ZyXEL Communications VSG-1200 User Manual

VSG-1200 V2

Vantage Service Gateway

User’s Guide

Version 1.00

10/2006

Edition 1

VSG-1200 V2 User’s Guide

Copyright

Copyright © 2006 by ZyXEL Communications Corporation.

The contents of this publication may not be reproduced in any part or as a whole, transcribed,
stored in a retrieval system, translated into any language, or transmitted in any form or by any
means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or
otherwise, without the prior written permission of ZyXEL Communications Corporation.

Published by ZyXEL Communications Corporation. All rights reserved.

Disclaimer

ZyXEL does not assume any liability arising out of the application or use of any products, or
software described herein. Neither does it convey any license under its patent rights nor the
patent rights of others. ZyXEL further reserves the right to make changes in any products
described herein without notice. This publication is subject to change without notice.

Trademarks

ZyNOS (ZyXEL Network Operating System) is a registered trademark of ZyXEL
Communications, Inc. Other trademarks mentioned in this publication are used for
identification purposes only and may be properties of their respective owners.

Copyright 2

VSG-1200 V2 User’s Guide

Certifications

Federal Communications Commission (FCC) Interference Statement

This device complies with Part 15 of FCC rules. Operation is subject to the following two
conditions:

• This device may not cause harmful interference.

• This device must accept any interference received, including interference that may cause
undesired operations.

FCC Warning

This device has been tested and found to comply with the limits for a Class A digital switch,
pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable
protection against harmful interference in a commercial environment. This device generates,
uses, and can radiate radio frequency energy and, if not installed and used in accordance with
the instruction manual, may cause harmful interference to radio communications. Operation of
this device in a residential area is likely to cause harmful interference in which case the user
will be required to correct the interference at his own expense.

CE Mark Warning:

This is a class A product. In a domestic environment this product may cause radio interference
in which case the user may be required to take adequate measures.

Taiwanese BSMI (Bureau of Standards, Metrology and Inspection) A
Warning:

Notices

Changes or modifications not expressly approved by the party responsible for compliance
could void the user's authority to operate the equipment.

This Class A digital apparatus complies with Canadian ICES-003.

Cet appareil numérique de la classe A est conforme à la norme NMB-003 du Canada.

Viewing Certifications

1 Go to http://www.zyxel.com.

Certifications 3

VSG-1200 V2 User’s Guide

2 Select your product from the drop-down list box on the ZyXEL home page to go to that

product's page.

3 Select the certification you wish to view from this page.

Certifications 4

VSG-1200 V2 User’s Guide

Safety Warnings

For your safety, be sure to read and follow all warning notices and instructions.

• Do NOT use this product near water, for example, in a wet basement or near a swimming
pool.

• Do NOT expose your device to dampness, dust or corrosive liquids.

• Do NOT store things on the device.

• Do NOT install, use, or service this device during a thunderstorm. There is a remote risk
of electric shock from lightning.

• Connect ONLY suitable accessories to the device.

• Do NOT open the device or unit. Opening or removing covers can expose you to
dangerous high voltage points or other risks. ONLY qualified service personnel should
service or disassemble this device. Please contact your vendor for further information.

• Make sure to connect the cables to the correct ports.

• Place connecting cables carefully so that no one will step on them or stumble over them.

• Always disconnect all cables from this device before servicing or disassembling.

• Use ONLY an appropriate power adaptor or cord for your device.

• Connect the power adaptor or cord to the right supply voltage (for example, 110V AC in
North America or 230V AC in Europe).

• Do NOT allow anything to rest on the power adaptor or cord and do NOT place the
product where anyone can walk on the power adaptor or cord.

• Do NOT use the device if the power adaptor or cord is damaged as it might cause
electrocution.

• If the power adaptor or cord is damaged, remove it from the power outlet.

• Do NOT attempt to repair the power adaptor or cord. Contact your local vendor to order a
new one.

• Do not use the device outside, and make sure all the connections are indoors. There is a
remote risk of electric shock from lightning.

• Do NOT obstruct the device ventilation slots, as insufficient airflow may harm your
device.

This product is recyclable. Dispose of it properly.

Safety Warnings 5

VSG-1200 V2 User’s Guide

Safety Warnings 6

VSG-1200 V2 User’s Guide

ZyXEL Limited Warranty

ZyXEL warrants to the original end user (purchaser) that this product is free from any defects
in materials or workmanship for a period of up to two years from the date of purchase. During
the warranty period, and upon proof of purchase, should the product have indications of failure
due to faulty workmanship and/or materials, ZyXEL will, at its discretion, repair or replace the
defective products or components without charge for either parts or labor, and to whatever
extent it shall deem necessary to restore the product or components to proper operating
condition. Any replacement will consist of a new or re-manufactured functionally equivalent
product of equal or higher value, and will be solely at the discretion of ZyXEL. This warranty
shall not apply if the product has been modified, misused, tampered with, damaged by an act
of God, or subjected to abnormal working conditions.

Note

Repair or replacement, as provided under this warranty, is the exclusive remedy of the
purchaser. This warranty is in lieu of all other warranties, express or implied, including any
implied warranty of merchantability or fitness for a particular use or purpose. ZyXEL shall in
no event be held liable for indirect or consequential damages of any kind to the purchaser.

To obtain the services of this warranty, contact ZyXEL's Service Center for your Return
Material Authorization number (RMA). Products must be returned Postage Prepaid. It is
recommended that the unit be insured when shipped. Any returned products without proof of
purchase or those with an out-dated warranty will be repaired or replaced (at the discretion of
ZyXEL) and the customer will be billed for parts and labor. All repaired or replaced products
will be shipped by ZyXEL to the corresponding return address, Postage Paid. This warranty
gives you specific legal rights, and you may also have other rights that vary from country to
country.

Registration

Register your product online to receive e-mail notices of firmware upgrades and information
at www.zyxel.com for global products, or at www.us.zyxel.com for North American products.

ZyXEL Limited Warranty 7

VSG-1200 V2 User’s Guide

Customer Support

Please have the following information ready when you contact customer support.

• Product model and serial number.

• Warranty Information.

• Date that you received your device.

• Brief description of the problem and the steps you took to solve it.

METHOD

LOCATION

CORPORATE
HEADQUARTERS
(WORLDWIDE)

COSTA RICA

CZECH REPUBLIC

DENMARK

FINLAND

FRANCE

GERMANY

HUNGARY

KAZAKHSTAN

NORTH AMERICA

SUPPORT E-MAIL TELEPHONE WEB SITE

SALES E-MAIL FAX FTP SITE

[e-mail] [phone] www.zyxel.com

www.europe.zyxel.com

[e-mail] [phone] ftp.zyxel.com

ftp.europe.zyxel.com

[e-mail] [phone] www.zyxel.co.cr ZyXEL Costa Rica

[e-mail] [phone] ftp.zyxel.co.cr

[e-mail] [phone] www.zyxel.cz ZyXEL Communications

[e-mail] [phone]

[e-mail] [phone] www.zyxel.dk ZyXEL Communications A/S

[e-mail] [phone]

[e-mail] [phone] www.zyxel.fi ZyXEL Communications Oy

[e-mail] [phone]

[e-mail] [phone] www.zyxel.fr ZyXEL France

[phone]

[e-mail] [phone] www.zyxel.de ZyXEL Deutschland GmbH.

[e-mail] [phone]

[e-mail] [phone] www.zyxel.hu ZyXEL Hungary

[e-mail] [phone]

http://zyxel.kz/support [phone] www.zyxel.kz ZyXEL Kazakhstan

[e-mail] [phone]

[e-mail] 1-800-255-4101

[phone]

[e-mail] [phone] ftp.us.zyxel.com

www.us.zyxel.com ZyXEL Communications Inc.

REGULAR MAIL

ZyXEL Communications Corp.
6 Innovation Road II

Science Park
Hsinchu 300
Ta iw a n

Plaza Roble Escazú
Etapa El Patio, Tercer Piso
San José, Costa Rica

Czech s.r.o.
Modranská 621
143 01 Praha 4 - Modrany
Ceská Republika

Columbusvej
2860 Soeborg
Denmark

Malminkaari 10
00700 Helsinki
Finland

1 rue des Vergers
Bat. 1 / C
69760 Limonest
France

Adenauerstr. 20/A2 D-52146
Wuerselen
Germany

48, Zoldlomb Str.
H-1025, Budapest
Hungary

43, Dostyk ave.,Office 414
Dostyk Business Centre
050010, Almaty
Republic of Kazakhstan

1130 N. Miller St.
Anaheim
CA 92806-2001
U.S.A.

Customer Support 8

VSG-1200 V2 User’s Guide

METHOD

LOCATION

NORWAY

POLAND

RUSSIA

SPAIN

SWEDEN

UKRAINE

UNITED KINGDOM

SUPPORT E-MAIL TELEPHONE WEB SITE

SALES E-MAIL FAX FTP SITE

[e-mail] [phone] www.zyxel.no ZyXEL Communications A/S

[e-mail] [phone]

[e-mail] [phone] www.pl.zyxel.com ZyXEL Communications

[phone]

http://zyxel.ru/support [phone] www.zyxel.ru ZyXEL Russia

[e-mail] [phone]

[e-mail] [phone] www.zyxel.es ZyXEL Communications

[e-mail] [phone]

[e-mail] [phone] www.zyxel.se ZyXEL Communications A/S

[e-mail] [phone]

[e-mail] [phone] www.ua.zyxel.com ZyXEL Ukraine

[e-mail] [phone]

[e-mail] [phone]

08707 555779 (UK only)

[e-mail] [phone] ftp.zyxel.co.uk

www.zyxel.co.uk ZyXEL Communications UK

REGULAR MAIL

Nils Hansens vei 13
0667 Oslo
Norway

ul. Okrzei 1A
03-715 Warszawa
Poland

Ostrovityanova 37a Str.
Moscow, 117279
Russia

Arte, 21 5ª planta
28033 Madrid
Spain

Sjöporten 4, 41764 Göteborg
Sweden

13, Pimonenko Str.
Kiev, 04050
Ukraine

Ltd.,11 The Courtyard,
Eastern Road, Bracknell,
Berkshire, RG12 2XB,
United Kingdom (UK)

Customer Support 9

VSG-1200 V2 User’s Guide

Table of Contents

Copyright ..................................................................................................................2

Certifications ............................................................................................................3

Safety Warnings ....................................................................................................... 5

ZyXEL Limited Warranty.......................................................................................... 7

Customer Support.................................................................................................... 8

List of Figures ........................................................................................................ 20

List of Tables .......................................................................................................... 26

Preface ....................................................................................................................30

Chapter 1

Getting to Know Your VSG .................................................................................... 32

1.1 Introducing the VSG ...........................................................................................32

1.2 Features .............................................................................................................32

1.3 Applications ........................................................................................................35

1.3.1 Internet Access for LAN Networks ............................................................35

1.3.2 Internet Access in Public Areas ................................................................36

1.3.3 Hotel Application with PMS .......................................................................36

Chapter 2

Hardware Installation and Connection................................................................. 38

2.1 Installation Options .............................................................................................38

2.1.1 Desktop Installation .................................................................................38

2.1.2 Rack Mount Installation ............................................................................38

2.2 Hardware Connections .......................................................................................39

2.2.1 Front Panel ...............................................................................................39

2.2.1.1 LAN Port ..........................................................................................40

2.2.1.2 WAN Port ........................................................................................40

2.2.1.3 Console Port ...................................................................................40

2.2.1.4 PMS Port .........................................................................................40

2.2.1.5 Reset Button ...................................................................................40

2.2.2 Front Panel LEDs .....................................................................................41

2.2.3 Rear Panel ................................................................................................41

Table of Contents 10

VSG-1200 V2 User’s Guide

2.2.4 Turning on the VSG ..................................................................................41

Chapter 3

The Web Configurator............................................................................................ 42

3.1 Introducing the Web Configurator ......................................................................42

3.2 Accessing the Web Configurator ........................................................................42

3.3 Navigation Panel ................................................................................................43

3.3.1 The Navigation Panel ...............................................................................44

3.3.2 Screen Specific Links ................................................................................44

3.4 Screen Overview ................................................................................................44

3.4.1 Saving Configuration Changes .................................................................45

3.5 System Login Accounts ......................................................................................45

3.6 Changing System Login Passwords ..................................................................45

3.7 Resetting the VSG .............................................................................................47

3.8 Restarting the VSG ............................................................................................47

3.9 Logging Out of the Web Configurator ................................................................48

Chapter 4

Initial Setup Example ............................................................................................. 50

4.1 Overview ............................................................................................................50

4.2 Configure the VSG for Internet Access ..............................................................50

4.3 Create a Billing Profile ........................................................................................51

4.4 Setting User Authentication Method ...................................................................52

4.5 Creating Customer Accounts .............................................................................53

4.6 Customer Login Test ..........................................................................................53

Chapter 5

System .................................................................................................................... 56

5.1 General System Setting .....................................................................................56

Chapter 6

LAN and WAN Setup.............................................................................................. 60

6.1 Factory Ethernet Defaults ..................................................................................60

6.2 LANs and WANs ................................................................................................60

6.3 IP Address Assignment ......................................................................................60

6.3.1 IP Address and Subnet Mask ...................................................................60

6.3.2 Private IP Addresses ................................................................................61

6.3.3 DNS Server Address ................................................................................61

6.4 LAN Configuration ..............................................................................................62

6.5 WAN Configuration .............................................................................................62

6.5.1 WAN MAC Address ..................................................................................62

6.5.2 WAN Port Mode: Dynamic/Fixed IP Address ..........................................63

6.5.3 WAN Port Mode: PPPoE ..........................................................................64

11 Table of Contents

VSG-1200 V2 User’s Guide

6.5.4 WAN Port Mode: PPTP .............................................................................66

Chapter 7

Server ...................................................................................................................... 70

7.1 DHCP Configuration ...........................................................................................70

7.1.1 Public and Private Address Assignment ...................................................70

7.1.2 Server Configuration .................................................................................70

Chapter 8

NAT Pool ................................................................................................................. 74

8.1 NAT Overview ....................................................................................................74

8.1.1 NAT Definitions .........................................................................................74

8.1.2 What NAT Does ........................................................................................75

8.1.3 How NAT Works .......................................................................................75

8.1.4 VPN and NAT ...........................................................................................75

8.2 NAT Examples ...................................................................................................76

8.2.1 Example 1: One-to-One ............................................................................76

8.2.2 Example 2: Many-to-One ..........................................................................77

8.2.3 Example 3: One-to-One and Many-to-One ...............................................77

8.3 NAT Pool Setup ..................................................................................................78

Chapter 9

Authentication ........................................................................................................ 80

9.1 Authentication Overview ....................................................................................80

9.1.1 User Agreement ........................................................................................80

9.1.2 CAS (Central Authentication Service) .......................................................80

9.1.3 Built-in Authentication ...............................................................................81

9.1.4 RADIUS ....................................................................................................81

9.1.4.1 RADIUS Accounting ........................................................................81

9.1.4.2 Vendor Specific Attribute .................................................................82

9.2 Authentication Configuration .............................................................................82

9.2.1 Scenario Options ......................................................................................85

Chapter 10

Billing ......................................................................................................................88

10.1 Billing Overview ................................................................................................88

10.1.1 Billing Profile ...........................................................................................88

10.1.2 Configuring a Billing Profile .....................................................................89

10.2 PMS (Property Management System) .............................................................91

10.2.1 Port-Location Mapping ............................................................................91

10.2.2 PMS Configuration ..................................................................................91

10.3 Types of Subscriber Accounts ..........................................................................93

Table of Contents 12

VSG-1200 V2 User’s Guide

Chapter 11

Static Subscriber Accounts................................................................................... 94

