Prefix length
IPv4 mask lengthEnter the subnet mask number (1~32) for the IPv4 network.
6to4
The EMG3435-Q20A should get a public IPv4 address for the WAN. The EMG3435-Q20A adds an IPv4 IP header to
an IPv6 packet when transmitting the packet to the Internet. In reverse, the EMG3435-Q20A removes the IPv4
header from an IPv6 packet when receiving it from the Internet.
This is available only when you select IPv4 Only in the IPv4/IPv6 field.
Relay Server IPv4
Address
6in4
The EMG3435-Q20A encapsulates IPv6 packets within IPv4 packets across the Internet. You must know the WAN IP
address of the remote gateway device. This mode is normally used for a site-to-site application such as two branch
offices.
Select this to have the EMG3435-Q20A detect the relay server’s IP address automatically
through DHCP.
Specify the relay server’s IPv4 address.
Enter an IPv6 prefix for tunneling IPv6 traffic to the ISP’s Border Relay router and connecting
to the native IPv6 Internet.
Enter the IPv6 prefix length.
An IPv6 prefix length specifies how many most significant bits (starting from the left) in the
address compose the network address.
Enter the IPv4 address of a 6to4 relay server which helps forward packets between 6to4
networks and native IPv6 networks.
This is available only when you select IPv4 Only in the IPv4/IPv6 field.
Remote IPv4 Address Enter the IPv4 address of the remote gateway to which this interface tunnels traffic.
Remote IPv6 Address Enter the IPv6 address of the remote gateway to which this interface tunnels traffic.
Local IPv6 AddressEnter the IPv6 address assigned by your ISP.
IPv6 PrefixEnter the IPv6 prefix for this interface if you want to use a static IP address.
IPv6 DNS Server
This is available only when you select IPv4 Only in the IPv4/IPv6 field and set IPv6 Tunneling to 6RD, 6in4 or 6to4.
EMG3435-Q20A User’s Guide
78
Page 79
Chapter 10 WAN
Table 19 Network > WAN > Internet Connection: IPoE Encapsulation (continued)
LABELDESCRIPTION
First DNS Server
Second DNS Server
Third DNS Server
IPv6 Address
This section is NOT available when you select IPv4 Only in the IPv4/IPv6 field.
Obtain an IP Address
Automatically(DHCP
)
Static IP AddressSelect this option if you have a fixed IPv6 address assigned by your ISP.
IPv6 AddressEnter the IPv6 address assigned by your ISP.
Prefix lengthEnter the address prefix length to specify how many most significant bits in an IPv6 address
IPv6 Default
Gateway
Link Local OnlySelect this option to use the link-local address which uniquely identifies a device on the
IPv6 DNS Server
Specify the DNS server IPv6 address assigned by the ISP.
Select this option if you want to obtain an IPv6 address from a DHCPv6 server.
•Select DUID-LL (Default) to have the EMG3435-Q20A use DUID-LL (DUID Based on Link-
layer Address) for identification when exchanging DHCPv6 messages.
•Select DUID-LLT to have the EMG3435-Q20A use DUID-LLT (DUID Based on Link-layer
Address Plus Time) for identification when exchanging DHCPv6 messages.
compose the network address.
Enter the IPv6 address of the next-hop gateway. The gateway helps forward packets to
their destinations.
local network (the LAN).
This is available only when you select Dual Stack or IPv6 Only in the IPv4/IPv6 field.
First DNS Server
Second DNS Server
Third DNS Server
Multicast Setup
Multicast SetupSelect IGMPv1/v2 to enable multicasting. This applies to traffic routed from the WAN to the
Auto-Subnet Configuration
Enable Auto-IPChange Mode
ApplyClick Apply to save your changes back to the EMG3435-Q20A.
CancelClick Cancel to begin configuring this screen afresh.
Select Obtained From ISP to have the EMG3435-Q20A get the IPv6 DNS server addresses
from the ISP automatically.
Select User-Defined and enter the IPv6 DNS server address assigned by the ISP to have the
EMG3435-Q20A use the IPv6 DNS server addresses you configure manually.
Select None if you do not want to configure DNS servers. If you do not configure a DNS
server, you must know the IPv6 address of a computer in order to access it.
LAN.
Select None to disable this feature. This may cause incoming traffic to be dropped or sent
to all connected network devices.
Select this option to have the EMG3435-Q20A change its LAN IP address to 10.0.0.1 or
192.168.1.1 accordingly when the EMG3435-Q20A gets a dynamic WAN IP address in the
same subnet as the LAN IP address.
Select this option to have the EMG3435-Q20A change its LAN IP address to 10.0.0.1 or
192.168.1.1 accordingly when the EMG3435-Q20A gets a DNS server IP address in the same
subnet as the LAN IP address.
The NAT, DHCP server and firewall functions on the EMG3435-Q20A are still available in this
mode.
EMG3435-Q20A User’s Guide
79
Page 80
10.4.2 PPPoE Encapsulation
The EMG3435-Q20A supports PPPoE (Point-to-Point Protocol over Ethernet). PPPoE is an IETF standard
(RFC 2516) specifying how a personal computer (PC) interacts with a broadband modem (DSL, cable,
wireless, etc.) connection. The PPP over Ethernet option is for a dial-up connection using PPPoE.
