IMPORTANT!
READ CAREFULLY BEFORE USE.
KEEP THIS GUIDE FOR FUTURE REFERENCE.
Screenshots and graphics in this book may differ slightly from your product due to differences in
your product firmware or your computer operating system. Every effort has been made to ensure
that the information in this manual is accurate.
Related Documentation
•Quick Start Guide
The Quick Start Guide shows how to connect the GPON Device and get up and running right
away.
PMG5318-B20A User’s Guide2
Page 3
Table of Contents
Table of Contents
Table of Contents .................................................................................................................................3
3.2 Status ................................................................................................................................................21
Chapter 4
WAN .....................................................................................................................................................25
LAN ...................................................................................................................................................... 39
5.1.1 What You Need to Know ..........................................................................................................39
5.2 The IP and DHCP Screen ................................................................................................................40
5.3 Client List ..........................................................................................................................................41
5.4 Port Speed ........................................................................................................................................42
19.2 General ........................................................................................................................................149
20.2 Power, Hardware Connections, and LEDs ....................................................................................151
20.3 GPON Device Access and Login ..................................................................................................152
20.4 Internet Access .............................................................................................................................153
20.5 Phone Calls and VoIP ...................................................................................................................154
Appendix A Customer Support ........................................................................................................155
Appendix B Legal Information..........................................................................................................161
Index ..................................................................................................................................................165
PMG5318-B20A User’s Guide
7
Page 8
Table of Contents
8
PMG5318-B20A User’s Guide
Page 9
1.1 Overview
The PMG5318-B20A combines a fiber optic (GPON) router with a built-in switch. Its voice over IP
(VoIP) capabilities allow you to use a traditional analog telephone to make Internet phone calls.
1.2 Managing the GPON Device
Use the GPON Device’s built-in Web Configurator to manage it. You can connect to it using a web
browser such as Firefox 2.0 (and higher) or Internet Explorer 6 (and higher). For details on
connecting to it, see the Section 2.1.1 on page 15.
CHAPTER 1
Introduction
1.3 Good Habits for Managing the GPON Device
Do the following things regularly to make the GPON Device more secure and to manage the GPON
Device more effectively.
• Change the password. Use a password that’s not easy to guess and that consists of different
types of characters, such as numbers and letters.
• Write down the password and put it in a safe place.
• Back up the configuration (and make sure you know how to restore it). Restoring an earlier
working configuration may be useful if the device becomes unstable or even crashes. If you
forget your password, you will have to reset the GPON Device to its factory default settings. If
you backed up an earlier configuration file, you would not have to totally re-configure the GPON
Device. You could simply restore your last configuration.
1.4 Applications for the GPON Device
Here are some example uses for which the GPON Device is well suited.
PMG5318-B20A User’s Guide9
Page 10
Chapter 1 Introduction
Internet
LAN
1.4.1 Triple Play
The ISP may provide “triple play” service to the GPON Device. This allows you to take advantage of
such features as broadband Internet access, Voice over IP telephony, and streaming video/audio
media, all at the same time with no noticeable loss in bandwidth.
Figure 1 Triple Play Example
1.4.2 Internet Access
Your GPON Device provides shared Internet access by connecting a fiber optic line provided by the
ISP to the PON port.
Figure 2 GPON Device’s Router Features
10
PMG5318-B20A User’s Guide
Page 11
1.4.3 VoIP Features
Internet
PSTN
You can register up to 2 SIP (Session Initiation Protocol) accounts and use the GPON Device to
make and receive VoIP telephone calls:
Figure 3 GPON Device’s VoIP Features
Chapter 1 Introduction
Calls via a VoIP service provider - the GPON Device sends your call to a VoIP service provider’s SIP
server which forwards your calls to either VoIP or PSTN phones.
1.5 LEDs (Lights)
The following graphic displays the labels of the LEDs.
Figure 4 LEDs on the Top Panel
None of the LEDs are on if the GPON Device is not receiving power.
Table 1 LED Descriptions
LEDCOLORSTATUSDESCRIPTION
POWERGreenOnThe GPON Device is receiving power and ready for use.
RedOnThe GPON Device detected an error while self-testing, or there is a
PONGreenOnThe GPON Device has a PON line connection.
OrangeOnThe GPON Device’s PON port is physically connected but not registered.
RedOnThe GPON Device’s PON port is not connected. The optical transceiver
BlinkingThe GPON Device is self-testing.
device malfunction.
OffThe GPON Device is not receiving power and there is no device
malfunction.
may have malfunctioned or the fiber cable may not be connected or
may be broken or damaged enough to break the PON connection.
PMG5318-B20A User’s Guide
11
Page 12
Chapter 1 Introduction
Table 1 LED Descriptions
LEDCOLORSTATUSDESCRIPTION
INTERNETGreenOnThe GPON Device has an IP connection but no traffic.
LAN 1~4GreenOnThe GPON Device has a 1G Ethernet connection with another device
WLANGreenOnThe wireless network is activated.
PHONE 1~2GreenOnA SIP account is registered for the phone port.
USB 1~2GreenOnThe GPON Device recognizes a USB connection through the USB slot.
BlinkingThe GPON Device is sending or receiving IP traffic.
OffThe GPON Device attempted to make an IP connection but failed.
RedOnThe GPON Device does not have an IP connection.
(such as a computer) on the Local Area Netwo rk (LAN) through this
port.
BlinkingThe GPON Device is sending/receiving data to/from the LAN th rough
OrangeOnThe GPON Device has a 10/100M Ethernet connection with another
BlinkingThe GPON Device is sending/receiving data to/from the LAN th rough
OffThe GPON Device does not have an Ethernet connection with the LAN
BlinkingThe GPON Device is communicating with other wireless clients.
OffThe wireless network is not activated.
OrangeBlinkingThe GPON Device is setting up a WPS connection.
BlinkingA telephone connected to the phone port has its receiver off the hook or
OffThe phone port does not have a SIP account registered.
RedOnSIP account registration failed.
Blinking
OffThe GPON Device does not detect a USB connection through the USB
this port.
device (such as a computer) on the Local Area Network (LAN) through
this port.
this port.
through this port.
there is an incoming call.
The GPON Device is sending or receiving data to or from the USB device
connected to it.
slot.
Refer to Section 1.5 on page 11 for information on hardware connections.
1.6 The Reset Button
If you forget your password or cannot access the web configurator, you will need to use the RESET
button at the back of the device to reload the factory-default configuration file. This means that y ou
will lose all configurations that you had previously and the password will be reset to the default.
1.6.1 Using the Reset Button
1Make sure the POWER LED is on (not blinking).
12
PMG5318-B20A User’s Guide
Page 13
2To set the device back to the factory default settings, press the RESET button for more than 3
seconds or until the POWER LED begins to blink and then release it. When the POWER LED begins
to blink, the defaults have been restored and the device restarts.
1.7 The WPS Button
You can use the WPS button on the back of the device to disable or activate the wireless LAN. You
can also use it to activate WPS in order to quickly set up a wireless network with strong security.
Figure 5 WPS Button
Chapter 1 Introduction
1.7.1 Using the WPS button
1Make sure the POWER LED is on (not blinking).
2If the wireless LAN of the GPON Device is enabled, the LED light shines green. If not, press the
WPS button for more than 5 seconds and release it when the LED turns green. If you want to turn
it off, press the WPS button for 5 seconds again.
3Press the WPS button for over 5 seconds and release it. See above for WPS button location.
4Press the WPS button on a compatible device within 2 minutes of pressing the button on the GPON
Device. The WLAN LED should flash in orange while the GPON Device sets up a WPS connection
with the other wireless device.
5Once the connection is successfully made, the WLAN LED shines green.
PMG5318-B20A User’s Guide
13
Page 14
Chapter 1 Introduction
14
PMG5318-B20A User’s Guide
Page 15
2.1 Overview
The web configurator is an HTML-based management interface that allows easy device setup and
management via Internet browser. Use Internet Explorer 8.0 and later or Firefox 23.0.0 and later
versions. The recommended screen resolution is 1024 by 768 pixels.
In order to use the web configurator you need to allow:
• Web browser pop-up windows from your GPON Device. Web pop-up blocking is enabled by
default in Windows XP SP (Service Pack) 2.
• JavaScript (enabled by default).
• Java permissions (enabled by default).
CHAPTER 2
The Web Configurator
2.1.1 Accessing the Web Configurator
1Make sure your GPON Device hardware is properly connected (refer to Section 1.5 on page 11 for
details on this).
2Launch your web browser.
3Type the default device address shown on the cover page of this User’s Guide as the URL.
4A password screen displays. Enter your password and click Login.
Figure 6 Password Screen
Note: For security reasons, the GPON Device automatically logs you out if you do not use
the web configurator for an extended period of time. If this happens, log in again.
PMG5318-B20A User’s Guide15
Page 16
Chapter 2 The Web Configurator
B
C
D
A
2.2 Web Configurator Main Screen
The main screen is divided into these parts:
Figure 7 Main Screen
• A - title bar
• B - navigation panel
• C - main window
• D - status bar
2.2.1 Title Bar
The title bar provides the Logout icon in the upper right corner. Click this icon to log out of the web
configurator
16
.
PMG5318-B20A User’s Guide
Page 17
2.2.2 Navigation Panel
Use the menu items on the navigation panel to open screens to configure GPON Device features.
The following tables describe each menu item.
Table 2 Navigation Panel Summary
LINKTABFUNCTION
StatusThis screen shows the GPON Device’s general device and network
Network
WANInternet Access
LAN
Wireless LAN
NATPort Forwarding Use this screen to configure port forwarding rules.
QoSGeneralUse this screen to enable and configure QoS settings for specific traffic.
VoIP
SIPSIP Service
PhoneAnalog PhoneUse this screen to set which phone ports use which SIP accounts.
Phone BookSpeed DialUse this screen to configure speed dial for SIP phone numbers that you
Usb Services
File SharingShare
Setup
Default
Gateway
Multicast SetupUse this screen to configure your ONT’s IGMP settings.
IP & DHCPUse this screen to configure LAN TCP/IP and DHCP settings, enable Any
Client ListUse this screen to look at the IP addresses currently assigned to DHCP
Port SpeedUse this screen to configure your ONT’s LAN port speed settings.
GeneralUse this screen to turn the wireless connection on or off, configure the
SecurityUse this screen to set up wireless security.
WPSUse this screen to enable or disable WPS, generate a security PIN
WPS StationUse this screen to set up WPS by pressing a button or using a PIN.
MAC FilterUse this screen to allow or deny MAC address(es) for specific wireless
WMMUse this screen to enable Wi-Fi MultiMedia (WMM) to ensure quality of
StatusUse this screen to view all accociated wireless clients and their status.
IsolationUse this screen to control whether associated wireless clients can
Provider
SIP AccountUse this screen to configure your SIP account information.
Configuration
Account
Management
Chapter 2 The Web Configurator
status information. Use this screen to access the statistics and client
list.
Use this screen to configure ISP parameters, WAN IP address
assignment, DNS servers and other advanced properties.
Use this screen to configure your ONT’s default gateway settings.
IP and other advanced properties.
clients and the IP addresses reserved for specific MAC addresses.
MAC filter, and make other basic configuration changes.
(Personal Identification Number) and see information about the ONT’s
WPS status.
networks.
service in wireless networks for multimedia applications.
communicate with each other across a different wireless network
through the GPON Device.
Use this screen to configure the SIP settings used by the GPON Device
when you place calls over the Internet.
call often.
Use this screen to enable file sharing via the GPON Device.
Use this screen to configure user accounts to access file shares.
PMG5318-B20A User’s Guide
17
Page 18
Chapter 2 The Web Configurator
Table 2 Navigation Panel Summary
LINKTABFUNCTION
Advanced
Remote MGMT WWWUse this screen to configure through which interface(s) and from which
Static RouteUse this screen to configure the required information for a static route.
Dynamic DNSUse this screen to enable DDNS and configure the DDNS settings on
Security
FirewallGeneralUse this screen to enable firewall and set the default action that the
Maintenance
SystemGeneralUse this screen to configure your device’s name, management
LogsView LogUse this screen to display your device’s logs.
ToolsFirmwareUse this screen to upload firmware to your device.
DiagnosticGeneralUse this screen to test the connections to o ther devices.
IP address(es) users can use HTTP to manage the GPON Device.
TelnetUse this screen to configure through which interface(s) and from which
IP address(es) users can use Telnet to manage the GPON Device.
FTPUse this screen to configure through which interface(s) and from which
IP address(es) users can use FTP to access the GPON Device.
SSHUse this screen to configure Secure SHell (SSH) connections to the
GPON Device.
ICMPUse this screen to set which interfaces respond to PING requests.
UPnPUse this screen to configure UPnP connections to the GPON Device.
TR-069Use this screen to configure your ONT to be managed by an ACS.
the ONT.
firewall takes on packets depending on packet direction.
RulesUse this screen to view the configured firewall rules and add, edit or
remove a firewall rule.
inactivity timeout and password.
Time SettingUse this screen to change your GPON Device’s time and date.
SLIDUse this screen change your ONT’s Subscriber Location ID (SLID)
setting.
Log SettingsUse this screen to select which logs and/or immediate alerts your
device is to record. You can also set it to e-mail the logs to you.
ConfigurationUse this screen to backup and restore your device’s configuration
(settings) or reset the factory default settings.
RestartThis screen allows you to reboot the GPON Device without turning the
power off.
2.2.3 Main Window
The main window displays information and configuration fields. It is discussed in the rest of this
document.
Right after you log in, the Status screen is displayed. See Chapter 3 on page 21 for more
information about the Status screen.
18
PMG5318-B20A User’s Guide
Page 19
2.2.4 Status Bar
Check the status bar when you click Apply or OK to verify that the configuration has been updated.
Chapter 2 The Web Configurator
PMG5318-B20A User’s Guide
19
Page 20
Chapter 2 The Web Configurator
20
PMG5318-B20A User’s Guide
Page 21
3.1 Overview
Use the Status screens to look at the current status of the device, system resources, interfaces
(LAN and WAN), and SIP accounts. You can also register and unregister SIP accounts.
3.2 Status
Click Status to access this screen.
Figure 8 Status
CHAPTER 3
Status Screens
PMG5318-B20A User’s Guide21
Page 22
Chapter 3 Status Screens
Each field is described in the following table.
Table 3 Status
LABELDESCRIPTION
Device Information
Host NameThis field displays the GPON Device system name. It is used for identification.
Model NameThis is the model name of the GPON Device.
Firmware VersionThis field displays the current version of the firmware inside the device. It also
WAN StatusThis section displays connection information for each WAN connection configured
ModeThis is the method of encapsulation used by your service provider for this WAN
IP AddressThis field displays the IP address of the WAN connection.
IP Subnet
Mask
Default
Gateway
First/Second/
Third DNS
Server
IPv6 Global
Address
IPv6 Link local
Address
IPv6 First/
Second/Third
DNS Server
LAN Information
IP AddressThis field displays the current IP address of the GPON Device in the LAN. Click
IP Subnet
Mask
MAC AddressThis shows the LAN Ethernet adapter MAC (Media Access Control) address of
You can change this in the Maintenance > System > General screen’s
System Name field.
shows the date the firmware version was created. Click this to go to the screen
where you can change it.
on the GPON Device.
connection.
