AMG1302-TSeries Wireless N ADSL2+ 4-port Gateway AMG1202-TSeries Wireless N-lite ADSL2+ 4-port Gateway Version 2.00(AAJC.0) Edition 3/2013 Quick Start Guide User’s Guide Default Login Details LAN IP Address User Name www.zyxel.com Password http://192.168.1.
IMPORTANT! READ CAREFULLY BEFORE USE. KEEP THIS GUIDE FOR FUTURE REFERENCE. Note: This guide is a reference for a series of products. Therefore some features or options in this guide may not be available in your product. Graphics in this book may differ slightly from the product due to differences in operating systems, operating system versions, or if you installed updated firmware/software for your device. Every effort has been made to ensure that the information in this manual is accurate.
Contents Overview Contents Overview User’s Guide .......................................................................................................................................13 Introduction .............................................................................................................................................15 Introducing the Web Configurator ...........................................................................................................21 ........................
Contents Overview 4 AMG1302/AMG1202-TSeries User’s Guide
Table of Contents Table of Contents Contents Overview ..............................................................................................................................3 Table of Contents .................................................................................................................................5 Part I: User’s Guide ......................................................................................... 13 Chapter 1 Introduction...........................................
Table of Contents 4.1 Overview ...........................................................................................................................................37 4.2 Setting Up Your DSL Connection ......................................................................................................37 4.3 IPv6 Address Configuration ..............................................................................................................39 4.4 Setting Up a Secure Wireless Network .............
Table of Contents 6.4.1 Encapsulation ..........................................................................................................................86 6.4.2 Multiplexing ..............................................................................................................................87 6.4.3 VPI and VCI .............................................................................................................................87 6.4.4 IP Address Assignment ..........................
Table of Contents 8.1.3 Before You Begin ...................................................................................................................123 8.2 The LAN Setup Screen ...................................................................................................................123 8.3 The Static DHCP Screen .................................................................................................................125 8.4 The UPnP Screen ...........................................
Table of Contents 11.1.1 What You Can Do in the NAT Screens ................................................................................151 11.1.2 What You Need To Know About NAT ...................................................................................151 11.2 The NAT General Screen ..............................................................................................................152 11.3 The Port Forwarding Screen ...................................................................
Table of Contents 15.3 The Default Action Screen ............................................................................................................176 15.4 The Rules Screen .........................................................................................................................178 15.4.1 The Rules Add Screen ........................................................................................................179 15.4.2 Customized Services ........................................
Table of Contents 19.4 The NAT Screen ............................................................................................................................205 Chapter 20 User Account ....................................................................................................................................207 20.1 Overview .......................................................................................................................................207 20.2 The User Account Screen ..
Table of Contents 25.8 The SSH Screen ...........................................................................................................................231 25.8.1 SSH Example ......................................................................................................................232 Chapter 26 Diagnostic .........................................................................................................................................235 26.1 Overview ...........................
P ART I User’s Guide 13
C HAPT ER 1 Introduction 1.1 Overview The AMG1302/AMG1202-TSeries are ADSL2+ routers. By integrating DSL and NAT, you are provided with ease of installation and high-speed, shared Internet access. The AMG1302/ AMG1202-TSeries are also a complete security solution with a robust firewall and content filtering. Only use firmware for your AMG1302/AMG1202-TSeries’s specific model. Refer to the label on the bottom of your AMG1302/AMG1202-TSeries.
Chapter 1 Introduction 1.4 Applications for the AMG1302/AMG1202-TSeries Here are some example uses for which the AMG1302/AMG1202-TSeries is well suited. 1.4.1 Internet Access Your AMG1302/AMG1202-TSeries provides shared Internet access by connecting the DSL port to the DSL or MODEM jack on a splitter or your telephone jack. Computers can connect to the AMG1302/AMG1202-TSeries’s Ethernet ports (or wirelessly).
Chapter 1 Introduction Figure 2 Wireless Access Example 1.5 General Hardware Features Figure 3 General Hardware Features Power Button Ethernet 1-4 Power In WAN Port Reset LEDs WPS The following table describes the LEDs.
Chapter 1 Introduction Figure 4 Front Panel LEDs Power Ethernet WLAN WPS DLS Internet . Table 1 LED Descriptions LED COLOR STATUS DESCRIPTION Green On The AMG1302/AMG1202-TSeries is receiving power and ready for use. Blinking The AMG1302/AMG1202-TSeries is self-testing. Red On The AMG1302/AMG1202-TSeries detected an error while selftesting, or there is a device malfunction. Off The AMG1302/AMG1202-TSeries is not receiving power.
Chapter 1 Introduction 1.6 Using the WPS Button You can also use the WPS button to quickly set up a secure wireless connection between the AMG1302/AMG1202-TSeries and a WPS-compatible client by adding one device at a time. To activate WPS: 1 Make sure the POWER LED is on and not blinking. 2 Press the WPS button for 1-5 seconds and release it. See below for WPS button location. WPS 3 Press the WPS button on another WPS-enabled device within range of the AMG1302/AMG1202TSeries.
Chapter 1 Introduction 1.8 Ways to Manage the AMG1302/AMG1202-TSeries Use any of the following methods to manage the AMG1302/AMG1202-TSeries. • Web Configurator. This is recommended for everyday management of the AMG1302/AMG1202TSeries using a (supported) web browser. • FTP for firmware upgrades and configuration backup/restore.
C HAPT ER 2 Introducing the Web Configurator 2.1 Overview The web configurator is an HTML-based management interface that allows easy device setup and management via Internet browser. Use Internet Explorer 6.0 and later versions, Mozilla Firefox 3 and later versions, or Safari 2.0 and later versions. The recommended screen resolution is 1024 by 768 pixels. In order to use the web configurator, you need to allow: • Web browser pop-up windows from your device.
Chapter 2 Introducing the Web Configurator Note: For security reasons, the AMG1302/AMG1202-TSeries automatically logs you out if you do not use the web configurator for five minutes (default). If this happens, log in again. 5 The following screen displays if you have not yet changed your password. It is strongly recommended you change the default password.
Chapter 2 Introducing the Web Configurator Figure 7 Connection Status 7 Click System Info to display the System Info screen, where you can view the AMG1302/ AMG1202-TSeries’s interface and system information.
Chapter 2 Introducing the Web Configurator 2.2 The Web Configurator Layout Click Connection Status > System Info to show the following screen.
Chapter 2 Introducing the Web Configurator As illustrated above, the main screen is divided into these parts: • A - title bar • B - main window • C - navigation panel 2.2.1 Title Bar The title bar shows the following icon in the upper right corner. Click this icon to log out of the web configurator.
Chapter 2 Introducing the Web Configurator 2.2.2 Main Window The main window displays information and configuration fields. It is discussed in the rest of this document. After you click System Info on the Connection Status screen, the System Info screen is displayed. See Chapter 5 on page 68 for more information about the System Info screen. If you click LAN Device on the System Info screen, the Connection Status screen appears.
Chapter 2 Introducing the Web Configurator Table 2 Navigation Panel Summary LINK Home Networking Static Route QoS NAT Port Binding Dynamic DNS TAB FUNCTION LAN Setup Use this screen to configure LAN TCP/IP settings, and other advanced properties. Static DHCP Use this screen to assign specific IP addresses to individual MAC addresses. IP Alias Use this screen to partition your LAN interface into different logical networks. UPnP Use this screen to enable the UPnP function.
