EMG1302-R10A Wireless N300 4-port Ethernet Gateway Version V1.00 Edition 1, 1/2014 Quick Start Guide User’s Guide Default Login Details LAN IP Address http://192.168.1.1 User Name supervisor www.zyxel.
IMPORTANT! READ CAREFULLY BEFORE USE. KEEP THIS GUIDE FOR FUTURE REFERENCE. Note: This guide is a reference for a series of products. Therefore some features or options in this guide may not be available in your product. Graphics in this book may differ slightly from the product due to differences in operating systems, operating system versions, or if you installed updated firmware/software for your device. Every effort has been made to ensure that the information in this manual is accurate.
EMG1302-R10A User’s Guide 3
EMG1302-R10A User’s Guide
Contents Overview Contents Overview User’s Guide ........................................................................................................................... 13 Introduction ................................................................................................................................15 Introducing the Web Configurator ..............................................................................................19 Quick Start .................................................
Contents Overview 6 EMG1302-R10A User’s Guide
Table of Contents Table of Contents Contents Overview .................................................................................................................. 5 Table of Contents ..................................................................................................................... 7 Part I: User’s Guide ................................................................................13 Chapter 1 Introduction...........................................................................
Table of Contents 4.6 WLAN Station Status ............................................................................................................33 Chapter 5 Router Mode............................................................................................................................ 35 5.1 Overview ..............................................................................................................................35 5.2 Router Mode Status Screen ....................................
Table of Contents 8.5.1 No Security .................................................................................................................81 8.5.2 WPA2-PSK .................................................................................................................82 8.6 More AP ...............................................................................................................................83 8.6.1 More AP Edit ...................................................................
Table of Contents Chapter 12 NAT......................................................................................................................................... 109 12.1 Overview .........................................................................................................................109 12.2 What You Can Do ............................................................................................................109 12.3 What You Need To Know ......................................
Table of Contents Chapter 18 IPv6 Firewall .......................................................................................................................... 135 18.1 Overview ..........................................................................................................................135 18.2 The IPv6 Firewall Screen ................................................................................................135 Chapter 19 Remote Management..........................................
Table of Contents 22.3 EMG1302-R10A Access and Login .................................................................................162 22.4 Internet Access ................................................................................................................163 22.5 Resetting the EMG1302-R10A to Its Factory Defaults .....................................................164 22.6 Wireless Router/AP Troubleshooting ...............................................................................
P ART I User’s Guide 13
C HAPT ER 1 Introduction 1.1 Overview This chapter introduces the main features and applications of the EMG1302-R10A. The EMG1302-R10A Wireless N300 4-port Ethernet Gateway is an Ethernet Gateway that provides four Ethernet ports meeting the IEEE 802.11 b/g/n wireless standard, and it features TR-069 remote management for telcos, service providers and cable operators as a home network solution interoperating an FTTx or cable infrastructure.
Chapter 1 Introduction • Change the password. Use a password that’s not easy to guess and that consists of different types of characters, such as numbers and letters. • Write down the password and put it in a safe place. • Back up the configuration (and make sure you know how to restore it). Restoring an earlier working configuration may be useful if the device becomes unstable or even crashes. If you forget your password, you will have to reset the EMG1302-R10A to its factory default settings.
Chapter 1 Introduction Table 1 Front panel LEDs (continued) LED COLOR STATUS DESCRIPTION LAN 1-4 Green On The EMG1302-R10A’s LAN connection is ready. Blinking The EMG1302-R10A is sending/receiving data through the LAN with a 10/100Mbps transmission rate. Off Green WLAN The LAN connection is not ready, or has failed. On The EMG1302-R10A is ready, but is not sending/receiving data through the wireless LAN. Blinking The EMG1302-R10A is sending/receiving data through the wireless LAN.
Chapter 1 Introduction 1.7 Wall Mounting You may need screw anchors if mounting on a concrete or brick wall. Table 2 Wall Mounting Information Distance between holes (measured from center to center) 10.25 cm M4 Screws Two Screw anchors (optional) Two 1 Select a position free of obstructions on a wall strong enough to hold the weight of the device. 2 Mark two holes on the wall at the appropriate distance apart for the screws.