This field displays the WAN connection’s subnet mask.
This field displays the IP address of the default gateway, if applicable.
These are the DNS server IP addresses assigned to the WAN connection.
This is the IPv6 global address of the WAN connection.
This is the link-local address assigned to the WAN connection.
These are the IPv6 DNS server IP addresses assigned to the WAN connection.
this to go to the screen where you can change it.
This field displays the GPON Device’s current subnet mask in the LAN.
your GPON Device.
22
PMG5318-B20A User’s Guide
Page 23
Chapter 3 Status Screens
Table 3 Status
LABELDESCRIPTION
First/Second/
Third DNS
Server
Transceiver
Status
Tempe ratureThis displays the temperature in Celsius. The normal range is 0-70 degrees.
VoltageThis displays the voltage in Volts. The normal range is 3.13-3.47 Volts.
Bias CurrentThis displays the bias current in mA. The normal range is 4-50 mA.
Optical Tx
Power
Optical Rx
Power
System Status
System UptimeThis field displays how long the GPON Device has been running since it last
CPU UsageThis field displays what percentage of the GPON Device’s processing ability is
Memory UsageThis field displays what percentage of the GPON Device’s memory is currently
Interface Status
InterfaceThis column identifies the interface on the GPON Device.
StatusThis field displays Up when the interface has a connection and Down when it
RateThis field displays the connection speed of the WAN interface’s PON connection
Registration Status
AccountThis column displays each SIP account in the GPON Device.
ActionIf the SIP accou nt is already register ed with the SIP serv er, the Account Status
These are the DNS server IP addresses the GPON Device passes to the DHCP
clients.
This displays the optical transmitting power in dBm.
This displays the optical receiving power in dBm. The normal range is -28 to -8
dBm.
started up. The GPON Device starts up when you plug it in, when you restart it
(Maintenance > Tools > Restart), or when you reset it.
currently used. When this percentage is close to 100%, the GPON Device is
running at full load, and the throughput is not going to improve anymore. If you
want some applications to have more throughput, you should turn off other
applications.
used. Usually, this percentage should not increase much. If memory usage does
get close to 100%, the GPON Device is probably becoming unstable, and you
should restart the device. See Section 18.4 on page 148, or turn it off (unplug
the power) for a few seconds.
does not.
when it is connected. This field displays the connection speed and duplex for a
connected LAN interface.
field displays Registered.
PMG5318-B20A User’s Guide
Click Unregister to delete the SIP account’s registration in the SIP server. This
does not cancel your SIP account, but it deletes the mapping between your SIP
identity and your IP address or domain name.
If the SIP account is not registered with the SIP server , the Account Status field
displays Not Registered.
Click Register to have the GPON Device attempt to register the SIP account
with the SIP server.
The button is grayed out if the SIP account is disabled.
23
Page 24
Chapter 3 Status Screens
Table 3 Status
LABELDESCRIPTION
Account StatusThis field displays the current registration status of the SIP account. You have to
Associate Service
Provider Name
URIThis field displays the account number and service domain of the SIP account.
register SIP accounts with a SIP server to use VoIP.
Inactive - The SIP account is not active. You can activate it in VoIP > SIP >
SIP Account.
Not Registered - The last time the GPON Device tried to register the SIP
account with the SIP server, the attempt failed. Use the Register button to
register the account again. The GPON Device automatically tries to register the
SIP account when you turn on the GPON Device or when you activate it.
Registered - The SIP account is already register ed with the SIP s er ver. You can
use it to make a VoIP call.
This column displays the service provider name for each SIP account.
You can change these in VoIP > SIP > SIP Settings.
24
PMG5318-B20A User’s Guide
Page 25
4.1 Overview
This chapter describes how to configure WAN settings. A WAN (Wide Area Network) is an outside
connection to another network or the Internet.
4.1.1 What You Need to Know
The following terms and concepts may help as you read through the chapter.
Encapsulation
Be sure to use the encapsulation method required by the ISP. The GPON Device supports the
following methods.
CHAPTER 4
WAN
PPP over Ethernet
The GPON Device supports PPPoE (Point-to-Point Protocol over Ethernet). PPPoE is an IETF Draft
standard (RFC 2516) specifying how a personal computer (PC) interacts with a broadband modem
(DSL, cable, wireless, etc.) connection. The PPPoE option is for a dial-up connection using PPPoE.
For the service provider, PPPoE offers an access and authentication method that works with existing
access control systems (for example RADIUS).
One of the benefits of PPPoE is the ability to let you access one of multiple network services, a
function known as dynamic service selection. This enables the service provider to easily create and
offer new IP services for individuals.
Operationally, PPPoE saves significant effort for both you and the ISP or carrier, as it requires no
specific configuration of the broadband modem at the customer site.
By implementing PPPoE directly on the GPON Device (rather than individual computers), the
computers on the LAN do not need PPPoE software installed, since the GPON Device does that part
of the task.
IP Address Assignment
A static IP is a fixed IP that the ISP provides. A dynamic IP is not fixed; the ISP assigns a different
one each time. The Single User Account feature can be enabled or disabled if you have either a
dynamic or static IP. However the encapsulation method assigned influences your choices for IP
address and ENET ENCAP gateway.
PMG5318-B20A User’s Guide25
Page 26
Chapter 4 WAN
Multicast and IGMP
Traditionally, IP packets are transmitted in one of either two w ays - Unicast (1 sender - 1 recipient)
or Broadcast (1 sender - everybody on the network). Multicast delivers IP packets to a group of
hosts on the network - not everybody and not just 1.
IGMP (Internet Group Management Protocol) is a network-layer protocol used to establish
membership in a Multicast group - it is not used to carry user data.
4.2 Internet Access Setup Status
Use this screen to view your GPON Device’s WAN settings. Click Network > WAN. Your GPON
Device’s number and names of default WAN interfaces may vary from this example.
Figure 9 Internet Access Setup Status
The following table describes the labels in this screen.
Table 4 Internet Access Setup Status
LABELDESCRIPTION
InterfaceThis shows the name of the interface used by this connection.
DescriptionThis is the service description for traffic using this connection.
TypeThis shows the method of encapsulation used by this connection.
Service TypeThis is the service type for traffic using this connection.
Vlan IDThis shows the VLAN ID assigned to traffic for this connection. This is assigned by th e OLT.
Vlan 802.1pThis displays the 802.1P priority level assigned to traffic sent through this connection.
ICMPThis shows whether the WAN interface will respond to ICMP packets.
NATThis shows whether NAT is activated or not for this interface. NAT is not available when the
ModifyClick the Edit icon to configure the WAN connection.
AddClick this to create a new WAN connection.
connection uses the bridging service.
Click the Remove icon to delete the WAN connection.
4.3 Internet Access Setup
26
Use these screens to configure your GPON Device’s WAN interfaces. Click Modify or Add in the
Network > WAN > Internet Access Setup status screen.
PMG5318-B20A User’s Guide
Page 27
The available fields vary in this screen depending on the option (PPPoE, IP, or Bridging) you
select in the WAN interface type field.
4.3.1 WAN Interface Type - PPPoE
Select PPPoE as the WAN interface type to open the following screen.
Figure 10 Internet Access Setup - PPPoE
Chapter 4 WAN
PMG5318-B20A User’s Guide
27
Page 28
Chapter 4 WAN
The following table describes the labels in this screen.
Table 5 Internet Access Setup - PPPoE
LABELDESCRIPTION
General
WAN interface typeSelect PPPoE as the method of encapsulation used by your ISP from the drop-down
list box.
WAN IP ConnectionSelect IPv4 to have this WAN run IPv4 only.
Select IPv6/IPv4 to allow this WAN to run IPv4 and IPv6 at the same time.
Select IPv6 to have this WAN run IPv6 only.
User NameEnter the user name exactly as assigned by the ISP. If assigned a name in the form
user@domain where domain identifies a service name, then enter both components
exactly as given.
PasswordEnter the password associated with the user name above.
Service NameType the name of your PPPoE service here.
Authentication
Method
Service
Service DescriptionEnter a description to identify this WAN interface.
The GPON Device supports PAP (Password Authentication Protocol) and CHAP
(Challenge Handshake Authentication Protocol). CHAP is more secure than PAP;
however, PAP is readily available on more platforms.
Use the drop-down list box to select an authentication protocol for outgoing calls.
Options are:
AUTO - Your GPON Device accepts either CHAP or PAP when requested by this remote
node.
CHAP - Your GPON Device accepts CHAP only.
PAP - Your GPON Device accepts PAP only.
28
PMG5318-B20A User’s Guide
Page 29
Chapter 4 WAN
Table 5 Internet Access Setup - PPPoE (continued)
LABELDESCRIPTION
802.1Q VLAN IDThis shows the VLAN ID assigned to traffic for this connection. Click Edit to open a
screen where you can select a different VLAN ID. See Section 4.3.4 on page 37 for
information on this screen.
802.1P Priority
Method
WAN service typeIf you select PPPoE or IP in the WAN service type field abov e, sele ct wh ich t ype of
Enable WAN
Connection Limit
Connection NumberIf you select Enable WAN Connection Limit, you can specify the maximum number
IGMP Proxy
Configuration
LAN IGMP versionSelect the IGMP version to be used for IGMP messages originating from the LAN.
WAN IGMP versionSelect the IGMP version to be used for IGMP messages originating from the WAN.
Query IntervalEnter the time period in seconds between general queries. A general query is a
Connection
Always-onSelect Always-on when you want your connection up all the time. The GPON Device
Connect DemandSelect Connect Demand when you don't want the connection up all the time and
Feature
Enable NATSelect this check box to activate NAT on this connection.
Enable ICMPInternet Control Message Protocol is a message control and error-reporting protocol
Enable IP Conflict
Detection
IPv4 IP Address
Obtain an IP Address
Automatically
Select the 802.1P priority method to be assigned to traffic sent through this
connection.
traffic (Data, VoIP, Management, and/or IPTV) can use this WAN interface.
This field displays Bridge if you select Bridge in the WAN service type field above.
Select Enable WAN Connection Limit to limit the number of connections for a
service type.
of connections. For a low priority service type, you can set this number to a lower
value.
message sent to learn the multicast reception state of the device attached to the
interface.
will try to bring up the connection automatically if it is disconnected.
specify an idle time-out in the Max Idle Timeout field.
between a host server and a gateway to the Internet. ICMP uses Internet Protocol
(IP) datagrams, but the messages are processed by the TCP/IP software and directly
apparent to the application user.
Select this check box to reply to incoming WAN Ping requests. If this is not enabled,
the GPON Device will not respond to any incoming Ping requests.
Select this to have the GPON Device detect if the IP address assigned to this WAN
interface conflicts with other WAN IP addresses.
A dynamic IP address is not fixed; the ISP assigns a different one each time you
connect to the Internet.
Static IP AddressA static IP address is a fixed IP that the ISP provides.
IPv4 DNS Server
PMG5318-B20A User’s Guide
Select Obtain an IP Address Automatically to get a dynamic IPv4 address for this
WAN.
Select Static IP Address and type the ISP assigned information in the field below.
29
Page 30
Chapter 4 WAN
Table 5 Internet Access Setup - PPPoE (continued)
LABELDESCRIPTION
First DNS Server
Second DNS Server
Third DNS Server
IPv6 IP Address
Address Configuration
Mode
Link-Local AddressThis field displays the link-local address the GPON Device generated itself for the
IPv6 AddressEnter the IPv6 address assigned by your ISP for this WAN.
Prefix LengthEnter the address prefix length to specify how many most significant bits in an IPv6
Default GatewayEnter the IP address of the next-hop gateway. The gateway is a router or switch on
IPv6 DNS Server
First DNS Server
Second DNS Server
Third DNS Server
IPv6 Router
Advertisement
Setting
M Flag
O Flag
Select From ISP if the ISP dynamically assigns DNS server information (and the
GPON Device's WAN IP address) and you select Obtain an IP Address
Automatically.
Select UserDefined if you have the IP address of a DNS server. Enter the DNS
server's IP address in the field to the right.
Select None if you do not want to configure DNS servers. You must have another
DNS server on your LAN, or else the computers must have their DNS server
addresses manually configured. If you do not configure a DNS server, you must know
the IP address of a computer in order to access it.
Select DHCP if you want to obtain an IPv6 address from a DHCPv6 server.
The IP address assigned by a DHCPv6 server has priority over the IP address
automatically generated by the Device using the IPv6 prefix from an RA.
Select SLAAC (Stateless address autoconfigu ration) to have the Device use the prefix
to automatically generate a unique IP address that does not need to be maintained by
a DHCP server.
Select Auto to have the Device indicate to hosts for IPv6 address generation
depending on the M/O (Managed/Other) flag values in the router advertisements
sending to hosts. You can configure the M/O flag settings in the IPv6 Router
Advertisement Setting section below.
WAN.
address compose the network address.
the same segment as your GPON Device's interface(s). The gateway helps forward
packets to their destinations.
Select From ISP if the ISP dynamically assigns DNS server information (and the
GPON Device's WAN IP address) and you select Obtain an IP Address
Automatically.
Select UserDefined if you have the IP address of a DNS server. Enter the DNS
server's IP address in the field to the right.
Select None if you do not want to configure DNS servers. You must have another
DNS server on your LAN, or else the computers must have their DNS server
addresses manually configured. If you do not configure a DNS server, you must know
the IP address of a computer in order to access it.
Select this option if you want to have the GPON Device use the IPv6 prefix from the
connected router’s Router Advertisement (RA) to generate an IPv6 address.
Select this to have the GPON Devi ce indicate to hosts to obtain network settings (such
as WAN IP, LAN prefix and DNS settings) through DHCPv6.
Clear this to have the GPON Device check O flag.
Select this to have the GPON Device indicate to hosts to obtain DNS information and
LAN prefix through DHCPv6.
Clear this to have the GPON Device not get information through DHCPv6.
30
PMG5318-B20A User’s Guide
Page 31
Chapter 4 WAN
Table 5 Internet Access Setup - PPPoE (continued)
LABELDESCRIPTION
PreferenceThis field displays the router preference (Low, Medium or High) the gateway
assigned to the GPON Device. The GPON Device sends this preference in the router
advertisements to tell hosts what preference they should use for the GPON Device.
This helps hosts to choose their default router es pecially when there are mu ltiple IPv6
routers in the network.
Note: Make sure the hosts also support router preference to make this function work.
PrefixEnter the IPv6 prefix provided by your ISP.
Prefix LengthEnter the bit number of the IPv6 subnet mask provided by your ISP.
ApplyClick Apply to save the changes.
CancelClick Cancel to begin configuring this screen afresh.
PMG5318-B20A User’s Guide
31
Page 32
Chapter 4 WAN
4.3.2 WAN Interface Type - IP
Select IP as the WAN interface type to open the following screen.
Figure 11 Internet Access Setup - IP
32
PMG5318-B20A User’s Guide
Page 33
Chapter 4 WAN
The following table describes the labels in this screen.
Table 6 Internet Access Setup - IP
LABELDESCRIPTION
General
WAN interface typeSelect IP as the method of encapsulation used by your ISP from the drop-down list
box.
WAN IP ConnectionSelect IPv4 to have this WAN run IPv4 only.