Chapter 2 Introducing the Web Configurator Table 2 Navigation Panel Summary LINK TAB FUNCTION Local Certificates Use this screen to export self-signed certificates or certification requests and import the AMG1302/AMG1202-TSeries’s CA-signed certificates. Trusted CA Use this screen to save CA certificates to the AMG1302/AMG1202TSeries. Log Log Use this screen to view the logs for the level that you selected. You can export or e-mail the logs.
C HAPT ER 3 Internet / Wireless Setup Wizard 3.1 Overview Use the wizard setup screens to configure your system for Internet access with the information given to you by your ISP. Note: See the advanced menu chapters for background information on these fields. 3.2 Internet / Wireless Wizard Setup 1 After you enter the password to access the web configurator, click the Wizard icon ( the top right corner of the web configurator to go to the Wizard.
Chapter 3 Internet / Wireless Setup Wizard 3 Select your Time Zone from the drop-down menu, and click Next. Figure 9 Wizard Welcome Enter your Internet access information in the wizard screen exactly as your service provider gave it to you. Leave the defaults in any fields for which you were not given information. 4 Configure the field and click Next to continue. See Section 3.2 on page 29 for wireless connection wizard setup.
Chapter 3 Internet / Wireless Setup Wizard The following table describes the fields in this screen. Table 3 Internet Access Wizard Setup: IPoA Configuration LABEL DESCRIPTION Encapsulation Select the encapsulation type your ISP uses from the Encapsulation drop-down list box: IPoA, ENET ENCAP, PPPoA, or PPPoE. Multiplex Select the multiplexing method used by your ISP from the Multiplex drop-down list box either VC-based or LLC-based. VPI Enter the Virtual Path Identifier (VPI) assigned to you.
Chapter 3 Internet / Wireless Setup Wizard The following table describes the fields in this screen. Table 4 Internet Connection with ENET ENCAP LABEL DESCRIPTION Encapsulation Select the encapsulation type your ISP uses from the Encapsulation drop-down list box: IPoA, ENET ENCAP, PPPoA, or PPPoE. Multiplex Select the multiplexing method used by your ISP from the Multiplex drop-down list box either VC-based or LLC-based. VPI Enter the Virtual Path Identifier (VPI) assigned to you.
Chapter 3 Internet / Wireless Setup Wizard Figure 12 Internet Connection with PPPoA The following table describes the fields in this screen. Table 5 Internet Connection with PPPoA LABEL DESCRIPTION Encapsulation Select the encapsulation type your ISP uses from the Encapsulation drop-down list box: IPoA, ENET ENCAP, PPPoA, or PPPoE. User Name Enter the login name that your ISP gives you. Password Enter the password associated with the user name above.
Chapter 3 Internet / Wireless Setup Wizard Figure 13 Internet Connection with PPPoE The following table describes the fields in this screen. Table 6 Internet Connection with PPPoE LABEL DESCRIPTION User Name Enter the user name exactly as your ISP assigned. If assigned a name in the form user@domain where domain identifies a service name, then enter both components exactly as given. Password Enter the password associated with the user name above.
Chapter 3 Internet / Wireless Setup Wizard • If the Internet connection fails, check to see if your account is activated. After you configure the Internet access information, use the following screen to set up your wireless LAN. 5 Check the Wireless Service box to enable wireless connection on the ZyXEL device. 6 Configure your wireless settings in this screen. Click Next. Figure 14 Wireless Setup The following table describes the labels in this screen.
Chapter 3 Internet / Wireless Setup Wizard Note: The wireless stations and AMG1302/AMG1202-TSeries must use the same SSID and channel ID for wireless communication. 7 The configuration settings are saved and applied. Click Close to complete the Internet / Wireless setup. Figure 15 Results Summary 8 36 Launch your web browser and navigate to www.zyxel.com. Internet access is just the beginning.
C HAPT ER 4 Tutorials 4.1 Overview This chapter shows you how to use the AMG1302/AMG1202-TSeries’s various features.
Chapter 4 Tutorials Account Configuration For this example, the interface type is ADSL and the connection has the following information. General Mode Router Encapsulation PPPoE User Name 1234@DSL-Ex.
Chapter 4 Tutorials Go to Network Setting > Broadband, enter or select these values and click Apply. This completes your DSL WAN connection setting. 4.3 IPv6 Address Configuration If the ISP’s network supports IPv6, the ISP may assign an IPv6 address to the AMG1302/AMG1202TSeries automatically.
Chapter 4 Tutorials IPv6 IPv6 IPv6 In the Network Setting > Broadband screen’s IPv6 Address configuration section, select Obtain an IP Address Automatically. In the DHCP IPv6 field select DHCP to obtain an IPv6 address from a DHCPv6 server. In the DHCP PD field select Enable to have the AMG1302/ AMG1202-TSeries pass the WAN prefix to LAN hosts. The LAN hosts can then use the prefix to generate their IPv6 addresses. 4.
Chapter 4 Tutorials Click Network Setting > Wireless to open the General screen. Configure the screen using the provided parameters (see page 40). Click Apply. 2 Click Network Setting > Wireless > Advanced and make sure 802.11b+g+n is selected in the 802.11 Mode field. Click Apply. EX AM PL E 1 Thomas can now use the WPS feature to establish a wireless connection between his notebook and the AMG1302/AMG1202-TSeries (see Section 4.4.2 on page 41).
Chapter 4 Tutorials AMG1202-TSeries as the AP and ZyXEL NWD210N as the wireless client which connects to the notebook. Note: The wireless client must be a WPS-aware device (for example, a WPS USB adapter or PCMCIA card). There are two WPS methods to set up the wireless client settings: • Push Button Configuration (PBC) - simply press a button. This is the easier of the two methods. • PIN Configuration - configure a Personal Identification Number (PIN) on the AMG1302/ AMG1202-TSeries.
Chapter 4 Tutorials The following figure shows you an example of how to set up a wireless network and its security by pressing a button on both AMG1302/AMG1202-TSeries and wireless client. Example WPS Process: PBC Method The Device Wireless Client WITHIN 2 MINUTES Press and hold for 5 seconds SECURITY INFO COMMUNICATION PIN Configuration When you use the PIN configuration method, you need to use both the AMG1302/AMG1202TSeries’s web config ur at or and the wireless client’s utility.
Chapter 4 Tutorials 3 Click the Start and Register buttons (or the button next to the PIN field) on both the wireless client utility screen and the AMG1302/AMG1202-TSeries’s WPS screen within two minutes. The AMG1302/AMG1202-TSeries authenticates the wireless client and sends the proper configuration settings to the wireless client. This may take up to two minutes. The wireless client is then able to communicate with the AMG1302/AMG1202-TSeries securely.
Chapter 4 Tutorials Example WPS Process: PIN Method Wireless Client The Device WITHIN 2 MINUTES Authentication by PIN SECURITY INFO COMMUNICATION 4.4.3 Connecting Wirelessly to your AMG1302/AMG1202-TSeries This section describes how to connect wirelessly to your AMG1302/AMG1202-TSeries. The connection procedure is shown here using Windows XP as an example. 1 Right-click the wireless adapter icon which appears in the bottom right of your computer monitor. Click View Available Wireless Networks.
Chapter 4 Tutorials Tutorial: Status 2 Select the AMG1302/AMG1202-TSeries’s SSID name and click Connect (A). The SSID “SecureWirelessNetwork” is given here as an example. Tutorial: Status A 3 You are prompted to enter a password. Enter it and click Connect. Tutorial: Status 4 You may have to wait several minutes while your computer connects to the wireless network. 5 You should now be securely connected wirelessly to the AMG1302/AMG1202-TSeries.