For the service provider, PPPoE offers an access and authentication method that works with existing
access control systems (for example Radius).
One of the benefits of PPPoE is the ability to let you access one of multiple network services, a function
known as dynamic service selection. This enables the service provider to easily create and offer new IP
services for individuals.
Operationally, PPPoE saves significant effort for both you and the ISP or carrier, as it requires no specific
configuration of the broadband modem at the customer site.
By implementing PPPoE directly on the EMG3435-Q20A (rather than individual computers), the
computers on the LAN do not need PPPoE software installed, since the EMG3435-Q20A does that part of
the task. Furthermore, with NAT, all of the LANs’ computers will have access.
Chapter 10 WAN
EMG3435-Q20A User’s Guide
80
Page 81
Chapter 10 WAN
This screen displays when you select PPPoE encapsulation.
Figure 56 Network > WAN > Internet Connection: PPPoE Encapsulation (IPv4 Only)
EMG3435-Q20A User’s Guide
81
Page 82
Chapter 10 WAN
The following table describes the labels in this screen.
Table 20 Network > WAN > Internet Connection: PPPoE Encapsulation
LABELDESCRIPTION
ISP Parameters for Internet Access
EncapsulationSelect PPPoE if you connect to your Internet via dial-up.
IPv4 / IPv6Select IPv4 Only if you want the EMG3435-Q20A to run IPv4 only.
Select Dual Stack to allow the EMG3435-Q20A to run IPv4 and IPv6 at the same time.
Select IPv6 Only if you want the EMG3435-Q20A to run IPv6 only.
PPP Information
PPP UsernameType the user name given to you by your ISP.
PPP PasswordType the password associated with the user name above.
MTU SizeEnter the Maximum Transmission Unit (MTU) or the largest packet size per frame that your
EMG3435-Q20A can receive and process.
PPP Auto ConnectSelect this option if you do not want the connection to time out.
IDLE Timeout
(second)
PPPoE Service
Name
WAN IP Address Assignment
Get automatically
from ISP
Use Fixed IP Address Select this option and enter your WAN IP address if the ISP assigned a fixed IP address.
DNS Server
First DNS Server
Second DNS Server
Third DNS Server
WAN MAC Address
The MAC address section allows users to configure the WAN port's MAC address by using the EMG3435-Q20A’s
MAC address, copying the MAC address from a computer on your LAN or manually entering a MAC address.
Factory defaultSelect Factory default to use the factory assigned default MAC Address.
Clone the
computer’s MAC
address - IP Address
Set WAN MAC
Address
IPv6 Tunneling
This value specifies the time in seconds that elapses before the router automatically
disconnects from the PPPoE server.
Enter the PPPoE service name specified in the ISP account.
Select this option If your ISP did not assign you a fixed IP address. This is the default selection.
Select Obtained From ISP if your ISP dynamically assigns DNS server information (and the
EMG3435-Q20A's WAN IP address). The field to the right displays the (read-only) DNS server IP
address that the ISP assigns.
Select User-Defined if you have the IP address of a DNS server. Enter the DNS server's IP
address in the field to the right.
Select None if you do not want to configure DNS servers. If you do not configure a DNS server,
you must know the IP address of a computer in order to access it.
Select Clone the computer's MAC address - IP Address and enter the IP address of the
computer on the LAN whose MAC you are cloning.
Select this option and enter the MAC address you want to use.
Use IPv6 tunneling when the local network uses IPv6 and the ISP has an IPv4 network. When the EMG3435-Q20A has
an IPv4 WAN address and you set IPv4/IPv6 mode to IPv4 Only, you can enable IPv6 tunneling to encapsulate IPv6
packets in IPv4 packets to cross the ISP’s IPv4 network.
EMG3435-Q20A User’s Guide
82
Page 83
Chapter 10 WAN
Table 20 Network > WAN > Internet Connection: PPPoE Encapsulation (continued)
LABELDESCRIPTION
IPv6 TunnelingSelect None to not allow IPv6 packets to cross IPv4 networks.
Select 6RD to enable 6RD. IPv6 Rapid Deployment (6RD) is an IPv6 transitioning process for
stateless tunneling of IPv6 over IPv4. Enable 6RD to allow tunneling across an ISP's IPv4 only
access network.
Select 6to4 to transmit IPv6 packets over an IPv4 network. A 6to4 relay router is required to
route 6to4 packets to a native IPv6 network.
Select 6in4 if the EMG3435-Q20A has a public IPv4 address and you want to transmit your
IPv6 packets to one and only one remote site whose LAN network is also an IPv6 network. You
must know the WAN IP address of the remote gateway.
6RD
The EMG3435-Q20A generates a global IPv6 prefix from its IPv4 WAN address and tunnels IPv6 traffic to the ISP’s
Border Relay router to connect to the native IPv6 Internet. The local network can also use IPv4 services. The
EMG3435-Q20A uses its configured IPv4 WAN IP to route IPv4 traffic to the IPv4 Internet.
This is available only when you select IPv4 Only in the IPv4/IPv6 field.
Automatically
configured by
DHCPC
Manually
Configured
Border Relay IPv4
Address
Service Provider
IPv6 Prefix
Service Provider
IPv6 Prefix length
IPv4 mask lengthEnter the subnet mask number (1~32) for the IPv4 network.