11.1 Static Subscriber Account Overview .................................................................94

11.2 Global Static Account Settings .........................................................................94

11.3 Creating a Static Account .................................................................................95

11.3.1 Generating Static Accounts Automatically ..............................................96

11.3.2 Creating Static Subscriber Accounts Manually .......................................97

11.4 Static Account List Backup and Restore ...........................................................98

11.4.1 Backing Up a Static Account List ............................................................98

11.4.2 Restoring a Static Account List ...............................................................99

11.5 Editing Subscriber Accounts ...........................................................................100

11.5.1 Static Account Information Print Preview ..............................................101

11.6 Viewing the Static Account List .......................................................................102

Chapter 12

Dynamic Subscriber Accounts ........................................................................... 104

12.1 Dynamic Subscriber Account Overview .........................................................104

12.2 Dynamic Account General Settings ...............................................................104

12.3 Creating Dynamic Accounts ...........................................................................106

12.3.1 Dynamic Account Generation Using the Web Configurator ..................106

12.3.2 Dynamic Account Generation Using a Statement Printer .....................107

12.4 Viewing the Dynamic Account List .................................................................108

12.4.1 Backing Up the Dynamic Account List ..................................................109

Chapter 13

Port-Location Mapping ........................................................................................ 112

13.1 Port-Location Mapping Overview ...................................................................112

13.2 Configuring Port-Location Mappings .............................................................112

Chapter 14

Credit Card........................................................................................................... 116

14.1 Credit Card Overview ..................................................................................... 116

14.1.1 How Credit Card Billing Works .............................................................116

14.1.2 Configuration Steps ..............................................................................116

14.2 Credit Card Billing Service Configuration ....................................................... 117

Chapter 15

Customization ...................................................................................................... 120

15.1 Customization Overview ................................................................................120

15.2 Login Screen ..................................................................................................120

15.2.1 Standard Login Screen .........................................................................121

15.2.2 Redirect Login Screen ..........................................................................122

15.2.3 Advanced Login Screen ........................................................................123

13 Table of Contents

VSG-1200 V2 User’s Guide

15.2.4 Framed Login Screen ...........................................................................124

15.2.5 Login Service Selection ........................................................................125

15.3 Information Window .......................................................................................127

15.4 Account Printout .............................................................................................129

15.5 User Agreement Screen .................................................................................133

15.6 Credit Card .....................................................................................................135

15.6.1 Standard Login Page ............................................................................135

15.6.2 Service Selection Page .........................................................................136

15.6.3 Successful Page ...................................................................................139

15.6.4 Fail Page ...............................................................................................141

15.7 Bill Output .......................................................................................................142

Chapter 16

Bandwidth Management...................................................................................... 144

16.1 Bandwidth Management Overview ................................................................144

16.1.1 Bandwidth Allocation ............................................................................144

16.2 Activating Bandwidth Management ................................................................144

16.2.1 Equal Bandwidth Setup .......................................................................145

16.2.2 Class of Service Bandwidth Setup ........................................................146

Chapter 17

Portal Page, Advertisement Link and Walled Garden....................................... 148

17.1 Overview ........................................................................................................148

17.2 Portal Page ....................................................................................................148

17.3 Advertisement Links .......................................................................................149

17.4 Walled Garden ...............................................................................................149

Chapter 18

Passthrough ......................................................................................................... 152

18.1 Passthrough Overview ...................................................................................152

18.2 Computer IP and MAC Address Passthrough ................................................152

18.2.1 Destination URL and IP Address Passthrough .....................................154

Chapter 19

Filter ...................................................................................................................... 156

19.1 Filter Setup .....................................................................................................156

Chapter 20

Privilege User ....................................................................................................... 158

20.1 Privilege User Setup ......................................................................................158

20.1.1 Accessing Session List As a Privilege User .........................................159

Table of Contents 14

VSG-1200 V2 User’s Guide

Chapter 21

LAN Devices ......................................................................................................... 160

21.1 LAN Devices Overview ..................................................................................160

21.1.1 Port Mapping ........................................................................................160

21.2 Configuring LAN Device Port Mapping ..........................................................160

21.2.1 LAN Device Management Example ......................................................162

21.2.2 Specifying an Inside Server Example ...................................................163

Chapter 22

Static Route .......................................................................................................... 164

22.1 Static Route Overview ....................................................................................164

22.2 Static Route Setup .........................................................................................164

Chapter 23

Private LAN........................................................................................................... 168

23.1 Private LAN Overview ....................................................................................168

23.2 Configuring a Private LAN ..............................................................................168

Chapter 24

Syslog ................................................................................................................... 170

24.1 Syslog Overview ............................................................................................170

24.1.1 Syslog Server Setup .............................................................................170

24.1.2 Log Settings ..........................................................................................171

Chapter 25

Session Trace ....................................................................................................... 176

25.1 Session Trace Overview ................................................................................176

25.1.1 Configuring Session Trace ...................................................................176

25.1.2 Session Trace Filename Convention ....................................................177

Chapter 26

SNMP.....................................................................................................................178

26.1 SNMP Overview .............................................................................................178

26.1.1 Network Management System (NMS) .................................................179

26.2 Configuring SNMP .........................................................................................179

Chapter 27

Miscellanea ........................................................................................................... 182

27.1 Overview ........................................................................................................182

27.2 TCP/IP-RS-232 Converter Setup ...................................................................182

15 Table of Contents

VSG-1200 V2 User’s Guide

Chapter 28

System Status....................................................................................................... 184

28.1 System Status Overview ................................................................................184

28.2 System Information ........................................................................................184

28.3 Current User List ............................................................................................186

28.4 DHCP Client ...................................................................................................187

28.5 Session List ....................................................................................................188

28.6 NAT Pool Table ..............................................................................................189

28.7 LAN Device Status .........................................................................................189

28.7.1 Accessing the LAN Device ...................................................................190

28.8 Billing Log .......................................................................................................191

28.8.1 Billing Logs Backup ..............................................................................192

28.9 PMS Transaction ............................................................................................193

28.10 Static Route Table ........................................................................................193

Chapter 29

Configuration........................................................................................................ 196

29.1 Configuration Overview ..................................................................................196

29.2 Configuration Backup .....................................................................................196

29.2.1 Configuration Backup Using TFTP .......................................................198

29.3 Restore Configuration ....................................................................................199

29.3.1 Restore Configuration Using TFTP ......................................................199

29.4 Reset to the Factory Defaults .........................................................................200

Chapter 30

Firmware ............................................................................................................... 202

30.1 Firmware Overview ........................................................................................202

30.2 Manual Firmware Upgrade .............................................................................202

30.2.1 Manual Firmware Upgrade via a TFTP Server .....................................203

30.3 Scheduled Firmware Upgrade .......................................................................204

Chapter 31

SSL Certificate...................................................................................................... 206

31.1 SSL Certificate Overview ...............................................................................206

31.1.1 Certificate ..............................................................................................206

31.1.2 Certificate Authorities ............................................................................206

31.2 Downloading SSL Certificate to the VSG .......................................................206

31.3 Activating SSL Security ..................................................................................207

31.4 Installing SSL Certificate on a Computer .......................................................208

Chapter 32

Using The SMT ..................................................................................................... 214

32.1 About the SMT ...............................................................................................214

Table of Contents 16

VSG-1200 V2 User’s Guide

32.1.1 Establishing a Console Port Connection ..............................................214

32.2 SMT Login Screen .........................................................................................215

32.3 The SMT Main Menu Summary .....................................................................215

32.4 Navigating the SMT Interface .........................................................................216

32.4.1 The Navigation Keys .............................................................................217

32.5 System Configuration .....................................................................................217

32.6 WAN Configuration .........................................................................................218

32.6.1 WAN Type: Static/Dynamic ...................................................................218

32.6.2 WAN Type: PPPoE ...............................................................................219

32.6.3 WAN Type: PPTP .................................................................................220

32.7 LAN Configuration ..........................................................................................222

32.8 System Status ................................................................................................223

32.9 System Utilities ...............................................................................................224

32.9.1 Firmware Upgrade ................................................................................225

32.9.2 Changing the Administrator Login Password ........................................226

32.10 Restart ..........................................................................................................227

32.11 SMT Logout ..................................................................................................227

32.12 Factory Defaults ...........................................................................................227

Chapter 33

Troubleshooting ................................................................................................... 230

33.1 Using the LEDs to Diagnose Problems ..........................................................230

33.1.1 The Power LED ....................................................................................230

33.1.2 The LAN Port LEDs ..............................................................................230

33.1.3 The WAN Port LEDs .............................................................................231

33.2 The Console Port ...........................................................................................231

33.3 Web Configurator ...........................................................................................232

33.4 Internet Access ..............................................................................................232

33.5 The Statement Printer ....................................................................................233

Appendix A

Product Specifications ........................................................................................ 234

Appendix B

IP Address Assignment Conflicts.......................................................................236

Appendix C

Subscriber Login.................................................................................................. 240

Appendix D

Vendor Specific Attributes ........................................................................... 242

Appendix E

17 Table of Contents

VSG-1200 V2 User’s Guide

Report Printing Using the SP-200...................................................................... 246

Appendix F

Cable Types and Cable Pin Assignments.......................................................... 252

Appendix G

Setting up Your Computer’s IP Address............................................................ 256

Appendix H

IP Addresses and Subnetting ............................................................................. 268

Index...................................................................................................................... 276

Table of Contents 18

VSG-1200 V2 User’s Guide

19 Table of Contents

VSG-1200 V2 User’s Guide

List of Figures

Figure 1 Application: Internet Access for LAN Networks .............................................. 35

Figure 2 Application: Internet Access in Public Areas .................................................. 36

Figure 3 Application: Hotel ............................................................................................ 36

Figure 4 Rack Mount: Attaching Brackets ..................................................................... 39

Figure 5 Rack Mount: Securing to the Rack ................................................................ 39

Figure 6 Front Panel .................................................................................................... 40

Figure 7 Rear Panel ...................................................................................................... 41

Figure 8 Entering IP Address in Internet Explorer ........................................................ 42

Figure 9 Web Configurator: Login ............................................................................... 43

Figure 10 Web Configurator: Main Menu ....................................................................... 43

Figure 11 Web Configurator: Navigation Panel .............................................................. 44

Figure 12 Navigation Panel: Screen specific Links ......................................................... 44

Figure 13 Apply: Success .............................................................................................. 45

Figure 14 Apply: Restart ................................................................................................. 45

Figure 15 System Tools: System Account ...................................................................... 46

Figure 16 System Tools: Restart ..................................................................................... 48

Figure 17 System Tools: Logout ..................................................................................... 48

Figure 18 Initial Setup: Network Example ....................................................................... 50

Figure 19 System Setting: System .................................................................................. 56

Figure 20 System Settings: WAN/LAN: LAN Configuration ............................................ 62

Figure 21 System Settings: WAN/LAN: WAN MAC Address .......................................... 63

Figure 22 System Settings: WAN/LAN: Dynamic/Static WAN IP Address ...................... 64

Figure 23 System Settings: WAN/LAN: PPPoE .............................................................. 65

Figure 24 System Settings: WAN/LAN: PPTP ................................................................ 67

Figure 25 System Settings: Server ................................................................................. 71

Figure 26 NAT Example: One-to-One ............................................................................ 76

Figure 27 NAT Example: Many-to-One .......................................................................... 77

Figure 28 NAT Example: One-to-One and Many-to-One ............................................... 77

Figure 29 System Settings: NAT Pool ............................................................................ 78

Figure 30 CAS Example ................................................................................................ 80

Figure 31 Accounting Usage Time .................................................................................. 82

Figure 32 System Settings: Authentication .................................................................... 83

Figure 33 System: Authentication: Scenario Guide ........................................................ 86

Figure 34 Subscriber Login: Scenario A ......................................................................... 87

Figure 35 Subscriber Login: Scenario B ......................................................................... 87

Figure 36 Subscriber Login: Scenario C ......................................................................... 87

Figure 37 System Setting: Billing: Billing Profile ............................................................. 88

Figure 38 System Settings: Billing: Billing Profile Setting ............................................... 89

List of Figures 20

VSG-1200 V2 User’s Guide

Figure 39 System Setting: Billing: PMS Configuration .................................................... 92

Figure 40 Static Account: Links ....................................................................................... 94

Figure 41 Static Account Settings: Global Settings ......................................................... 94

Figure 42 System Settings: Create Static Subscriber Account ....................................... 95

Figure 43 Create Static Subscriber Account: Generate Automatically ............................ 96

Figure 44 Create Static Subscriber Account: Manual ..................................................... 97

Figure 45 Static Subscriber Account: Backup and Restore ............................................ 98

Figure 46 Static Subscriber Account: Backup and Restore: File Download ................... 99

Figure 47 Static Subscriber Account: Backup and Restore: Save As ............................. 99

Figure 48 Static Subscriber Account: Backup and Restore ............................................ 100

Figure 49 Static Account Operator .................................................................................. 100

Figure 50 Static Account Information Printout Example .................................................. 102

Figure 51 Static Account List .......................................................................................... 102

Figure 52 Dynamic Account: Links ................................................................................. 104

Figure 53 Accounting: Dynamic Account Setting ............................................................ 105

Figure 54 SP-200 Button Labels ..................................................................................... 106

Figure 55 Dynamic Account Operator Panel .................................................................. 107

Figure 56 Dynamic Account Information Printout Example ............................................ 107

Figure 57 Dynamic Account List ..................................................................................... 108

Figure 58 Dynamic Account List Backup: File Download ............................................... 109

Figure 59 Dynamic Account List Backup: Save As ......................................................... 110

Figure 60 System Setting: Port-Location Mapping ......................................................... 113

Figure 61 Advanced Setting: Credit Card ...................................................................... 117

Figure 62 Customization: Login ..................................................................................... 121

Figure 63 Customization: Login: Standard ...................................................................... 122

Figure 64 Subscriber Login Screen Example: Standard ................................................. 122

Figure 65 Customization: Login Screen: Redirect .......................................................... 122

Figure 66 Customization: Login Screen: Advanced ........................................................ 123

Figure 67 Subscriber Login Screen Example: Advanced ............................................... 124

Figure 68 Customization: Login Screen: Frame ............................................................. 124

Figure 69 Subscriber Login Screen Example: Frame ..................................................... 125

Figure 70 Customization: Service Selection Customization .......................................... 126

Figure 71 Subscriber Login Screen Example: Service Selection Messages .................. 126

Figure 72 Customization: Information Window ............................................................... 127

Figure 73 Subscriber Pop-up Information Window Example .......................................... 128

Figure 74 Customization: Account Printout ..................................................................... 129

Figure 75 Static Account Printout Example ..................................................................... 131

Figure 76 Static Account with PMS Billing Printout Example .......................................... 131

Figure 77 Static Account Printout: Statement Printer Example ....................................... 132

Figure 78 Static Account with PMS Billing Printout: Statement Printer Example ............ 132

Figure 79 Dynamic Account Printout Example ............................................................... 133

Figure 80 Dynamic Account Printout: Statement Printer Example .................................. 133

Figure 81 Customize: User Agreement ........................................................................... 134

21 List of Figures

VSG-1200 V2 User’s Guide

Figure 82 Customization: Account Printout: Preview ...................................................... 135

Figure 83 Credit Card Customization: Standard Login Screen Message ....................... 135

Figure 84 Credit Card Customization: Standard Login Screen Message: Preview ......... 136

Figure 85 Credit Card Customization: Service Selection Page ...................................... 137

Figure 86 Credit Card Customization: Service Selection Page: Preview ........................ 139

Figure 87 Credit Card Customization: Successful Page ................................................. 140

Figure 88 Credit Card Customization: Successful Page: Preview .................................. 141

Figure 89 Credit Card Customization: Fail Page ............................................................ 141

Figure 90 Credit Card Customization: Fail Page: Preview .............................................. 142