Chapter 4 Tutorials Congratulations! Your computer is now ready to connect to the Internet wirelessly through your AMG1302/AMG1202-TSeries. Note: If you cannot connect wirelessly to the AMG1302/AMG1202-TSeries, check you have selected the correct SSID and entered the correct security key. If that does not work, ensure your wireless network adapter is enabled by clicking on the wireless adapter icon and clicking Enable. 4.
Chapter 4 Tutorials C:\>ipconfig /all Ethernet adapter Wireless Network Connection: Media State . . . . . . . . . . . : Media connected Description . . . . . . . . . . . : Wireless USB Adapter Physical Address. . . . . . . . . : 00-1E-52-C3-5C-1B ---------------------------SNAP!-------------------------------- Click Network Setting > Wireless > MAC Authentication. Select the wireless network in the SSID field and then Deny in the MAC Restrict Mode field. 3 Enter the MAC address that you want to deny.
Chapter 4 Tutorials Tutorial: NAT Port Forwarding Setup D=192.168.1.34 LAN WAN port 666 A 4.6.1 Port Forwarding Thomas needs to configure the port settings and IP address on the AMG1302/AMG1202-TSeries. Traffic should be forwarded to port 666 of the Doom server computer which has an IP address of 192.168.1.34. Thomas may set up the port settings by configuring the port settings for the Doom server computer (see Section 11.3 on page 153 for more information).
Chapter 4 Tutorials Service Name Select User Define. Start/End Ports Enter 666 as the Start and End port. Server IP Address Enter the IP address of the Doom server (192.168.1.34 for this example). EX AM PL E The screen should look as follows. Click Apply. The port forwarding settings you configured appear in the table. The AMG1302/AMG1202-TSeries forwards port 666 traffic to the computer with IP address 192.168.1.34.
Chapter 4 Tutorials Tutorial: NAT Port Forwarding Setup WAN LAN A 2 1 1 Click Security > Firewall and select Custom. Click Apply to save your settings. Tutorial: Advanced > QoS 2 Click the Rules tab. In the Packet Direction field select WAN to LAN and click Add. Tutorial: Advanced > QoS > Queue Setup 3 The Add New Firewall Rule screen will appear. Click the Edit Customized Services button to access the following screen. Click Add and configure the following settings.
Chapter 4 Tutorials Tutorial: Advanced > QoS > Queue Setup 4 In the Add New Firewall Rule screen, select Active. In the Available Services field, select the service you configured, My_Service. Click OK.
Chapter 4 Tutorials 5 The firewall rule you configured appears in the table. The AMG1302/AMG1202-TSeries allows traffic from the WAN to LAN if it matches port 123. 4.8 Configuring Static Route for Routing to Another Network In order to extend your Intranet and control traffic flowing directions, you may connect a router to the AMG1302/AMG1202-TSeries’s LAN. The router may be used to separate two department networks. This tutorial shows how to configure a static routing rule for two network routings.
Chapter 4 Tutorials N1 A R N2 B This tutorial uses the following example IP settings: Table 8 IP Settings in this Tutorial DEVICE / COMPUTER IP ADDRESS The AMG1302/AMG1202-TSeries’s WAN 172.16.1.1 The AMG1302/AMG1202-TSeries’s LAN 192.168.1.1 A 192.168.1.34 R’s N1 192.168.1.253 R’s N2 192.168.10.2 B 192.168.10.33 To configure a static route to route traffic from N1 to N2: 54 1 Log into the AMG1302/AMG1202-TSeries’s Web Configurator. 2 Click Network Setting > Static Route.
Chapter 4 Tutorials 4d Click OK. Now B should be able to receive traffic from A. You may need to additionally configure B’s firewall settings to allow specific traffic to pass through. 4.9 Port Binding Configuration This tutorial shows you how to configure port binding for WAN connections with different ATM QoS settings for different types of traffic. The port binding feature is used to group each WAN connection with specific LAN ports and WLANs.
EX AM PL E Chapter 4 Tutorials To configure bandwidth for the data connection, select UBR with PCR in the ATM QoS Type field. Click Apply.
Chapter 4 Tutorials To configure dedicated bandwidth of 400 kbps for the VoIP connection, select CBR in the ATM QoS Type field and enter the Peak Cell Rate as 943 (divide the bandwidth 400000 bps by 424). Click Apply to save the settings. To configure variable bandwidth of 2 Mbps for MOD data connection, select Realtime VBR in the ATM QoS Type field.
Chapter 4 Tutorials Configured WAN connections can be viewed by clicking the More Connections tab under Network Setting > Broadband. See the WAN Setup chapter (Chapter 6 on page 73) for more information on configuring WAN connections and ATM QoS settings. 4.9.2 Configuring Port Binding You can then group specific WAN PVCs with LAN ports or WLANs, so traffic from these ports is forwarded through specific WAN PVCs.
Chapter 4 Tutorials A EX 3 LE P M The configured groups can be viewed by clicking the Port Binding Summary button. See the Port Binding chapter (Chapter 12 on page 161) for more details on configuring port binding. 4.10 Configuring QoS to Prioritize Traffic This section contains tutorials on how you can configure the QoS screen. Let’s say you are a team leader of a small sales branch office.
Chapter 4 Tutorials 1 Click Network Setting > QoS and check Active QoS. Click Apply. Tutorial: Advanced > QoS 2 Go to Network Setting > QoS > Queue Setup. Click the Edit icon next to an entry to configure a queue. 3 Select Active and give it a name (Queue1 in this example). Select WAN in the Interface field and 1 in the Priority and Weight fields. Then click OK. Tutorial: Advanced > QoS > Queue Setup 60 4 Go to Network Setting > QoS > Class Setup and click Add new Classifier.
Chapter 4 Tutorials Tutorial: Advanced > QoS > Class Setup AMG1302/AMG1202-TSeries User’s Guide 61
Chapter 4 Tutorials Interface Select From LAN. To Queue Link this to a queue created in the Network Setting > QoS > Queue Setup screen, which is the 1 queue created in this example. Source MAC Address Type the MAC address of your computer AA:FF:AA:FF:AA:FF. Type the Source Mac Netmask if you know it. Source Port Range Enter the port number to which the rule should be applied 25 for SMTP. Protocol ID Select the IP protocol type - TCP.
Chapter 4 Tutorials 2 Apply for a user account. This tutorial uses UserName1 and 12345 as the username and password. 3 Log into www.dyndns.org using your account. 4 Add a new DDNS host name. This tutorial uses the following settings as an example. • Hostname: zyxelrouter.dyndns.org • Service Type: Host with IP address • IP Address: Enter the WAN IP address that your AMG1302/AMG1202-TSeries is currently using. You can find the IP address on the AMG1302/AMG1202-TSeries’s Web Configurator Status page.
Chapter 4 Tutorials 64 AMG1302/AMG1202-TSeries User’s Guide
P ART II Technical Reference 65
C HAPT ER 5 Connection Status and System Info Screens 5.1 Overview After you log into the web configurator, the Connection Status screen appears. This shows the network connection status of the AMG1302/AMG1202-TSeries and clients connected to it. Use the System Info screen to look at the current status of the device, system resources and interfaces (LAN, WAN, WLAN). 5.2 The Connection Status Screen Use this screen to view the network connection status of the device and its clients.
Chapter 5 Connection Status and System Info Screens Figure 16 Connection Status: Icon View Figure 17 Connection Status: List View In Icon View, if you want to view information about a client, click the client’s name and then click on Info. In List View, you can also view the client’s information. 5.3 The System Info Screen Click Connection Status > System Info to open this screen.