6to4
The EMG3435-Q20A should get a public IPv4 address for the WAN. The EMG3435-Q20A adds an IPv4 IP header to
an IPv6 packet when transmitting the packet to the Internet. In reverse, the EMG3435-Q20A removes the IPv4
header from an IPv6 packet when receiving it from the Internet.
Select this to have the EMG3435-Q20A detect the relay server’s IP address automatically
through DHCP.
Select this if you have the IPv4 address of the relay server.
Specify the relay server’s IPv4 address.
Enter an IPv6 prefix for tunneling IPv6 traffic to the ISP’s Border Relay router and connecting to
the native IPv6 Internet.
Enter the IPv6 prefix length.
An IPv6 prefix length specifies how many most significant bits (starting from the left) in the
address compose the network address.
This is available only when you select IPv4 Only in the IPv4/IPv6 field.
Relay Server IPv4
Address
6in4
The EMG3435-Q20A encapsulates IPv6 packets within IPv4 packets across the Internet. You must know the WAN IP
address of the remote gateway device. This mode is normally used for a site-to-site application such as two branch
offices.
This is available only when you select IPv4 Only in the IPv4/IPv6 field.
Remote IPv4
Address
Remote IPv6
Address
Local IPv6 AddressEnter the IPv6 address assigned by your ISP.
IPv6 PrefixEnter the IPv6 prefix for this interface if you want to use a static IP address.
Enter the IPv4 address of a 6to4 relay server which helps forward packets between 6to4
networks and native IPv6 networks.
Enter the IPv4 address of the remote gateway to which this interface tunnels traffic.
Enter the IPv6 address of the remote gateway to which this interface tunnels traffic.
EMG3435-Q20A User’s Guide
83
Page 84
Chapter 10 WAN
Table 20 Network > WAN > Internet Connection: PPPoE Encapsulation (continued)
LABELDESCRIPTION
IPv6 DNS Server
This is available only when you select IPv4 Only in the IPv4/IPv6 field and set IPv6 Tunneling to 6RD, 6in4 or 6to4.
First DNS Server
Second DNS Server
Third DNS Server
IPv6 DNS Server
This is available only when you select Dual Stack or IPv6 Only in the IPv4/IPv6 field.
First DNS Server
Second DNS Server
Third DNS Server
Multicast Setup
Multicast SetupSelect IGMPv1/v2 to enable multicasting. This applies to traffic routed from the WAN to the
Auto-Subnet Configuration
Enable Auto-IPChange Mode
ApplyClick Apply to save your changes back to the EMG3435-Q20A.
CancelClick Cancel to begin configuring this screen afresh.
Specify the DNS server IPv6 address assigned by the ISP.
Select Obtained From ISP to have the EMG3435-Q20A get the IPv6 DNS server addresses from
the ISP automatically.
Select User-Defined and enter the IPv6 DNS server address assigned by the ISP to have the
EMG3435-Q20A use the IPv6 DNS server addresses you configure manually.
Select None if you do not want to configure DNS servers. If you do not configure a DNS server,
you must know the IPv6 address of a computer in order to access it.
LAN.
Select None to disable this feature. This may cause incoming traffic to be dropped or sent to
all connected network devices.
Select this option to have the EMG3435-Q20A change its LAN IP address to 10.0.0.1 or
192.168.1.1 accordingly when the EMG3435-Q20A gets a dynamic WAN IP address in the
same subnet as the LAN IP address.
Select this option to have the EMG3435-Q20A change its LAN IP address to 10.0.0.1 or
192.168.1.1 accordingly when the EMG3435-Q20A gets a DNS server IP address in the same
subnet as the LAN IP address.
The NAT, DHCP server and firewall functions on the EMG3435-Q20A are still available in this
mode.
10.4.3 PPTP Encapsulation
This screen displays when you select PPTP encapsulation.
EMG3435-Q20A User’s Guide
84
Page 85
Chapter 10 WAN
Figure 57 Expert Mode > WAN > Internet Connection: PPTP Encapsulation (IPv4 Only)
EMG3435-Q20A User’s Guide
85
Page 86
Chapter 10 WAN
The following table describes the labels in this screen.
Table 21 Network > WAN > Internet Connection: PPTP Encapsulation
LABELDESCRIPTION
ISP Parameters for Internet Access
EncapsulationSelect PPTP if you want to connect the Internet via point to point tunneling protocol.
IPv4 / IPv6This field is greyed out. The PPTP encapsulation only supports IPv4.
PPTP Information
PPTP UsernameEnter the user name given to you by your ISP.
PPTP PasswordEnter the password associated with the user name above.
PPTP Encryption Type Use the drop-down list box to select the type of Microsoft Point-to-Point Encryption (MPPE).
Options are:
Auto - This ISP account adjusts the encryption type automatically.
No Encryption - This ISP account does not use MPPE.
MPPE 40 - This ISP account uses 40-bit MPPE.
MPPE 128 - This ISP account uses 128-bit MMPE.
MTU SizeEnter the MTU (Maximum Transmission Unit) size for each packet. If a larger packet arrives,
PPTP Auto ConnectSelect this option if you do not want the connection to time out.