C HAPT ER 2 Introducing the Web Configurator 2.1 Overview This chapter describes how to access the EMG1302-R10A Web Configurator and provides an overview of its screens. The Web Configurator is an HTML-based management interface that allows easy setup and management of the EMG1302-R10A via Internet browser. Use Internet Explorer 6.0 and later versions, Mozilla Firefox 3 and later versions, or Safari 2.0 and later versions. The recommended screen resolution is 1024 by 768 pixels.
Chapter 2 Introducing the Web Configurator 3 Type "http://192.168.1.1" as the website address. Your computer must be in the same subnet in order to access this website address. 4 If you are logging in with the “admin” account, type “1234” (default) as the password. If you are logging in with the “supervisor” account, type “supervisor” (default) as the password. Then click Login. Figure 4 Admin Account Login The following table describes the labels in this screen.
Chapter 2 Introducing the Web Configurator The following table describes the labels in this screen. Table 4 Change Password Screen LABEL DESCRIPTION New Password Type a new password. Retype to Confirm Retype the password for confirmation. Apply Click Apply to save your changes back to the EMG1302-R10A. Ignore Click Ignore if you do not want to change the password this time.
Chapter 2 Introducing the Web Configurator 22 EMG1302-R10A User’s Guide
C HAPT ER 3 Quick Start 3.1 Overview Use the Quick Start screens to configure the ZyXEL Device’s time zone and basic Internet access and wireless settings. Note: See the technical reference chapters (starting on page 55) for background information on the features in this chapter. 3.2 Quick Start Setup 1 Click the Wizard icon in the top right corner of the web configurator to open the quick start screens. Select the time zone of the ZyXEL Device’s location and click Next.
Chapter 3 Quick Start 3 Click Next to continue. Figure 7 Setup Login Password 4 Select the time zone for this device from the drop-down menu or click Detect Again to automatically select the time zone. 5 Click Next to continue. Figure 8 Setup Time Zone 24 6 Setup the WAN type by selecting a configuration type from the WAN Type drop-down menu. 7 Enter the device’s IP address in the LAN IP Address field if a static IP address is assigned.
Chapter 3 Quick Start 8 Click Next to continue. Figure 9 Select WAN Type 9 Configure the WAN type, select from the following settings: • Dynamic IP Address (default) • Static IP Address • PPP Over Ethernet • PPTP 10 The WAN Type window as selected above displays. Fill in the respective fields to complete the WAN Type configuration. 11 Click Next to continue. Figure 10 Configure Dynamic IP Address 12 In the Wireless settings menu, select Enable to activate the device’s wireless function.
Chapter 3 Quick Start 13 Enter the SSID in the Network ID field to identify this device on the network. 14 Select a channel designation from the drop-down menu or select Auto to allow the device to automatically assign one. 15 Click Next to continue. Figure 11 Setup Wireless Settings 16 Select a security mode from the drop-down menu: WPA2-PSK (default) or No Security. 17 Enter a pre-shared key or use the automatically generated key in the Pre-Shared Key field. 18 Click Next to continue.
Chapter 3 Quick Start 19 If the information does not require modification, select the Do you want to proceed the network testing? and click Apply Settings. Figure 13 Setup Summary The device begins applying the new settings. The process requires a short time to fully complete. 20 Once the process is complete, click the Finish button to return to the Status page.
Chapter 3 Quick Start 28 EMG1302-R10A User’s Guide
C HAPT ER 4 Monitor 4.1 Overview This chapter discusses read-only information related to the device state of the EMG1302-R10A. To access the Monitor screens, click . Click open all to show the complete menu. You can also click the links in the Summary table of the Status screen to view the bandwidth consumed, packets sent/received as well as the status of clients connected to the EMG1302-R10A. 4.2 What You Can Do • Use the Log screen to see the logs for the activity on the EMG1302-R10A (Section 4.
Chapter 4 Monitor 4.3 The Log Screen The Web Configurator allows you to look at all of the EMG1302-R10A’s logs in one location. 4.3.1 View Log Click Monitor > Log to open the View Log screen. You can see the logged messages for the EMG1302-R10A. The log wraps around and deletes the old entries after it fills. Click Clear Log to delete all the logs. Click Refresh to renew the log screen.