Chapter 5 Connection Status and System Info Screens Figure 18 System Info Screen Each field is described in the following table. Table 10 System Info Screen LABEL DESCRIPTION Refresh Interval Select how often you want the AMG1302/AMG1202-TSeries to update this screen from the drop-down list box. Device Information Host Name This field displays the AMG1302/AMG1202-TSeries system name. It is used for identification. Model Name This is the model name of your device.
Chapter 5 Connection Status and System Info Screens LABEL DESCRIPTION Annex Type This is the ADSL Annex Type that your AMG1302/AMG1202-TSeries is using. IP Address This field displays the current IP address of the AMG1302/AMG1202-TSeries in the WAN. IP Subnet Mask This field displays the current subnet mask in the WAN. Default Gateway This is the IP address of the default gateway, if applicable.
Chapter 5 Connection Status and System Info Screens LABEL DESCRIPTION WPS Configured displays when the WPS security settings have been configured and wireless clients can connect with the device through WPS. Unconfigured displays when the device has not been configured and wireless clients can’t establish a link with the device through WPS. Scheduling This displays whether WLAN scheduling is activated. WiFi MAC This is the MAC (Media Access Control) of the WiFi interface.
Chapter 5 Connection Status and System Info Screens 72 AMG1302/AMG1202-TSeries User’s Guide
C HAPT ER 6 Broadband 6.1 Overview This chapter describes the AMG1302/AMG1202-TSeries’s Broadband screens. Use these screens to configure your AMG1302/AMG1202-TSeries for Internet access. A WAN (Wide Area Network) connection is an outside connection to another network or the Internet. It connects your private networks (such as a LAN (Local Area Network) and other networks, so that a computer in one location can communicate with computers in other locations. Figure 19 LAN and WAN LAN WAN 6.1.
Chapter 6 Broadband devices in other networks. It can be static (fixed) or dynamically assigned by the ISP each time the AMG1302/AMG1202-TSeries tries to access the Internet. If your ISP assigns you a static WAN IP address, they should also assign you the subnet mask and DNS server IP address(es) (and a gateway IP address if you use the Ethernet or ENET ENCAP encapsulation method).
Chapter 6 Broadband Figure 20 Network Setting > Broadband > Internet Connection > Auto Sync Up AMG1302/AMG1202-TSeries User’s Guide 75
Chapter 6 Broadband Figure 21 Network Setting > Broadband > Internet Connection > Ethernet(ETH1) 76 AMG1302/AMG1202-TSeries User’s Guide
Chapter 6 Broadband The following table describes the labels in this screen. Table 11 Network Setting > Broadband > Internet Connection LABEL DESCRIPTION Line Type Select the DSL mode supported by your ISP. Use Auto Sync-Up if you are not sure which mode to choose from. The AMG1302/ AMG1202-TSeries dynamically diagnoses the mode supported by the ISP and selects the best compatible one for your connection. Other options are ADSL2+, ADSL2, G.DMT, T1.413 and G.lite.
Chapter 6 Broadband Table 11 Network Setting > Broadband > Internet Connection (continued) LABEL VCI DESCRIPTION This option is available if you select Router in the Mode field. The valid range for the VCI is 32 to 65535 (0 to 31 is reserved for local management of ATM traffic). Enter the VCI assigned to you. Enable VLAN This option is available if you select Ethernet(ETH1) in the Line->Type field.
Chapter 6 Broadband Table 11 Network Setting > Broadband > Internet Connection (continued) LABEL DESCRIPTION WAN Identifier Type Select Manual to manually enter a WAN Identifier as the interface ID to identify the WAN interface. The WAN Identifier is appended to the IPv6 address prefix to create the routable global IPv6 address. Select EUI64 to use the EUI-64 format to generate an interface ID from the MAC address of the WAN interface.
Chapter 6 Broadband The following table describes the labels in this screen. Table 12 Network Setting > Broadband > Internet Connection: Advanced Setup LABEL DESCRIPTION RIP Direction RIP (Routing Information Protocol) allows a router to exchange routing information with other routers. Use this field to control how much routing information the AMG1302/AMG1202-TSeries sends and receives on the subnet. Select the RIP direction from None, Both, In Only and Out Only.
Chapter 6 Broadband 6.3 The More Connections Screen The AMG1302/AMG1202-TSeries allows you to configure more than one Internet access connection. To configure additional Internet access connections click Network Setting > Broadband > More Connections. The screen differs by the encapsulation you select. When you use the Broadband > Internet Connection screen to set up Internet access, you are configuring the first WAN connection.
Chapter 6 Broadband Table 13 Network Setting > Broadband > More Connections (continued) LABEL DESCRIPTION # This is an index number indicating the number of the corresponding connection. Active This field indicates whether the connection is active or not. Clear the check box to disable the connection. Select the check box to enable it. Node Name This is the name you gave to the Internet connection. VID This field displays the VLAN ID number used by this connection.
Chapter 6 Broadband Figure 24 Network Setting > Broadband > More Connections: Edit The following table describes the labels in this screen. Table 14 Network Setting > Broadband > More Connections: Edit LABEL DESCRIPTION General Active Select the check box to activate or clear the check box to deactivate this connection.
Chapter 6 Broadband Table 14 Network Setting > Broadband > More Connections: Edit (continued) LABEL DESCRIPTION Node Name Enter a unique, descriptive name of up to 13 ASCII characters for this connection. Mode Select Router from the drop-down list box if your ISP allows multiple computers to share an Internet account. If you select Bridge, the AMG1302/AMG1202-TSeries will forward any packet that it does not route to this remote node; otherwise, the packets are discarded.
Chapter 6 Broadband 6.3.2 Configuring More Connections Advanced Setup Use this screen to edit your AMG1302/AMG1202-TSeries's advanced WAN settings. Click the Advanced Setup arrow icon in the More Connections Edit screen. The screen appears as shown. Figure 25 Network Setting > Broadband > More Connections: Edit: Advanced Setup The following table describes the labels in this screen.
Chapter 6 Broadband Table 15 Network Setting > Broadband > More Connections: Edit: Advanced Setup (continued) LABEL DESCRIPTION MTU The Maximum Transmission Unit (MTU) defines the size of the largest packet allowed on an interface or connection. Enter the MTU in this field. For ENET ENCAP, the MTU value is 1500. For PPPoE, the MTU value is 1492. For PPPoA and RFC, the MTU is 100-1500. Apply Click this to save your changes. Cancel Click this to restore your previously saved settings. 6.
Chapter 6 Broadband AMG1202-TSeries does that part of the task. Furthermore, with NAT, all of the LANs’ computers will have access. 6.4.1.3 PPPoA PPPoA stands for Point to Point Protocol over ATM Adaptation Layer 5 (AAL5). A PPPoA connection functions like a dial-up Internet connection.
Chapter 6 Broadband IP Assignment with PPPoA or PPPoE Encapsulation If you have a dynamic IP, then the IP Address and Gateway IP Address fields are not applicable (N/A). If you have a Static IP Address assigned by your ISP, then they should also assign you a Subnet Mask and a Gateway IP Address. IP Assignment with RFC 1483 Encapsulation In this case the IP address assignment must be static. IP Assignment with ENET ENCAP Encapsulation In this case you can have either a static or dynamic IP.
Chapter 6 Broadband Sustained Cell Rate (SCR) is the mean cell rate of each bursty traffic source. It specifies the maximum average rate at which cells can be sent over the virtual connection. SCR may not be greater than the PCR. Maximum Burst Size (MBS) is the maximum number of cells that can be sent at the PCR. After MBS is reached, cell rates fall below SCR until cell rate averages to the SCR again. At this time, more cells (up to the MBS) can be sent at the PCR again.