IDLE Timeout
[second]
PPTP CONFIGURATION
PPTP Server IP
Address
Obtain an IP Address
Automatically(DHCP
)
Static IP AddressSelect this radio button if the PPTP server assigned an IP address for your Internet
IP AddressEnter the IP address provided by the PPTP server.
Subnet MaskEnter the IP subnet mask in this field.
Default GatewayEnter the gateway IP address in this field.
WAN IP Address Assignment
Get automatically
from ISP
Use Fixed IP AddressSelect this option If the ISP assigned a fixed IP address.
IP AddressEnter your WAN IP address in this field if you selected Static IP Address.
DNS Server
First DNS Server
Second DNS Server
Third DNS Server
the EMG3435-Q20A divides it into smaller fragments.
Type the time in seconds that elapses before the router automatically disconnects from the
PPTP server. 0 means no timeout.
Enter the IP address of the PPTP server.
Select this radio button if the PPTP server did not assign you a fixed IP address.
connection.
Select this option If your ISP did not assign you a fixed IP address. This is the default selection.
Select Obtained From ISP if your ISP dynamically assigns DNS server information (and the
EMG3435-Q20A's WAN IP address). The field to the right displays the (read-only) DNS server
IP address that the ISP assigns.
Select User-Defined if you have the IP address of a DNS server. Enter the DNS server's IP
address in the field to the right.
Select None if you do not want to configure DNS servers. If you do not configure a DNS
server, you must know the IP address of a computer in order to access it.
EMG3435-Q20A User’s Guide
86
Page 87
Chapter 10 WAN
Table 21 Network > WAN > Internet Connection: PPTP Encapsulation (continued)
LABELDESCRIPTION
WAN MAC Address
Once the WAN MAC address is successfully configured, the address will be copied to the configuration file. It will
not change unless you change the setting or upload a different configuration file.
Factory defaultSelect this option to have the WAN interface use the factory assigned default MAC address.
By default, the EMG3435-Q20A uses the factory assigned MAC address to identify itself.
Clone the
computer's MAC
address
Set WAN MAC
Address
Multicast Setup
Multicast SetupSelect IGMPv1/v2 to enable multicasting. This applies to traffic routed from the WAN to the
Auto-Subnet Configuration
Enable Auto-IPChange Mode
Select this option to have the WAN interface use a different MAC address by cloning the
MAC address of another device or computer. Enter the IP address of the device or
computer whose MAC you are cloning.
Select this option to have the WAN interface use a manually specified MAC address. Enter
the MAC address in the fields.
LAN.
Select None to disable this feature. This may cause incoming traffic to be dropped or sent
to all connected network devices.
Select this option to have the EMG3435-Q20A change its LAN IP address to 10.0.0.1 or
192.168.1.1 accordingly when the EMG3435-Q20A gets a dynamic WAN IP address in the
same subnet as the LAN IP address.
Select this option to have the EMG3435-Q20A change its LAN IP address to 10.0.0.1 or
192.168.1.1 accordingly when the EMG3435-Q20A gets a DNS server IP address in the same
subnet as the LAN IP address.
ApplyClick Apply to save your changes back to the EMG3435-Q20A.
CancelClick Cancel to begin configuring this screen afresh.
10.5 NAT
Use this screen to change your EMG3435-Q20A’s NAT (Network Address Translation) settings. Click Expert
Mode > WAN > NAT.
10.5.1 General Screen
Use this screen to enable NAT, set a default server and configure your EMG3435-Q20A’s port forwarding
settings to forward incoming service requests to the server(s) on your local network. Click Expert Mode > WAN > NAT > General.
The NAT, DHCP server and firewall functions on the EMG3435-Q20A are still available in this
mode.
EMG3435-Q20A User’s Guide
87
Page 88
Chapter 10 WAN
Figure 58 Expert Mode > WAN > NAT > General
The following table describes the labels in this screen.
Table 22 Expert Mode > WAN > NAT > General
LABELDESCRIPTION
General
Network Address
Translation (NAT)
Network Address Translation (NAT) allows the translation of an Internet protocol address used
within one network (for example a private IP address used in a local network) to a different IP
address known within another network (for example a public IP address used on the
Internet).
Select Enable to activate NAT. Select Disable to turn it off.
Default Server Setup
Default ServerYou can decide whether you want to use the default server or specify a server manually. In
Change To Server Select this and manually enter the server’s IP address.
Port Forwarding (Max Limit : 32)
#This is the number of an individual port forwarding server entry.
NameSelect a pre-defined service from the drop-down list box. The pre-defined service port
ProtocolSelect the transport layer protocol supported by this virtual server. Choices are TCP, UDP, or
External PortThis shows the port number(s) that identifies the service if you select a pre-defined service. If
Server IP AddressSelect User define to manually enter the inside IP address of the virtual server here.
Internal PortThis shows the port number(s) that identifies the service if you select a pre-defined service. If
addition to the servers for specified services, NAT supports a default server. A default server
receives packets from ports that are not specified in the port forwarding summary table
below.
Select this to use the default server.
number(s) and protocol will be displayed in the port forwarding summary table. Otherwise,
select User define to manually enter the port number/range and select the Protocol.
TCP_UDP.
If you have chosen a pre-defined service in the Name field, the protocol will be configured
automatically.
you select User define in the Name field, enter the port number(s) manually.
you select User define in the Name field, enter an internal port number manually or leave the
field blank for port range forwarding.