Figure 91 Customization: Output Bill .............................................................................. 142

Figure 92 Customization: Output Bill: Example .............................................................. 143

Figure 93 Bandwidth Management: Activate .................................................................. 145

Figure 94 Bandwidth Management: Equal Share ........................................................... 145

Figure 95 Bandwidth Management: Class of Service ..................................................... 146

Figure 96 Portal Page ..................................................................................................... 148

Figure 97 Advertisement ................................................................................................. 149

Figure 98 Walled Garden ................................................................................................ 150

Figure 99 Subscriber Login Screen with Walled Garden Links Example ........................ 151

Figure 100 Passthrough: Subscriber IP and MAC Address .............................................. 153

Figure 101 Passthrough: Destination URL and IP ............................................................ 154

Figure 102 Advanced: Filter .............................................................................................. 156

Figure 103 Privilege User ................................................................................................. 158

Figure 104 Privilege User: Access Session List Example ................................................ 159

Figure 105 LAN Devices ................................................................................................... 161

Figure 106 LAN Device Remote Management Example 1 ............................................... 162

Figure 107 LAN Devices: Example 1 ................................................................................ 162

Figure 108 LAN Device Remote Management Example 2 ............................................... 163

Figure 109 LAN Devices: Example 2 ................................................................................ 163

Figure 110 Sample Static Routing Topology ...................................................................... 164

Figure 111 Advanced: Static Route .................................................................................. 165

Figure 112 Private LAN Network Example ....................................................................... 168

Figure 113 Private LAN ..................................................................................................... 169

Figure 114 Logs: Syslog ................................................................................................... 170

Figure 115 Logs: Log Settings .......................................................................................... 172

Figure 116 Advanced: Session Trace ............................................................................... 176

Figure 117 Session Trace Information Example ............................................................. 177

Figure 118 SNMP Management Model ............................................................................. 178

Figure 119 SNMP ............................................................................................................. 179

Figure 120 Network Example Using TCP/IP-RS232 Convertor ........................................ 182

Figure 121 Advanced Setup: Miscellanea ........................................................................ 183

Figure 122 System Status: System .................................................................................. 184

Figure 123 System Status: Current User List .................................................................... 186

Figure 124 System Status: DHCP Clients ......................................................................... 188

List of Figures 22

VSG-1200 V2 User’s Guide

Figure 125 System Status: Session List ........................................................................... 188

Figure 126 System Status: NAT Pool Table ...................................................................... 189

Figure 127 System Status: LAN Device Status ................................................................. 190

Figure 128 System Status: Billing Log .............................................................................. 191

Figure 129 Billing Log Backup: File Download ................................................................. 192

Figure 130 Billing Log Backup: Save As ........................................................................... 192

Figure 131 Billing Log Backup: Example File Content ..................................................... 193

Figure 132 System Status: PMS Transaction Log ........................................................... 193

Figure 133 System Status: Static Route Table .................................................................. 193

Figure 134 Configuration: Backup .................................................................................... 197

Figure 135 Configuration Backup: File Download ............................................................. 197

Figure 136 Configuration Backup: Save As ...................................................................... 198

Figure 137 Configuration: Backup using TFTP ................................................................ 198

Figure 138 Configuration Backup: TFTP: Successful ....................................................... 199

Figure 139 Configuration: Restore .................................................................................... 199

Figure 140 Configuration: Restore: TFTP ......................................................................... 200

Figure 141 Configuration: Reset ....................................................................................... 201

Figure 142 Firmware: Links .............................................................................................. 202

Figure 143 Firmware: Manual Upgrade ............................................................................ 202

Figure 144 Web Configurator: Firmware Upgrade Successful ......................................... 203

Figure 145 Firmware: Manual Upgrade Using TFTP ........................................................ 203

Figure 146 Scheduled Firmware Upgrade: Synchronization File Example ....................... 204

Figure 147 Scheduled Firmware Upgrade Example ......................................................... 204

Figure 148 Firmware: Scheduled Upgrade ....................................................................... 204

Figure 149 SSL Certificate .............................................................................................. 207

Figure 150 System Settings: Server Configuration: Enable SSL Security ........................ 207

Figure 151 System Settings: Authentication: Activate SSL Login ..................................... 208

Figure 152 Installing the SSL Security Certificate: First Security Alert ............................. 208

Figure 153 Installing the SSL Security Certificate: Second Security Alert ........................ 209

Figure 154 Installing the SSL Security Certificate: View Certificate .................................. 209

Figure 155 Installing the SSL Security Certificate: Certificate Import Wizard ................... 210

Figure 156 Certificate Import Wizard: Location ................................................................. 210

Figure 157 Certificate Import Wizard: Finish ..................................................................... 211

Figure 158 Root Certificate Store ...................................................................................... 211

Figure 159 Certificate Import Wizard ................................................................................ 211

Figure 160 Certificate: Detailed Information ..................................................................... 212

Figure 161 Security Alert: Trusted .................................................................................... 212

Figure 162 HyperTerminal Communication Parameter Settings Example ........................ 215

Figure 163 SMT: Login Screen ........................................................................................ 215

Figure 164 SMT: Main Menu ............................................................................................ 216

Figure 165 SMT: System Configuration ............................................................................ 217

Figure 166 SMT: WAN Configuration: Static/Dynamic ..................................................... 218

Figure 167 SMT: WAN Configuration: PPPoE ................................................................. 219

23 List of Figures

VSG-1200 V2 User’s Guide

Figure 168 SMT: WAN Configuration: PPTP .................................................................... 221

Figure 169 SMT: LAN Configuration ................................................................................ 222

Figure 170 SMT: System Status ....................................................................................... 223

Figure 171 SMT: Utilities Menu ........................................................................................ 225

Figure 172 SMT: Firmware Upgrade ................................................................................ 225

Figure 173 SMT: Firmware Upgrade Process .................................................................. 226

Figure 174 SMT: Change Administrator Password .......................................................... 226

Figure 175 SMT: Restart .................................................................................................. 227

Figure 176 SMT: System Logout ....................................................................................... 227

Figure 177 SMT: Reset to Factory Defaults ..................................................................... 228

Figure 178 IP Address Conflicts: Scenario 1 ................................................................... 236

Figure 179 IP Address Conflicts: Scenario 2 ................................................................... 236

Figure 180 IP Address Conflicts: Scenario 3 ................................................................... 237

Figure 181 IP Address Conflicts: Scenario 4 ................................................................... 238

Figure 182 Subscriber Login Screen: Framed Example .................................................. 240

Figure 183 Subscriber Login: Information Window Example ........................................... 240

Figure 184 SP-200: Daily Account ................................................................................... 247

Figure 185 SP-200: Monthly Account .............................................................................. 248

Figure 186 SP-200: System Status .................................................................................. 249

Figure 187 SP-200: Network Statistics ............................................................................ 250

Figure 188 WAN Port Cable Pin Assignments ................................................................. 253

Figure 189 LAN Port Cable Pin Assignments .................................................................. 253

Figure 190 DB25 Male to DB9 Male Connector ............................................................ 254

Figure 191 WIndows 95/98/Me: Network: Configuration ................................................... 257

Figure 192 Windows 95/98/Me: TCP/IP Properties: IP Address ........................................ 258

Figure 193 Windows 95/98/Me: TCP/IP Properties: DNS Configuration ........................... 259

Figure 194 Windows XP: Start Menu ................................................................................. 260

Figure 195 Windows XP: Control Panel ............................................................................. 260

Figure 196 Windows XP: Control Panel: Network Connections: Properties ...................... 261

Figure 197 Windows XP: Local Area Connection Properties ............................................. 261

Figure 198 Windows XP: Advanced TCP/IP Settings ........................................................ 262

Figure 199 Windows XP: Internet Protocol (TCP/IP) Properties ........................................ 263

Figure 200 Macintosh OS 8/9: Apple Menu ....................................................................... 264

Figure 201 Macintosh OS 8/9: TCP/IP ............................................................................... 264

Figure 202 Macintosh OS X: Apple Menu .......................................................................... 265

Figure 203 Macintosh OS X: Network ................................................................................ 266

List of Figures 24

VSG-1200 V2 User’s Guide

25 List of Figures

VSG-1200 V2 User’s Guide

List of Tables

Table 1 Front Panel LEDs ............................................................................................ 41

Table 2 Web Configurator: Screen Overview ............................................................... 44

Table 3 System Tools: System Account ....................................................................... 46

Table 4 System Setting: System ................................................................................... 57

Table 5 System Settings: WAN/LAN: LAN Configuration ............................................. 62

Table 6 System Settings: WAN/LAN: WAN MAC Address ........................................... 63

Table 7 System Settings: WAN/LAN: WAN IP .............................................................. 64

Table 8 System Settings: WAN/LAN: PPPoE ............................................................... 65

Table 9 System Settings: WAN/LAN: PPTP ................................................................. 67

Table 10 System Settings: Server .................................................................................. 71

Table 11 NAT Definitions ................................................................................................ 74

Table 12 WAN NAT Mapping Types for VPN .................................................................. 76

Table 13 NAT Example: One-to-One .............................................................................. 76

Table 14 NAT Example: Many-to-One ............................................................................ 77

Table 15 NAT Example: One-to-One and Many-to-One ................................................. 78

Table 16 System Settings: NAT Pool .............................................................................. 78

Table 17 System Settings: Authentication ...................................................................... 84

Table 18 System: Authentication: Scenario Guide ......................................................... 87

Table 19 System Setting: Billing: Billing Profile .............................................................. 89

Table 20 System Settings: Billing: Billing Profile Setting ................................................ 90

Table 21 System Setting: Billing: PMS Configuration ..................................................... 92

Table 22 Static Account Settings: Global Settings .......................................................... 95

Table 23 Create Static Subscriber Account: Generate Automatically ............................. 96

Table 24 Create Static Subscriber Account: Manual ...................................................... 97

Table 25 Static Account Operator ................................................................................... 100

Table 26 Static Account List ........................................................................................... 103

Table 27 Accounting: Dynamic Account Setting ............................................................. 105

Table 28 Dynamic Account List ...................................................................................... 108

Table 29 System Setting: Port-Location Mapping .......................................................... 113

Table 30 Advanced Setting: Credit Card ........................................................................ 117

Table 31 Customization: Login: Standard ....................................................................... 122

Table 32 Customization: Login Screen: Redirect ........................................................... 123

Table 33 Customization: Login Screen: Advanced ......................................................... 123

Table 34 Customization: Login Screen: Frame .............................................................. 125

Table 35 Customization: Service Selection Customization ............................................ 126

Table 36 Customization: Information Window ................................................................ 128

Table 37 Customization: Account Printout ...................................................................... 129

Table 38 Customization: Account Printout ...................................................................... 134

List of Tables 26

VSG-1200 V2 User’s Guide

Table 39 Credit Card Customization: Service Selection Page ....................................... 138

Table 40 Credit Card Customization: Successful Page .................................................. 140

Table 41 Credit Card Customization: Fail Page ............................................................. 141

Table 42 Customization: Output Bill ............................................................................... 143

Table 43 Bandwidth Management: Equal Share ............................................................ 146

Table 44 Portal Page ...................................................................................................... 148

Table 45 Advertisement .................................................................................................. 149

Table 46 Walled Garden ................................................................................................. 150

Table 47 Passthrough: Subscriber IP and MAC Address ............................................... 153

Table 48 Passthrough: Destination URL and IP ............................................................. 154

Table 49 Filter .................................................................................................................156

Table 50 Privilege User .................................................................................................. 158

Table 51 LAN Devices .................................................................................................... 161

Table 52 Advanced: Static Route ................................................................................... 165

Table 53 Advanced: Private LAN .................................................................................... 169

Table 54 Logs: Syslog .................................................................................................... 171

Table 55 Logs: Log Settings ........................................................................................... 172

Table 56 Logs: Log Format ............................................................................................. 173

Table 57 Advanced: Session Trace ................................................................................ 176

Table 58 Session Trace File Fields ................................................................................ 177

Table 59 SNMP .............................................................................................................. 180

Table 60 Miscellanea ...................................................................................................... 183

Table 61 System Status: System .................................................................................... 185

Table 62 System Status: Current User List ..................................................................... 187

Table 63 System Status: DHCP Clients .......................................................................... 188

Table 64 System Status: Session List ............................................................................ 188

Table 65 System Status: NAT Tool Table ........................................................................ 189

Table 66 System Status: LAN Device Status .................................................................. 190

Table 67 System Status: Billing Log ............................................................................... 191

Table 68 System Status: Static Route Table ................................................................... 194

Table 69 Firmware: Scheduled Upgrade ........................................................................ 205

Table 70 SSL Certificate ................................................................................................. 207

Table 71 SMT: Main Menu .............................................................................................. 216

Table 72 SMT: Control Key Descriptions ........................................................................ 217

Table 73 SMT: System Configuration ............................................................................. 217

Table 74 SMT: WAN Configuration: Static or Dynamic IP Address ................................ 219

Table 75 SMT: WAN Configuration: PPPoE ................................................................... 220

Table 76 SMT: WAN Configuration: PPTP ...................................................................... 221

Table 77 SMT: LAN Configuration .................................................................................. 222

Table 78 SMT: System Status ......................................................................................... 223

Table 79 Troubleshooting the Power LED ...................................................................... 230

Table 80 Troubleshooting the LAN LED ......................................................................... 230

Table 81 Troubleshooting the WAN LED ........................................................................ 231

27 List of Tables

VSG-1200 V2 User’s Guide

Table 82 Troubleshooting Console Port ......................................................................... 231

Table 83 Troubleshooting Web Configurator .................................................................. 232

Table 84 Troubleshooting Internet Browser Display ....................................................... 232

Table 85 Troubleshooting Internet Access ..................................................................... 232

Table 86 Troubleshooting the Statement Printer ............................................................ 233

Table 87 Product Specifications: General ....................................................................... 234

Table 88 Product Specifications: Performance and Management .................................. 235

Table 89 Product Specifications: Physical and Environmental ....................................... 235

Table 90 VSG-1200 V2 Supported VSAs ....................................................................... 243

Table 91 VSA-related Error Messages ........................................................................... 244

Table 92 SP-200: Report Printing Key Combination ...................................................... 247

Table 93 SP-200: System Status .................................................................................... 249

Table 94 SP-200: Network Statistics .............................................................................. 251

Table 95 Network Cable Types ....................................................................................... 252

Table 96 WAN Port Cable Ping Assignments ................................................................. 252

Table 97 LAN Port Cable Pin Assignments .................................................................... 253

Table 98 Console Port Pin Assignment .......................................................................... 254

Table 99 DB25 Male to DB9 Male Connector Ping Assignment ..................................... 254

Table 100 Classes of IP Addresses .................................................................................. 269

Table 101 Allowed IP Address Range By Class ............................................................... 269

Table 102 “Natural” Masks .............................................................................................. 270

Table 103 Alternative Subnet Mask Notation ................................................................... 270

Table 104 Two Subnets Example ..................................................................................... 271

Table 105 Subnet 1 .......................................................................................................... 271

Table 106 Subnet 2 .......................................................................................................... 272

Table 107 Subnet 1 .......................................................................................................... 272

Table 108 Subnet 2 .......................................................................................................... 273

Table 109 Subnet 3 .......................................................................................................... 273

Table 110 Subnet 4 .......................................................................................................... 273

Table 111 Eight Subnets .................................................................................................. 274

Table 112 Class C Subnet Planning ................................................................................. 274

Table 113 Class B Subnet Planning ................................................................................. 275

List of Tables 28

VSG-1200 V2 User’s Guide

29 List of Tables

VSG-1200 V2 User’s Guide

Preface

Congratulations on your purchase of the VSG-1200 V2 Vantage Service Gateway.

Note: Register your product online to receive e-mail notices of firmware upgrades and

information at www.zyxel.com for global products, or at www.us.zyxel.com for
North American products.