Chapter 6 Broadband The VBR-nRT (non real-time Variable Bit Rate) type is used with bursty connections that do not require closely controlled delay and delay variation. It is commonly used for "bursty" traffic typical on LANs. PCR and MBS define the burst levels, SCR defines the minimum level. An example of an VBR-nRT connection would be non-time sensitive data file transfers. Unspecified Bit Rate (UBR) The Unspecified Bit Rate (UBR) ATM traffic class is for bursty data transfers.
C HAPT ER 7 Wireless LAN 7.1 Overview This chapter describes how to perform tasks related to setting up and optimizing your wireless network, including the following. • Turning the wireless connection on or off. • Configuring a name, wireless channel and security for the network. • Using WiFi Protected Setup (WPS) to configure your wireless network. • Setting up multiple wireless networks. • Using a MAC (Media Access Control) address filter to restrict access to the wireless network.
Chapter 7 Wireless LAN 7.1.2 What You Need to Know About Wireless Wireless Basics “Wireless” is essentially radio communication. In the same way that walkie-talkie radios send and receive information over the airwaves, wireless networking devices exchange information with one another. A wireless networking device is just like a radio that lets your computer exchange information with radios attached to other computers.
Chapter 7 Wireless LAN Figure 27 Network Setting > Wireless > General The following table describes the labels in this screen. Table 16 Network Setting > Wireless > General LABEL DESCRIPTION Wireless Network Setup Wireless Select Enable Wireless LAN to activate wireless LAN. Wireless Network Settings Wireless Network Name (SSID) The SSID (Service Set IDentity) identifies the service set with which a wireless device is associated.
Chapter 7 Wireless LAN Table 16 Network Setting > Wireless > General LABEL DESCRIPTION Security Mode Select Basic (WEP) or More Secure (WPA(2)-PSK, WPA(2)) to add security on this wireless network. The wireless clients which want to associate to this network must have same wireless security settings as the AMG1302/AMG1202-TSeries. When you select to use a security, additional options appears in this screen.
Chapter 7 Wireless LAN In order to configure and enable WEP encryption, click Network Setting > Wireless to display the General screen, then select Basic as the security level. Figure 29 Wireless > General: Basic (WEP) The following table describes the wireless LAN security labels in this screen. Table 17 Wireless > General: Basic (WEP) LABEL DESCRIPTION Security Level Select Basic to enable WEP data encryption.
Chapter 7 Wireless LAN Click Network Setting > Wireless to display the General screen. Select More Secure as the security level. Then select WPA-PSK or WPA2-PSK from the Security Mode list. Figure 30 Wireless > General: More Secure: WPA(2)-PSK The following table describes the wireless LAN security labels in this screen. Table 18 Wireless > General: More Secure: WPA(2)-PSK LABEL DESCRIPTION Security Level Select More Secure to enable WPA(2)-PSK data encryption.
Chapter 7 Wireless LAN The WPA security mode is a security subset of WPA2. It requires the presence of a RADIUS server on your network in order to validate user credentials. This encryption standard is slightly older than WPA2 and therefore is more compatible with older devices. Click Network Setting > Wireless to display the General screen. Select More Secure as the security level. Then select WPA or WPA2 from the Security Mode list.
Chapter 7 Wireless LAN Table 19 Wireless > General: More Secure: WPA(2) (continued) LABEL DESCRIPTION Group Key Update Timer The Group Key Update Timer is the rate at which the RADIUS server sends a new group key out to all clients. Encryption Select the encryption type for data encryption. If you choose WPA as the security mode, the AMG1302/AMG1202-TSeries uses TKIP for data encryption.
Chapter 7 Wireless LAN Figure 33 More AP: Edit The following table describes the fields in this screen. Table 21 More AP: Edit LABEL DESCRIPTION Wireless Network Setup Wireless Select Enable Wireless LAN to activate wireless LAN. Wireless Network Settings Wireless Network Name (SSID) The SSID (Service Set IDentity) identifies the service set with which a wireless device is associated. Wireless devices associating to the access point (AP) must have the same SSID.
Chapter 7 Wireless LAN Table 21 More AP: Edit LABEL DESCRIPTION Security Mode Select Basic (WEP) or More Secure (WPA(2)-PSK, WPA(2)) to add security on this wireless network. The wireless clients which want to associate to this network must have same wireless security settings as the AMG1302/AMG1202-TSeries. After you select to use a security, additional options appears in this screen.
Chapter 7 Wireless LAN Table 22 Network Setting > Wireless > MAC Authentication (continued) LABEL DESCRIPTION Add new MAC address Click this if you want to add a new MAC address entry to the MAC filter list below. Enter the MAC addresses of the wireless devices that are allowed or denied access to the AMG1302/AMG1202-TSeries in these address fields. Enter the MAC addresses in a valid MAC address format, that is, six hexadecimal character pairs, for example, 12:34:56:78:9a:bc.
Chapter 7 Wireless LAN Figure 35 Network Setting > Wireless > WPS The following table describes the labels in this screen. Table 23 Network Setting > Wireless > WPS LABEL DESCRIPTION General WPS Select Enable to activate WPS on the AMG1302/AMG1202-TSeries. Otherwise, select Disable to deactivate WPS. Add a new device with WPS Method Method 1 PBC WPS Use this section to set up a WPS wireless network using Push Button Configuration (PBC).
Chapter 7 Wireless LAN Table 23 Network Setting > Wireless > WPS LABEL Register DESCRIPTION Enter the PIN of the device that you are setting up a WPS connection with and click Register to authenticate and add the wireless device to your wireless network. You can find the PIN either on the outside of the device, or by checking the device’s settings. Note: You must also activate WPS on that device within two minutes to have it present its PIN to the AMG1302/AMG1202-TSeries.
Chapter 7 Wireless LAN Note: At the time of writing, WDS is compatible with other ZyXEL APs only. Not all models support WDS links. Check your other AP’s documentation. Click Network Setting > Wireless > WDS. The following screen displays. Figure 36 Network Setting > Wireless > WDS The following table describes the labels in this screen. Table 24 Network Setting > Wireless > WDS LABEL DESCRIPTION WDS Security Select the type of the key used to encrypt data between APs.
Chapter 7 Wireless LAN Click Network Setting > Wireless > WMM. The following screen displays. Figure 37 Network Setting > Wireless > WMM The following table describes the labels in this screen. Table 25 Network Setting > Wireless > WMM LABEL DESCRIPTION Enable WMM of SSID1~4 Use the checkboxes to determine whether to have the AMG1302/AMG1202-TSeries automatically give a service a priority level according to the ToS value in the IP header of packets it sends for a wireless network.
Chapter 7 Wireless LAN Table 26 Network Setting > Wireless > Scheduling LABEL DESCRIPTION Time (24-Hour Format) Specify a time frame during which the schedule would apply. Apply Click this to save your changes. Cancel Click this to restore your previously saved settings. For example, if you set the time range from 12:00 to 23:00, the wireless LAN will be turned on only during this time period. 7.9 The Advanced Screen Use this screen to configure advanced wireless settings.
Chapter 7 Wireless LAN Table 27 Network Setting > Wireless> Advanced LABEL DESCRIPTION 802.11 Mode Select 802.11b Only to allow only IEEE 802.11b compliant WLAN devices to associate with the AMG1302/AMG1202-TSeries. Select 802.11g Only to allow only IEEE 802.11g compliant WLAN devices to associate with the AMG1302/AMG1202-TSeries. Select 802.11b+g to allow either IEEE 802.11b or IEEE 802.11g compliant WLAN devices to associate with the AMG1302/AMG1202-TSeries.