EMG3435-Q20A User’s Guide
88
Page 89
Table 22 Expert Mode > WAN > NAT > General (continued)
LABELDESCRIPTION
AddClick to add the rule in the port forwarding summary table.
DeleteClick to remove a rule.
ApplyClick Apply to save your changes back to the EMG3435-Q20A.
CancelClick Cancel to begin configuring this screen afresh.
10.5.2 Port Trigger Screen
To change your EMG3435-Q20A’s trigger port settings, click Expert Mode > WAN > NAT > Port Trigger. The
screen appears as shown.
Note: Only one LAN computer can use a trigger port (range) at a time.
Figure 59 Expert Mode > WAN > NAT > Port Trigger
Chapter 10 WAN
The following table describes the labels in this screen.
Table 23 Expert Mode > WAN > NAT > Port Trigger
LABELDESCRIPTION
Port Trigger Rules (Max Limit : 32)
#This is the rule index number (read-only).
NameType a unique name (up to 15 characters) for identification purposes. All characters are
Incoming PortIncoming is a port (or a range of ports) that a server on the WAN uses when it sends out a
End PortType a port number or the ending port number in a range of port numbers.
Trigger PortThe trigger port is a port (or a range of ports) that causes (or triggers) the EMG3435-Q20A to
End PortType a port number or the ending port number in a range of port numbers.
AddClick to add the rule in the port trigger summary table.
DeleteClick to remove a rule.
ApplyClick Apply to save your changes back to the EMG3435-Q20A.
CancelClick Cancel to begin configuring this screen afresh.
permitted - including spaces.
particular service. The EMG3435-Q20A forwards the traffic with this port (or range of ports) to
the client computer on the LAN that requested the service.
Type a port number or the starting port number in a range of port numbers.
record the IP address of the LAN computer that sent the traffic to a server on the WAN.
Type a port number or the starting port number in a range of port numbers.
10.5.3 Passthrough Screen
EMG3435-Q20A User’s Guide
89
Page 90
Chapter 10 WAN
ALG Overview
Application Layer Gateway (ALG) allows the following applications to operate properly through the
EMG3435-Q20A’s NAT.
• SIP - Session Initiation Protocol (SIP) - An application-layer protocol that can be used to create voice
and multimedia sessions over Internet.
• H.323 - A teleconferencing protocol suite that provides audio, data and video conferencing.
• FTP - File Transfer Protocol - an Internet file transfer service.
• SNMP - Simple Network Management Protocol - An application-layer protocol that can be used to
exchange management information between network devices.
• RTSP - Real Time Streaming Protocol - An application-layer protocol that can be used to stop, pause
or play video and audio applications streaming on the Internet.
• IRC - Internet Relay Chat - An application-layer protocol that can control the relay chat applications
and allow clients to have real-time communications with others on the Internet.
The ALG feature is only needed for traffic that goes through the EMG3435-Q20A’s NAT.
To change your EMG3435-Q20A’s ALGs and VPN pass-through settings, click Expert Mode > WAN > NAT
> Passthrough. The screen appears as shown.
Figure 60 Expert Mode > WAN > NAT > Passthrough
The following table describes the labels in this screen.
Table 24 Expert Mode > WAN > NAT > Passthrough
LABELDESCRIPTION
ALG Setup
FTPSelect Enable to allow TCP packets with a specified port destination to pass through.
H.323Select Enable to allow peer-to-peer H.323 calls.
SIPSelect Enable to make sure SIP (VoIP) works correctly with port-forwarding and address-
mapping rules.
SNMPSelect Enable to allow a manager station to manage and monitor the EMG3435-Q20A
RTSPSelect Enable to have the EMG3435-Q20A detect RTSP traffic and help build RTSP sessions
through its NAT.
IRCSelect Enable to allow clients to have real-time communications with others on the Internet.
VPN Passthrough
PPTPSelect Enable to allow VPN clients to make outbound PPTP connections. It is required in order
L2TPSelect Enable to allow VPN clients to make outbound L2TP connections. It is required in order
IPSECSelect Enable to allow VPN clients to make outbound IPSec connections. It is required in
ApplyClick Apply to save your changes back to the EMG3435-Q20A.
CancelClick Cancel to begin configuring this screen afresh.
to connect to a PPTP VPN account. If PPTP is disabled, then when a client sends a request to
a VPN server, the server will reply to the EMG3435-Q20A and the EMG3435-Q20A will drop the
request. When PPTP is enabled, the EMG3435-Q20A will forward the reply from the VPN server
to the client that initiated the request, and the connection will establish successfully.
to connect to a L2TP VPN account. If L2TP is disabled, then when a client sends a request to a
VPN server, the server will reply to the EMG3435-Q20A and the EMG3435-Q20A will drop the
request. When L2TP is enabled, the EMG3435-Q20A will forward the reply from the VPN server
to the client that initiated the request, and the connection will establish successfully.
order to connect to a IPSec VPN account. If IPSEC is disabled, then when a client sends a
request to a VPN server, the server will reply to the EMG3435-Q20A and the EMG3435-Q20A
will drop the request. When IPSEC is enabled, the EMG3435-Q20A will forward the reply from
the VPN server to the client that initiated the request, and the connection will establish
successfully.