Select IPv6/IPv4 to allow this WAN to run IPv4 and IPv6 at the same time.
Select IPv6 to have this WAN run IPv6 only.
ARP Ping
Enable ARP PingSelect this to have the GPON Device send ARP requests to the gateway regularly if the
gateway IP might change often. If the GPON Device does not receive the gateway’s
response, the GPON Device requests a new gateway IP through DHCP.
Service
Service DescriptionEnter a description to identify this WAN interface.
802.1Q VLAN IDThis shows the VLAN ID assigned to traffic for this connection. Click Edit to open a
screen where you can select a different VLAN ID. See Section 4.3.4 on page 37 for
information on this screen.
802.1P Priority
Method
Select the 802.1P priority method to be assigned to traffic sent through this
connection.
PMG5318-B20A User’s Guide
33
Page 34
Chapter 4 WAN
Table 6 Internet Access Setup - IP (continued)
LABELDESCRIPTION
WAN service typeSelect which type of traffic (Data, VoIP, Management, and/or IPTV) can use this
WAN interface.
Enable WAN
Connection Limit
Connection NumberIf you select Enable WAN Connection Limit, you can specify the maximum number
IGMP Proxy
Configuration
LAN IGMP versionSelect the IGMP version to be used for IGMP messages originating from the LAN.
WAN IGMP versionSelect the IGMP version to be used for IGMP messages originating from the WAN.
Query IntervalEnter the time period in seconds between general queries. A general query is a
Feature
Enable NATSelect this check box to activate NAT on this connection.
Enable ICMPInternet Control Message Protocol is a message control and error-reporting protocol
Select Enable WAN Connection Limit to limit the number of connections for a
service type.
of connections. For a low priority service type, you can set this number to a lower
value.
message sent to learn the multicast reception state of the device attached to the
interface.
between a host server and a gateway to the Internet. ICMP uses Internet Protocol
(IP) datagrams, but the messages are processed by the TCP/IP software and directly
apparent to the application user.
Select this check box to reply to incoming WAN Ping requests. If this is not enabled,
the GPON Device will not respond to any incoming Ping requests.
Enable IP Conflict
Detection
IPv4 IP Address
Obtain an IP Address
Automatically
Enable DHCP Option 60Select this to identify the vendor and functionality of the GPON Device in DHCP
Vendor Class
Identifier
Enable DHCP Option 61Select this to identify the GPON Device in DHCP requests that the GPON Device sends
Client IdentifierIf Hexadecimal is selecte d, you can e nter the GPON De vice’ s hardwa re address, that
Enable DHCP Option
125
Static IP AddressA static IP address is a fixed IP that the ISP provides.
IPv4 DNS Server
Select this to have the GPON Device detect if the IP address assigned to this WAN
interface conflicts with other WAN IP addresses.
A dynamic IP address is not fixed; the ISP assigns a different one each time you
connect to the Internet.
Select Obtain an IP Address Automatically to get a dynamic IPv4 address for this
WAN.
The following DHCP Option 60, 61, and 125 fields are available only when you select
IP in the WAN interface type field above.
requests that the GPON Device sends to a DHCP server when getting a WAN IP
address.
Enter the Vendor Class Identifier (Option 60), such as the type of the hardware or
firmware.
to a DHCP server when getting a WAN IP address.
is the MAC address in this field using hexadecimal characters.
If String is selected, enter a string to identify the GPON Device using alphanumeric
characters.
Select this to add vendor specific information to DHCP requests th at the GPON Device
sends to a DHCP server when getting a WAN IP address.
Select Static IP Address and type the ISP assigned information in the field below.
34
PMG5318-B20A User’s Guide
Page 35
Chapter 4 WAN
Table 6 Internet Access Setup - IP (continued)
LABELDESCRIPTION
First DNS Server
Second DNS Server
Third DNS Server
IPv6 IP Address
Address Configuration
Mode
Link-Local AddressThis field displays the link-local address the GPON Device generated itself for the
IPv6 AddressEnter the IPv6 address assigned by your ISP for this WAN.
Prefix LengthEnter the address prefix length to specify how many most significant bits in an IPv6
Default GatewayEnter the IP address of the next-hop gateway. The gateway is a router or switch on
IPv6 DNS Server
First DNS Server
Second DNS Server
Third DNS Server
IPv6 Router
Advertisement
Setting
M Flag
O Flag
Select From ISP if the ISP dynamically assigns DNS server information (and the
GPON Device's WAN IP address) and you select Obtain an IP Address
Automatically.
Select UserDefined if you have the IP address of a DNS server. Enter the DNS
server's IP address in the field to the right.
Select None if you do not want to configure DNS servers. You must have another
DNS server on your LAN, or else the computers must have their DNS server
addresses manually configured. If you do not configure a DNS server, you must know
the IP address of a computer in order to access it.
Select DHCP if you want to obtain an IPv6 address from a DHCPv6 server.
The IP address assigned by a DHCPv6 server has priority over the IP address
automatically generated by the Device using the IPv6 prefix from an RA.
Select SLAAC (Stateless address autoconfigu ration) to have the Device use the prefix
to automatically generate a unique IP address that does not need to be maintained by
a DHCP server.
Select Auto to have the Device indicate to hosts for IPv6 address generation
depending on the M/O (Managed/Other) flag values in the router advertisements
sending to hosts. You can configure the M/O flag settings in the IPv6 Router
Advertisement Setting section below.
WAN.
address compose the network address.
the same segment as your GPON Device's interface(s). The gateway helps forward
packets to their destinations.
Select From ISP if the ISP dynamically assigns DNS server information (and the
GPON Device's WAN IP address) and you select Obtain an IP Address
Automatically.
Select UserDefined if you have the IP address of a DNS server. Enter the DNS
server's IP address in the field to the right.
Select None if you do not want to configure DNS servers. You must have another
DNS server on your LAN, or else the computers must have their DNS server
addresses manually configured. If you do not configure a DNS server, you must know
the IP address of a computer in order to access it.
Select this option if you want to have the GPON Device use the IPv6 prefix from the
connected router’s Router Advertisement (RA) to generate an IPv6 address.
Select this to have the GPON Devi ce indicate to hosts to obtain network settings (such
as WAN IP, LAN prefix and DNS settings) through DHCPv6.
Clear this to have the GPON Device check O flag.
Select this to have the GPON Device indicate to hosts to obtain DNS information and
LAN prefix through DHCPv6.
Clear this to have the GPON Device not get information through DHCPv6.
PMG5318-B20A User’s Guide
35
Page 36
Chapter 4 WAN
Table 6 Internet Access Setup - IP (continued)
LABELDESCRIPTION
PreferenceThis field displays the router preference (Low, Medium or High) the gateway
assigned to the GPON Device. The GPON Device sends this preference in the router
advertisements to tell hosts what preference they should use for the GPON Device.
This helps hosts to choose their default router es pecially when there are mu ltiple IPv6
routers in the network.
Note: Make sure the hosts also support router preference to make this function work.
PrefixEnter the IPv6 prefix provided by your ISP.
Prefix LengthEnter the bit number of the IPv6 subnet mask provided by your ISP.
ApplyClick Apply to save the changes.
CancelClick Cancel to begin configuring this screen afresh.
4.3.3 WAN Interface Type - Bridging
Select Bridging as the WAN interface type to open the following screen.
Figure 12 Internet Access Setup - Bridging
36
The following table describes the labels in this screen.
Table 7 Internet Access Setup - Bridging
LABELDESCRIPTION
General
WAN interface typeSelect Bridging as the method of encapsulation used by your ISP from the drop-
down list box.
Bridging LAN portsSelect one or more LAN or wireless port(s) to bind with this WAN connection. Only the
Service
Service DescriptionEnter a description to identify this WAN interface.
802.1Q VLAN IDThis shows the VLAN ID assigned to traffic for this connection. Click Edit to open a
802.1P Priority
Method
WAN service typeThis field displays Bridge.
selected ports here can use this WAN connection.
screen where you can select a different VLAN ID. See Section 4.3.4 on page 37 for
information on this screen.
Select the 802.1P priority method to be assigned to traffic sent through this
connection.
PMG5318-B20A User’s Guide
Page 37
Table 7 Internet Access Setup - Bridging (continued)
LABELDESCRIPTION
ApplyClick Apply to save the changes.
CancelClick Cancel to begin configuring this screen afresh.
4.3.4 802.1Q VLAN ID - Edit
Use this screen to configure the 802.1Q VLAN ID settings for a WAN interface. Click Edit next to
802.1Q VLAN ID on an Internet Access Setup screen.
Figure 13 802.1Q VLAN ID - Edit
Chapter 4 WAN
The following table describes the labels in this screen.
Table 8 802.1Q VLAN ID - Edit
LABELDESCRIPTION
Provisioned VLAN/
Pbit
StatusThis column displays the current status of the respective VLAN/Pbit. It will display if it
ApplyClick Apply to save the changes.
The available VLAN/Pbit values provisioned by the OLT are listed in this column. You
can select a VLAN/Pbit to be used by this WAN interface.
is in use by a WAN interface, or not in use.
PMG5318-B20A User’s Guide
37
Page 38
Chapter 4 WAN
4.4 Default Gateway
Use this screen to configure your GPON Device’s default gateway settings. Click Network > WAN
> Default Gateway.
Figure 14 Default Gateway
The following table describes the labels in this screen.
Table 9 Default Gateway
LABELDESCRIPTION
WAN InterfaceSelect a WAN interface you want to act as the default gateway.
WAN StatusThis displays if the interface displayed in the WAN Interface column is Up or Down.
ApplyClick Apply to save the changes.
CancelClick this to restore your previously saved settin gs.
38
PMG5318-B20A User’s Guide
Page 39
5.1 Overview
Internet
LAN
WAN
A
This chapter describes how to configure LAN settings.
A Local Area Network (LAN) is a shared communication system to which many computers are
attached. A LAN is a computer network limited to the immediate area, usually the same building or
floor of a building. The LAN screens can help you configure a LAN DHCP server and manage IP
addresses.
5.1.1 What You Need to Know
The following terms and concepts may help as you read through this chapter.
CHAPTER 5
LAN
LANs, WANs and the GPON Device
The actual physical connection determines whether the GPON Device ports are LAN or WAN ports.
There are two separate IP networks, one inside the LAN network and the other outside the WAN
network as shown next. The figure shows the GPON Device A.
Figure 15 LAN and WAN IP Addresses
PMG5318-B20A User’s Guide39
Page 40
Chapter 5 LAN
5.2 The IP and DHCP Screen
Click Network > LAN to open the IP & DHCP screen. Use this screen to set the Local Area
Network IP address and subnet mask of your GPON Device.
Figure 16 LAN & DHCP
40
The following table describes the fields in this screen.
Table 10 IP & DHCP
LABELDESCRIPTION
LAN TCP/IP
IP AddressEnter the LAN IP address you want to assign to your GPON Device in dotted decimal
notation, for example, 192.168.1.1 (factory default).
IP Subnet Mask Type the subnet mask of your network in dotted decimal notation, for example
DHCP Setup
DHCPSelect whether to have the GPON Device act as a DHCP Server.
IP Pool Starting
Address
255.255.255.0 (factory default). Your GPON Device automatically computes the
subnet mask based on the IP Address you enter, so do not change this field unless you
are instructed to do so.
Select Server to have the GPON Device assign IP addresses and provide subnet mask,
gateway, and DNS server information to the network. The GPON Device is the DHCP
server for the network.
Otherwise, select Disable to not have the GPON Device provide any DHCP services.
The DHCP server will be disabled.
This field specifies the first of the contiguous addresses in the IP address pool.
PMG5318-B20A User’s Guide
Page 41
Chapter 5 LAN
Table 10 IP & DHCP (continued)
LABELDESCRIPTION
Pool SizeThis field specifies the size, or count of the IP address pool.
DHCP Lease Time This field specifies the lease time in seconds of the IP address assigned by the DHCP
server.
Enable DHCP
option 43
DNS Server
First DNS Server
Second DNS Server
Third DNS Server
ApplyClick Apply to save your changes back to the GPON Device.
CancelClick Cancel to begin configuring this screen afresh.
Select this and type the Vender specific information you want the GPON Device to
add in the DHCP Offer packets. The information is used, for example, for configuring
an ACS’s (Auto Configuration Server) URL.
Select FromISP if the ISP dynamically assigns DNS server information (and the GPON
Device's WAN IP address).
Select UserDefined if you have the IP address of a DNS server. Enter the DNS
server's IP address in the field to the right.
Select DNS Relay to have the GPON Device act as a DNS proxy only when the ISP
uses IPCP DNS server extensions.The GPON Device's LAN IP address displays in the
field to the right (read-only). The GPON Device tells the DHCP clients on the LAN that
the GPON Device itself is the DNS server. When a computer on the LAN sends a DNS
query to the GPON Device, the GPON Device forwards the query to the real DNS
server learned through IPCP and relays the response back to the computer.
Select None if you do not want to configure DNS servers. You must have another
DHCP sever on your LAN, or else the computers must have their DNS server addresses
manually configured. If you do not configure a DNS server, you must know the IP
address of a computer in order to access it.
5.3 Client List
Use this screen to look at the IP addresses currently assigned to DHCP clients and the IP addresses
reserved for specific MAC addresses. Click Network > LAN > Client List.
This table allows you to assign IP addresses on the LAN to specific individual computers based on
their MAC Addresses.
Every Ethernet device has a unique MAC (Media Access Control) address. The MAC address is
assigned at the factory and consists of six pairs of hexadecimal characters, for example,
00:A0:C5:00:00:02.
Figure 17 Client List
PMG5318-B20A User’s Guide
41
Page 42
Chapter 5 LAN
The following table describes the labels in this screen.
Tab le 11 Client List
LABELDESCRIPTION
IP AddressEnter the IP address that you want to assign to the computer on your LAN with the MAC
MAC AddressEnter the MAC address of a computer on your LAN.
AddClick Add to add a static DHCP entry.
#This is the index number of the static IP table entry (row).
StatusThis field displays whether the client is connected to the GPON Device.
Host Name This field displays the computer host name.
Interface TypeThis field displays if the client is connected through ethernet or wireless.
IP AddressThis field displays the IP address relative to the # field listed above.
MAC AddressThe MAC (Media Access Control) or Ethernet address on a LAN (L ocal Area Network) is
Remaining Lease
Time
ReserveSelect the check box in the heading row to automatically select all check boxes or
ApplyClick Apply to save your changes back to the GPON Device.
CancelClick Cancel to begin configuring this screen afresh.
RefreshClick Refresh to reload the DHCP table.
address that you will also specify.
unique to your computer (six pairs of hexadecimal notation).
A network interface card such as an Ethernet adapter has a hardwired address that is
assigned at the factory. This address follows an industry standard that ensures no other
adapter has a similar address.
This field displays the remaining time for this DHCP lease.
select the check box(es) in each entry to have the GPON Device always assign the
selected entry(ies)’s IP address(es) to the corresponding MAC address(es) (and host
name(s)). You can select up to 128 entries in this table.
5.4 Port Speed
Use this screen to configure your GPON Device’s LAN port speed settings. Click Network > LAN >
Port Speed.
Figure 18 Port Speed
42
PMG5318-B20A User’s Guide
Page 43
Chapter 5 LAN
The following table describes the labels in this screen.