About This User's Guide

This manual is designed to guide you through the configuration of your VSG-1200 V2 for its
various applications. The web configurator parts of this guide contain background information
on features configurable by web configurator. The SMT parts of this guide contain background
information solely on features not configurable by web configurator.

Note: Use the web configurator or System Management Terminal (SMT) to configure

your VSG-1200 V2. Not all features can be configured through all interfaces.

Related Documentation

• Supporting Disk

Refer to the included CD for support documents.

• ZyXEL Glossary and Web Site

Please refer to www.zyxel.com for an online glossary of networking terms and additional
support documentation.

User Guide Feedback

Help us help you! E-mail all User Guide-related comments, questions or suggestions for
improvement to [e-mail] or send regular mail to The Technical Writing
Team, ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park,
Hsinchu, 300, Taiwan. Thank you!

Syntax Convention

• “Enter” means for you to type one or more characters. “Select” or “Choose” means for
you to use one of the predefined choices.

• Command and arrow keys are enclosed in square brackets.
carriage return key;

• Mouse action sequences are denoted using a comma. For example, “click the Apple icon,
Control Panels and then Modem” means first click the Apple icon, then point your
mouse pointer to Control Panels and then click Modem.

• For brevity’s sake, we will use “e.g.,” as a shorthand for “for instance”, and “i.e.,” for
“that is” or “in other words” throughout this manual.

• The VSG-1200 V2 Vantage Service Gateway may be referred to as “the VSG-1200 V2”
or, simply, as “the VSG” in this User’s Guide.

[ESC] means the Escape key and [SPACE BAR] means the Space Bar.

[ENTER] means the Enter, or

Preface 30

VSG-1200 V2 User’s Guide

Graphics Icons Key

VSG-1200 V2 Computer Notebook computer

Server Statement Printer Access Point

Switch Router Internet

31 Preface

Getting to Know Your VSG

This chapter introduces the features and applications of the VSG.

1.1 Introducing the VSG

The VSG-1200 V2 Vantage Service Gateway is a rack-mountable service gateway that
provides multiple subscribers easy Internet connectivity. The VSG is ideal for office, hotspot
and hotel network environments.

Hotspots are public areas, such as airports, hotels, coffee shops, where end users (or
subscribers) can access the Internet at any time.

VSG-1200 V2 User’s Guide

CHAPTER 1

1.2 Features

Your VSG provides the following features to accommodate subscribers with a variety of
network configurations with little or no technical support.

Property Management System (PMS)

Many hotels use a PMS to perform automatic billing of services the guests use such as room
service, mini-bar, pay-per-view TV or telephone calls. The VSG supports PMS from Micros
Fidelios.

CAS (Central Authentication Service)

The Hilton Group Corporation developed the High Speed Internet Access (HSIA) service to
provide Internet access service across its entire Hilton Group hotels. In order to use the HSIA,
hotel guest(s) must be authenticated through the proprietary CAS. The CAS performs both
user authentication and accounting.

Credit Card Billing

Your VSG is integrated with various online credit card billing service providers allowing you
to use a credit card service to authorize, process, and manage credit card transactions directly
through the Internet.

SSL Secure Login

With Secure Socket Layer (SSL) security activated upon login, data exchanged between the
VSG and client computers is encrypted and protected.

Chapter 1 Getting to Know Your VSG 32

VSG-1200 V2 User’s Guide

PPPoE Support (RFC2516)

PPPoE (Point-to-Point Protocol over Ethernet) emulates a dial-up connection. It allows your
ISP to use their existing network configuration with newer broadband technologies such as
ADSL. The PPPoE driver on the VSG is transparent to the computers on the LAN, which see
only Ethernet and are not aware of PPPoE; thus saving you from having to manage PPPoE
clients on individual computers.

PPTP Support

Point-to-Point Tunneling Protocol (PPTP) is a network protocol that enables secure transfer of
data from a remote client to a private server, creating a Virtual Private Network (VPN) using a
TCP/IP-based network. PPTP supports on-demand, multi-protocol and virtual private
networking over public networks, such as the Internet. Subscribers can use PPTP to connect to
a broadband modem to achieve access to high-speed data networks via a familiar "dialup
networking" user interface.

Reset Button

Use the reset button to restore the VSG back to its factory defaults.

Plug-and-Play Internet Access

The VSG provides Internet access to attached computer(s) without extra software installation
or computer configuration. In addition, with transparent proxy, the VSG resolves any
incompatible proxy settings.

Port Forwarding

Use this feature to forward incoming service requests to a server on your local network.

DHCP Support

DHCP (Dynamic Host Configuration Protocol) allows the individual computers (DHCP
clients) to obtain TCP/IP configuration at start-up from a centralized DHCP server. The VSG
has built-in DHCP server capability. It can assign IP addresses, an IP default gateway and
DNS servers to DHCP clients. The VSG can also act as a surrogate DHCP server (DHCP
Relay) where it relays IP address assignment from the actual real DHCP server to the DHCP
clients.

RADIUS (Remote Authentication Dial-In User Service)

The VSG allows you to maintain a central subscriber database on an external RADIUS server.
Subscriber accounting and authentication is then done through the external RADIUS server. In
addition, the VSG supports Vendor Specific Attributes (VSAs) that allows enforcement of
upload/download bandwidth limits or specific advertisement web page per subscriber.

33 Chapter 1 Getting to Know Your VSG

VSG-1200 V2 User’s Guide

Local Subscriber Database

The VSG allows you to maintain a subscriber database on the VSG without setting up an
external RADIUS server. Subscriber accounting and authentication are done using the local
subscriber database.

Accounting

Accounting can be done using an external RADIUS server or the built-in accounting feature.

Local Content and Advertising Links

Once connected to the network, the VSG can redirect the subscriber to a specified web site and
display advertising links. This can be a source of extra online advertising revenues and
increased business exposure.

Access Control (Walled Garden)

With the walled garden feature, subscribers are able to access predetermined web sites without
logging in. The VSG blocks full Internet access until the subscribers log in.

E-mail Forwarding

The VSG is able to forward and retrieve e-mail messages when the subscriber’s default e-mail
server is down or behind a firewall.

DNS Proxy

With DNS proxy, the VSG provides DNS redirection when a subscriber’s configured DNS
server is behind a firewall or located in a private Intranet.

NAT (Network Address Translation)

NAT (RFC 1631) is the translation of the IP address of a host in a packet, for example, the
source address of an outgoing packet, used within one network to a different IP address known
within another network.

The VSG automatically performs NAT on the LAN. You can also set the VSG to perform
NAT on the WAN for VPN (IPSec and PPTP) connections.

Static Route

Static routes tell the VSG how to forward IP traffic when you configure the TCP/IP
parameters manually and disable NAT.

Chapter 1 Getting to Know Your VSG 34

VSG-1200 V2 User’s Guide

Subscriber Login Page Customization

You can customize the subscriber login page according to your business needs. The advanced
settings allow you to include welcome messages, a company logo and basic formatting.

Dual-function Console Port

The VSG provides a console port for local management. You can also set this console port to
act as the printer port when connected to an external statement printer.

Web Configurator Management

The VSG comes with an embedded web-based configurator. It offers advanced management
features and allows you to manage the VSG remotely using Internet Explorer (version 5.5 or
above) or Netscape (version 6.0 or later).

System Maintenance

The firmware of the VSG can be upgraded via the web configurator or the SMT menu. The
Embedded FTP server is for firmware upgrades as well as configuration file backups and
restoration.

1.3 Applications

The following sections describe network application examples in which the VSG is used.

1.3.1 Internet Access for LAN Networks

With a broadband service account set up, the VSG allows the attached computers to enjoy high
speed Internet access.

Figure 1 Application: Internet Access for LAN Networks

35 Chapter 1 Getting to Know Your VSG

1.3.2 Internet Access in Public Areas

In public areas, such as a hotel, the VSG provides high speed Internet access to subscribers.
Account billing and authentication can be done either using an external RADIUS server or the
built-in billing function and local subscriber database.

Connect an access point (AP) to bridge the wired and the wireless network allowing wireless
stations to access the Internet through the VSG.

Figure 2 Application: Internet Access in Public Areas

VSG-1200 V2 User’s Guide

1.3.3 Hotel Application with PMS

The following figure depicts an example where the VSG is used in a hotel to provide Internet
service as one of their in-room services. Billing is done through an existing PMS in the hotel.

Figure 3 Application: Hotel

Chapter 1 Getting to Know Your VSG 36

VSG-1200 V2 User’s Guide

37 Chapter 1 Getting to Know Your VSG

Hardware Installation and

This chapter shows you how to install the VSG and make hardware connections.

2.1 Installation Options

The following sections describe the different installation options.

Note: Do NOT block the ventilation holes and leave adequate space on the rear and

sides of the VSG during hardware installation or when stacking.

VSG-1200 V2 User’s Guide

CHAPTER 2

Connection

2.1.1 Desktop Installation

1 Make sure the VSG is clean and dry. Set the VSG on a smooth space strong enough to

support the weight of the VSG and the connected cables. Make sure there is a power
outlet nearby.

2 Make sure there is enough clearance around the VSG to allow air circulation and the

attachment of cables and the power cord.

3 Attach the rubber feet to each corner on the bottom of the VSG. These rubber feet help

protect the VSG from shock or vibration and ensure space between devices when
stacking.

2.1.2 Rack Mount Installation

The VSG can be mounted on an EIA standard size, 19-inch rack or in a wiring closet with
other equipment. Follow the steps below to mount your VSG on a standard EIA rack using the
included rack-mounting kit.

1 Align one bracket with the holes on one side of the VSG and secure it with the bracket

screws (smaller than the rack-mounting screws. Similarly, attach the other bracket.

Chapter 2 Hardware Installation and Connection 38

VSG-1200 V2 User’s Guide

Figure 4 Rack Mount: Attaching Brackets

2 After attaching both mounting brackets, position the VSG in the rack by lining up the

holes in the brackets with the appropriate holes on the rack. Secure the VSG to the rack
with rack-mounting screws.

Figure 5 Rack Mount: Securing to the Rack

2.2 Hardware Connections

The following sections describe the hardware connections of the VSG.

2.2.1 Front Panel

The console, LAN and WAN ports, the reset button and the LEDs are located on the front
panel.

39 Chapter 2 Hardware Installation and Connection

Figure 6 Front Panel

VSG-1200 V2 User’s Guide

Console Port PMS Port RESET Button LED

2.2.1.1 LAN Port

The VSG has one 10/100Mbps Ethernet port. The LAN port is auto-crossover, so you may use
a crossover or a straight-through Ethernet cable to connect your VSG to a computer/external
switch.

If you want to connect more than one Ethernet devices to your VSG, you must use an external
hub/switch. Connect a LAN port on the VSG to a port on the switch using an Ethernet cable.

2.2.1.2 WAN Port

Connect the VSG to a network with broadband Internet service. The WAN port is auto­crossover, so you may use a crossover Ethernet cable or a straight-through Ethernet cable to
connect your VSG to a router.

2.2.1.3 Console Port

Local management of the VSG is done through the port labeled CONSOLE. It requires a
direct connection between the VSG and a computer via a console cable. Refer to chapters on
SMT configurations for more information.

WANLAN

You can also connect the CONSOLE port to a statement printer (also known as account
generator printer, sold separately) with a DB25-male to DB9-male adapter. A statement printer
allows you to create and print out subscriber accounts automatically. In addition, you can also
print the system status and the account and network reports. Set the function of the console
port in the web configurator (see Section 5.1 on page 56).

2.2.1.4 PMS Port

Use a DB9 console cable to connect the PMS port to a PMS system.

2.2.1.5 Reset Button

Use a pointed object to press this button in once to reset the VSG back to the factory defaults.

Note: All your custom configuration including the system usernames and passwords

will be erased.

This will NOT delete the subscriber database or the port-location mappings.

Chapter 2 Hardware Installation and Connection 40

VSG-1200 V2 User’s Guide

2.2.2 Front Panel LEDs

The following table describes the LEDs on the front panel. When turned on, all LEDs are
green unless otherwise specified.

Table 1 Front Panel LEDs

LED STATUS DESCRIPTION

PWR On The VSG is receiving power.

Off The VSG is not receiving power.

SYS On The system is functioning normally.

Blinking The system is not functioning properly.

Off The system is not ready or has failed.

LAN or WAN

10 On The port is connected at 10 Mbps.

Blinking The port is receiving or sending data.

Off The port is not connected to an Ethernet device.

100 On The port is connected at 100 Mbps.

Blinking The port is receiving or sending data.

Off The port is not connected to an Ethernet device.

2.2.3 Rear Panel

The power socket, the fan and a ventilation hole are located on the rear panel as shown next.

Note: Do NOT block the ventilation hole.

Figure 7 Rear Panel

2.2.4 Turning on the VSG

Connect the female end of the supplied power cord to the power socket on the back of the
VSG and the male end to an appropriate power source.

When the power source is turned on, the PWR LED on the front panel turns on.

41 Chapter 2 Hardware Installation and Connection

CHAPTER 3

The Web Configurator

This chapter introduces how to access the web configurator and perform general system
configuration.

3.1 Introducing the Web Configurator

The web configurator is best viewed with Internet Explorer (version 5.5 or above) or Netscape
(version 6. or later).

Note: JavaScript support must be enabled.

VSG-1200 V2 User’s Guide

3.2 Accessing the Web Configurator

Follow the steps below to access the web configurator.

Note: The VSG allows only one web configurator session at a time.

1 Make sure your VSG is properly connected (refer to the instructions in Chapter 2 on page

38).

2 Launch your web browser and type the WAN or LAN IP address of the VSG as the web

site address. 192.168.1.1 is the default IP address for the WAN port and 10.59.1.1 is the
default IP address for the LAN port.

3 If you are using a different port number (between 8000 and 8099) for the web server, you

must also append the port number to the WAN IP address separated with a colon “:”, for
example, http://192.168.1.1:8080.

Figure 8 Entering IP Address in Internet Explorer

4 A login screen displays. Type “admin” (default) as the administrator user name and

"1234" (default) as the password and click Get Started ...

Chapter 3 The Web Configurator 42

VSG-1200 V2 User’s Guide

Note: The user name and password are case sensitive.

Figure 9 Web Configurator: Login

5 You should see the main screen as shown.

Figure 10 Web Configurator: Main Menu

Firmware
version

Note: If there is no activity for longer than five minutes after you log in, the VSG will

automatically log you out. If this happens, simply log back in again. You can
change the timeout period in the web configurator (refer to Chapter 7 on page

70).

3.3 Navigation Panel

The VSG web configurator provides two levels of navigation: the Configuration Menu panel
and a screen-specific link panel.

43 Chapter 3 The Web Configurator

3.3.1 The Navigation Panel

The navigation panel on the left of all web pages provides a consistent way to access the
configuration screens. Click each heading to expand the menu.

Figure 11 Web Configurator: Navigation Panel

3.3.2 Screen Specific Links

In some screens, a link panel displays on the top of the screen that allows you to navigate to
advanced configuration screens. An example is shown in the figure below.

Figure 12 Navigation Panel: Screen specific Links

VSG-1200 V2 User’s Guide

3.4 Screen Overview

The following table lists the various web configurator screens.

Table 2 Web Configurator: Screen Overview

SYSTEM SETTINGS

ADVANCED
SETTINGS

SYSTEM STATUS SYSTEM TOOLS

Chapter 3 The Web Configurator 44

VSG-1200 V2 User’s Guide

3.4.1 Saving Configuration Changes

In a configuration screen, you must click Apply to save the changes. A Success screen
displays when the configuration settings are saved to the VSG. Click back to return to the
previous screen.