Chapter 7 Wireless LAN • An “infrastructure” type of network has one or more access points and one or more wireless clients. The wireless clients connect to the access points. • An “ad-hoc” type of network is one in which there is no access point. Wireless clients connect to one another in order to exchange information. The following figure provides an example of a wireless network. Figure 40 Example of a Wireless Network The wireless network is the part in the blue circle.
Chapter 7 Wireless LAN variety of networks to exist in the same place without interfering with one another. When you create a network, you must select a channel to use. Since the available unlicensed spectrum varies from one country to another, the number of available channels also varies. 7.10.2 Additional Wireless Terms The following table describes some wireless network terms and acronyms used in the AMG1302/ AMG1202-TSeries’s Web Configurator.
Chapter 7 Wireless LAN her favorite movie is Vanishing Point (which you know was made in 1971) you could use “70dodchal71vanpoi” as your security key. The following sections introduce different types of wireless security you can set up in the wireless network. 7.10.3.1 SSID Normally, the AMG1302/AMG1202-TSeries acts like a beacon and regularly broadcasts the SSID in the area. You can hide the SSID instead, in which case the AMG1302/AMG1202-TSeries does not broadcast the SSID.
Chapter 7 Wireless LAN 7.10.3.4 Encryption Wireless networks can use encryption to protect the information that is sent in the wireless network. Encryption is like a secret code. If you do not know the secret code, you cannot understand the message. The types of encryption you can choose depend on the type of authentication. (See Section 7.10.3.3 on page 110 for information about this.
Chapter 7 Wireless LAN 7.10.5 BSS A Basic Service Set (BSS) exists when all communications between wireless stations or between a wireless station and a wired network client go through one access point (AP). Intra-BSS traffic is traffic between wireless stations in the BSS. When Intra-BSS traffic blocking is disabled, wireless station A and B can access the wired network and communicate with each other.
Chapter 7 Wireless LAN • MBSSID should not replace but rather be used in conjunction with 802.1x security. 7.10.7 Wireless Distribution System (WDS) The AMG1302/AMG1202-TSeries can act as a wireless network bridge and establish WDS (Wireless Distribution System) links with other APs. You need to know the MAC addresses of the APs you want to link to. Once the security settings of peer sides match one another, the connection between devices is made.
Chapter 7 Wireless LAN 2 Look for a WPS button on each device. If the device does not have one, log into its configuration utility and locate the button (see the device’s User’s Guide for how to do this - for the AMG1302/ AMG1202-TSeries, see Section 7.6 on page 103). 3 Press the button on one of the devices (it doesn’t matter which). For the AMG1302/AMG1202TSeries you must press the WPS button for more than three seconds. 4 Within two minutes, press the button on the other device.
Chapter 7 Wireless LAN The following figure shows a WPS-enabled wireless client (installed in a notebook computer) connecting to the WPS-enabled AP via the PIN method. Figure 43 Example WPS Process: PIN Method ENROLLEE REGISTRAR WPS This device’s WPS PIN: 123456 WPS Enter WPS PIN from other device: WPS START WPS START WITHIN 2 MINUTES SECURE EAP TUNNEL SSID WPA(2)-PSK COMMUNICATION 7.10.8.3 How WPS Works When two WPS-enabled devices connect, each device must assume a specific role.
Chapter 7 Wireless LAN Figure 44 How WPS works ACTIVATE WPS ACTIVATE WPS WITHIN 2 MINUTES WPS HANDSHAKE ENROLLEE REGISTRAR SECURE TUNNEL SECURITY INFO COMMUNICATION The roles of registrar and enrollee last only as long as the WPS setup process is active (two minutes). The next time you use WPS, a different device can be the registrar if necessary. The WPS connection process is like a handshake; only two devices participate in each WPS transaction.
Chapter 7 Wireless LAN Figure 45 WPS: Example Network Step 1 ENROLLEE REGISTRAR SECURITY INFO AP1 CLIENT 1 In step 2, you add another wireless client to the network. You know that Client 1 supports registrar mode, but it is better to use AP1 for the WPS handshake with the new client since you must connect to the access point anyway in order to use the network. In this case, AP1 must be the registrar, since it is configured (it already has security information for the network).
Chapter 7 Wireless LAN Figure 47 WPS: Example Network Step 3 EXISTING CONNECTION CLIENT 1 IS EX O GC TIN ION CT E NN AP1 REGISTRAR CLIENT 2 SE CU RIT Y ENROLLEE INF O AP2 7.10.8.5 Limitations of WPS WPS has some limitations of which you should be aware. • WPS works in Infrastructure networks only (where an AP and a wireless client communicate). It does not work in Ad-Hoc networks (where there is no AP). • When you use WPS, it works between two devices only.
Chapter 7 Wireless LAN access point is the WPS registrar, the enrollee, or was not involved in the WPS handshake; a rogue device must still associate with the access point to gain access to the network. Check the MAC addresses of your wireless clients (usually printed on a label on the bottom of the device). If there is an unknown MAC address you can remove it or reset the AP.
Chapter 7 Wireless LAN 120 AMG1302/AMG1202-TSeries User’s Guide
C HAPT ER 8 Home Networking 8.1 Overview A Local Area Network (LAN) is a shared communication system to which many networking devices are connected. It is usually located in one immediate area such as a building or floor of a building. Use the LAN screens to help you configure a LAN DHCP server and manage IP addresses. LAN DSL 8.1.1 What You Can Do in the LAN Screens • Use the LAN Setup screen to set the LAN IP address, subnet mask, and DHCP settings of your AMG1302/AMG1202-TSeries (Section 8.
Chapter 8 Home Networking Subnet Mask Subnet masks determine the maximum number of possible hosts on a network. You can also use subnet masks to divide one network into multiple sub-networks. DHCP A DHCP (Dynamic Host Configuration Protocol) server can assign your AMG1302/AMG1202-TSeries an IP address, subnet mask, DNS and other routing information when it's turned on. DNS DNS (Domain Name System) is for mapping a domain name to its corresponding IP address and vice versa.
Chapter 8 Home Networking UPnP and ZyXEL Sexual has achieved UPnP certification from the Universal Plug and Play Forum UPnP™ Implementers Corp. (UIC). ZyXEL's UPnP implementation supports Internet Gateway Device (IGD) 1.0. Finding Out More See Section 8.7 on page 131 for technical background information on LANs. 8.1.3 Before You Begin Find out the MAC addresses of your network devices if you intend to add them to the DHCP Client List screen. 8.
Chapter 8 Home Networking The following table describes the fields in this screen. Table 30 Network Setting > Home Networking > LAN Setup LABEL DESCRIPTION LAN IP Setup IP Address Enter the LAN IP address you want to assign to your AMG1302/AMG1202-TSeries in dotted decimal notation, for example, 192.168.1.1 (factory default). Subnet Mask Type the subnet mask of your network in dotted decimal notation, for example 255.255.255.0 (factory default).
Chapter 8 Home Networking 8.3 The Static DHCP Screen This table allows you to assign IP addresses on the LAN to specific individual computers based on their MAC Addresses. Every Ethernet device has a unique MAC (Media Access Control) address. The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02. Use this screen to change your AMG1302/AMG1202-TSeries’s static DHCP settings.