Table 12 Port Speed
LABELDESCRIPTION
LAN PortThis column displays the LAN port number.
SpeedSelect Autonegotiation to have the GPON Device automatically use 1G, 100M or
DuplexSelect Auto to have t he GPON Dev ice autom ati call y use full or half duplex depending
ApplyClick Apply to save the changes.
CancelClick this to restore your previously saved settin gs.
10M depending on the device connected to the port. Y ou can also ma nually select one
of these speeds.
on the device connected to the port. You can also manually select a Full or Half
duplex.
PMG5318-B20A User’s Guide
43
Page 44
Chapter 5 LAN
44
PMG5318-B20A User’s Guide
Page 45
6.1 Overview
This chapter describes how to perform tasks related to setting up and optimizing your wireless
network, including the following.
• Turning the wireless connection on or off.
• Configuring a name, wireless channel and security for the network.
• Using WiFi Protected Setup (WPS) to configure your wireless network.
• Setting up multiple wireless networks.
• Using a MAC (Media Access Control) address filter to restrict access to the wireless network.
• Performing other performance-related wireless tasks.
CHAPTER 6
Wireless LAN
6.1.1 What You Need to Know About Wireless
Wireless Basics
“Wireless” is essentially radio communication. In the same way that walkie-talkie radios send and
receive information over the airwaves, wireless networking devices exchange information with one
another. A wireless networking device is just like a radio that lets your computer exchange
information with radios attached to other computers. Like walkie-talkies, most wireless networking
devices operate at radio frequency bands that are open to the public and do not require a license to
use. However, wireless networking is different from that of most traditional radio communications in
that there a number of wireless networking standards available with different methods of data
encryption.
SSID
Each network must have a name, referred to as the SSID - “Service Set IDentifier”. The “service
set” is the network, so the “service set identifier” is the network’s name. This helps you identify
your wireless network when wireless networks’ coverage areas overlap and you have a variety of
networks to choose from.
MAC Address Filter
Every Ethernet device has a unique MAC (Media Access Control) address. The MAC address consists
of twelve hexadecimal characters (0-9, and A to F), and it is usually written in the following format:
“0A:A0:00:BB:CC:DD”.
The MAC address filter controls access to the wireless network. You can use the MAC address of
each wireless client to allow or deny access to the wireless network.
PMG5318-B20A User’s Guide45
Page 46
Chapter 6 Wireless LAN
Finding Out More
See Section 6.9 on page 57 for advanced technical information on wireless networks.
6.1.2 Before You Start
Before you start using these screens, ask yourself the following questions. See Section 6.1.1 on
page 45 if some of the terms used here are not familiar to you.
• What wireless standards do the other wireless devices in your network support (IEEE 802.11g,
for example)? What is the most appropriate standard to use?
• What security options do the other wireless devices in your network support (WPA-PSK, for
example)? What is the strongest security option supported by all the devices in your network?
• Do the other wireless devices in your network support WPS (Wi-Fi Protected Setup)? If so, you
can set up a well-secured network very easily.
Even if some of your devices support WPS and some do not, you can use WPS to set up your
network and then add the non-WPS devices manually, although this is somewhat more
complicated to do.
• What advanced options do you want to configure, if any? If you want to configure advanced
options such as Quality of Service, ensure that you know precisely what you want to do. If you do
not want to configure advanced options, leave them as they are.
6.2 The General Screen
Use this screen to configure the wireless settings of your GPON Device. Click Network > Wireless
LAN to open the General screen.
Figure 19 Network > Wireless LAN > General
46
PMG5318-B20A User’s Guide
Page 47
Chapter 6 Wireless LAN
The following table describes the labels in this screen.
Table 13 Network > Wireless LAN > General
LABELDESCRIPTION
Wireless Setup
Enable Wireless
LAN
Enable
MultiSSID
SSIDThe SSID (Service Set IDentity) identifies the service set with which a wireless device is
Click the check box to activate wireless LAN.
Select this to enable Multi SSID (Service Set IDentity) to have the have the GPON Device
broadcast several Basic Service Sets (BSSs) simultaneously.
associated. Wireless devices associating to the access point (AP) must have the same
SSID. Enter a descriptive name (up to 32 printable 7-bit ASCII characters) for the wireless
LAN.
Note: If you are configuring the GPON Device from a computer connected to the wireless
LAN and you change the GPON Device’s SSID or any wireless security settings, you
will lose your wireless connection when you press Apply to confirm. You must then
change the wireless settings of your computer to match the GPON Device’s new
settings.
Hide SSIDSelect this check box to hide the SSID in the outgoing beacon frame so a station cannot
obtain the SSID through scanning using a site survey tool.
Power Level
Channel
Selection
Wireless Advanced Setup
Click Advanced or Basic to display or hide this section.
802.11 ModeSelect 802.11 B Only to allow only IEEE 802.11b compliant WLAN devices to associate
Select the wireless transmission power (High, Medium, Low) of the GPON Device . If
there is a high density of wireless APs in an area, decrease the power level to reduce
interference with other APs.
Set the operating channel manually by selecting a channel from the Channel Selection
list or use Auto Channel Select to have it automatically configured.
with the GPON Device.
Select 802.11 G Only to allow only IEEE 802.11g compliant WLAN devices to associate
with the GPON Device.
Select 802.11 N Only to allow only IEEE 802.11n compliant WLAN devices to associate
with the GPON Device.
Select 802.11 B/G to allow either IEEE 802.11b or IEEE 802.11g compliant WLAN devices
to associate with the GPON Device. The transmission rate of your GPON Device might be
reduced.
Select 802.11 B/G/N to allow IEEE 802.11b, IEEE 802.11g or IEEE802.11n compliant
WLAN devices to associate with the GPON Device. The transmission rate of your GPON
Device might be reduced.
ApplyClick this to save your changes.
CancelClick this to restore your previously saved settings.
6.3 The Security Screen
Use this screen to configure the wireless security settings of your GPON Device. Click Network >
Wireless LAN > Security to open the Security screen.
PMG5318-B20A User’s Guide
47
Page 48
Chapter 6 Wireless LAN
6.3.1 No Security
In the Network > Wireless LAN > Security screen, select No Security from the Security Mode
list to allow wireless devices to communicate with the GPON Device without any data encryption or
authentication.
Note: If you do n ot enable any wireless securi ty on your GPON D e vice, your network is
accessible to any wireless networking device that is within range.
Figure 20 Network > Wireless LAN > Security: No Security
The following table describes the labels in this screen.
Table 14 Network > Wireless LAN > Security: No Security
LABELDESCRIPTION
SSID SelectSelect the SSID for which you are configuring security settings.
Security ModeChoose No Security from the drop-down list box.
6.3.2 WEP Encryption
Use this screen to configure and enable WEP encryption. Click Network > Wireless LAN >
Security to display the Security screen. Select Static WEP from the Security Mode list.
48
PMG5318-B20A User’s Guide
Page 49
Chapter 6 Wireless LAN
Note: WEP is extremely insecure. Its encryption can be broken by an attacker, using
widely-available software. It is strongly recommended that you use a more
effective security mechanism. Use the strongest security mechanism that all the
wireless devices in your network support. For ex ample, use WP A -PSK o r WP A2-PSK
if all your wireless devices support it. If your wireless devices support nothing
stronger than WEP, use the highest encryption level available.
Figure 21 Network > Wireless LAN > Security: Static WEP
The following table describes the wireless LAN security labels in this screen.
Table 15 Network > Wireless LAN > Security: Static WEP
LABELDESCRIPTION
SSID SelectSelect the SSID for which you are configuring security settings.
Security ModeChoose Static WEP from the drop-down list box.
PassphraseEnter a passphrase (up to 32 printable characters) and click Generate. The GPON Device
WEP KeyThe WEP key is used to encrypt data. Both the GPON Device and the wireless stations must
automatically generates a WEP key.
use the same WEP key for data transmission.
If you want to manually set the WEP key, enter any 5 or 13 characters (ASCII string) or 10
or 26 hexadecimal characters ("0-9", "A-F") for a 64-bit or 128-bit WEP key respectively.
PMG5318-B20A User’s Guide
49
Page 50
Chapter 6 Wireless LAN
6.3.3 WPA(2)-PSK
Use this screen to configure and enable WPA(2)-PSK authentication. Click Network > Wireless
LAN > Security to display the Security screen. Select WPA-PSK or WPA2-PSK from the
Security Mode list.
Figure 22 Network > Wireless LAN > Security: WPA(2)-PSK
The following table describes the wireless LAN security labels in this screen.
Table 16 Network > Wireless LAN > Security: WPA(2)-PSK
LABELDESCRIPTION
SSID SelectSelect the SSID for which you are configuring security settings.
Security ModeChoose WPA-PSK or WPA2-PSK from the drop-down list box.
WPA CompatibleThis check box is available only when you select WPA2-PSK in the Security Mode
field.
Select the check box to have both WPA-PSK wireless clients be able to communicate
with the GPON Device even when the GPON Device is using WPA2-PSK.
Pre-Shared Key The encryption mechanisms used for WPA(2) and WPA(2)-PSK are the same. The
only difference between the two is that WPA(2)-PSK uses a simple common
password, instead of user-specific credentials.
Type a pre-shared key from 8 to 63 case-sensitive ASCII char acters (i n cludi ng spac es
and symbols).
WPA Group Key
Update Timer
The Group Key Update Timer is the r ate at which the AP (i f using WPA(2)-PSK key
management) sends a new group key out to all clients. The re-keying process is the
WPA(2) equivalent of automatically changing the WEP key for an AP and all stations in
a WLAN on a periodic basis.
50
PMG5318-B20A User’s Guide
Page 51
6.3.4 WPA(2)
Use this screen to configure and enable WPA(2) authentication. Click Network > Wireless LAN >
Security to display the Security screen. Select WPA or WPA2 from the Security Mode list.
Figure 23 Network > Wireless LAN > Security: WPA(2)
Chapter 6 Wireless LAN
The following table describes the wireless LAN security labels in this screen.
Table 17 Network > Wireless LAN > Security: WPA(2)
LABELDESCRIPTION
SSID SelectSelect the SSID for which you are configuring security settings.
Security ModeChoose WPA or WPA2 from the drop-down list box.
WPA CompatibleThis check box is available only when you select WPA2 in the Security Mode field.
Select the check box to have both WPA wireless clients be able to communicate with
the GPON Device even when the GPON Device is using WPA2.
Authentication Server
IP AddressEnter the IP address of the external authentication server in dotted decimal notation.
Port NumberEnter the port number of the external authentication server. The default port number
is 1812.
You need not change this value unless your network administrator instructs you to do
so with additional information.
Shared SecretEnter a password (up to 31 alphanumeric characters) as the key to be shared between
the external authentication server and the GPON Device.
The key must be the same on the external authentication server and your GPON
Device. The key is not sent over the network.
Group Key Update
Timer
The Group Key Update Timer is the rate at which the RADIUS server (if using
WPA(2) key management) sends a new group key out to all clients. The re-keying
process is the WPA(2) e quiva lent of automati cally changin g the WEP ke y for an AP and
all stations in a WLAN on a periodic basis. The GPON Device default is 1800 seconds
(30 minutes).
PMG5318-B20A User’s Guide
51
Page 52
Chapter 6 Wireless LAN
6.4 The WPS Screen
Use this screen to configure WiFi Protected Setup (WPS) on your GPON Device.
WPS allows you to quickly set up a wireless network with strong security, without having to
configure security settings manually. Set up each WPS connection between two devices. Both
devices must support WPS.
Click Network > Wireless LAN > WPS. The following screen displays.
Figure 24 Network > Wireless LAN > WPS
The following table describes the labels in this screen.
Table 18 Network > Wireless LAN > WPS
LABELDESCRIPTION
WPS Setup
Enable WPSSelect the check box to activate WPS on the GPON Device.
PIN Number The PIN of the GPON Device is shown here. Enter this PIN in the configuration utility of
the device you want to connect to using WPS.
The PIN is not necessary when you use WPS push-button method.
Click the Generate button to have the Device create a new PIN.
WPS StatusThis displays Configured when the GPON Device has connected to a wireless network
using WPS or Enable WPS is selected and wireless or wireless security settings have
been changed. The current wireless and wireless security settings also appear in the
screen.
This displays Unconfigured if WPS is disabled and there is no wireless or wireless
security changes on the GPON Device or you click Release to remove the configured
wireless and wireless security settings.
ReleaseThis button is available when the WPS status is Configured.
Click this button to remove all configured wireless and wireless security settings for WPS
connections on the GPON Device.
ApplyClick this to save your changes.
CancelClick this to restore your previously saved settings.
52
PMG5318-B20A User’s Guide
Page 53
6.5 The WPS Station Screen
Use this screen to set up a WPS wireless network using either Push Button Configuration (PBC) or
PIN Configuration.
Click Network > Wireless LAN > WPS Station. The following screen displays.
Figure 25 Network > Wireless LAN > WPS Station
The following table describes the labels in this screen.
Chapter 6 Wireless LAN
Table 19 Network > Wireless LAN > WPS Station
LABELDESCRIPTION
Push ButtonClick this to add another WPS-enabled wireless device (within wireless range of the
Or input station's
PIN number
6.5.1 MAC Filter
Use this screen to change your GPON Device’s MAC filter settings.
GPON Device) to your wireless network. This button may either be a physical button on
the outside of device, or a menu button similar to the Push Button on this screen.
Note: You must press the other wireless device’s WPS button within two minutes of
pressing this button.
Enter the PIN of the device that you are setting up a WPS connection with and click Start
to authenticate and add the wireless device to your wireless network.
You can find the PIN either on the outside of the device, or by checking the device’s
settings.
Note: You must also activate WPS on that device within two minutes to have it present its
PIN to the GPON Device.
PMG5318-B20A User’s Guide
53
Page 54
Chapter 6 Wireless LAN
Click Network > Wireless LAN > MAC Filter. The following screen displays.
Figure 26 Network > Wireless LAN > MAC Filter
54
The following table describes the labels in this screen.
Table 20 Network > Wireless LAN > MAC Filter
LABELDESCRIPTION
Filter Action
SSID SelectSelect the SSID for which you want to configure MAC filter settings.
Enable MAC
Filter
#
MAC AddressEnter the MAC addresses of the wireless devices that are allowed access to the GPON Device
Define the MAC filter action for all SSIDs’ MAC addresses listed in the MAC Address table
below.
Select Deny to block access to the GPON Device. MAC addresses not listed can access the
GPON Device.
Select Allow to permit access to the GPON Device. MAC addresses not listed cannot access
to the GPON Device.
Select the check box to enable MAC address filtering for the selected SSID.
This is the index number of the MAC address.
in these address fields. Enter the MAC addresses in a valid MAC address format, that is, six
hexadecimal character pairs, for example, 12:34:56:78:9a:bc.
PMG5318-B20A User’s Guide
Page 55
Table 20 Network > Wireless LAN > MAC Filter
LABELDESCRIPTION
ApplyClick this to save your changes.
CancelClick this to restore your previously saved settings.
6.6 The WMM Screen
Use this screen to enable or disable Wi-Fi MultiMedia (WMM) wireless networks for multimedia
applications.
Click Network > Wireless LAN > WMM. The following screen displays.