Figure 13 Apply: Success

For specific settings (such as the device IP address, subscriber authentication method, etc.),
you will be prompted to restart the VSG after you click Apply in the configuration screen. A
Restart screen displays. Click Apply again to restart the VSG and make the changes take
effect.

Figure 14 Apply: Restart

3.5 System Login Accounts

There are four system accounts that you can use to log in to the VSG: administrator, account
manager, supervisor and super subscriber.

• The administrator account allows you full access to all system configurations. The default
administrator user name is “admin” and password “1234”.

• The account manager account is used for subscriber account management only. No
system configuration is allowed. This account is useful for front desk personnel (such as
in a hotel) for setting up subscriber accounts without tampering with the system
configuration. The default user name and password are “account”.

• With the supervisor account, you can only view the system status and change the
supervisor account password. The default user name are “supervisor”.

• The super subscriber account is used for testing the Internet connection between the VSG
and the ISP. There is no time limitation or billing imposed on this account. Thus anyone
who logs in with this account is able to gain Internet access for free. The default super
subscriber user name and password are “super”.

3.6 Changing System Login Passwords

Note: It is recommended that you change the system login passwords.

45 Chapter 3 The Web Configurator

VSG-1200 V2 User’s Guide

From the Main Menu screen, click System Tools and System Account. You can enter up to
20 alphanumerical characters for the account user name and password and they are case
sensitive.

Figure 15 System Tools: System Account

The following table describes the labels in this screen.

Table 3 System Tools: System Account

LABEL DESCRIPTION

Administrator
Account

Username Enter the user name for the administrative account. The default is admin.

Password Enter a new administrative account password. The default is 1234.

Confirm Enter the new administrator password again for confirmation.

Account Manager This account allows you to set up subscriber accounts. No system configuration

Username Enter the user name for the account manager account. The default is account.

Password Enter a new account manager password. The default is account.

Chapter 3 The Web Configurator 46

This account permits full access to all system configurations.

is allowed.

VSG-1200 V2 User’s Guide

Table 3 System Tools: System Account (continued)

LABEL DESCRIPTION

Confirm Enter the new administrator password again for confirmation.

Supervisor Account This account allows you to view device status only.

Username Enter the user name for the supervisor account. The default is supervisor

Password Enter a new supervisor password. The default is supervisor.

Confirm Enter the new administrator password again for confirmation.

Super Subscriber
Account

Super Subscriber Select Enable to activate this account.

Idle Timeout By default, the VSG automatically logs out a super subscriber after five minutes

Username Enter the user name for the account manager account. The default is super.

Password Enter a new account manager password. The default is super.

Confirm Enter the new administrator password again for confirmation.

Apply Click Apply to save the changes back to the VSG.

Once you have configured the Internet connection settings on the VSG, you
can use this account to test the Internet connection through the VSG.

Select Disable to deactivate this account.

of inactivity.
Enter a number (1 to 1440) to set the VSG to log out the super subscriber after

the specified inactivity timeout (in minutes).

3.7 Resetting the VSG

You can restore the device to the factory defaults in one of the following ways.

•The RESET button on the front panel of the VSG (press this button once). Use this
method for cases when the username and password of the VSG is not known (refer to

Section 2.2.1.5 on page 40).

• The web configurator (refer to Section 3.7 on page 47).

• The SMT (refer to Section 29.4 on page 200).

3.8 Restarting the VSG

Note: You must restart the VSG every time you change the system IP address or

upload a firmware or configuration file.

All unsaved changes will be lost once you restart the VSG.

In the Main Menu screen, click System Tools, Restart and click Apply.

47 Chapter 3 The Web Configurator

Figure 16 System Tools: Restart

3.9 Logging Out of the Web Configurator

In the Main Menu screen, click System Tools, Logout and click Apply to exit from the web
configurator.

Figure 17 System Tools: Logout

VSG-1200 V2 User’s Guide

Chapter 3 The Web Configurator 48

VSG-1200 V2 User’s Guide

49 Chapter 3 The Web Configurator

This chapter shows you how to configure the VSG for Internet access and user login.

4.1 Overview

As an Internet cafe owner, you want to set up the VSG in the store and provide Internet service
to customers. You have already signed up for Internet access from your local ISP and a DSL
modem is installed for Internet connection.

In-store Internet access is provided with a fee. You want to charge $5 per hour for Internet
access and allow customers to purchase up to 15 hours at a time. You create 10 customer
accounts and store them on the VSG which checks the account information before Internet
access is allowed.

VSG-1200 V2 User’s Guide

CHAPTER 4

Initial Setup Example

Figure 18 Initial Setup: Network Example

Modem

LAN

The following outlines the configuration steps.

1 You should have already made the hardware connections and turned on the VSG. Refer

to Chapter 2 on page 38 for more information.

2 Configure the VSG for Internet access using the information provided by your ISP.

3 Create a billing profile that charges $5 per hour of Internet access.

4 Set the VSG to prompt for and checl customer account information.

5 Create customer accounts on the VSG.

6 Log in as a customer for connection test.

WAN

4.2 Configure the VSG for Internet Access

Internet

In this section, you set the VSG to receive a dynamic WAN IP address from the ISP since the
ISP does not provide you with a public IP address or Internet access account information.

Chapter 4 Initial Setup Example 50

VSG-1200 V2 User’s Guide

1 Connect your computer to the LAN port on the VSG.

Launch your web browser and enter 10.59.1.1 (the default
LAN management IP address on the VSG).

2 A login screen displays. Type “admin” (default) as the

administrator user name and "1234" (default) as the
password and click Get Started ...

3 In the web configurator,

click System Setting >
WAN/LAN.

4 Select Get automatically

from a DHCP server in the
WAN Port Mode field.

5 Click Apply to save the

changes.

6 Click Apply again to restart

the VSG.

7 Log into the web configurator again and check that the VSG has obtained a WAN IP

address in the System Status screen.

4.3 Create a Billing Profile

Next you create a billing profile that charges $5 per hour for Internet access and allows
customers to purchase up to 15 hours of Internet access time.

1 Click System Setting > Billing to display the Billing Profile screen.

2 Change the Currency and Number of

decimal places fields if required.

3 To configure a new billing profile, click

Edit in a new entry.

51 Chapter 4 Initial Setup Example

4 The Billing Profile Setting

screen displays. In the Name
field, enter “Standard” for
identification.

5 Enter “$5/hr” in the

Description field.

6 Select hour and enter 5 in the

Charge field.

7 Enter 15 in the To field under

Selective Unit. Leave all other

fields to the defaults.

8 Click Apply and Close to save

the settings.

VSG-1200 V2 User’s Guide

9 In the Billing Profile screen,

you should see the name of the
profile you have just created.
Select Active to enable it and
click Apply to save the
settings.

4.4 Setting User Authentication Method

You want to configure the VSG to check user account information against the account
information stored on its database.

1 In the web configurator,

click System Setting >
Authentication.

2 Select Built-in

Authentication and use the

default scenario settings.

3 Click Apply to save the

settings.

Chapter 4 Initial Setup Example 52

VSG-1200 V2 User’s Guide

4 Click Apply again to restart the VSG.

4.5 Creating Customer Accounts

For initial setup, you want to configure 10 customer accounts (VIP1, VIP2, VIP3, .., VIP 10)
using the Standard billing profile on the VSG.

1 Click System Setting >

Accounting and click the
Create Static Account.

2 In the Prefix field, enter

“VIP” which will appear in the
account names.

3 To create 10 accounts, enter 1

the From field and enter 10 in
the To field.

4 In the Billing Profile field,

select Standard to apply the
profile you just created.

5 Select 6 in the Random

Password Length field to have the VSG generate a 6-character password for each

account.

6 Click Apply to generate the accounts. Click back.

7 To view the list of accounts created, click the Static Account List link. You should see

the new accounts and the generated passwords.

4.6 Customer Login Test

In this section, you log into the VSG as a customer and test the Internet connection.

53 Chapter 4 Initial Setup Example

VSG-1200 V2 User’s Guide

1 From the Static Account List screen, write down a customer account user name and

password.

2 Log out from the web configurator.

3 Make sure your computer is set to use a dynamic IP address and is connected to the LAN

port on the VSG.

4 Open a web browser and enter any web site address

(for example, www.zyxel.com).

5 A Welcome screen displays

prompting you to enter the
account information.

6 Enter the customer account

user name and password you
wrote down in step 1. Click Enter.

7 An Information Window screen displays. This

indicates that you have successfully logged into the VSG
and Internet access is allowed.

Chapter 4 Initial Setup Example 54

VSG-1200 V2 User’s Guide

55 Chapter 4 Initial Setup Example

This chapter describes the System screen where you can configure general device settings and
set up the system time and date.

5.1 General System Setting

The System screen displays first when you access the web configurator.

The Domain Name entry is what is propagated to the DHCP clients on the LAN. If you leave
this blank, the domain name obtained by a DHCP server is used. While you must enter the host
name (System Name) on each individual computer, the domain name can be assigned from the
VSG via DHCP.

VSG-1200 V2 User’s Guide

CHAPTER 5

System

Figure 19 System Setting: System

Chapter 5 System 56

VSG-1200 V2 User’s Guide

The following table describes the labels in this screen.

Table 4 System Setting: System

LABEL DESCRIPTION

System/ Host
Name

Domain Name Enter the domain name (if you know it) here. If you leave this field blank, the VSG

Location
Information

Location Name Enter a descriptive name of the location for identification purposes.

Address Enter the street address of the location where the VSG is installed.

57 Chapter 5 System

Enter a descriptive name (up to 32 characters) for identification purposes.

may obtain a domain name from a DHCP server.
The domain name entered by you is given priority over the DHCP server assigned

domain name.

Specify where the VSG is located and the person or administrator you can contact
in case you have problem using the VSG.

VSG-1200 V2 User’s Guide

Table 4 System Setting: System (continued)

LABEL DESCRIPTION

City Enter the name of the city where the VSG is installed.

State/Province Enter the name of the state or province where the VSG is installed.

Zip/Postal
Code

Country Enter the name of the country where the VSG is installed.

Contact Name Enter the name of the person to contact in case there is any problem with the VSG.

Contact
Telephone

Contact Fax Enter the fax number of the person to contact in case there is any problem with the

Contact Email Enter the e-mail address of the person to contact in case there is any problem with

Date/Time To manually set the system date and time, select the appropriate choices from the

Use NTP (Network
Time Protocol)
Time Server

Server IP/
Domain Name

Time Zone Select your time zone from the drop-down list box. This will set the time difference

Update Time Enter the number of hours between updates.

Daylight
Savings

Start Date Specify the month and day that your daylight-savings time starts on if you select

End Date Specify the month and day that your daylight-savings time ends on if you select

NAT (Network
Address
Translation)

IP Plug and
Play (iPnP
Technology)

DNS Fake IP
Reply

Enter the ZIP or postal code of the location where is the VSG is installed.

Enter the telephone number of the person to contact in case there is any problem
with the VSG.

VSG.

the VSG.

Date and Time drop-down list boxes.
Click Get from my Computer to set the time and date on the VSG to be the same

as the computer that you use to configure the VSG.
If you select Use NTP (Network Time Protocol) Time Server option and set the

necessary fields, you can click Get from NTP Server to update the time and date
on the VSG from the NTP time server.

Select this option to have the VSG get the date and time information from a time
server.

Enter the IP address or the domain name of the time server. Check with your ISP/
network administrator if you are unsure of this information.

between your time zone and Greenwich Mean Time (GMT).

Select this option if you use daylight savings time.
Daylight saving is a period from late spring to early fall when many countries set

their clocks ahead of normal local time by one hour to give more daytime light in
the evening.

Daylight Savings.

Daylight Savings.

NAT (RFC 1631) is the translation of the IP address of a host in a packet, for
example, the source address of an outgoing packet, used within one network to a
different IP address known within another network.

Select Enable to activate Network Address Translation (NAT). Enable this feature
to set your VSG to map multiple local IP addresses to one global IP address. This
is the default selection.

Select Disable to deactivate NAT.

Select this option to allow plug-and-play Internet access which means that
subscribers do not have to change their network settings. This feature is activated
by default.

Select this option to assign private IP address to a network device (such as the e­mail server). NAT will translate the private IP address to the public IP address on
the WAN.

Chapter 5 System 58

VSG-1200 V2 User’s Guide

Table 4 System Setting: System (continued)

LABEL DESCRIPTION

User Session
Limit

Layer 2 Isolation
Security

Console Type Use this field to set the function of the console port on the front panel of the VSG.

Console Port The fields in this section of the screen are applicable when you select Select the

You can set the VSG to limit the number of sessions each user can use at a time.
Select Unlimited to allow each user to use any number of sessions at a time.
Select the second option and enter the number of sessions (between 1 and 1024)

each user is allowed to use at a time.

If you activate NAT, select Enable in this field to prevent communication between
subscribers. This is the default selection.

Select Disable to deactivate layer 2 security and allow communication between
subscribers.

Select Console Setting when you connect the console port directly to a computer
for local management. This is the default setting.

Select Statement Printer and select the printer model when you connect the
console port a statement print.

fields below to configure the Console port.

Note: If you change the console port settings, make sure you also

make the same change to the terminal emulator software.

Bits per
second

Data bits Select a data bit from the drop-down list box.

Parity Select the parity from the drop-down list box.

Stop bits Select the stop bit from the drop-down list box.

Administrator
Authorized Access
IP Address

Multicast
Passthrough

Allow remote user
to ping the device

SSL Certificate Certificate Secure Socket Layer (SSL) security allows you to create a secure

Apply Click Apply to save the changes.

This field only applies when you select Console Setting in the Console Type
field.

Select a console port speed from the drop-down list box. Choices are 1200, 2400,
4800, 9600 (default), 14400, 19200, 38400, 57600 and 115200.

Select Any to use any computer to access the web configurator on the VSG.
Select Specify and then enter the IP address(es) or a range of IP addresses of the

computer(s) that is allowed to log in to configure the VSG.

Select Enable to allow multicast traffic to pass through the VSG. This may affect
your network performance.

Select Disable to prevent any multicast traffic from passing through the VSG. This
is the default setting.

Select Enable to respond to Ping requests from the LAN or WAN interface.
Select Disable to not respond to Ping requests from the LAN or WAN interface.

connection between the VSG and the client computer(s).
Select Default to use the default system-generated SSL certificate.
Select Custom Certificate to use a certificate obtained from a certificate authority.
Refer to Chapter 31 on page 206 for more information.

59 Chapter 5 System

LAN and WAN Setup

This chapter shows you how to configure the LAN and WAN ports on the VSG..

6.1 Factory Ethernet Defaults

The Ethernet parameters of the VSG are preset to the following values:

1 WAN IP address of 192.168.1.1 with subnet mask of 255.255.255.0.

2 LAN IP address of 10.59.1.1.

3 DHCP server enabled on the LAN with a 252 client IP address pool starting from

10.59.1.2

VSG-1200 V2 User’s Guide

CHAPTER 6

These parameters should work for the majority of installations. If you wish to change the
factory defaults or to learn more about TCP/IP, please read on.

6.2 LANs and WANs

A LAN (Local Area Network) is a computer network limited to the immediate area, usually
the same building or floor of a building. A WAN (Wide Area Network), on the other hand, is
an outside connection to another network or the Internet.

6.3 IP Address Assignment

A static IP is a fixed IP that you configure on the VSG. A dynamic IP is not fixed; the DHCP
server provides an IP address to the VSG each time it connects to the network. When an
Ethernet device is configured to obtain a dynamic IP address from a DHCP server, it is known
as a DHCP client.

6.3.1 IP Address and Subnet Mask

Like houses on a street that share a common street name, the computers on a LAN share one
common network number.

Where you obtain your network number depends on your particular situation. If the ISP or
your network administrator assigns you a block of registered IP addresses, follow their
instructions in selecting the IP addresses and the subnet mask.