Chapter 8 Home Networking The following table describes the labels in this screen. Table 32 Static DHCP: Add/Edit LABEL DESCRIPTION MAC Address If you select Manual Input in the Select Device Info field, enter the MAC address of a computer on your LAN. IP Address If you select Manual Input in the Select Device Info field, enter the IP address that you want to assign to the computer on your LAN with the MAC address that you will also specify. OK Click OK to save your changes.
Chapter 8 Home Networking When you use IP alias, you can also configure firewall rules to control access to the LAN's logical network (subnet). 8.5.1 Configuring the LAN IP Alias Screen Use this screen to change your AMG1302/AMG1202-TSeries’s IP alias settings. Click Network Setting > Home Networking > IP Alias to open the following screen. Figure 52 Network Setting > Home Networking > IP Alias The following table describes the labels in this screen.
Chapter 8 Home Networking Figure 53 Network Setting > Home Networking > IPv6 LAN Setup The following table describes the labels in this screen. Table 35 Network Setting > Home Networking > IPv6 LAN Setup LABEL DESCRIPTION IPv6 LAN Setup 128 Link Local Address Type Select Manual to manually enter a link local address. Select EUI64 to use the EUI-64 format to generate a link local address from the Ethernet MAC address.
Chapter 8 Home Networking LABEL DESCRIPTION Lan Global Identifier Type Select Manual to manually enter a LAN Identifier as the interface ID to identify the LAN interface. The LAN Identifier is appended to the IPv6 address prefix to create the routable global IPv6 address. Select EUI64 to use the EUI-64 format to generate an interface ID from the Ethernet MAC address. Lan Identifier If you selected Manual, enter the LAN Identifier in this field.
Chapter 8 Home Networking LABEL DESCRIPTION Router Lifetime Enter the time in seconds that hosts should consider the AMG1302/AMG1202-TSeries to be the default router. Possible values for this field are 0-9000. Router Preference Select the router preference (Low, Medium or High) for the AMG1302/AMG1202TSeries. The AMG1302/AMG1202-TSeries sends this preference in the router advertisements to tell hosts what preference they should use for the AMG1302/ AMG1202-TSeries.
Chapter 8 Home Networking 8.7 Home Networking Technical Reference This section provides some technical background information about the topics covered in this chapter. 8.7.1 LANs, WANs and the AMG1302/AMG1202-TSeries The actual physical connection determines whether the AMG1302/AMG1202-TSeries ports are LAN or WAN ports. There are two separate IP networks, one inside the LAN network and the other outside the WAN network as shown next. Figure 54 LAN and WAN IP Addresses LAN WAN 8.7.
Chapter 8 Home Networking • Some ISPs choose to disseminate the DNS server addresses using the DNS server extensions of IPCP (IP Control Protocol) after the connection is up. If your ISP did not give you explicit DNS servers, chances are the DNS servers are conveyed through IPCP negotiation. The AMG1302/ AMG1202-TSeries supports the IPCP DNS server extensions through the DNS proxy feature. Please note that DNS proxy works only when the ISP uses the IPCP DNS server extensions.
Chapter 8 Home Networking • 192.168.0.0 — 192.168.255.255 You can obtain your IP address from the IANA, from an ISP or it can be assigned from a private network. If you belong to a small organization and your Internet access is through an ISP, the ISP can provide you with the Internet addresses for your local networks. On the other hand, if you are part of a much larger organization, you should consult your network administrator for the appropriate IP addresses.
Chapter 8 Home Networking 224.0.0.1 is used for query messages and is assigned to the permanent group of all IP hosts (including gateways). All hosts must join the 224.0.0.1 group in order to participate in IGMP. The address 224.0.0.2 is assigned to the multicast routers group. At start up, the AMG1302/AMG1202-TSeries queries all directly connected networks to gather group membership. After that, the AMG1302/AMG1202-TSeries periodically updates this information.
C HAPT ER 9 Static Route 9.1 Overview The AMG1302/AMG1202-TSeries usually uses the default gateway to route outbound traffic from computers on the LAN to the Internet. To have the AMG1302/AMG1202-TSeries send data to devices not reachable through the default gateway, use static routes. For example, the next figure shows a computer (A) connected to the AMG1302/AMG1202-TSeries’s LAN interface.
Chapter 9 Static Route 9.1.1 What You Can Do in the Static Route Screens • Use the Static Route screens (Section 9.2 on page 136) to view and configure IP static routes on the AMG1302/AMG1202-TSeries. • Use the IPv6 Static Route screens (Section 9.3 on page 137) to view and configure IPv6 static routes on the AMG1302/AMG1202-TSeries. 9.2 The Static Route Screen Use this screen to view the static route rules. Click Network Setting > Static Route to open the Static Route screen.
Chapter 9 Static Route Figure 57 Network Setting > Static Route Add/Edit The following table describes the labels in this screen. Table 37 Network Setting > Static Route Add/Edit LABEL DESCRIPTION Destination IP Address This parameter specifies the IP network address of the final destination. Routing is always based on network number. If you need to specify a route to a single host, use a subnet mask of 255.255.255.255 in the subnet mask field to force the network number to be identical to the host ID.
Chapter 9 Static Route Table 38 Network Setting > Static Route > IPv6 Static Route LABEL DESCRIPTION Destination This parameter specifies the IP network address of the final destination. Routing is always based on network number. Prefix Length An IPv6 prefix length specifies how many most significant bits (starting from the left) in the address compose the network address. This field displays the bit number of the IPv6 subnet mask. Device This specifies the LAN or WAN PVC.
C HAPTER 10 Quality of Service (QoS) 10.1 Overview Use the QoS screen to set up your AMG1302/AMG1202-TSeries to use QoS for traffic management. Quality of Service (QoS) refers to both a network’s ability to deliver data with minimum delay, and the networking methods used to control bandwidth. QoS allows the AMG1302/AMG1202-TSeries to group and prioritize application traffic and fine-tune network performance. Without QoS, all traffic data are equally likely to be dropped when the network is congested.
Chapter 10 Quality of Service (QoS) • Use the Queue screen (Section 10.3 on page 141) to configure QoS settings on the AMG1302/ AMG1202-TSeries. • Use the Class Setup screen (Section 10.4 on page 143) to configure QoS settings on the AMG1302/AMG1202-TSeries. • Use the Game List screen (Section 10.5 on page 147) to give priority to traffic for specific games. 10.1.2 What You Need to Know About QoS 802.1p QoS is used to prioritize source-to-destination traffic flows.
Chapter 10 Quality of Service (QoS) The following table describes the labels in this screen. Table 40 Network Setting > QoS > General LABEL DESCRIPTION Active QoS Use this field to turn on QoS to improve your network performance. Traffic priority will be automatically assigned by Select how the AMG1302/AMG1202-TSeries assigns priorities to various incoming and outgoing traffic flows.
Chapter 10 Quality of Service (QoS) Table 41 Network Setting > QoS > Queue LABEL DESCRIPTION Rate Limit This shows the maximum transmission rate allowed for traffic on this queue. Modify Click the Edit icon to edit the queue. Click the Delete icon to delete an existing queue. Note that subsequent rules move up by one when you take this action. 10.3.1 Adding a QoS Queue Click the edit icon in the Queue Setup screen to configure a queue.
Chapter 10 Quality of Service (QoS) 10.4 The Class Setup Screen Use this screen to add, edit or delete QoS classifiers. A classifier groups traffic into data flows according to specific criteria such as the source address, destination address, source port number, destination port number or incoming interface. For example, you can configure a classifier to select traffic from the same protocol port (such as Telnet) to form a flow.