Figure 27 Network > Wireless LAN > WMM
Chapter 6 Wireless LAN
The following table describes the labels in this screen.
Table 21 Network > Wireless LAN > WMM
LABELDESCRIPTION
Enable WMM
SSID1-4
ApplyClick this to save your changes.
CancelClick this to restore your previously saved settings.
This enables the Device to automatically give a service a priority level according to the
ToS value in the IP header of packets it sends. WMM QoS (Wifi MultiMedia Quality of
Service) gives high priority to voice and video, which makes them run more smoothly.
6.7 The Status Screen
Use this screen to view the status of wireless connections to the GPON Device.
PMG5318-B20A User’s Guide
55
Page 56
Chapter 6 Wireless LAN
Click Network > Wireless LAN > Status. The following screen displays.
Figure 28 Network > Wireless LAN > Status
The following table describes the labels in this screen.
Table 22 Network > Wireless LAN > Status
LABELDESCRIPTION
#This field displays the index number of the wireless client.
MAC AddressThis field displays the MAC address for the wireless adapter of the wireless client.
RSSI0-1This field displays the Received Signal Strength Indication (RSSI), which is an overall
Association TimeThis field displays the length of time the wireless client has been connected.
RefreshClick this to update the information in the table.
measurement of radio signal strength. A higher RSSI level indicates a stronger signal. An
RSSI displays for each of the GPON Device’s antennae.
6.8 The Isolation Screen
Use this screen to enable/disable SSID isolation.
Click Network > Wireless LAN > Isolation. The following screen displays.
Figure 29 Network > Wireless LAN > Isolation
The following table describes the labels in this screen.
Table 23 Network > Wireless LAN > Isolation
LABELDESCRIPTION
Enable SSID
Isolation
ApplyClick this to save your changes.
CancelClick this to restore your previously saved settings.
Select this to keep the wireless clie nts in an SSID from directly communicating with
wireless clients in other SSIDs through the GPON Device.
56
PMG5318-B20A User’s Guide
Page 57
6.9 Wireless LAN Technical Reference
This section discusses wireless LANs in depth. For more information, see the appendix.
6.9.1 Wireless Network Overview
Wireless networks consist of wireless clients, access points and bridges.
• A wireless client is a radio connected to a user’s computer.
• An access point is a radio with a wired connection to a network, which can connect with
numerous wireless clients and let them access the network.
• A bridge is a radio that relays communications between access points and wireless clients,
extending a network’s range.
Traditionally, a wireless network operates in one of two ways.
• An “infrastructure” type of network has one or more access points and one or more wireless
clients. The wireless clients connect to the access points.
• An “ad-hoc” type of network is one in which there is no access point. Wireless clients connect to
one another in order to exchange information.
Chapter 6 Wireless LAN
The following figure provides an example of a wireless network.
Figure 30 Example of a Wireless Network
The wireless network is the part in the blue circle. In this wireless network, devices A and B use the
access point (AP) to interact with the other devices (such as the printer) or with the Internet. Your
GPON Device is the AP.
PMG5318-B20A User’s Guide
57
Page 58
Chapter 6 Wireless LAN
Every wireless network must follow these basic guidelines.
• Every device in the same wireless network must use the same SSID.
The SSID is the name of the wireless network. It stands for Service Set IDentifier.
• If two wireless networks overlap, they should use a different channel.
Like radio stations or television channels, each wireless network uses a specific channel, or
frequency, to send and receive information.
• Every device in the same wireless network must use security compatible with the AP.
Security stops unauthorized devices from using the wireless network. It can also protect the
information that is sent in the wireless network.
Radio Channels
In the radio spectrum, there are certain frequency bands allocated for unlicensed, civilian use. For
the purposes of wireless networking, these bands are divided into numerous channels. This allows a
variety of networks to exist in the same place without interfering with one another. When you
create a network, you must select a channel to use.
Since the available unlicensed spectrum varies from one country to another, the number of
available channels also varies.
6.9.2 Additional Wireless Terms
The following table describes some wireless network terms and acronyms used in the GPON
Device’s Web Configurator.
Table 24 Additional Wireless Terms
TERMDESCRIPTION
RTS/CTS ThresholdIn a wireless network which covers a large area, wireless devices are sometimes
not aware of each other’s presence. This may cause them to send information to
the AP at the same time and result in information colliding and not getting through.
By setting this value lower than the default value, the wireless devices must
sometimes get permission to send information to the GPON Device. The lower the
value, the more often the devices must get permission.
If this value is greater than the fragmentation threshold value (see below), then
wireless devices never have to get permission to send information to the GPON
Device.
PreambleA preamble affects the timing in your wireless network. There are two preamble
modes: long and short.If a device uses a different preamble mode than the GPON
Device does, it cannot communicate with the GPON Device.
AuthenticationThe process of verifying whether a wireless device is allowed to use the wireless
network.
Fragmentation
Threshold
A small fragmentation threshold is recommended for busy networks, while a larger
threshold provides faster performance if the network is not very busy.
6.9.3 Wireless Security Overview
By their nature, radio communications are simple to intercept. For wireless data networks, this
means that anyone within range of a wireless network without security can not only read the data
passing over the airwaves, but also join the network. Once an unauthorized person has access to
58
PMG5318-B20A User’s Guide
Page 59
Chapter 6 Wireless LAN
the network, he or she can steal information or introduce malware (malicious software) intended to
compromise the network. For these reasons, a variety of security systems have been developed to
ensure that only authorized people can use a wireless data network, or understand the data carried
on it.
These security standards do two things. First, they authenticate. This means that only people
presenting the right credentials (often a username and password, or a “key” phrase) can access the
network. Second, they encrypt. This means that the information sent over the air is encoded. Only
people with the code key can understand the information, and only people who have been
authenticated are given the code key.
These security standards vary in effectiveness. Some can be broken, such as the old Wired
Equivalent Protocol (WEP). Using WEP is better than using no security at all, but it will not keep a
determined attacker out. Other security standards are secure in themselves but can be broken if a
user does not use them properly . For example, the WP A -PSK securit y standard is very secure if you
use a long key which is difficult for an attacker’s software to guess - for example, a twenty-letter
long string of apparently random numbers and letters - but it is not very secure if you use a short
key which is very easy to guess - for example, a three-letter word from the dictionary.
Because of the damage that can be done by a malicious attacker, it’s not just people who have
sensitive information on their network who should use security. Everybody who uses any wireless
network should ensure that effective security is in place.
A good way to come up with effective security keys, passwords and so on is to use obscure
information that you personally will easily remember, and to enter it in a way that appears random
and does not include real words. For example, if your mother owns a 1970 Dodge Challenger and
her favorite movie is Vanishing Point (which you know was made in 1971) you could use
“70dodchal71vanpoi” as your security key.
The following sections introduce different types of wireless security you can set up in the wireless
network.
6.9.3.1 SSID
Normally, the GPON Device acts like a beacon and regularly broadcasts the SSID in the area. You
can hide the SSID instead, in which case the GPON Device does not broadcast the SSID. In
addition, you should change the default SSID to something that is difficult to guess.
This type of security is fairly weak, however, because there are ways for unauthorized wireless
devices to get the SSID. In addition, unauthorized wireless devices can still see the information that
is sent in the wireless network.
6.9.3.2 MAC Address Filter
Every device that can use a wireless network has a unique identification number, called a MAC
address.
00A0C5000002 or 00:A0:C5:00:00:02. To get the MAC address for each device in the wireless
network, see the device’s User’s Guide or other documentation.
1
A MAC address is usually written using twelve hexadecimal characters2; for example,
1.Some wireless devices, such as scanners, can detect wireless networks but cannot use wireless networks. These kinds
of wireless devices might not have MAC addresses.
2.Hexadecimal characters are 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, A, B, C, D, E, and F.
PMG5318-B20A User’s Guide
59
Page 60
Chapter 6 Wireless LAN
You can use the MAC address filter to tell the GPON Device which devices are allowed or not allowed
to use the wireless network. If a device is allowed to use the wireless network, it still has to have
the correct information (SSID, channel, and security). If a device is not allowed to use the wireless
network, it does not matter if it has the correct information.
This type of security does not protect the information that is sent in the wireless network.
Furthermore, there are ways for unauthorized wireless devices to get the MAC address of an
authorized device. Then, they can use that MAC address to use the wireless network.
6.9.3.3 User Authentication
Authentication is the process of verifying whether a wireless device is allowed to use the wireless
network. You can make every user log in to the wireless network before using it. However, every
device in the wireless network has to support IEEE 802.1x to do this.
For wireless networks, you can store the user names and passwords for each user in a RADIUS
server. This is a server used in businesses more than in homes. If you do not have a RADIUS server,
you cannot set up user names and passwords for your users.
Unauthorized wireless devices can still see the information that is sent in the wireless network,
even if they cannot use the wireless network. Furthermore, there are ways for unauthorized
wireless users to get a valid user name and password. Then, they can use that user name and
password to use the wireless network.
6.9.3.4 Encryption
Wireless networks can use encryption to protect the information that is sent in the wireless
network. Encryption is like a secret code. If you do not know the secret code, you cannot
understand the message.
The types of encryption you can choose depend on the type of authentication. (See Section 6.9.3.3
on page 60 for information about this.)
Table 25 Types of Encryption for Each Type of Authentication
WeakestNo SecurityWPA
StrongestWPA2-PSKWPA2
For example, if the wireless network has a RADIUS server, you can choose WPA or WPA2. If users
do not log in to the wireless network, you can choose no encryption, Static WEP, WPA-PSK, or WPA2-PSK.
Usually, you should set up the strongest encryption that every device in the wireless network
supports. For example, suppose you have a wireless network with the GPON Device and you do not
have a RADIUS server. Therefore, there is no authentication. Suppose the wireless network has two
devices. Device A only supports WEP, and device B supports WEP and WPA-PSK. Therefore, you
should set up Static WEP in the wireless network.
NO AUTHENTICATIONRADIUS SERVER
Static WEP
WPA-PSK
60
PMG5318-B20A User’s Guide
Page 61
Note: It is recommended that wireless networks use WPA-PSK, WPA, or stronger
encryption. The other types of encryption are better than none at all, but it is still
possible for unauthorized wireless devices to figure out the original information
pretty quickly.
When you select WPA2 or WPA2-PSK in your GPON Device, you can also select an option (WPA compatible) to support WPA as well. In this case, if some of the devices support WPA and some
support WPA2, you should set up WPA2-PSK or WPA2 (depending on the type of wireless network
login) and select the WPA compatible option in the GPON Device.
Many types of encryption use a key to protect the information in the wireless network. The longer
the key, the stronger the encryption. Every device in the wireless network must have the same key.
6.9.4 Signal Problems
Because wireless networks are radio networks, their signals are subject to limitations of distance,
interference and absorption.
Problems with distance occur when the two radios are too far apart. Problems with interference
occur when other radio waves interrupt the data signal. Interference may come from other radio
transmissions, such as military or air traffic control communications, or from machines that are
coincidental emitters such as electric motors or microwaves. Problems with absorption occur when
physical objects (such as thick walls) are between the two radios, muffling the signal.
Chapter 6 Wireless LAN
6.9.5 BSS
A Basic Service Set (BSS) exists when all communications between wireless stations or between a
wireless station and a wired network client go through one access point (AP).
Intra-BSS traffic is traffic between wireless stations in the BSS. When Intra-BSS traffic blocking is
disabled, wireless station A and B can access the wired network and communicate with each other .
PMG5318-B20A User’s Guide
61
Page 62
Chapter 6 Wireless LAN
When Intra-BSS traffic blocking is enabled, wireless station A and B can still access the wired
network but cannot communicate with each other.
Figure 31 Basic Service set
6.9.6 MBSSID
Traditionally, you need to use different APs to configure different Basic Service Sets (BSSs). As well
as the cost of buying extra APs, there is also the possibility of channel interference. The GPON
Device’s MBSSID (Multiple Basic Service Set IDentifier) function allows you to use one access point
to provide several BSSs simultaneously. You can then assign varying QoS priorities and/or security
modes to different SSIDs.
Wireless devices can use different BSSIDs to associate with the same AP.
6.9.6.1 Notes on Multiple BSSs
• A maximum of eight BSSs are allowed on one AP simultaneously.
• You must us e different keys for different BSSs. If two wireless devices have different BSSIDs
(they are in different BSSs), but have the same keys, they may hear each other’s
communications (but not communicate with each other).
• MBSSID should not replace but rather be used in conjunction with 802.1x security.
6.9.7 Wireless Distribution System (WDS)
The GPON Device can act as a wireless network bridge and establish WDS (Wireless Distribution
System) links with other APs. You need to know the MAC addresses of the APs you want to link to.
62
PMG5318-B20A User’s Guide
Page 63
Once the security settings of peer sides match one another, the connection between devices is
WDS
AP 2
AP 1
A
made.
At the time of writing, WDS security is compatible with other ZyXEL access points only. Refer to
your other access point’s documentation for details.
The following figure illustrates how WDS link works between APs. Notebook computer A is a
wireless client connecting to access point AP 1. AP 1 has no wired Internet connection, but it can
establish a WDS link with access point AP 2, which has a wired Internet connection. When AP 1
has a WDS link with AP 2, the notebook computer can access the Internet through AP 2.
Figure 32 WDS Link Example
6.9.8 WiFi Protected Setup (WPS)
Chapter 6 Wireless LAN
Your GPON Device supports WiFi Protected Setup (WPS), which is an easy way to set up a secure
wireless network. WPS is an industry standard specification, defined by the WiFi Alliance.
WPS allows you to quickly set up a wireless network with strong security, without having to
configure security settings manually. Each WPS connection works between two devices. Both
devices must support WPS (check each device’s documentation to make sure).
Depending on the devices you have, you can either press a button (on the device itself, or in its
configuration utility) or enter a PIN (a unique Personal Identification Number that allows one device
to authenticate the other) in each of the two devices. When WPS is activated on a device, it has two
minutes to find another device that also has WPS activated. Then, the two devices connect and set
up a secure network by themselves.
6.9.8.1 Push Button Configuration
WPS Push Button Configuration (PBC) is initiated by pressing a button on each WPS-enabled
device, and allowing them to connect automatically. You do not need to enter any information.
Not every WPS-enabled device has a physical WPS button. Some may have a WPS PBC button in
their configuration utilities instead of or in addition to the physical button.
Take the following steps to set up WPS using the button.
1Ensure that the two devices you want to set up are within wireless range of one another.
2Look for a WPS button on each device. If the device does not have one, log into its configuration
3Press the button on one of the devices (it doesn’t matter which). For the GPON Device you must
PMG5318-B20A User’s Guide
utility and locate the button (see the device’s User’s Guide for how to do this - for the GPON Device,
see Section 6.5 on page 53).
press the WPS button for more than five seconds.
63
Page 64
Chapter 6 Wireless LAN
4Within two minutes, press the button on the other device. The registrar sends the network name
(SSID) and security key through an secure connection to the enrollee.
If you need to make sure that WPS worked, check the list of associated wireless clients in the AP’s
configuration utility. If you see the wireless client in the list, WPS was successful.
6.9.8.2 PIN Configuration
Each WPS-enabled device has its own PIN (Personal Identification Number). This may either be
static (it cannot be changed) or dynamic (in some devices you can generate a new PIN by clicking
on a button in the configuration interface).