Chapter 6 LAN and WAN Setup 60

VSG-1200 V2 User’s Guide

The Internet Assigned Number Authority (IANA) reserved a block of addresses specifically
for private use (refer to Section 6.3.2 on page 61); please do not use any other number unless
you are told otherwise. Let’s say you select 192.168.1.0 as the network number; which covers
254 individual addresses, from 192.168.1.1 to 192.168.1.254 (zero and 255 are reserved). In
other words, the first three numbers specify the network number while the last number
identifies an individual computer on that network.

The subnet mask specifies the network number portion of an IP address.

6.3.2 Private IP Addresses

Every machine on the Internet must have a unique address. If your networks are isolated from
the Internet, for example, only between your two branch offices, you can assign any IP
addresses to the hosts without problems.

However, the Internet Assigned Numbers Authority (IANA) has reserved the following three
blocks of IP addresses specifically for private networks:

10.0.0.0 — 10.255.255.255

172.16.0.0 — 172.31.255.255

192.168.0.0 — 192.168.255.255

You can obtain your IP address from the IANA, from an ISP or it can be assigned from a
private network. If you belong to a small organization and your Internet access is through an
ISP, the ISP can provide you with the Internet addresses for your local networks. On the other
hand, if you are part of a much larger organization, you should consult your network
administrator for the appropriate IP addresses.

Regardless of your particular situation, do not create an arbitrary IP address; always follow the
guidelines above.

Note: For more information on address assignment, please refer to RFC 1597,

Address Allocation for Private Internets and RFC 1466, Guidelines for
Management of IP Address Space.

6.3.3 DNS Server Address

DNS (Domain Name System) is for mapping a domain name to its corresponding IP address
and vice versa, for example, the IP address of www.zyxel.com is 204.217.0.2. The DNS server
is extremely important because without it, you must know the IP address of a machine before
you can access it. The DNS server addresses that you enter in the DHCP setup are passed to
the client machines along with the assigned IP address and subnet mask.

There are two ways that an ISP disseminates the DNS server addresses. The first is for an ISP
to tell a customer the DNS server addresses, usually in the form of an information sheet, when
s/he signs up. The second is to obtain the DNS server information automatically when a
computer is set as a DHCP client.

61 Chapter 6 LAN and WAN Setup

6.4 LAN Configuration

To configure the LAN settings on the VSG, click System Settings and WAN/LAN to display
the screen as shown.

Figure 20 System Settings: WAN/LAN: LAN Configuration

VSG-1200 V2 User’s Guide

The following table describes the LAN-related fields in this screen.

Table 5 System Settings: WAN/LAN: LAN Configuration

FIELD DESCRIPTION

LAN

IP Address Enter the LAN IP address of the VSG in dotted decimal notation. The default is

Subnet Mask Enter the LAN subnet mask in dotted decimal notation. The default is 255.0.0.0.

10.59.1.1.

Note: You must restart the VSG if you change the IP address.

If you set the VSG as a DHCP server on the LAN, the VSG will automatically
change the LAN DHCP settings based on the new LAN IP address.

6.5 WAN Configuration

To configure the WAN settings on the VSG, click System Settings and WAN/LAN. The
WAN/LAN screen varies depending on the settings in the WAN Port Mode field.

6.5.1 WAN MAC Address

Use the WAN/LAN screen to configure the MAC address of the WAN port by either setting
the VSG to use the factory default or specify the MAC address of a computer on the LAN.

Chapter 6 LAN and WAN Setup 62

VSG-1200 V2 User’s Guide

Figure 21 System Settings: WAN/LAN: WAN MAC Address

The following table describes the related field in this screen.

Table 6 System Settings: WAN/LAN: WAN MAC Address

FIELD DESCRIPTION

WAN MAC Address Select Default to use the factory assigned MAC address.

If your ISP requires MAC address authentication, select Change to and enter
the MAC address of a computer on the LAN in the fields provided.

6.5.2 WAN Port Mode: Dynamic/Fixed IP Address

Use the WAN/LAN screen to change the WAN IP address settings.

63 Chapter 6 LAN and WAN Setup

VSG-1200 V2 User’s Guide

Figure 22 System Settings: WAN/LAN: Dynamic/Static WAN IP Address

The following table describes the related labels in this screen.

Table 7 System Settings: WAN/LAN: WAN IP

FIELD DESCRIPTION

WAN Port Mode

Get automatically from a
DHCP server

Use fixed IP address Select this option to set the VSG to use a static (or fixed) IP address. This is

IP Address Enter the static IP address in dotted decimal notation. The default WAN IP

Subnet Mask Enter the subnet mask in dotted decimal notation.

Default IP Gateway Enter the IP address of the default gateway device.

Primary/Secondary DNS
Server

Select this option to set the VSG to act as a DHCP client on the WAN. The
VSG obtains TCP/IP information (IP address, DNS server information, etc.)
from a DHCP server.

the default setting.

address is 192.168.1.1.

Enter the IP addresses of the primary and/or secondary DNS servers.

6.5.3 WAN Port Mode: PPPoE

Point-to-Point Protocol over Ethernet (PPPoE) functions as a dial-up connection. PPPoE is an
IETF (Internet Engineering Task Force) draft standard specifying how a host personal
computer interacts with a broadband modem (for example DSL, cable, wireless, etc.) to
achieve access to high-speed data networks. It preserves the existing Microsoft Dial-Up
Networking experience and requires no new learning or procedures.

Chapter 6 LAN and WAN Setup 64

VSG-1200 V2 User’s Guide

For the service provider, PPPoE offers an access and authentication method that works with
existing access control systems (for instance, RADIUS). For the user, PPPoE provides a login
and authentication method that the existing Microsoft Dial-Up Networking software can
activate, and therefore requires no new learning or procedures for Windows users.

One of the benefits of PPPoE is the ability to let end users access one of multiple network
services, a function known as dynamic service selection. This enables the service provider to
easily create and offer new IP services for specific users.

Operationally, PPPoE saves significant effort for both the subscriber and the ISP/carrier, as it
requires no specific configuration of the broadband modem at the subscriber’s site.

By implementing PPPoE directly on the VSG (rather than individual computers), the
computers on the LAN do not need PPPoE software installed, since the VSG does that part of
the task. Furthermore, with NAT, all of the LAN's computers will have Internet access.

Figure 23 System Settings: WAN/LAN: PPPoE

The following table describes the related fields in this screen.

Table 8 System Settings: WAN/LAN: PPPoE

FIELD DESCRIPTION

WAN Port Mode

PPPoE Select this option to activate PPPoE support.

65 Chapter 6 LAN and WAN Setup

Table 8 System Settings: WAN/LAN: PPPoE (continued)

FIELD DESCRIPTION

Username Enter the user name exactly as assigned by your ISP.

If the name is assigned in the form user@domain where domain identifies a
service name, then enter both components exactly as given.

Password Enter the password associated with the user name above.

PPP MTU Setting Enter the size of a Maximum Transmission Unit (MTU).

TCP MSS Setting Enter the size of the Maximum Segment Size (MSS).

Service Name Enter the name of your PPPoE service.

Connect on Demand Select this option when you don’t want the connection up all the time and specify

an idle timeout in the Max Idle Time field (maximum 65535 minutes). This is the
default setting with an idle timeout of 10 minutes.

Keep Alive Select this option when you want the Internet connection up all the time and

specify a redial period in the Redial Period field (maximum 65535 seconds).
When disconnected, the VSG will attempt to bring up the connection after the
redial period.

6.5.4 WAN Port Mode: PPTP

VSG-1200 V2 User’s Guide

Point-to-Point Tunneling Protocol (PPTP) is a network protocol that enables transfers of data
from a remote client to a private server, creating a Virtual Private Network (VPN) using TCP/
IP-based networks.

PPTP supports on-demand, multi-protocol, and virtual private networking over public
networks, such as the Internet.

Chapter 6 LAN and WAN Setup 66

VSG-1200 V2 User’s Guide

Figure 24 System Settings: WAN/LAN: PPTP

The following table describes the related fields in this screen.

Table 9 System Settings: WAN/LAN: PPTP

FIELD DESCRIPTION

WAN Port Mode

PPTP Select this option to activate PPTP support. Refer to Section 6.5.4 on page 66

PPTP Local IP Address Enter the IP address assigned to you.

PPTP Local Subnet
Mask

PPTP Local Default
Gateway

Username Enter the user name exactly as your ISP assigned. If assigned a name in the

Password Enter the password associated with the user name above.

PPP MTU Setting Enter the size of a Maximum Transmission Unit (MTU).

67 Chapter 6 LAN and WAN Setup

for more information.

Enter the subnet mask assigned to you.

Enter the IP address of the gateway device.

form user@domain where domain identifies a service name, then enter both
components exactly as given.

VSG-1200 V2 User’s Guide

Table 9 System Settings: WAN/LAN: PPTP (continued)

FIELD DESCRIPTION

TCP MSS Setting Enter the size of the Maximum Segment Size (MSS).

Connections ID/Name Enter your identification name of the PPTP server assigned to you by the ISP.

Connect on Demand Select this option when you don’t want the connection up all the time and

Keep Alive Select this option when you want the Internet connection up all the time and

specify an idle timeout in the Max Idle Time field (maximum 65535 minutes).
This is the default setting with an idle timeout of 10 minutes.

specify a redial period in the Redial Period field (maximum 65535 seconds).
When disconnected, the VSG will attempt to bring up the connection after the
redial period.

Chapter 6 LAN and WAN Setup 68

VSG-1200 V2 User’s Guide

69 Chapter 6 LAN and WAN Setup

This chapter shows you how to configure the internal web server and set up DHCP settings
and email server redirect on the VSG..

7.1 DHCP Configuration

DHCP (Dynamic Host Configuration Protocol) allows the individual clients (Ethernet device)
to obtain the TCP/IP configuration from a centralized DHCP server. The VSG has built-in
DHCP server capability, which means it can assign IP addresses, an IP default gateway and
DNS servers to computer systems that support the DHCP client when this feature is activated.
The VSG can also act as a surrogate DHCP server where it relays IP address assignment from
the actual DHCP server to the clients.

VSG-1200 V2 User’s Guide

CHAPTER 7

Server

7.1.1 Public and Private Address Assignment

When you configure the VSG as a DHCP server, you can set the VSG to assign private or
public IP addresses to subscriber computer(s) connected to the LAN port.

In most cases, the VSG assigns private IP address to subscriber computer(s) connected on the
LAN. When the subscribers access the Internet, NAT is applied. This allows multiple
computers to share one Internet connection.

With public IP address assignment through DHCP, the VSG assigns public IP addresses to
subscribers connected on the LAN. In this case, the VSG works as a bridge and NAT is NOT
applied on the traffic. However, you need to obtain multiple public IP addresses (one for the
VSG and one for each computer) from your ISP before you can use this feature.

7.1.2 Server Configuration

Use the Server Configuration screen to set the embedded web server, the LAN DHCP server
and specify the e-mail server for e-mail redirection on the VSG.

Click System Settings and Server to display the screen as shown next.

Chapter 7 Server 70

VSG-1200 V2 User’s Guide

Figure 25 System Settings: Server

The following table describes the labels in this screen.

Table 10 System Settings: Server

LABEL DESCRIPTION

Web Server

Server Port Specify the port number of the embedded web server on the VSG for

accessing the web configurator. The default port number is 80.
Enter a number between 8010 and 8060 to access the web configurator

behind a NAT-enabled network. If you enter a number between 8010
and 8060, you need to append the port number to the WAN or LAN port
IP address to access the web configurator. For example, if you enter
“8010” as the web server port number, then you must enter “http://
www.192.168.1.1:8010” where 192.168.1.1 is the WAN or LAN port IP
address.

SSL Security Security Secure Socket Layer (SSL) security allows you to create a

secure connection between the VSG and the client computer(s). Refer to

Chapter 31 on page 206 for more information.

Select this option to activate SSL security. By default, SSL login security
is disabled.

71 Chapter 7 Server

Table 10 System Settings: Server (continued)

LABEL DESCRIPTION

VSG-1200 V2 User’s Guide

Administrator Idle­Timeout

Specify how many minutes (between 1 and 1440) the web configuration
can be left idle before the session times out. After it times out you have
to log in with your username and password again. Very long idle
timeouts may have security risks.

Note: This does NOT apply to the SMT management

session.

DHCP Server Select the DHCP mode on the LAN.

Disable Select this option to disable DHCP server on the LAN.

DHCP Relay Select this option to set the VSG to forward network configuration

requests to a DHCP server on the LAN network. Then configure the
DHCP Server IP Address field.

DHCP Server IP Address If you select DHCP Relay, enter the IP address of the real DHCP server.

DHCP Server (Private) Select this option to set the VSG to assign network information (such as

IP Pool Start Address Enter the first of the continuous addresses in the IP address pool. The

Pool Size This field specifies the size or count of the IP address pool. Enter a

Lease Time (Private) Specify the time (in minutes between 1 and 71582788) a DHCP client is

Primary/Secondary DNS
IP Address

IP address, DNS information etc.) to Ethernet device(s) connected to the
LAN port. This is the default setting.

default is 10.59.1.2 (based on the default management LAN IP address
of 10.59.1.1).

number not greater than 512.

allowed to use an assigned IP address. When the lease time expires, the
DHCP client is given a new, unused IP address.

Enter the IP address of the DNS server(s) in the Primary DNS IP

Address and/or Secondary DNS IP Address fields.

Note: You must specify a DNS server.

DHCP Server (Public) Select this option if you want to assign public IP address(es) to the

computer(s) connected on the LAN port. The VSG does not apply NAT
on traffic using public IP address assigned on the LAN.

Note: You must obtain more than one public IP address

from your ISP.

You need to configure a billing profile with the public service type (see

Section 10.1.1 on page 88).

IP Pool Start Address Enter the first of the continuous addresses in the public client IP address

pool.
Make sure the IP pool addresses are in the same range as the WAN IP

address of the VSG. If they are in different IP ranges, this feature is
disabled. If you are given a range of public IP addresses, do not include
the VSG’s WAN IP address in the address pool.

Pool Size This field specifies the size or count of the IP address pool. Enter a

number not greater than 512.

Lease Time (Public) Specify the time (in minutes between 1 and 71582788) a DHCP client is

allowed to use an assigned IP address. When the lease time expires, the
DHCP client is given a new, unused IP address.

E-mail Server Redirect You can set the VSG to redirect and send subscriber's E-mail via a

specified e-mail server. This feature allows subscribers to send E-mail
via the local E-mail server when their default e-mail server is not working
or prevented by relay restrictions.

Chapter 7 Server 72

VSG-1200 V2 User’s Guide

Table 10 System Settings: Server (continued)

LABEL DESCRIPTION

IP Address or Domain
Name

SMTP Port Specify the port number (25 is the default) for SMTP (Simple Mail

Apply Click Apply to save the settings.

Specify the IP address or the domain name of the e-mail server to which
the VSG forwards e-mail.

Transfer Protocol). Enter a number between 2500 and 2599.

73 Chapter 7 Server

This chapter shows how to configure Network Address Translation (NAT) on the WAN for
VPN packets.

8.1 NAT Overview

NAT (Network Address Translation - NAT, RFC 1631) is the translation of the IP address of a
host in a packet, for example, the source address of an outgoing packet, used within one
network to a different IP address known within another network.

8.1.1 NAT Definitions

VSG-1200 V2 User’s Guide

CHAPTER 8

NAT Pool

Inside/outside denotes where a host is located relative to the VSG, for example, the computers
of your subscribers are the inside hosts, while the web servers on the Internet are the outside
hosts.

Global/local denotes the IP address of a host in a packet as the packet traverses a router, for
example, the local address refers to the IP address of a host when the packet is in the local
network, while the global address refers to the IP address of the host when the same packet is
traveling in the WAN side.