Chapter 10 Quality of Service (QoS) Figure 65 QoS > Class Setup Add/Edit 144 AMG1302/AMG1202-TSeries User’s Guide
Chapter 10 Quality of Service (QoS) The following table describes the labels in this screen. Table 44 QoS > Class Setup Add/Edit LABEL DESCRIPTION Rule Index Select the rule’s index number from the drop-down list box. Class Configuration Active Use this field to enable or disable the QoS class rule. Ether Type Select a predefined application to configure a class for the matched traffic.
Chapter 10 Quality of Service (QoS) Table 44 QoS > Class Setup Add/Edit (continued) LABEL Mac Netmask DESCRIPTION Type the mask for the specified MAC address to determine which bits a packet’s MAC address should match. Enter “f” for each bit of the specified source MAC address that the traffic’s MAC address should match. Enter “0” for the bit(s) of the matched traffic’s MAC address, which can be of any hexadecimal character(s).
Chapter 10 Quality of Service (QoS) Table 44 QoS > Class Setup Add/Edit (continued) LABEL DESCRIPTION IP Precedence Mark Enter a range from 0 to 7 to re-assign IP precedence to matched traffic. 0 is the lowest priority and 7 is the highest. Type Of Service Mark Select a type of service to re-assign the priority level to matched traffic. DSCP Mark(0~63) Available options are: Normal service, Minimize delay, Maximize throughput, Maximize reliability and Minimize monetary cost.
Chapter 10 Quality of Service (QoS) The following table describes the labels in this screen. Table 45 Network Setting > QoS > Game List LABEL DESCRIPTION Enable Game List Select this to have QoS give the highest priority to traffic for the games you specify. This priority is higher than the other QoS queues. Select the games below. Apply Click this to save your changes. Cancel Click this to restore previously saved settings. 10.
Chapter 10 Quality of Service (QoS) 10.6.3 Automatic Priority Queue Assignment If you enable QoS on the AMG1302/AMG1202-TSeries, the AMG1302/AMG1202-TSeries can automatically base on the IEEE 802.1p priority level, IP precedence and/or packet length to assign priority to traffic which does not match a class. The following table shows you the internal layer-2 and layer-3 QoS mapping on the AMG1302/ AMG1202-TSeries.
Chapter 10 Quality of Service (QoS) 150 AMG1302/AMG1202-TSeries User’s Guide
C HAPTER 11 Network Address Translation (NAT) 11.1 Overview This chapter discusses how to configure NAT on the AMG1302/AMG1202-TSeries. NAT (Network Address Translation - NAT, RFC 1631) is the translation of the IP address of a host in a packet, for example, the source address of an outgoing packet, used within one network to a different IP address known within another network. 11.1.1 What You Can Do in the NAT Screens • Use the General screen (Section 11.
Chapter 11 Network Address Translation (NAT) Port Forwarding A port forwarding set is a list of inside (behind NAT on the LAN) servers, for example, web or FTP, that you can make visible to the outside world even though NAT makes your whole inside network appear as a single computer to the outside world. Finding Out More See Section 11.5 on page 156 for advanced technical information on NAT. 11.2 The NAT General Screen Use this screen to activate NAT for the default WAN connection (PVC0).
Chapter 11 Network Address Translation (NAT) 11.3 The Port Forwarding Screen Use this screen to forward incoming service requests to the server(s) on your local network. You may enter a single port number or a range of port numbers to be forwarded, and the local IP address of the desired server. The port number identifies a service; for example, web service is on port 80 and FTP on port 21.
Chapter 11 Network Address Translation (NAT) See Appendix F on page 305 for port numbers commonly used for particular services. Note: Make sure NAT is activated on the WAN connection before you configure a port forwarding rule for it. For the default WAN connection (PVC0), activate NAT in the Network Setting > NAT > General screen. For other WAN connections (PVC1~PVC7), activate NAT for an individual WAN connection in the Broadband > More Connections > Edit screen.
Chapter 11 Network Address Translation (NAT) Figure 70 Network Setting > NAT > Port Forwarding: Add/Edit The following table describes the fields in this screen. Table 50 Network Setting > NAT > Port Forwarding: Edit LABEL DESCRIPTION Active Click this check box to enable the rule. Service Name Enter a name to identify this port-forwarding rule. External Start Port Enter a port number in this field. To forward only one port, enter the port number again in the End Port field.
Chapter 11 Network Address Translation (NAT) 11.4 The DMZ Screen If you need to allow packets from a specific WAN connection to your local network, NAT supports a default server IP address. A default server receives packets from the specified WAN connection and the ports that are not specified in the NAT Port Forwarding Setup screen. Figure 71 Network Setting > NAT > DMZ The following table describes the fields in this screen.
Chapter 11 Network Address Translation (NAT) a packet when the packet is still in the local network, while an inside global address (IGA) is the IP address of the same inside host when the packet is on the WAN side. The following table summarizes this information. Table 52 NAT Definitions ITEM DESCRIPTION Inside This refers to the host on the LAN. Outside This refers to the host on the WAN. Local This refers to the packet address (source or destination) as the packet travels on the LAN.
Chapter 11 Network Address Translation (NAT) Figure 72 How NAT Works NAT Table LAN Inside Local IP Address 192.168.1.10 192.168.1.11 192.168.1.12 192.168.1.13 192.168.1.13 192.168.1.12 SA SA 192.168.1.10 IGA1 Inside Local Address (ILA) 192.168.1.11 Inside Global IP Address IGA 1 IGA 2 IGA 3 IGA 4 WAN Inside Global Address (IGA) 192.168.1.10 11.5.
Chapter 11 Network Address Translation (NAT) • One to One: In One-to-One mode, the AMG1302/AMG1202-TSeries maps one local IP address to one global IP address. • Many to One: In Many-to-One mode, the AMG1302/AMG1202-TSeries maps multiple local IP addresses to one global IP address. This is equivalent to SUA (for instance, PAT, port address translation), ZyXEL’s Single User Account feature that previous ZyXEL routers supported (the SUA Only option in today’s routers).
Chapter 11 Network Address Translation (NAT) 160 AMG1302/AMG1202-TSeries User’s Guide
C HAPTER 12 Port Binding 12.1 Overview This chapter describes how to configure the port binding settings. Port binding allows you to aggregate port connections into logical groups. You may bind WAN PVCs to Ethernet ports and WLANs to specify how traffic is forwarded. Different ATM QoS settings can be specified for each WAN PVC to meet bandwidth requirements for the type of traffic to be transferred.
Chapter 12 Port Binding If a WAN PVC is bound to an ethernet port, traffic from the ethernet port will only be forwarded through the specified WAN PVC and vice versa. If a port is not in a port binding group, traffic to and from the port will be forwarded according to the routing table. See the tutorial section (Section on page 37) for more details on configuring port binding for multiple WAN connections. 12.1.1 What You Can Do in the Port Binding Screens • Use the General screen (Section 12.
Chapter 12 Port Binding Figure 76 Network Setting > Port Binding > Port Binding The following table describes the labels in this screen. Table 55 Network Setting > Port Binding > Port Binding LABEL DESCRIPTION Port Binding Active Activate or deactivate port binding for the port binding group. Group Index Select the index number for the port binding group. When a port is assigned to a port binding group, traffic will be forwarded to the other ports in the group, but not to ports in other groups.
Chapter 12 Port Binding The following table describes the labels in this screen. Table 56 Network Setting > Port Binding > Port Binding Summary LABEL 164 DESCRIPTION Group ID This field displays the group index number. Group port This field displays the ports included in the group.