Chapter 4 Monitor 4.3.2 Log Setting You can configure which logs to display in the View Log screen. Click Monitor > Log to open the Log Setting screen and select the logs you wish to display. You can configure active log and alert settings. Figure 15 Log Setting 4.4 DHCP Table Dynamic Host Configuration Protocol (DHCP), RFC 2131 and RFC 2132 allow individual clients to obtain TCP/IP configuration at start-up from a server. You can configure the EMG1302-R10A’s LAN as a DHCP server or disable it.
Chapter 4 Monitor Table 5 Summary: DHCP Table (continued) LABEL DESCRIPTION IP Address This field displays the IP address relative to the # field listed above. MAC Address This field shows the MAC address of the computer with the name in the Host Name field. Every Ethernet device has a unique MAC (Media Access Control) address which uniquely identifies a device. The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02.
Chapter 4 Monitor Table 6 Summary: Packet Statistics (continued) LABEL DESCRIPTION Collisions This is the number of collisions on this port. Tx B/s This displays the transmission speed in bytes per second on this port. Rx B/s This displays the reception speed in bytes per second on this port. Up Time This is the total time the EMG1302-R10A has been for each session. System Up Time This is the total time the EMG1302-R10A has been on.
Chapter 4 Monitor 34 EMG1302-R10A User’s Guide
C HAPT ER 5 Router Mode 5.1 Overview The EMG1302-R10A router mode connects the local network to another network (for example, the Internet). In the figure below, the EMG1302-R10A connects the local network (LAN1 ~ LAN4) to the Internet.
Chapter 5 Router Mode 5.2 Router Mode Status Screen Click to open the status screen. Figure 20 Status Screen: Router Mode The following table describes the icons shown in the Status screen. Table 8 Status Screen Icon Key: Router Mode ICON DESCRIPTION Click this icon to open screens where you can configure the ZyXEL Device’s time zone Internet access, and wireless settings. Click this icon to view copyright and a link for related product information. Click this at any time to exit the Web Configurator.
Chapter 5 Router Mode Table 8 Status Screen Icon Key: Router Mode (continued) ICON DESCRIPTION Click this button to refresh the status screen statistics. Click this icon to see the Status page. The information in this screen depends on the device mode you select. Click this icon to see the Monitor navigation menu. Click this icon to see the Configuration navigation menu. Click this icon to see the Maintenance navigation menu. The following table describes the labels shown in the Status screen.
Chapter 5 Router Mode Table 9 Status Screen: Router Mode (continued) LABEL DESCRIPTION System Resource - CPU Usage This displays what percentage of the EMG1302-R10A’s processing ability is currently used. When this percentage is close to 100%, the EMG1302-R10A is running at full load, and the throughput is not going to improve anymore. If you want some applications to have more throughput, you should turn off other applications (for example, using bandwidth management.
Chapter 5 Router Mode 5.2.1 Navigation Panel Use the sub-menus on the navigation panel to configure EMG1302-R10A features. Figure 21 Navigation Panel: Router Mode The following table describes the sub-menus. Table 10 Navigation Panel: Router Mode LINK TAB Status FUNCTION This screen shows the EMG1302-R10A’s general device, system and interface status information. Use this screen to access the summary statistics tables.
Chapter 5 Router Mode Table 10 Navigation Panel: Router Mode (continued) LINK TAB FUNCTION General Use this screen to configure wireless LAN and the level of wireless security for the EMG1302-R10A. More AP Use this screen to configure multiple BBs for the EMG1302-R10A. MAC Filter Use the MAC filter screen to configure the EMG1302-R10A to block access to devices or block the devices from accessing the EMG1302-R10A. Advanced This screen allows you to configure advanced wireless settings.
Chapter 5 Router Mode Table 10 Navigation Panel: Router Mode (continued) LINK TAB FUNCTION WWW Use this screen to configure through which interface(s) and from which IP address(es) users can use HTTP to manage the EMG1302-R10A. Telnet Use this screen to configure through which interface(s) and from which IP address(es) users can use Telnet to manage the EMG1302-R10A. SNMP Use this screen to enable Wake on LAN to remotely turn on a device on the local network.