10.6 Dynamic DNS Screen
To change your EMG3435-Q20A’s DDNS, click Expert Mode > WAN > Dynamic DNS. The screen appears
as shown.
Figure 61 Expert Mode > WAN > Dynamic DNS
EMG3435-Q20A User’s Guide
91
Page 92
Chapter 10 WAN
The following table describes the labels in this screen.
Table 25 Expert Mode > WAN > Dynamic DNS
LABELDESCRIPTION
Dynamic DNS Setup
Dynamic DNSSelect Enable to use dynamic DNS. Select Disable to turn this feature off.
Service ProviderSelect the name of your Dynamic DNS service provider.
Host NameEnter a host names in the field provided. You can specify up to two host names in the
field separated by a comma (",").
UsernameEnter your user name.
PasswordEnter the password assigned to you.
ApplyClick Apply to save your changes back to the EMG3435-Q20A.
CancelClick Cancel to begin configuring this screen afresh.
EMG3435-Q20A User’s Guide
92
Page 93
11.1 Overview
This chapter discusses how to configure the wireless network settings in your EMG3435-Q20A. The
EMG3435-Q20A is able to function both 2.4GHz and 5GHz network at the same time. You can have
different wireless and wireless security settings for 2.4GHz and 5GHz wireless LANs. Click Expert Mode> Wireless to configure wireless LAN 2.4G or wireless LAN 5G.
See the appendices for more detailed information about wireless networks.
The following figure provides an example of a wireless network.
Figure 62 Example of a Wireless Network
CHAPTER 11
Wireless LAN
The wireless network is the part in the blue circle. In this wireless network, devices A and B are called
wireless clients. The wireless clients use the access point (AP) to interact with other devices (such as the
printer) or with the Internet. Your EMG3435-Q20A is the AP.
EMG3435-Q20A User’s Guide
93
Page 94
11.1.1 What You Can Do
• Use the Wireless screen to enable or disable the 2.4GHz or 5GHz wireless LAN, set up wireless security
between the EMG3435-Q20A and the wireless clients, and make other basic configuration changes
(Section 11.2 on page 97).
• Use the Guest Wireless screen to set up multiple wireless networks on your EMG3435-Q20A (Section
11.4 on page 104).
• Use the MAC Filter screen to allow or deny wireless stations based on their MAC addresses from
connecting to the EMG3435-Q20A (Section 11.5 on page 106).
• Use the Advanced screen to allow intra-BSS networking and set the RTS/CTS Threshold (Section 11.6 on
page 107).
• Use the WPS screen to quickly set up a wireless network with strong security, without having to
configure security settings manually (Section 11.7 on page 109).
• Use the Scheduling screen to set the times your wireless LAN is turned on and off (Section 11.8 on
page 110).
11.1.2 What You Should Know
Every wireless network must follow these basic guidelines.
Chapter 11 Wireless LAN
• Every wireless client in the same wireless network must use the same SSID.
The SSID is the name of the wireless network. It stands for Service Set IDentity.
• If two wireless networks overlap, they should use different channels.
Like radio stations or television channels, each wireless network uses a specific channel, or frequency,
to send and receive information.
• Every wireless client in the same wireless network must use security compatible with the AP.
Security stops unauthorized devices from using the wireless network. It can also protect the
information that is sent in the wireless network.
Wireless Security Overview
The following sections introduce different types of wireless security you can set up in the wireless
network.
SSID
Normally, the AP acts like a beacon and regularly broadcasts the SSID in the area. You can hide the
SSID instead, in which case the AP does not broadcast the SSID. In addition, you should change the
default SSID to something that is difficult to guess.
This type of security is fairly weak, however, because there are ways for unauthorized devices to get the
SSID. In addition, unauthorized devices can still see the information that is sent in the wireless network.
MAC Address Filter
Every wireless client has a unique identification number, called a MAC address.1 A MAC address is
usually written using twelve hexadecimal characters
1.Some wireless devices, such as scanners, can detect wireless networks but cannot use wireless networks. These
kinds of wireless devices might not have MAC addresses.
EMG3435-Q20A User’s Guide
2
; for example, 00A0C5000002 or 00:A0:C5:00:00:02.
94
Page 95
Chapter 11 Wireless LAN
To get the MAC address for each wireless client, see the appropriate User’s Guide or other
documentation.
You can use the MAC address filter to tell the AP which wireless clients are allowed or not allowed to use
the wireless network. If a wireless client is allowed to use the wireless network, it still has to have the
correct settings (SSID, channel, and security). If a wireless client is not allowed to use the wireless
network, it does not matter if it has the correct settings.
This type of security does not protect the information that is sent in the wireless network. Furthermore,
there are ways for unauthorized devices to get the MAC address of an authorized wireless client. Then,
they can use that MAC address to use the wireless network.
User Authentication
You can make every user log in to the wireless network before they can use it. This is called user
authentication. However, every wireless client in the wireless network has to support IEEE 802.1x to do
this.
For wireless networks, there are two typical places to store the user names and passwords for each user.
• In the AP: this feature is called a local user database or a local database.
• In a RADIUS server: this is a server used in businesses more than in homes.
If your AP does not provide a local user database and if you do not have a RADIUS server, you cannot
set up user names and passwords for your users.