Use the PIN method instead of the push-button configuration (PBC) method if you want to ensure
that the connection is established between the devices you specify, not just the first two devices to
activate WPS in range of each other. However, you need to log into the configuration interfaces of
both devices to use the PIN method.
When you use the PIN method, y ou must enter the PIN from one device ( usually the wireless cl ient)
into the second device (usually the Access Point or wireless router). Then, when WPS is activated
on the first device, it presents its PIN to the second device. If the PIN matches, one device sends
the network and security information to the other, allowing it to join the network.
Take the following steps to set up a WPS connection between an access point or wireless router
(referred to here as the AP) and a client device using the PIN method.
1Ensure WPS is enabled on both devices.
2Access the WPS section of the AP’s configuration interface. See the device’s User’ s Guide for how to
do this.
3Look for the client’s WPS PIN; it will be displayed either on the device, or in the WPS section of the
client’s configuration interface (see the device’s User’s Guide for how to find the WPS PIN - for the
GPON Device, see Section 6.4 on page 52).
4Enter the client’s PIN in the AP’s configuration interface.
5If the client device’s configuration interface has an area for entering another device’s PIN, you can
either enter the client’s PIN in the AP, or enter the AP’s PIN in the client - it does not matter which.
6Start WPS on both devices within two minutes.
7Use the configuration utility to activate WPS, not the push-button on the device itself.
8On a computer connected to the wireless client, try to connect to the Internet. If you can connect,
WPS was successful.
If you cannot connect, check the list of associated wireless clients in the AP’s configuration utility . If
you see the wireless client in the list, WPS was successful.
64
PMG5318-B20A User’s Guide
Page 65
Chapter 6 Wireless LAN
ENROLLEE
SECURE EAP TUNNEL
SSID
WPA(2)-PSK
WITHIN 2 MINUTES
COMMUNICATION
This device’s
WPS
Enter WPS PIN
WPS
from other device:
WPS PIN: 123456
WPS
START
WPS
START
REGISTRAR
The following figure shows a WPS-enabled wireless client (installed in a notebook computer)
connecting to the WPS-enabled AP via the PIN method.
Figure 33 Example WPS Process: PIN Method
6.9.8.3 How WPS Works
When two WPS-enabled devices connect, each device must assume a specific role. One device acts
as the registrar (the device that supplies network and security settings) and the other device acts
as the enrollee (the device that receives network and security settings. The registrar creates a
secure EAP (Extensible Authentication Protocol) tunnel and sends the network name (SSID) and the
WPA-PSK or WPA2-PSK pre-shared key to the enrollee. Whether WPA-PSK or WPA2-PSK is used
depends on the standards supported by the devices. If the registrar is already part of a network, it
sends the existing information. If not, it generates the SSID and WPA(2)-PSK randomly.
PMG5318-B20A User’s Guide
65
Page 66
Chapter 6 Wireless LAN
SECURE TUNNEL
SECURITY INFO
WITHIN 2 MINUTES
COMMUNICATION
ACTIVATE
WPS
ACTIVATE
WPS
WPS HANDSHAKE
REGISTRARENROLLEE
The following figure shows a WPS-enabled client (installed in a notebook computer) connecting to a
WPS-enabled access point.
Figure 34 How WPS works
6.9.8.4 Example WPS Network Setup
The roles of registrar and enrollee last only as long as the WPS setup process is active (two
minutes). The next time you use WPS, a different device can be the registrar if necessary.
The WPS connection process is like a handshake; only two devices participate in each WPS
transaction. If you want to add more devices you should repeat the process with one of the existing
networked devices and the new device.
Note that the access point (AP) is not always the registrar, and the wireless client is not always the
enrollee. All WPS-certified APs can be a registrar, and so can some WPS-enabled wireless clients.
By default, a WPS devices is “unconfigured”. This means that it is not part of an existing network
and can act as either enrollee or registrar (if it supports both functions). If the registrar is
unconfigured, the security settings it transmits to the enrollee are randomly-generated. Once a
WPS-enabled device has connected to another device using WPS, it becomes “configured”. A
configured wireless client can still act as enrollee or registrar in subsequent WPS connections, but a
configured access point can no longer act as enrollee. It will be the registrar in all subsequent WPS
connections in which it is involved. If you want a configured AP to act as an enrollee, you must reset
it to its factory defaults.
This section shows how security settings are distributed in an example WPS setup.
The following figure shows an example network. In step 1, both AP1 and Client 1 are
unconfigured. When WPS is activated on both, they perform the handshake. In this example, AP1
66
PMG5318-B20A User’s Guide
Page 67
Chapter 6 Wireless LAN
REGISTRARENROLLEE
SECURITY INFO
CLIENT 1
AP1
REGISTRAR
CLIENT 1
AP1
ENROLLEE
CLIENT 2
EXISTING CONNECTION
S
E
C
U
R
I
T
Y
I
N
F
O
is the registrar, and Client 1 is the enrollee. The registrar randomly generates the security
information to set up the network, since it is unconfigured and has no existing information.
Figure 35 WPS: Example Network Step 1
In step 2, you add another wireless client to the network. You know that Client 1 supports registrar
mode, but it is better to use AP1 for the WPS handshake with the new client since you must
connect to the access point anyway in order to use the network. In this case, AP1 must be the
registrar, since it is configured (it already has security information for the network). AP1 supplies
the existing security information to Client 2.
Figure 36 WPS: Example Network Step 2
PMG5318-B20A User’s Guide
67
Page 68
Chapter 6 Wireless LAN
CLIENT 1
AP1
REGISTRAR
CLIENT 2
EXISTING CONNECTION
S
E
C
U
R
I
T
Y
I
N
F
O
ENROLLEE
AP2
E
X
I
S
T
I
N
G
C
O
N
N
E
C
T
I
O
N
In step 3, you add another access point (AP2) to your network. AP2 is out of range of AP1, so you
cannot use AP1 for the WPS handshake with the new access point. However, you know that Client 2 supports the registrar function, so you use it to perform the WPS handshake instead.
Figure 37 WPS: Example Network Step 3
6.9.8.5 Limitations of WPS
WPS has some limitations of which you should be aware.
• WPS works in Infrastructure networks only (where an AP and a wireless client communicate). It
does not work in Ad-Hoc networks (where there is no AP).
• When you use WPS, it works between two devices only. You cannot enroll multiple devices
simultaneously, you must enroll one after the other.
For instance, if you have two enrollees and one registrar you must set up the first enrollee (by
pressing the WPS button on the registrar and the first enrollee, for example), then check that it
successfully enrolled, then set up the second device in the same way.
• WPS works only with other WPS-enabled devices. However, you can still add non-WPS devices to
a network you already set up using WPS.
WPS works by automatically issuing a randomly-generated WPA-PSK or WPA2-PSK pre-shared
key from the registrar device to the enrollee devices. Whether the network uses WPA-PSK or
WPA2-PSK depends on the device. You can check the configuration interface of the registrar
device to discover the key the network is using (if the device supports this feature). Then, you
can enter the key into the non-WPS device and join the network as normal (the non-WPS device
must also support WPA-PSK or WPA2-PSK).
68
PMG5318-B20A User’s Guide
Page 69
Chapter 6 Wireless LAN
• When you use the PBC method, there is a short period (from the moment you press the button
on one device to the moment you press the button on the other device) when any WPS-enabled
device could join the network. This is because the registrar has no way of identifying the
“correct” enrollee, and cannot differentiate between your enrollee and a rogue device. This is a
possible way for a hacker to gain access to a network.
You can easily check to see if this has happened. WPS works between only two devices
simultaneously , so if another device has enrolled your device will be unable to enroll, and will not
have access to the network. If this happens, open the access point’s configuration interface and
look at the list of associated clients (usually displayed by MAC address). It does not matter if the
access point is the WPS registrar, the enrollee, or was not involved in the WPS handshake; a
rogue device must still associate with the access point to gain access to the network. Check the
MAC addresses of your wireless clients (usually printed on a label on the bottom of the device). If
there is an unknown MAC address you can remove it or reset the AP.
PMG5318-B20A User’s Guide
69
Page 70
Chapter 6 Wireless LAN
70
PMG5318-B20A User’s Guide
Page 71
7.1 Overview
This chapter discusses how to configure NAT on the GPON Device.
NAT (Network Address Translation - NAT, RFC 1631) is the translation of the IP address of a host in
a packet, for example, the source address of an outgoing packet, used within one network to a
different IP address known within another network.
7.1.1 What You Need to Know
The following terms and concepts may help as you read through this chapter.
What NAT Does
CHAPTER 7
NAT
In the simplest form, NAT changes the source IP address in a packet received from a subscriber
(the inside local address) to another (the inside global address) before forwarding the packet to the
WAN side. When the response comes back, NAT translates the destination address (the inside
global address) back to the inside local address before forwarding it to the original inside host. Note
that the IP address (either local or global) of an outside host is never changed.
NAT Definitions
Inside/outside denotes where a host is located relative to the GPON Device, for example, the
computers of your subscribers are the inside hosts, while the web servers on the Internet are the
outside hosts.
Global/local denotes the IP address of a host in a packet as the packet traverses a router, for
example, the local address refers to the IP address of a host when the packet is in the local
network, while the global address refers to the IP address of the host when the same packet is
traveling in the WAN side.
Note that inside/outside refers to the location of a host, while global/local refers to the IP address
of a host used in a packet. Thus, an inside local address (ILA) is the IP address of an inside host in
a packet when the packet is still in the local network, while an inside global address (IGA) is the IP
address of the same inside host when the packet is on the WAN side. The following table
summarizes this information.
Table 26 NAT Definitions
ITEMDESCRIPTION
InsideThis refers to the host on the LAN.
OutsideThis refers to the host on the WAN.
PMG5318-B20A User’s Guide71
Page 72
Chapter 7 NAT
192.168.1.13
192.168.1.10
192.168.1.11
192.168.1.12
SA
192.168.1.10
SA
IGA1
Inside Local
IP Address
192.168.1.10
192.168.1.11
192.168.1.12
192.168.1.13
Inside Global
IP Address
IGA 1
IGA 2
IGA 3
IGA 4
NAT Table
Internet
WAN
LAN
Inside Local
Address (ILA)
Inside Global
Address (IGA)
Table 26 NAT Definitions (continued)
ITEMDESCRIPTION
LocalThis refers to the packet address (source or destination) as the packet travels on the LAN.
GlobalThis refers to the packet address (source or destination) as the packet travels on the WAN.
NAT never changes the IP address (either local or global) of an outside host.
How NAT Works
Each packet has two addresses – a source address and a destination address. For outgoing packets,
the ILA (Inside Local Address) is the source address on the LAN, and the IGA (Inside Global
Address) is the source address on the WAN. For incoming packets, the ILA is the destination
address on the LAN, and the IGA is the destination address on the WAN. NAT maps private (local)
IP addresses to globally unique ones required for communication with hosts on other networks. It
replaces the original IP source address in each packet and then forwards it to the Internet. The
GPON Device keeps track of the original addresses and port numbers so incoming reply packets can
have their original values restored. The following figure illustrates this.
Figure 38 How NAT Works
72
PMG5318-B20A User’s Guide
Page 73
Chapter 7 NAT
Internet
Corporation B
NAT Server
192.168.3.1
LAN3: 192.168.3.X
Network Server
“R&D”=192.168.3.1
WAN Addresses: LAN Addresses: (Default IPs)
IGA 1 ---------------> 192.168.1.1
IGA 2 ---------------> 192.168.2.1
IGA 3 ---------------> 192.168.3.1
NAT Server
192.168.2.1
LAN2: 192.168.2.X
Network Server
“Sales”=192.168.2.1
Server in
R&D Network
=IP3 (IGA 3)
NAT Server
192.168.1.1
LAN2: 192.168.1.X
Network Server
“Admin=192.168.1.1
Corporation A
Server in
Sales Network
=IP2 (IGA 2)
Server in
Admin Network
=IP1 (IGA 1)
NAT Application
The following figure illustrates a possible NAT application, where three inside LANs (logical LANs
using IP alias) behind the GPON Device can communicate with three distinct WAN networks.
Figure 39 NAT Application With IP Alias
7.2 Port Forwarding
A port forwarding set is a list of inside (behind NAT on the LAN) servers, for example, web or FTP,
that you can make visible to the outside world even though NAT makes your whole inside network
appear as a single computer to the outside world.
You may enter a single port number or a range of port numbers to be forw arded , an d the local IP
address of the desired server. The port number identifies a service; for example, web service is on
port 80 and FTP on port 21. In some cases, such as for unknown services or where one server can
support more than one service (for example both FTP and web service), it might be better to
specify a range of port numbers. You can allocate a serv er IP address that corresponds to a port or
a range of ports.
PMG5318-B20A User’s Guide
73
Page 74
Chapter 7 NAT
Many residential broadband ISP accounts do not allow you to run any server processes (such as a
Web or FTP server) from your location. The ISP may periodically check for servers and may su spend
your account if it discovers any active services at your location. If you are unsure, refer to the ISP.
The basic rules of port forwarding are:
• If NAT is enabled, you must configure a port forw arding rule if you want tr affic on the WAN to find
computers on the LAN.
• A port forwarding rule can only forward TCP and UDP traffic.
• If NAT is disabled, the GPON Device will route packets based on the information in the NAT
routing table.
7.2.1 Default Server IP Address
You can assign a default server IP address to which the GPON Device can forward traffic for all
protocols, such as TCP, UDP, ICMP (ping), ESP, and so on, that do not match an existing port
forwarding rule.
Note: If you do not assign a Default Server IP address, the GPON Device discards all
packets received for ports that are not specified in a port forwarding rule or in the
remote management setup.
7.2.2 Port Forwarding: Services and Port Numbers
Use the Port Forwarding screen to forward incoming service requests to the server(s) on your
local network.
7.2.3 Pinging a Device Behind NAT From the WAN (Example)
Imagine that you want to ping a device on the LAN behind your GPON Device from a remote
location on the WAN while NAT is enabled.
You cannot create a port forwarding rule for ping because ping uses the ICMP protocol; port
forwarding can only handle the TCP and UDP protocols.
74
PMG5318-B20A User’s Guide
Page 75
Chapter 7 NAT
However, you can assign one of the computers on your LAN with a default server IP address. This
allows it to receive all traffic that is not specifically routed by a port forwarding rule, including ping.
Figure 40 Pinging a Device Behind NAT
If you want to assign the IP address 192.168.0.202 as your “catch-all” category, for example, you
can designate it as the GPON Device’s default server. Port forwarding rule 1 (R1) sends all TCP/UDP
traffic that matches the rule to 192.168.0.17 while port forwarding rule 2 (R2) sends TCP/UDP
traffic that matches to 192.168.0.106. Everything else (NR) goes to 192.168.0.202. For details on
assigning a default server IP address, see Section 7.3 on page 76.
7.2.4 Configuring Servers Behind Port Forwarding (Example)
Let's say you want to assign ports 21-25 to one FTP, Telnet and SMTP server (A in the example),
port 80 to another (B in the example) and assign a default server IP address of 192.168.1.35 to a
PMG5318-B20A User’s Guide
75
Page 76
Chapter 7 NAT
third (C in the example). You assign the LAN IP addresses and the ISP assigns the WAN IP address.