Note that inside/outside refers to the location of a host, while global/local refers to the IP
address of a host used in a packet. Thus, an inside local address (ILA) is the IP address of an
inside host in a packet when the packet is still in the local network, while an inside global
address (IGA) is the IP address of the same inside host when the packet is on the WAN side.
The following table summarizes this information.

Table 11 NAT Definitions

ITEM DESCRIPTION

Inside This refers to the host on the LAN.

Outside This refers to the host on the WAN.

Local This refers to the packet address (source or destination) as the packet travels on the

LAN.

Global This refers to the packet address (source or destination) as the packet travels on the

WAN.

NAT never changes the IP address (either local or global) of an outside host.

Chapter 8 NAT Pool 74

VSG-1200 V2 User’s Guide

8.1.2 What NAT Does

In the simplest form, NAT changes the source IP address in a packet received from a
subscriber (the inside local address) to another (the inside global address) before forwarding
the packet to the WAN side. When the response comes back, NAT translates the destination
address (the inside global address) back to the inside local address before forwarding it to the
original inside host. Note that the IP address (either local or global) of an outside host is never
changed.

The global IP addresses for the inside hosts can be either static or dynamically assigned by the
ISP. In addition, you can designate servers, for example, a web server and a telnet server, on
your local network and make them accessible to the outside world. If you do not define any
servers, NAT offers the additional benefit of firewall protection. With no servers defined, your
VSG filters out all incoming inquiries, thus preventing intruders from probing your network.
For more information on IP address translation, refer to RFC 1631, The IP Network Address
Translator (NAT).

8.1.3 How NAT Works

Each packet has two addresses – a source address and a destination address. For outgoing
packets, the ILA (Inside Local Address) is the source address on the LAN, and the IGA (Inside
Global Address) is the source address on the WAN. For incoming packets, the ILA is the
destination address on the LAN, and the IGA is the destination address on the WAN. NAT
maps private (local) IP addresses to globally unique ones required for communication with
hosts on other networks. It replaces the original IP source address in each packet and then
forwards it to the Internet. The VSG keeps track of the original addresses and port numbers so
incoming reply packets can have their original values restored.

8.1.4 VPN and NAT

A VPN (Virtual Private Network) provides secure communications between sites without the
expense of leased site-to-site lines. A secure VPN is a combination of tunneling, encryption,
authentication, access control and auditing technologies/services used to transport traffic over
the Internet or any insecure network that uses the TCP/IP protocol suite for communication.

The VSG allows subscribers to create a VPN tunnel to a remote site.

Note: For IPSec, the VSG does not support AH protocol.

By default, the VSG performs NAT on the LAN; mapping multiple private LAN addresses to a
single public address on the WAN. This prevents subscribers from creating multiple VPN
connections to a remote VPN device that allows only one VPN connection per source IP
address.

75 Chapter 8 NAT Pool

In order to allow subscribers to establish multiple VPN connections to a remote VPN device
with single-connection-per-source limitation, set the VSG to perform NAT on the WAN. You
need to configure NAT address pool for use with VPN connections on the WAN port. The
VSG automatically maps one/more private IP addresses to one/more public IP addresses for
VPN packets. The following table describes the NAT mapping types on the WAN for VPN
packets.

Table 12 WAN NAT Mapping Types for VPN

TYPE DESCRIPTION

One-to-One For VPN connections to the same remote VPN device, the VSG maps each private

LAN IP address to one public WAN IP address.

One-to-Many For VPN connections to different remote VPN devices, the VSG maps multiple private

LAN IP address to one public WAN IP address.

8.2 NAT Examples

The following sections describe some NAT address mapping examples for VPN connections.

VSG-1200 V2 User’s Guide

8.2.1 Example 1: One-to-One

The figure below shows an example where the two subscribers S1 and S2 tries to establish
secure VPN connections to the same VPN server V1 at the same time. For example, the VSG
is using a public IP address of 211.21.21.1
address translation on the WAN.

Figure 26 NAT Example: One-to-One

The following table shows the address mapping.

Table 13 NAT Example: One-to-One

SUBSCRIBER ORIGINAL SOURCE IP TRANSLATED SOURCE IP

S1 10.59.1.2 211.21.21.2

S2 10.59.1.3 221.21.21.3

1

. In this case, the VSG performs One-to-One IP

1. All public IP address discussed are for examples only.

Chapter 8 NAT Pool 76

VSG-1200 V2 User’s Guide

8.2.2 Example 2: Many-to-One

The figure below shows an example where the two subscribers S1 and S2 try to establish a
secure VPN connection to VPN servers V1 and V2 respectively at the same time. In this case,
the VSG performs Many-to-One IP address translation on the WAN since the destination
address is different.

Figure 27 NAT Example: Many-to-One

The following table shows the address mapping.

Table 14 NAT Example: Many-to-One

SUBSCRIBER ORIGINAL SOURCE IP TRANSLATED SOURCE IP

S1 10.59.1.2 211.21.21.2

S2 10.59.1.3 211.21.21.2

8.2.3 Example 3: One-to-One and Many-to-One

The figure below shows an example where subscriber S1 tires to connect to VPN server V1
while subscriber S2 and S3 try to connect to the same VPN server V2 at the same time. In this
case, subscribers S1 and S2 map to the same WAN IP address since the destination is different
while subscriber S3 maps to a different WAN IP address.

Figure 28 NAT Example: One-to-One and Many-to-One

The following table shows the address mapping.

77 Chapter 8 NAT Pool

Table 15 NAT Example: One-to-One and Many-to-One

SUBSCRIBER ORIGINAL SOURCE IP TRANSLATED SOURCE IP

S1 10.59.1.2 211.21.21.2

S2 10.59.1.3 211.21.21.2

S3 10.59.1.4 211.21.21.3

8.3 NAT Pool Setup

Note: You only need to set the NAT address pool if the remote VPN server(s) allows

only one connection per source IP address.

You need to acquire additional public IP address(es) from your ISP to create
NAT pool(s).

To set the NAT address pool, click System Settings and NAT Pool in the navigation panel. A
screen displays as shown next.

VSG-1200 V2 User’s Guide

Figure 29 System Settings: NAT Pool

The following table describes the labels in this screen.

Table 16 System Settings: NAT Pool

LABEL DESCRIPTION

Disable Select this option to deactivate this feature. Subscribers are not be able to establish

Enable Select this option to perform address translation on the WAN to allow subscribers to

multiple connections simultaneously to the same VPN server (that has the single­connection-per-source limitation).

establish simultaneous connections to the same VPN server (that has the single­connection-per-source limitation).

You must then configure the address pool for VPN connections.

Chapter 8 NAT Pool 78

VSG-1200 V2 User’s Guide

Table 16 System Settings: NAT Pool (continued)

LABEL DESCRIPTION

Start/End IP Specify the beginning and ending IP addresses of the address pool in the fields

No. This read-only field displays the index number.

Address List This read-only field displays the address pool.

Delete Click Delete to remove the selected entry(ies).

Apply Click Apply to save the changes.

provided and click Add to List.
The following shows three NAT pool examples if the VSG is using a WAN public IP

address of 211.21.21.1:
Group 1: 211.21.21.2 ~ 211.21.21.6 (five IP addresses)
Group 2: 211.21.21.20 ~ 211.21.21.29 (ten IP addresses)
Group 3: 211.21.21.60 ~ 211.21.21.69 (ten IP addresses)
Group 4: 211.21.21.75 ~ 211.21.21.76 (two IP addresses)

Note: You can configure up to ten address pools (each pool can

contain up to 50 addresses) on the VSG.

79 Chapter 8 NAT Pool

This chapter shows you how to set up subscriber authentication on the VSG.

9.1 Authentication Overview

You can set the VSG to authenticate subscriber in a number of ways:

• User agreement

• CAS (Central Authentication Service)

• Built-in authentication

• Remote RADIUS server

VSG-1200 V2 User’s Guide

CHAPTER 9

Authentication

By default, subscriber authentication is disabled. This allows all subscribers to access the
Internet without entering account username and password.

9.1.1 User Agreement

In cases where authentication is not required and anyone can access the Internet through the
VSG, you can set the VSG to redirect client users to an Internet service usage agreement page.
Users must accept the service usage agreement before they can access the Internet.

9.1.2 CAS (Central Authentication Service)

The Hilton Group Corporation developed the High Speed Internet Access (HSIA) service to
provide Internet access service across its entire Hilton Group hotels.

In order to use the HSIA, hotel guest(s) must be authenticated through the proprietary CAS (in
the local hotel network or the remote network). The CAS performs both user authentication
and accounting.

Figure 30 CAS Example

The following summarizes the communication steps before Internet access is allowed.

1 A hotel guest launches a web browser.

Chapter 9 Authentication 80

VSG-1200 V2 User’s Guide

2 The VSG redirects the guest’s web browser to a login screen at CAS.

3 The guest enters the provided access information.

4 Once authentication is successful, CAS informs VSG to allow Internet access to the

guest.

9.1.3 Built-in Authentication

The built-in authentication method is useful if you do not have a RADIUS server. You can use
the built-in subscriber database to manage the subscribers. With the built-in authentication, the
VSG provides three sets of preconfigured scenarios that you can choose for easy and simple
setup. For billing, use either a PMS or the built-in billing mechanism to set up accounting
information.

9.1.4 RADIUS

The VSG supports Remote Authentication Dial-In user Service (RADIUS). By integrating
RADIUS with the VSG, you can set up the subscriber database on the RADIUS server. In
addition to subscriber information, the subscriber database may hold the Internet usage time
period each subscriber is allocated. For example, when a subscriber logs in, the RADIUS
server will send the time allocation information (such as session time-out) to the VSG, which
uses this information to control the subscriber’s connection.

9.1.4.1 RADIUS Accounting

The VSG sends “accounting start” and “accounting stop” messages to the RADIUS server,
which uses these messages to accurately track subscriber Internet usage.

The VSG provides two accounting methods: Accumulation and Time to Finish.

•The Accumulation accounting method allows multiple re-logins until the allocated time
period or until the subscriber account is expired. The VSG accounts for the time the
subscriber logs in for Internet access.

•The Time to Finish accounting method is good for one-time logins. Once a subscriber
logs in, the VSG stores the MAC address of the subscriber’s computer for the duration of
the time allocated. Thus the subscriber does not have to enter the user name and password
again for re-login within the allocated time. Once activated, the subscriber account is
valid until the allocated time is reached even if the subscriber disconnects Internet access
for a certain period within the allocated time. For example, if Joe purchases a one-hour
time-to-finish account. He starts using the Internet for the first 20 minutes and then
disconnects Internet access to go to a 15-minute meeting. Then he only has 25 minutes
left on his account.

81 Chapter 9 Authentication

Figure 31 Accounting Usage Time

Time to Finish Accumulation

VSG-1200 V2 User’s Guide

Log in

A

B

Time

Usage Time = A + B + C + D + E Usage Time = A + C + E

C

D

E

Log out
Log in

Log out

Log in

Log out

9.1.4.2 Vendor Specific Attribute

With RADIUS authentication, you can define vendor specific attributes (VSAs) in addition to
the set of standard RADIUS attributes defined in RFC 2865 and RFC 2866. A VSA is an
attribute-value pair that is sent between a RADIUS server and the VSG. It is necessary you
define the VSAs on the RADIUS sever if you want the VSG to perform the following:

• Limit Download bandwidth per subscriber

• Limit Upload bandwidth per subscriber

• Limit Total traffic bandwidth allowed per subscriber

• Specify advertising web site per subscriber

• Enable/disable SMTP redirect

Note: Before you can make use of these functions on the VSG, configure the

proprietary VSAs on the RADIUS server. Refer to the documentation that
comes with your RADIUS server for more information.

Log in

A

B

C

D

E

Log out
Log in

Log out

Log in

Log out

See Appendix D on page 242 for more information on the VSAs.

9.2 Authentication Configuration

To configure the subscriber authentication method, click System Settings and Authentication
to display the screen as shown next.

Chapter 9 Authentication 82

VSG-1200 V2 User’s Guide

Figure 32 System Settings: Authentication

83 Chapter 9 Authentication

VSG-1200 V2 User’s Guide

The following table describes the labels in this screen.

Table 17 System Settings: Authentication

LABEL DESCRIPTION

No Authentication Select this option to disable subscriber authentication. Subscribers can

access the Internet without entering user names and passwords.
This is the default setting.

User Agreement Select User Agreement to direct a subscriber to an Internet service usage

Redirect Page URL
Link

Standard User
Agreement Page

Built-in Authentication Select this option to authenticate the subscribers using the local subscriber

agreement page before accessing the Internet.

Specify the URL of the user agreement page in the field provided. Click
Code to display the HTML source code of a default sample page.

Select this option to use the pre-configured user agreement page on the
VSG.

database. Then click Select option to choose a per-configured setting in
the Current Preset option field.

Note: When you select this option, you must also configure

the Billing and Accounting screens.

Current preset option This field is available when you select Built-in Authentication.

This field displays the current pre-configured setting for the built-in
authentication. To select a predefined option, click Select option to open
the Scenario Guide screen (refer to Figure 33 on page 86).

RADIUS Select this option to authenticate subscribers using a remote RADIUS

server. Then configure the following fields.

Check Local Account First Select this option to have the VSG authenticate a subscriber using the

local user database first. If the account information is not found, then the
VSG authenticates subscribers using the RADIUS server(s) specified.

Clear this check box to have the VSG authenticate subscribers using the
RADIUS server(s) only.

Accumulation Select this option for multiple re-login until the time allocated is used up. If

Time to Finish Select this option to allow each subscriber a one-time login. If a subscriber

Primary/Secondary
RADIUS Server

Authentication Port Specify the authentication port of the RADIUS server. The common port

Accounting Port Specify the accounting port of the RADIUS server. The common port

Secret Key Specify a password (up to 31 alphanumeric characters) as the key to be

a subscriber logs out and accesses the Internet again within the time
period specified in the Idle Timeout field, the subscriber does not have to
enter the user name and password again to log in.

logs out before the allocated time expires, the subscriber does not have to
enter the user name and password to access the Internet again.

Server IP Address Enter the IP address of a RADIUS server in dotted
decimal notation.

numbers are 1645 and 1812.

numbers are 1646 and 1813.

shared between the RADIUS server and the VSG.
The key is not sent over the network.

Note: This key must be the same on the RADIUS server and

the VSG.

Retry Attempts when
Primary fail

Specify the number of times (1 to 3) the VSG resends an authentication
request to the primary and/or secondary RADIUS servers.

Chapter 9 Authentication 84

VSG-1200 V2 User’s Guide

Table 17 System Settings: Authentication (continued)

LABEL DESCRIPTION

Accounting Service Select Enable from the drop-down list box to activate the accounting

Authentication Method Select either the CHAP or PAP authentication method from the drop-down

Vendor Specific
Attribute

Idle-Timeout The VSG automatically disconnects a computer from the network after a

SSL Login Page Security Select Enable to activate SSL security upon accessing the login screen so

Smart Client Support WISPr (WiFi Internet Service Provider Roaming) allows roaming

WISPr Smart Client Select this option to allow the VSG to accept incoming roaming

Login Mode Specify a login method for roaming subscribers.

Apply Click Apply to save the changes.

feature and enter the time (in minutes) between updates in the Update
every field.

Select Disable to de-activate the accounting feature.

list box.

In the Vendor Code field, specify a number for the vendor ID. This is an
IANA (Internet Assigned Numbers Authority) assigned number that
identifies the vendor or enterprise. Enter 890 for ZyXEL devices.

Select Send VSA together with Authentication Request to set the VSG
to include the VSA information in the authentication requests.

period of inactivity. The subscriber may need to enter the username and
password again before access to the network is allowed.

Specify the idle timeout between 1 and 1440 minutes. The default is 5
minutes.

that user names and passwords are encrypted before being transmitted to
the VSG.