Unauthorized devices can still see the information that is sent in the wireless network, even if they cannot
use the wireless network. Furthermore, there are ways for unauthorized wireless users to get a valid user
name and password. Then, they can use that user name and password to use the wireless network.
Local user databases also have an additional limitation that is explained in the next section.
Encryption
Wireless networks can use encryption to protect the information that is sent in the wireless network.
Encryption is like a secret code. If you do not know the secret code, you cannot understand the
message.
The types of encryption you can choose depend on the type of user authentication. (See page 95 for
information about this.)
Table 26 Types of Encryption for Each Type of Authentication
NO AUTHENTICATIONRADIUS SERVER
WeakestNo SecurityWPA
WPA-PSK
StrongestWPA2-PSKWPA2
For example, if the wireless network has a RADIUS server, you can choose WPA or WPA2. If users do not
log in to the wireless network, you can choose no encryption, WPA-PSK, or WPA2-PSK.
2.Hexadecimal characters are 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, A, B, C, D, E, and F.
EMG3435-Q20A User’s Guide
95
Page 96
Chapter 11 Wireless LAN
N
A
Z
Usually, you should set up the strongest encryption that every wireless client in the wireless network
supports. For example, suppose the AP does not have a local user database, and you do not have a
RADIUS server. Therefore, there is no user authentication. Suppose the wireless network has two wireless
clients. Device A only supports WPA, and device B supports WPA and WPA2. Therefore, you should set
up WPA or WPA-PSK in the wireless network.
Note: It is recommended that wireless networks use WPA-PSK, WPA, or stronger encryption.
IEEE 802.1x and WEP encryption are better than none at all, but it is still possible for
unauthorized devices to figure out the original information pretty quickly.
Note: It is not possible to use WPA-PSK, WPA or stronger encryption with a local user database.
In this case, it is better to set up stronger encryption with no authentication than to set
up weaker encryption with the local user database.
When you select WPA2 or WPA2-PSK in your EMG3435-Q20A, you can also select an option (WPA/WPA-PSK Compatible) to support WPA/WPA-PSK as well. In this case, if some wireless clients support WPA and
some support WPA2, you should set up WPA2-PSK or WPA2 (depending on the type of wireless network
login) and select the WPA/WPA-PSK Compatible option in the EMG3435-Q20A.
Many types of encryption use a key to protect the information in the wireless network. The longer the
key, the stronger the encryption. Every wireless client in the wireless network must have the same key.
Guest WLAN
Guest WLAN allows you to set up a wireless network where users can access to Internet via the
EMG3435-Q20A (Z), but not other networks connected to the Z. In the following figure, a guest user can
access the Internet from the guest wireless network A via Z but not the home or company network N.
Note: The home or company network N and Guest WLAN network are independent networks.
Note: Only Router mode supports guest WLAN.
Figure 63 Guest Wireless LAN Network
EMG3435-Q20A User’s Guide
96
Page 97
Chapter 11 Wireless LAN
600 kbps
100 kbps
300 kbps
N
A
Guest WLAN Bandwidth
The Guest WLAN Bandwidth function allows you to restrict the maximum bandwidth for the guest
wireless network. Additionally, you can also define bandwidth for your home or office network. An
example is shown next to define maximum bandwidth for your networks (A is Guest WLAN and N is home
or company network.)
Figure 64 Example: Bandwidth for Different Networks
WPS
WiFi Protected Setup (WPS) is an industry standard specification, defined by the WiFi Alliance. WPS
allows you to quickly set up a wireless network with strong security, without having to configure security
settings manually. Depending on the devices in your network, you can either press a button (on the
device itself, or in its configuration utility) or enter a PIN (Personal Identification Number) in the devices.
Then, they connect and set up a secure network by themselves. See how to set up a secure wireless
network using WPS in the Section 8.2 on page 48.
11.2 Wireless Screen
Use this screen to configure the SSID and wireless security of the EMG3435-Q20A’s default wireless LAN.
Note: If you are configuring the EMG3435-Q20A from a computer connected to the wireless
LAN and you change the EMG3435-Q20A’s SSID, channel or security settings, you will
lose your wireless connection when you press Apply to confirm. You must then change
the wireless settings of your computer to match the EMG3435-Q20A’s new settings.
Click Expert Mode > Wireless.
EMG3435-Q20A User’s Guide
97
Page 98
Figure 65 Expert Mode > Wireless
Chapter 11 Wireless LAN
The following table describes the general wireless LAN labels in this screen.
Table 27 Expert Mode > Wireless
LABELDESCRIPTION
Wireless Setup
BandSelect the frequency band to set whether you want to apply the wireless and security settings
to the default 2.4GHz or 5GHz wireless LAN.
Wireless LANSelect Enable to activate the 2.4GHz and/or 5GHz wireless LAN. Select Disable to turn it off.
You can enable or disable both 2.4GHz and 5GHz wireless LANs by using the WIFI button
located on the rear panel of the EMG3435-Q20A.
Name (SSID) The SSID (Service Set IDentity) identifies the Service Set with which a wireless client is
associated. Enter a descriptive name (up to 32 printable characters found on a typical English
language keyboard) for the wireless LAN.
Hide SSIDSelect this check box to hide the SSID in the outgoing beacon frame so a station cannot
obtain the SSID through scanning using a site survey tool.