The NAT network appears as a single host on the Internet.
Figure 41 Multiple Servers Behind NAT Example
7.3 Configuring Port Forwarding
Click Network > NAT > Port Forwarding to open the following screen.
Figure 42 Port Forwarding
76
PMG5318-B20A User’s Guide
Page 77
Chapter 7 NAT
The following table describes the fields in this screen.
Table 27 Port Forwarding
LABELDESCRIPTION
Default Server
Setup
Default Server
Address
Port Forwarding
Service NameSelect a pre-defined service (HTTP, FTP, TELNET, HTTPS) from the drop-down list box.
Server IP AddressEnter the IP address of the server for the specified service.
AddClick this button to add a rule to the table below.
#This is the rule index number (r ead-only).
ActiveThis field indicates whe ther the rule is active or not.
Service NameThis field displays the name of the service used by the packets for this virtual server.
Start Port This is the first internal or external port number that identifies a service.
End Port This is the last internal or external port number that identifies a service.
ProtocolThis field displays the corresponding IP protocol (TCP, UDP or TCP/UDP) for the
Server IP AddressThis field displays the inside IP address of the server.
ModifyClick the Edit icon to go to the screen where you can edit the port forwarding rule.
ApplyClick Apply to save your changes back to the GPON Device.
ResetClick Reset to return to the previous configuration.
Enter an internal IP address to which the GPON Device forwards incom in g packets if the
GPON Device cannot find a rule matched in the table below. Leave this field blank to have
the GPON Device not forward packets that do not match a rule.
The pre-defined service port number(s) and protocol will display in the Start port, End port and Protocol fields of the table below after you click Add.
Otherwise, select User Define to open the Rule Setup screen where you can manually
enter the port number(s) and select the IP protocol.
Clear the check box to disable the rule. Select the check box to enable it.
service.
Click the Remove icon to delete an existing port forwarding rule. Note that subsequent
rules move up by one when you take this action.
PMG5318-B20A User’s Guide
77
Page 78
Chapter 7 NAT
7.3.1 Port Forwarding Edit
Use this screen to modify a port forwarding rule. Click an Edit icon next to a pre-defined port
forwarding service rule in the Network > NAT > Port Forwarding screen to open the following
screen.
Figure 43 Port Forwarding Edit
The following table describes the fields in this screen.
Table 28 Port Forwarding Edit
LABELDESCRIPTION
ActiveThis field indicates whe ther the rule is active or not.
Clear the check box to disable the rule. Select the check box to enable it.
Service NameThis field displays the name of the service used by the packets for this virtual server.
Start Port This is the first internal or external port number that identifies a service.
End Port This is the last internal or external port number that identifies a service.
Server IP AddressThis field displays the inside IP address of the server.
ProtocolThis field displays the corresponding IP protocol (TCP, UDP or TCP/UDP) for the
service. Select another protocol if you want to change it.
BackClick Back to ignore unsaved changes you made on this screen and go back to the
ApplyClick Apply to save your changes back to the GPON Device.
CancelClick Cancel to return to the previous configuration.
previous screen.
78
PMG5318-B20A User’s Guide
Page 79
Quality of Service (QoS)
8.1 Overview
Use the QoS screen to set up your GPON Device to use QoS for traffic management.
8.2 The QoS General Screen
Use this screen to enable or disable QoS and configure the QoS settings for services.
Click Network > QoS to open the screen as shown next.
Figure 44 Network > QoS > General
CHAPTER 8
The following table describes the labels in this screen.
Table 29 Network > QoS > General
LABELDESCRIPTION
Enable QoSUse this field to turn on QoS to improve your network performance.
Service ConfigurationUse this section to configure the DSCP and priority bit settings for V oIP/SIP, VoIP/R TP,
DSCPThis is the DSCP number (0~63) added to traffic of this classifier.
PbitThis is the IEEE 802.1p priority level (0~7) assigned to traffic of this classifier. The
ApplyClick this to save your changes.
CancelClick this to restore your previously saved settings.
PMG5318-B20A User’s Guide79
RTSP, IGMP, and TR069 traffic.
lower the number the higher the priority.
Page 80
Chapter 8 Quality of Service (QoS)
80
PMG5318-B20A User’s Guide
Page 81
9.1 Introduction
This chapter provides background information on VoIP and SIP and explains how to configure your
device’s voice settings.
VoIP is the sending of voice signals o ver Internet Protocol. This allows you to make phone calls and
send faxes over the Internet at a fraction of the cost of using the traditional circuit-switched
telephone network. You can also use serv ers to run telephone service applications like PBX services
and voice mail. Internet Telephony Service Provider (ITSP) companies provide VoIP service.
Circuit-switched telephone networks require 64 kilobits per second (Kbps) in each direction to
handle a telephone call. VoIP can use advanced voice coding techniques with compression to reduce
the required bandwidth.
CHAPTER 9
Voice
9.1.1 What You Need to Know
The following terms and concepts may help as you read through this chapter.
SIP
The Session Initiation Protocol (SIP) is an application-layer control (signaling) protocol that handles
the setting up, altering and tearing down of voice and multimedia sessions over the Internet.
SIP signaling is separate from the media for which it handles sessions. The media that is exchanged
during the session can use a different path from that of the signaling. SIP handles telephone calls
and can interface with traditional circuit-switched telephone networks.
SIP Identities
A SIP account uses an identity (sometimes referred to as a SIP address). A complete SIP identity is
called a SIP URI (Uniform Resource Identifier). A SIP account's URI identifies the SIP account in a
way similar to the way an e-mail address identifies an e-mail account. The format of a SIP identity
is SIP-Number@SIP-Service-Domain.
SIP Number
The SIP number is the part of the SIP URI that comes before the “@” symbol. A SIP number can
use letters like in an e-mail address (johndoe@your-ITSP.com for example) or numbers like a
telephone number (1122334455@VoIP-provider.com for example).
PMG5318-B20A User’s Guide81
Page 82
Chapter 9 Voice
SIP Service Domain
The SIP service domain of the VoIP service provider is the domain name in a SIP URI. For example,
if the SIP address is 1122334455@VoIP-provider.com
domain.
9.2 SIP Service Provider
Use this screen to maintain basic information about each SIP account. Your VoIP service provider
(the company that lets you make phone calls over the Internet) should provide this. You can also
enable and disable each SIP account. To access this screen, click VoIP > SIP.
Figure 45 VoIP > SIP > SIP Service Provider
, then “VoIP-provider.com” is the SIP service
82
PMG5318-B20A User’s Guide
Page 83
Chapter 9 Voice
Each field is described in the following table.
Table 30 VoIP > SIP > SIP Service Provider
LABELDESCRIPTION
General
ActiveSelect this to use this service provider profile for SIP phone calls.
Service Provider
Name
SIP Server AddressEnter the IP address or domain name of the SIP server provided by your VoIP service
PMG5318-B20A User’s Guide
Enter your SIP service provider’s name, using up to 64 printable English-keyboard
characters.
provider. You can use up to 256 printable English keyboard characters. It does not
matter whether the SIP server is a proxy, redirect or register server.
83
Page 84
Chapter 9 Voice
Table 30 VoIP > SIP > SIP Service Provider (continued)
LABELDESCRIPTION
SIP Server PortEnter the SIP server’s listening port number , if y our V oIP service provider gave you one.
Otherwise, keep the default value.
REGISTER Server
Address
REGISTER Server
Port
SIP Service Domain Enter the SIP service domain name or the SIP server’s IP address. In the full SIP URI,
SIP Local PortEnter the GPON Device’s listening port number, if your VoIP service pr ovider gave you
Apply
CancelClick this to exit the screen without saving any changes.
Advanced SetupClick this to display the following advanced settings for this SIP account.
Timer Settings
Registration PeriodEnter the number of seconds allocated for the GPON Device to register with a SIP
Register ExpiresEnter the number of seconds your SIP account is registered with the SIP register se rver
Register Re-send
Timer
Session ExpiresEnter the number of seconds the SIP server waits for a ‘keep alive’ signal from the
Min-SEEnter the minimum number of seconds the GPON Device accepts for a session
DSCP Tag
SIP DSCP Priority
Setting
RTP DSCP Priority
Setting
RTP Port Range
Start Port
End Port
Enter the IP address or domain name of the SIP register server, if your VoIP service
provider gave you one. Otherwise, enter the same address you entered in the SIP Server Address field. You can use up to 256 printable English keyboard characters.
Enter the SIP register server’s listening port number, if your VoIP service provider gave
you one. Otherwise, enter the same port number you entered in the SIP Server Port
field.
this is the part after the @ symbol. You can use up to 256 printable English keyboard
characters.
one. Otherwise, keep the default value.
Click this to save your changes.
service.
before the registration is downgraded to ‘inactive’ and all SIP functions for the account
are blocked. The GPON Device automatically tries to re-register your SIP account when
one-half of this time has passed. (The SIP register server might have a different
expiration, which takes priority over this setting.)
Enter the number of seconds the GPON Device w aits bef ore it tries again to regi ster the
SIP account, if the first try failed or if there is no response.
GPON Device before disconnecting the call. The keep alive signal is periodically sent
from the GPON Device during a call as long as the connection between it and the server
remains constant. If interference happens somewhere along the line, or the connection
is unexpectedly terminated, then the SIP server uses this setting as a timer to
automatically disconnect the call.
expiration time when it receives a request to start a SIP session. If the request has a
shorter time, the GPON Device rejects it.
Enter the DSCP (DiffServ Code Point) number for SIP message transmissions. The
Device creates Class of Service (CoS) priority tags with this number to SIP traffic that it
transmits.
Enter the DSCP (DiffServ Code Point) number for RTP voice transmissions. The Device
creates Class of Service (CoS) priority tags with this number to RTP traffic that it
transmits.
Enter the listening port number(s) for RTP traffic, if your VoIP service provider gav e you
this information. Otherwise, keep the default values.
To enter one port number, enter the port number in the Start Port and End Port fields.
84
To enter a range of ports,
• enter the port number at the beginning of the range in the Start Port field
• enter the port number at the end of the range in the End Port field.
PMG5318-B20A User’s Guide
Page 85
Chapter 9 Voice
Table 30 VoIP > SIP > SIP Service Provider (continued)
T.38 Fax RelaySelect this option to send and received fax messages over the network or Internet using
Dialing Plan
Dialing Plan
Apply
CancelClick this to exit the screen without saving any changes.
BasicClick this to hide the advanced settings on this screen.
Select this if the service provider has a SIP outbound server to handle voice calls. This
allows the GPON Device to work with any type of NAT router and eliminates the need for
STUN or a SIP ALG. Turn off an y SIP ALG on a NAT router in front of the GPON Device to
keep it from retranslating the IP address (since this is already handled by the outbound
proxy server.
Enter the IP address or domain name of the SIP outbound proxy server.
Enter the outbound proxy server’s listening port, if your VoIP service provider gave you
one. Otherwise, keep the default value.
Select the transport layer protocol UDP or TCP (usually UDP) used for SIP.
Select the number of seconds the GPON Device waits before placing a dialed call.
Control how the GPON Device handles the alphanumeric keypad tones. You should use
the same mode the VoIP service provider uses.
RFC 2833 - send the DTMF tones in RTP packets
InBand - send the DTMF tones in the vo ice data st ream. This me thod works best when
you are using a codec that does not use compression. Codecs that use compression can
distort the tones.
SIP INFO - send the DTMF tones in SIP messages.
Select this option to send and receive fax messages over the network or Internet using
VoIP. By encoding fax data as audio data, faxes may be susceptible to packet loss and
other errors. However, as this standard is considerably older than T.38, it is more
compatible with older or obsolete systems.
IP. This is the standard fax transmission protocol for sending faxes over networks rather
than phone lines.
Create dialing plan rules here. See Section 9.2.1 on page 85 for more information. Click
the Help icon to display guidelines for creating dialing plan rules.
Click this to save your changes.
9.2.1 Dial Plan
A dial plan defines the dialing patterns, such as the length and range of the digits for a telephone
number. It also includes country codes, access codes, area codes, local numbers, long distance
numbers or international call prefixes. For example, the dial plan ([2-9]xxxxxx) does not allow a
local number which begins with 1 or 0.
PMG5318-B20A User’s Guide
85
Page 86
Chapter 9 Voice
Without a dial plan, users have to manually enter the whole callee’s number and wait for the
specified dialing interval to time out or press a terminator key (usually the pound key on the phone
keypad) before the GPON Device makes the call.
The GPON Device initializes a call when the dialed number matches any one of the rules in the dial
plan. Dial plan rules follow these conventions:
• Rules are separated by the | (bar) symbol.
• “x” stands for a wildcard and can be any digit from 0 to 9.
• A subset of keys is in a square bracket []. Ranges are allowed.
• The dot “. ” appended to a digit allows the digit to be ignored or repeated multiple times. Any digit
• <dialed-number:translated-number> indicates the number after the colon replaces the number
• Calls with a number followed by the exclamation mark “!” will be dropped.
• Calls with a number followed by the termination character “@” will be made immediately. Any
• Gateway: Type “=gw0=” or “=gw3=” at the end of the rule. If the number matches the call will
For example, [359] means a number matching this rule can be 3, 5 or 9. [26-8*] means a
number matching this rule can be 2, 6, 7, 8 or *.
(0~9, *, #) after the dot will be ignored.
For example, (01.) means a number matching this rule can be 0, 01, 0111, 01111, and so on.
before the colon in an angle bracket <>. For example,
(<:1212> xxxxxxx) means the GPON Device automatically prefixes the translated-number
“1212” to the number you dialed before making the call. This can be used for local calls in the
US.
(<9:> xxx xxxxxxx) means the GPON Device automa tically removes the specified prefix “9” from
the number you dialed before mak i ng the call. This is always used for making outside calls from
an office.
(xx<123:456>xxxx) means the GPON Device automatically translates “123” to “456” in the
number you dialed before making the call.
digit (0~9, *, #) after the @ character will be ignored.
be transferred to a gateway (0: FXS port; 3: SIP).
86
In this example dial plan (0 | [49]11 | 1 [2-9]xx xxxxxxx | 1 947 xxxxxxx !), you can dial “0” to call
the local operator, call 411 or 911, or make a long distance call with an area code starting from 2 to
9 in the US. The calls with the area code 947 will be dropped.
PMG5318-B20A User’s Guide
Page 87
9.3 SIP Account
Use this screen to set up your basic SIP account information. Click VoIP > SIP > SIP Account to
display this screen.
Figure 46 VoIP > SIP > SIP Account
Chapter 9 Voice
PMG5318-B20A User’s Guide
87
Page 88
Chapter 9 Voice
Each field is described in the following table.
Table 31 VoIP > SIP > SIP Account
LABELDESCRIPTION
SIP Account Selection
SIP Account
Selection
General
Active SIP AccountSelect this if you want the GPON Device to use this account. Clear it if you do not want
NumberEnter your SIP number . In the full SIP URI, this is the part before the @ symbol. Y ou can
Authentication
User NameEnter the user name for registering this SIP account, exactly as it was given to you. You
PasswordEnter the user name for registering this SIP account, exactly as it was given to you. You
Apply
Cancel
AdvancedClick this to display the following advanced settings for this SIP account.