Select Disable to de-activate SSL security for the subscriber login screen.
Refer to Chapter 31 on page 206 for more information.

subscribers to access different service provider networks for seamless
network connection.

subscribers.
Clear this check box to disable this feature. Your access network is not

available for roaming subscribers.

Select Replay Directly to display the VSG’s default login screen.
Select Proxy Reply with "Redirect Login Page" URL to redirect roaming

subscribers to the same login screen as specified in the Login Page
screen (see Section 15.2 on page 120 for more information).

Select Proxy Reply with "Redirect Login Page" URL and enter the URL
of the login page for roaming subscribers only.

9.2.1 Scenario Options

Note: This feature is for built-in authentication method only.

When you select Built-in Authentication in the Authentication screen, you must select a
pre-configured scenario option by clicking the Select option link to display a screen as shown
next.

Select a scenario option in the Items Check field and click Apply to save the settings. Then
proceed to configure the billing and accounting settings.

85 Chapter 9 Authentication

Figure 33 System: Authentication: Scenario Guide

VSG-1200 V2 User’s Guide

The following table describes each scenario.

Chapter 9 Authentication 86

VSG-1200 V2 User’s Guide

Table 18 System: Authentication: Scenario Guide

OPTION DESCRIPTION SAMPLE SUBSCRIBER LOGIN SCREEN

Scenario A Select this option to use PMS

billing with port-location mapping.
Once you configure the port­location mappings, subscribers are
able to access the Internet without
entering usernames and
passwords. Subscribers can
purchase additional time blocks
with different billing plans.

You can still create static or
dynamic accounts. However,
subscribers using the dynamic or
static accounts are prompted for
usernames and passwords.

Scenario B Select this option if you want to use

PMS billing without port-location
mapping. You must then create the
subscriber accounts. Subscribers
are prompted for their usernames
and passwords before Internet
access is allowed.

Subscribers can purchase
additional time blocks with different
billing plans.

Figure 34 Subscriber Login: Scenario A

Figure 35 Subscriber Login: Scenario B

Scenario C Select this option to use the VSG’s

built-in or credit card billing
function. No PMS device is
needed.

Figure 36 Subscriber Login: Scenario C

87 Chapter 9 Authentication

This chapter shows you how to set up subscriber billing profiles and PMS (Property
Management System) configuration.

10.1 Billing Overview

A billing profile contains information such as time unit, unit cost and/or account expiration
time. You must associate a subscriber account with a billing profile.

In addition, for PMS billing, subscribers may have a choice of purchasing additional time
blocks with different billing profiles you set and activate on the VSG.

VSG-1200 V2 User’s Guide

CHAPTER 10

Billing

10.1.1 Billing Profile

You can create up to ten billing profiles on the VSG. Click System Setting , Billing and the
Billing Profile link to display the screen as shown next.

Figure 37 System Setting: Billing: Billing Profile

Chapter 10 Billing 88

VSG-1200 V2 User’s Guide

The following table describes the labels in this screen.

Table 19 System Setting: Billing: Billing Profile

LABEL DESCRIPTION

Currency Specify the type of currency and/or dollar sign for billing.

Number of decimal
places

No This field displays the index number of a billing profile.

Active Select this check box to enable the billing profile.

Name This field displays the name of a billing profile.

Description This field displays a description of a billing profile.

Profile Setting Click Edit to edit the selected billing profile. Refer to Section 10.1.2 on page 89 for

Apply Click Apply to save the changes.

Specify the number of decimal places for the currency. The default is 2.

more information.

10.1.2 Configuring a Billing Profile

To edit a billing profile, click the Edit button in the Billing Profile screen to display the
configuration screen for the selected billing profile.

Figure 38 System Settings: Billing: Billing Profile Setting

89 Chapter 10 Billing

The following table descries the labels in this screen.

Table 20 System Settings: Billing: Billing Profile Setting

LABEL DESCRIPTION

VSG-1200 V2 User’s Guide

No This read-only field displays the index number of the billing profile.

Name Enter a descriptive name for the billing profile for identification purposes.

Description Enter a description for this billing profile

Price

Duration Select a time period (minute, hour, day, week, month or Unlimited) and enter the

Charge Specify the unit cost in this field.

Check Time Select Period Time Finish for time-to-finish billing method. Refer to Section 9.1.4

Selective
Unit

Bandwidth Limit

time unit in the field provided (not available for Unlimited).

on page 81 for more information.

Select Expired when and specify the time from the drop-down list box(es) for the
accumulate billing method. The subscriber accounts will be invalid once the
allocated time period is used up. This option is only available when you select the
Day, Week or Month option in the Period Time field.

Specify the range of time units (between 1 and 99) a subscriber is allowed to
purchase at any one time.

The range is presented as a drop-down list box in the information pop-up window.

Note: You must activate bandwidth management to use this feature.

Refer to Chapter 16 on page 144.

Set the fields below to configure the bandwidth limit for this billing profile.

Uplink
Bandwidth
Limitation

Downlink
Bandwidth
Limitation

To use a pre-defined option, select the first option and choose a bandwidth from the
drop-down list box.

To manually set the bandwidth, select the second option and specify the bandwidth
in the field provided.

To use a pre-defined option, select the first option and choose a bandwidth from the
drop-down list box.

To manually set the bandwidth, select the second option and specify the bandwidth
in the field provided.

Chapter 10 Billing 90

VSG-1200 V2 User’s Guide

Table 20 System Settings: Billing: Billing Profile Setting (continued)

LABEL DESCRIPTION

Service Type Select Private Service to set the VSG to assign private IP addresses to the

subscribers connected on the LAN.
Select Public Service to set the VSG to assign public IP addresses to the

subscribers connected on the LAN. You must have more than one public IP address
from your ISP.

Configure private and public DHCP IP address assignment in the Server screen.
Refer to Section 7.1.1 on page 70 for more information.

Reset Click Reset to restart configuring this screen again.

Apply Click Apply to save the changes.

10.2 PMS (Property Management System)

Many hotels use a PMS device to perform in-room billing for services (such as room services,
mini-bar, pay-per-view TV or telephone) that the guests use.

With PMS, the VSG allows subscribers to purchase additional time units online. In addition,
subscribers can select from a number of different billing plans.

To use PMS for billing, first connect the VSG to a PMS device using the PMS port (refer to

Chapter 2 on page 38), then configure the PMS settings on the VSG.

10.2.1 Port-Location Mapping

When you activate port-location mapping and PMS on the VSG, two charge modes are
available: per room and per subscriber.

Select Based on Room when location is important. If a subscriber disconnects from one
location and reconnects in another location, the VSG prompts for the user name and password
again.

Select Based on Subscriber to allow a subscriber to freely move between different locations
without prompting for user name and password.

10.2.2 PMS Configuration

Click System Setting, Billing and click the PMS Configuration link to display the screen as
shown next.

91 Chapter 10 Billing

Figure 39 System Setting: Billing: PMS Configuration

VSG-1200 V2 User’s Guide

The following table describes the labels in this screen.

Table 21 System Setting: Billing: PMS Configuration

LABEL DESCRIPTION

Charge Mode (only
for Port-Location
Mapping enabled)

When you set up Port-Location Mapping, your VSG offers two billing modes:
Based on Room and Based on Subscriber.

Select Based on Room when location is important. If a subscriber disconnects
from one location and reconnects in another location, the VSG prompts for the
user name and password again.

Select Based on Subscriber to allow a subscriber to freely move between
different locations without prompting for user name and password.

Note: You must activate the port-location mapping feature. Refer

to Chapter 13 on page 112.

Regenerate
password of static
account with PMS
checkout.

PMS Type Select a PMS system and specify the fields below (if available). Currently the

Micros Fidelio

Revenue Code Enter a revenue code (between 01 and 99).

Description Enter the description for the revenue. Refer to the user’s guide that comes with

This feature is applicable when you select Scenario B with Built-in
Authentication in the Authentication screen (see Figure 32 on page 83).

Select Enable to automatically generate a new password for the static account
when a subscriber checks out.

Select Disable to keep the password for the static account unchanged after a
subscriber checks out.

VSG supports Micros Fidelio, Spectrum MK II, Marriott and Proprietary.

your PMS device.

Chapter 10 Billing 92

VSG-1200 V2 User’s Guide

Table 21 System Setting: Billing: PMS Configuration (continued)

LABEL DESCRIPTION

Spectrum MK II

Revenue Code Enter a revenue code (between 01 and 99).

Description Enter a description to identify the service. For example, Internet.

Marriott

Revenue Code Enter a revenue code (between 01 and 99).

Reference Enter a description to identify the service. For example, Internet.

Proprietary Select this option if you are using a proprietary PMS system.

Speed of PMS
Interface

Bits per second Select the speed of the PMS port connection. The default is 9600.

Data bits Specify the data bits.

Parity Specify the parity.

Stop bits Specify the data stop bits.

Apply Click Apply to save the changes.

Set the fields below to configure the PMS port settings on the VSG.

Note: Make sure the port settings are the same on the VSG and

the connected PMS device.

10.3 Types of Subscriber Accounts

After you have set up the subscriber authentication methods and billing profile(s), you need to
create subscriber accounts. There are two types of subscriber accounts: static and dynamic.

• For static accounts, refer to Chapter 11 on page 94.

• For dynamic accounts, refer to Chapter 12 on page 104.

93 Chapter 10 Billing

CHAPTER 11

Static Subscriber Accounts

This chapter shows you how to set up and manage static subscriber accounts.

11.1 Static Subscriber Account Overview

Static accounts are useful in locations such as hotels where you can match an account user
name to a fixed location for easy management. Once a static subscriber account is created, it
stays permanently in the VSG unless deleted manually. You can generate static accounts
automatically or manually.

The following figure shows the links for accessing the static account configuration screens
when you click System Settings, Accounting and Static Accounts.

VSG-1200 V2 User’s Guide

Figure 40 Static Account: Links

11.2 Global Static Account Settings

To configure global static account settings, click the Static Account Setting link to display the
screen as shown.

Figure 41 Static Account Settings: Global Settings

Chapter 11 Static Subscriber Accounts 94

VSG-1200 V2 User’s Guide

The following table describes the labels in this screen.

Table 22 Static Account Settings: Global Settings

LABEL DESCRIPTION

Concurrent Access Select Allow concurrent access with one account to allow more than one

Customize Printout Click Customize printout text to set the account printout page. Refer to

Print To Select Statement Printer if you want to print the account information using a

Apply Click Apply to save the settings.

users to access the Internet using the same account at the same time. Then
specify the number of concurrent users from the Max. concurrent access drop­down list box.

The default number of concurrent access is 2 users per account.

“Account Printout” on page 129.

statement printer connected to the CONSOLE port on the VSG.
Select PC-Connected Printer if you want to print the account information using

a printer connected to a network computer.
Click on the icon to display a print preview.

11.3 Creating a Static Account

Click System Settings, Accounts, Static Accounts and Create Static Account to display the
screen as shown next.

Figure 42 System Settings: Create Static Subscriber Account

95 Chapter 11 Static Subscriber Accounts

VSG-1200 V2 User’s Guide

There are two ways to create static subscriber accounts as described in the following sections.

11.3.1 Generating Static Accounts Automatically

To generate a list of static subscriber accounts automatically, set the fields in Generate a
batch of static accounts in the Create Static Subscriber Account screen.

Figure 43 Create Static Subscriber Account: Generate Automatically

The following table describes the related labels in this screen.

Table 23 Create Static Subscriber Account: Generate Automatically

LABEL DESCRIPTION

Generate a batch of static accounts

Prefix Specify the starting characters affixed to the beginning of all account user names.

Postfix Specify the characters to append o the end of all account user names.

From Enter the first number of the range of static accounts.

Chapter 11 Static Subscriber Accounts 96

VSG-1200 V2 User’s Guide

Table 23 Create Static Subscriber Account: Generate Automatically (continued)

LABEL DESCRIPTION

To Enter the ending number of the range of static accounts.

Billing Profile Select a predefined billing profile from the drop-down list box.

Note: This drop-down list box displays active profiles only.

Refer to Section 10.1.1 on page 88 for more information.

Random
Password Length

Apply Click Apply to start generating the static accounts based on the above criterion.

The VSG automatically generates a password for each automatically created static
account.

Specify the length of the password from the drop-down list box.

After you have generated the list of static accounts in this screen click Static Account List to
display the list of static accounts. Refer to Section 11.6 on page 102.

11.3.2 Creating Static Subscriber Accounts Manually

To create static accounts manually, display the Create Static Subscriber Account screen and
scroll down to the Manually Add Static Subscriber Accounts section as shown next. You
can manually create up to 10 static accounts at a time.

Figure 44 Create Static Subscriber Account: Manual

The following table describes the related labels in this screen.

Table 24 Create Static Subscriber Account: Manual

LABEL DESCRIPTION

No This read-only field displays the index number of an entry.

Username Enter the user name for a static subscriber account.

97 Chapter 11 Static Subscriber Accounts

Table 24 Create Static Subscriber Account: Manual (continued)

LABEL DESCRIPTION

Password Enter the password associated with the user name above.

You may also set the VSG to generate a password automatically (refer to Section 11.5

on page 100).

Billing Profile From the drop-down list box, select a billing profile for the static account.

Note: This drop-down list box displays active profiles only.

Refer to Section 10.1.1 on page 88 for more information.

Apply Click Apply to create the static account(s) and save the changes.

11.4 Static Account List Backup and Restore

You can back up and restore static account information in the Create Static Account screen.

11.4.1 Backing Up a Static Account List

VSG-1200 V2 User’s Guide

Follow the steps below to back up static subscriber account information to your computer.

1 In the Create Static Subscriber Account screen and scroll down to the Static Accounts

backup and restore section.

2 Click Backup.

Figure 45 Static Subscriber Account: Backup and Restore

3 A File Download window displays. Click Save.

Chapter 11 Static Subscriber Accounts 98

VSG-1200 V2 User’s Guide

Figure 46 Static Subscriber Account: Backup and Restore: File Download

4 A Save As window displays. Specify the filename and/or location and click Save to save

the backup file.

Figure 47 Static Subscriber Account: Backup and Restore: Save As

You can view the backed up file using any text-editing program.

11.4.2 Restoring a Static Account List

You may restore the static account list if you accidentally reset the VSG back to the factory
defaults and erased the subscriber account information.

Follow the steps below to restore a previously backed up subscriber account list.

1 In the Create Static Subscriber Account screen and scroll down to the Static Accounts

backup and restore section.

99 Chapter 11 Static Subscriber Accounts

Figure 48 Static Subscriber Account: Backup and Restore

2 Specify the location and/or file name of the account information file in the File Path field

or click Browse to locate it.

3 Click Apply to start the file transfer process. The VSG automatically restarts after the file

transfer is complete.

11.5 Editing Subscriber Accounts

To edit a subscriber account, click System Settings, Accounting and the Static Account
Operator link to display the screen as shown next.

VSG-1200 V2 User’s Guide

Figure 49 Static Account Operator

The following table describes the labels in this screen.

Table 25 Static Account Operator

LABEL DESCRIPTION

Refresh Click this button to update the screen.

Print List Click this button to print a list of all subscriber accounts.

No This read-only field displays the index number of an entry.

Username This read-only field displays the account user name. Click the heading to sort the

Hide Password/
Show Password

Re-Generate
Password

Status This field indicates whether the account is currently in use (Online) or not

entries in ascending or descending order.

Click Hide Password to not display the passwords for the accounts on the screen.
Click Show Password to display the passwords for the accounts on the screen.

You may set the VSG to generate a new password for each account.
Click All to set the VSG to generate new passwords for all accounts.
Click Re-Generate Password to set the VSG to generate a new password for the

corresponding account.

(Offline).

Chapter 11 Static Subscriber Accounts 100