Channel Selection Select a channel from the drop-down list box. The options vary depending on the frequency
band and the country you are in.
This option is only available if Auto Channel Selection is disabled.
Operating
Channel
This displays the channel the EMG3435-Q20A is currently using.
EMG3435-Q20A User’s Guide
98
Page 99
Chapter 11 Wireless LAN
Table 27 Expert Mode > Wireless (continued)
LABELDESCRIPTION
Channel WidthSelect the wireless channel width used by EMG3435-Q20A.
A standard 20MHz channel offers transfer speeds of up to 144Mbps (2.4GHz) or 217Mbps
(5GHZ) whereas a 40MHz channel uses two standard channels and offers speeds of up to
300Mbps (2.4GHz) or 450Mbps (5GHZ). An IEEE 802.11ac-specific 80MHz channel offers speeds
of up to 1.3 Gbps.
The following are available only when you set Band to 2.4GHz.
Because not all devices support 40 MHz channels, select Auto 20/40MHz to allow the
EMG3435-Q20A to adjust the channel bandwidth automatically.
40MHz (channel bonding or dual channel) bonds two adjacent radio channels to increase
throughput. The wireless clients must also support 40 MHz. It is often better to use the 20 MHz
setting in a location where the environment hinders the wireless signal.
Select 20MHz if you want to lessen radio interference with other wireless devices in your
neighborhood or the wireless clients do not support channel bonding.
The following are available only when you set Band to 5GHz.
Because not all devices support 40 MHz and/or 80 MHz channels, select Auto to allow the
EMG3435-Q20A to adjust the channel bandwidth automatically.
80+80MHz bonds two non-adjacent 80MHz channels to increase throughput. The wireless
clients may transmit/receive on both channels and use for the same purpose simultaneously.
40MHz (channel bonding or dual channel) bonds two adjacent radio channels to increase
throughput. A 80 MHz channel consists of two adjacent 40 MHz channels. The wireless clients
must also support 40 MHz or 80 MHz. It is often better to use the 20 MHz setting in a location
where the environment hinders the wireless signal.
Select 20MHz if you want to lessen radio interference with other wireless devices in your
neighborhood or the wireless clients do not support channel bonding.
802.11 ModeIf you set Band to 2.4GHz, you can select from the following:
• 802.11b: allows either IEEE 802.11b or IEEE 802.11g compliant WLAN devices to associate
with the EMG3435-Q20A. In this mode, all wireless devices can only transmit at the data
rates supported by IEEE 802.11b.
• 802.11g: allows IEEE 802.11g compliant WLAN devices to associate with the Device. IEEE
802.11b compliant WLAN devices can associate with the EMG3435-Q20A only when they
use the short preamble type.
• 802.11bg: allows either IEEE 802.11b or IEEE 802.11g compliant WLAN devices to associate
with the EMG3435-Q20A. The EMG3435-Q20A adjusts the transmission rate automatically
according to the wireless standard supported by the wireless devices.
• 802.11n: allows IEEE 802.11n compliant WLAN devices to associate with the EMG3435-
Q20A. This can increase transmission rates, although IEEE 802.11b or IEEE 802.11g clients will
not be able to connect to the EMG3435-Q20A.
• 802.11gn: allows either IEEE 802.11g or IEEE 802.11n compliant WLAN devices to associate
with the EMG3435-Q20A. The transmission rate of your EMG3435-Q20A might be reduced.
• 802.11 bgn: allows IEEE802.11b, IEEE802.11g and IEEE802.11n compliant WLAN devices to
associate with the EMG3435-Q20A. The transmission rate of your EMG3435-Q20A might be
reduced.
If you set Band to 5GHz, you can select from the following:
• 802.11a: allows only IEEE 802.11a compliant WLAN devices to associate with the EMG3435-
Q20A.
• 802.11a/an: allows both IEEE802.11n and IEEE802.11a compliant WLAN devices to
associate with the EMG3435-Q20A. The transmission rate of your EMG3435-Q20A might be
reduced.
• 802.11a/an/ac: allows IEEE802.11n, IEEE802.11a and IEEE 802.11ac compliant WLAN
devices to associate with the EMG3435-Q20A.
Security
EMG3435-Q20A User’s Guide
99
Page 100
Table 27 Expert Mode > Wireless (continued)
LABELDESCRIPTION
Security ModeSelect WPA2-PSK to add security on this wireless network. The wireless clients which want to
associate to this network must have same wireless security settings as this device. After you
select to use a security, additional options appears in this screen. See Section 11.3 on page
100 for detailed information on different security modes. Or you can select No Security to
allow any client to associate this network without authentication.
Note: If the WPS function is enabled (default), only No Security and WPA2-PSK are
available in this field.
ApplyClick Apply to save your changes back to the EMG3435-Q20A.
CancelClick Cancel to reload the previous configuration for this screen.
See the rest of this chapter for information on the other labels in this screen.
11.3 Wireless Security
The screen varies depending on what you select in the Security Mode field.
Chapter 11 Wireless LAN
11.3.1 No Security
Select No Security to allow wireless clients to communicate with the access points without any data
encryption.
Note: If you do not enable any wireless security on your EMG3435-Q20A, your network is
accessible to any wireless networking device that is within range.