Voice Feature
Speaking
Volume
Listening
Volume
Active G.168
(Echo
Cancellation)
Active VAD
Select the SIP account you want to see in this screen. If you change this field, the
screen automatically refreshes.
the GPON Device to use this account.
use up to 32 printable English keyboard characters.
can use up to 128 printable English keyboard characters.
can use up to 128 printable English keyboard characters.
Click this to save your changes.
Click this to exit the screen without saving any changes.
Adjust the incoming (Listening) volume. The options are:
• Minimum, which de creases the volume
• Middle, which makes no adjustments
• Maximum, which increases the volume
Adjust the outgoing (Speaking) volume. The options are:
• Minimum, which de creases the volume
• Middle, which makes no adjustments
• Maximum, which increases the volume
Select this if you want to eliminate the echo caused by the sound of your voice
reverberating in the telephone rece iver while you talk.
Select this if the GPON Device should transmit smaller packets whe n you are not
speaking. This reduces the bandwidth used.
88
PMG5318-B20A User’s Guide
Page 89
Chapter 9 Voice
Table 31 VoIP > SIP > SIP Account (continued)
LABELDESCRIPTION
Audio Codecs
Setting
Disabled
Codec(s)
Priority
Enabled
Codec(s)
Call Feature
Active Caller IDSelect this to enable call transfer on the GPON Device. This allows you to transfer an
Active Call TransferSelect this to enable call transfer on the GPON Device. This allows you to transfer an
Active Call WaitingSelect this to enable cal l waiting on the GPON Device. This allows you to place a call on
Call Waiting
Reject Timer
Active
Unconditional
Forward
Active Busy
Forward
This field lists codecs the GPON Device will not use. Click the left facing arrow to move
codecs from the Enabled Codec(s) list to this list. Or click the right facing arrow to move
a codec to the Enabled Codec(s) list.
This field lists the priority in which the GPON Device will attempt to use each codec in
the Enabled Codec(s) list.
This field lists the codecs the GPON Device will use. Click the left facing arrow to move
codecs to the Disabled Codec(s) list. Or click the right facing arrow to move a codec to
the Enabled Codec(s) list. Codec options include:
G.711 provides high voice quality but requires more bandwidth (64 kbps).
• G.711ALaw is typically used in Europe.
• G.711MuLaw is typically used in North America and Japan.
The GPON Device must use the same codec as the peer. When two SIP devices start a
SIP session, they must agree on a codec.
incoming call (that you have answered) to another phone.
incoming call (that you have answered) to another phone.
hold while you answer another incoming call on the same telephone (directory) number.
Enter the number of seconds for call waiting to stay engaged before disconnecting the
caller.
Select this, then enter a phone number to which incoming calls are forwarded.
Select this if you want the GPON Device to forward incoming calls to the specified phone
number if the phone port is busy.
Specify the phone number in the field on the right.
Active No Answer
Forward
No Answer Ring
Count
Apply
CancelClick this to exit the screen without saving any changes.
BasicClick this to hide the advanced settings on this screen.
PMG5318-B20A User’s Guide
If you have call waiting, the i ncoming call is forw arded to the specified phone number if
you reject or ignore the second incoming call.
Select this, then enter a phone number to which calls are forwarded when the phone is
not answered.
Enter the number of rings the GPON Device waits before forwarding unansw ered calls.
Click this to save your changes.
89
Page 90
Chapter 9 Voice
9.4 Analog Phone
Use this screen to link the GPON Device’s analog phone ports with one or more SIP accounts to
handle outgoing and incoming calls. Click VoIP > Phone. The following screen displays.
Figure 47 VoIP > Phone > Analog Phone
Each field is described in the following table.
Table 32 VoIP > Phone > Analog Phone
LABELDESCRIPTION
Phone Port Selection
Phone Port
Selection
Phone to SIP Account
SIP AccountThis indicates the SIP account ma pping to the phone port for both incoming and
SIP NumberThis indicates the SIP account’s number. You can click it to open the SIP Account
Service Provider This indicates the service provider used by this SIP account.
SIP Account
Status
Apply
CancelClick this to exit the screen without saving any changes.
9.5 Speed Dial
Select a phone port to configure on this screen.
outgoing calls. Select None to disable the phone port so you cannot receive and make
calls through the phone port.
screen, where you can change it.
This indicates whether the account is active or not. Click it to open the SIP Account
screen, where you can change the status.
Click this to save your changes.
90
Speed dial provides shortcuts for dialing frequently used (VoIP) phone numbers. You also have to
create speed-dial entries if you want to call SIP numbers that contain letters. Once you have
configured a speed dial rule, you can use a shortcut (the speed dial number, #01 for example) on
your phone's keypad to call the phone number.
PMG5318-B20A User’s Guide
Page 91
Chapter 9 Voice
Use this screen to add, edit, or remove speed-dial numbers for outgoing calls. To access this
screen, click VoIP > Phone Book > Speed Dial.
Figure 48 VoIP > Phone Book > Speed Dial
Each field is described in the following table.
Table 33 VoIP > Phone Book > Speed Dial
LABELDESCRIPTION
Speed DialU se this section to create or edit speed-dial entries.
#Select the speed-dial number you want to use for this phone number.
NumberEnter the SIP number you want the GPON Device to call when you dial the speed-dial
number.
DescriptionEnter a description for this speed dial number. You can use up to 128 alphanumeric
AddClick this to use the information in the Speed Dial section to update the Speed Dial
Speed Dial Phone
Book
#This field displays the speed-dial number you should dial to use this entry.
NumberThis field displays the SIP number the GPON Device calls when you dial the speed-dial
DestinationThis field is blank, if the speed-dial entry uses one of your SIP accounts. Otherwise, this
ModifyUse this field to edit or erase the speed-dial entry.
characters.
Phone Book section.
Use this section to look at all the speed-dial entries and to erase them.
number.
field shows the IP address or domain name of the SIP server or other party. (This field
corresponds with the Type field in the Speed Dial section.)
Click the Edit icon to copy the information for this speed-dial entry into the Speed Dial
section, where you can change it.
Click the Remove icon to erase this speed-dial entry.
PMG5318-B20A User’s Guide
91
Page 92
Chapter 9 Voice
Table 33 VoIP > Phone Book > Speed Dial (continued)
LABELDESCRIPTION
ClearClick this to erase all the speed-dial entries.
Cancel
Click this to set every field in this screen to its last-saved value.
92
PMG5318-B20A User’s Guide
Page 93
CHAPTER 10
10.1 Overview
This chapter describes how to use a phone connected to your GPON Device for basic tasks.
Note: Not all service providers support all features.
10.2 Dialing a Telephone Number
The PHONE LED turns green when your SIP account is registered. Dial a SIP number like “12345”
on your phone’s keypad.
Use speed dial entries (see Section 9.5 on page 90) for SIP numbers that use letters. Dial the speed
dial entry on your telephone’s keypad.
Phone Usage
Use your VoIP service provider’s dialing plan to call regular telephone numbers.
10.3 Using Speed Dial
After configuring the speed dial entry and adding it to the phonebook, press the speed dial entry’s
key combination on yo ur phone’s keypad.
10.4 Phone Services Overview
Supplementary services such as call hold, call waiting, call transfer, etc. are generally available from
your VoIP service provider. The GPON Device supports the following services:
•Call Hold
• Call Waiting
• Making a Second Call
• Call Transfer
• Call Forwarding
• Internal Calls
PMG5318-B20A User’s Guide93
Page 94
Chapter 10 Phone Usage
Note: To take full advantage of the supplementary phone services available through the
GPON Device's phone port, you may need to subscribe to the services from your
VoIP service provider.
10.4.1 The Flash Key
Flashing means to press the hook for a short period of time (a few hundred milliseconds) before
releasing it. On newer telephones, there should be a "flash" key (button) that generates the signal
electronically. If the flash key is not available, you can tap (press and immediately release) the
hook by hand to achieve the same effect. However, using the flash key is preferred since the timing
is much more precise. With manual tapping, if the duration is too long, it may be interpreted as
hanging up by the GPON Device.
You can invoke all the supplementary services by using the flash key.
10.4.2 Supplementary Phone Services
This section describes how to use supplementary phone services. Commands for supplementary
services are listed in the table below.
After pressing the flash key , if you do not issue the sub-command before the default sub-command
timeout (2 seconds) expires or issue an invalid sub-command, the current operation will be
aborted.
Table 34 Flash Key Commands
COMMANDSUB-COMMANDDESCRIPTION
Flash Put a current call on hold to place a second call.
Flash0Drop the call presently on hold or reject an incoming call which is
Flash1Disconnect the current phone connection and answer the first incoming
Flash21. Switch back and forth between two calls.
Flash3Merge the first call which was placed on hold into the second call and
10.4.2.1 Call Hold
Call hold allows you to put a call (A) on hold by pressing the flash key.
Switch back to the call (if there is no second call).
waiting for answer.
call.
2. Put a current call on hold to answer an on-hold call or the second
incoming call.
3. Separate the current three-way conference call into two individual
calls (one is on-line, the other is on hold).
start a 3-way conference call.
94
If you have another call, press the flash key and then "1" or "2" (depending on whether it is the first
or second incoming call) to switch back and forth between caller A and B by putting either one on
hold.
Press the flash key and then “0” to disconnect the call presently on hold and keep the current call
on line.
PMG5318-B20A User’s Guide
Page 95
If you hang up the phone but a caller is still on hold, there will be a remind ring.
10.4.2.2 Call Waiting
This allows you to place a call on hold while you answer another incoming call on the same
telephone (directory) number.
If there is a second call to a telephone number, you will hear a call waiting tone. Take one of the
following actions.
• Pick up the second call and put the first call on hold.
Press the flash key and then press “2”.
• Reject the second call.
Press the flash key and then press “0”.
• Put the second call on hold and answer the first call.
Press the flash key and then “1”. You can then press the flash key and then “2” to answer the
second call but put the first call on hold.
10.4.2.3 Call Transfer
Do the following to transfer an incoming call (that you have answered) to another phone.
Chapter 10 Phone Usage
1Answer the incoming call.
2Press the flash key to put the caller on hold.
3Dial the number of the intended callee.
4Hang up the call after it starts ringing or is answered. The GPON Device puts the caller through to
the callee.
PMG5318-B20A User’s Guide
95
Page 96
Chapter 10 Phone Usage
96
PMG5318-B20A User’s Guide
Page 97
CHAPTER 11
11.1 Overview
The GPON Device has two USB ports used to share files via a USB memory stick or a USB hard
drive.
11.1.1 What You Can Do in this Chapter
•Use the File Sharing screen to configure a file-sharing server (Section 11.2 on page 98).
•Use the Account Management screen to configure user accounts (Section 11.3 on page 99).
11.1.2 What You Need To Know
The following terms and concepts may help as you read this chapter.
USB Services
Workgroup name
This is the name given to a set of computers that are connected on a network and share resources
such as a printer or files. Windows automatically assigns the workgroup name when you set up a
network.
Shares
When settings are set to default, each USB device connected to the GPON Device is given a folder,
called a “share”. If a USB hard drive connected to the GPON Device has more than one partition,
then each partition will be allocated a share. You can also configure a “share” to be a sub-folder or
file on the USB device.
File Systems
A file system is a way of storing and organizing files on your hard drive and storage devi ce. Often
different operating systems such as Windows or Linux have different file systems. The file sharing
feature on your GPON Device supports File Allocation Table (FAT) and FAT32.
Common Internet File System
The GPON Device uses Common Internet File System (CIFS) protocol for its file sharing functions.
CIFS compatible computers can access the USB file storage devices connected to the GPON Device.
CIFS protocol is supported on Microsoft Windows, Linux Samba and other operating systems (refer
to your systems specifications for CIFS compatibility).
PMG5318-B20A User’s Guide97
Page 98
Chapter 11 USB Services
A
B
C
11.2 The File Sharing Screen
You can share files on a USB memory stick or hard drive con nected to your GPON Device with users
on your network.
The following figure is an overview of the GPON Device’s file server feature. Computers A and B can
access files on a USB device (C) which is connected to the GPON Device.
Figure 49 File Sharing Overview
The GPON Device will not be able to join the workgroup if your local area network has
restrictions set up that do not allow devices to join a workgroup. In this case, contact your
network administrator.
11.2.1 Before You Begin
Make sure the GPON Device is connected to your network and turned on.
1Connect the USB device to one of the GPON Device’s USB port. Make sure the GPON Device is
connected to your network.
2The GPON Device detects the USB device and makes its contents available for browsing. If you are
connecting a USB hard drive that comes with an external power supply, make sure it is connected
to an appropriate power source that is on.
Note: If your USB device cannot be detected by the GPON Device, see the
troubleshooting for suggestions.
98
PMG5318-B20A User’s Guide
Page 99
Chapter 11 USB Services
Use this screen to set up file sharing using the GPON Device. To access this screen, Click Usb
Services > File Sharing.
Figure 50 Usb Services > File Sharing
Each field is described in the following table.
Table 35 Usb Services > File Sharing
LABELDESCRIPTION
Enable File
Sharing
Services (SMB)
Host NameThis field shows the configured host name of the GPON Device.
Workgroup
Name
Select this to activate file sharing through the GPON Dev ice.
You can add the GPON Device to an existing or new workgroup on your network. Enter the
name of the workgroup which your GPON Device automatically joins.
You can set the GPON Device’s workgroup name to be exactly the same as the workgroup
name to which your computer belongs.
Note: The GPON Device will not be able to join the workgroup if your local area network has
restrictions set up that do not allow devices to join a workgroup. In this case, contact
your network administrator.
ApplyClick this to save your changes to the GPON Device.
CancelClick this to set every field in this screen to its last-saved value.
11.3 Account Management
Click Usb Services > File Sharing > Account Management to view and configure file sharing
user accounts on the GPON Device.
Figure 51 Usb Services > File Sharing > Account Management
PMG5318-B20A User’s Guide
99
Page 100
Chapter 11 USB Services
Each field is described in the following table.
Table 36 Usb Services > File Sharing > Account Management
LABELDESCRIPTION
AddClick this to set up a file-sharing account. Before you can share files you need a user account.
ActiveThis field displays whether a user account is activated or not. Sele ct the check bo x to enable t he
Status
User NameThis field displays the name of the user account.
ModifyClick the Edit icon to modify the user account.
Apply
CancelClick this to set every field in this screen to its last-saved value.
account. Clear the check box to disable the account.
This field displays the status of the user account.
Click the Remove icon to remove the user account from the list. Note that you cannot remove
the default superuser account.
Click this to save your changes to the GPON Device.
11.3.1 Add New File Sharing User
In the Account Management screen, click the Add button or an Edit icon next to a user account
to create a new user or configure the existing user on the GPON Device.
Figure 52 Account Management: Add
Figure 53 Account Management: Edit
Each field is described in the following table.
Table 37 Account Management: Add/Edit
LABELDESCRIPTION
User NameEnter a user name that will be allowed to access shares. You can enter up to 16
New Password
Retype New
Password
characters. Only letters and numbers allowed.
This field is greyed-out when you are editing a user account.
Enter the password used to access the share. You must enter 5 to 15 characters. Only
letters and numbers are allowed. The password is case sensitive.
Retype the password that you entered above.
100
PMG5318-B20A User’s Guide
Loading...
+ hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.