Chapter 5 Router Mode 42 EMG1302-R10A User’s Guide
C HAPT ER 6 Tutorials 6.1 Overview This chapter provides tutorials for setting up your EMG1302-R10A. • Set Up a Wireless Network with WPS • Configure Wireless Security without WPS • Using Multiple SSIDs on the EMG1302-R10A 6.2 Set Up a Wireless Network with WPS This section gives you an example of how to set up wireless network using WPS. This example uses the EMG1302-R10A as the AP and as the wireless client which connects to a notebook.
Chapter 6 Tutorials Note: Your EMG1302-R10A has a WPS button located on top panel, as well as a WPS button in its configuration utility. Both buttons have exactly the same function; you can use one or the other. Note: It doesn’t matter which button is pressed first. You must press the second button within two minutes of pressing the first one. The EMG1302-R10A sends the proper configuration settings to the wireless client. This may take up to two minutes.
Chapter 6 Tutorials 3 Click Start buttons (or button next to the PIN field) on both the wireless client utility screen and the EMG1302-R10A’s WPS Station screen within two minutes. The EMG1302-R10A authenticates the wireless client and sends the proper configuration settings to the wireless client. This may take up to two minutes. Then the wireless client is able to communicate with the EMG1302-R10A securely.
Chapter 6 Tutorials The instructions require that your hardware is connected (see the Quick Start Guide) and you are logged into the Web Configurator through your LAN connection (see Section 2.3 on page 19). 46 1 Make sure the WLAN switch (at the back panel of the EMG1302-R10A) is set to ON. 2 Open the Configuration > Network > Wireless LAN > General screen in the AP’s Web Configurator. 3 Confirm that the status of wireless LAN is ON.
Chapter 6 Tutorials 5 Open the Status screen. Verify your wireless and wireless security settings under Device Information and check if the WLAN connection is up under Interface Status. 6.3.1 Configure Your Notebook Note: We use the ZyXEL M-302 wireless adapter utility screens as an example for the wireless client. The screens may vary for different models. 1 The EMG1302-R10A supports IEEE 802.11b, IEEE 802.11g and IEEE 802.11n wireless clients.
Chapter 6 Tutorials 48 4 Select SSID_Example3 and click Connect. 5 Select WPA-PSK and type the security key in the following screen. Click Next. 6 The Confirm Save window appears. Check your settings and click Save to continue. 7 Check the status of your wireless connection in the screen below. If your wireless connection is weak or you have no connection, see Chapter 22 Troubleshooting section of this User’s Guide.
Chapter 6 Tutorials If your connection is successful, open your Internet browser and enter http://www.zyxel.com or the URL of any other web site in the address bar. If you are able to access the web site, your wireless connection is successfully configured. 6.4 Using Multiple SSIDs on the EMG1302-R10A You can configure more than one SSID on a EMG1302-R10A when it is operating in access point or universal repeater mode.
Chapter 6 Tutorials For example, you may set up three wireless networks (A, B and C) in your office. A is for workers, B is for guests and C is specific to a VoIP device in the meeting room. A SSID_Worker C SSID_VoIP B SSID_Guest 6.4.1 Configuring Security Settings of Multiple SSIDs This example shows you how to configure the SSIDs with the following parameters on your EMG1302-R10A.
Chapter 6 Tutorials 7 Go to Configuration > Network > Wireless LAN > More AP. Click the Edit icon of the first entry to configure wireless and security settings for SSID_Worker. 8 Configure the screen as follows. In this example, you enable Intra-BSS Traffic for SSID_Worker to allow wireless clients in the same wireless network to communicate with each other. Click Apply. 9 Click the Edit icon of the second entry to configure wireless and security settings for SSID_VoIP.
Chapter 6 Tutorials 10 Configure the screen as follows. You do not enable Intra-BSS Traffic for SSID_VoIP. Click Apply. 11 Click the MAC Filter tab to configure MAC filtering for the SSID_VoIP wireless network. Select SSID_VoIP from the SSID Select drop-down list, enable MAC address filtering and set the Filter Action to Allow. Enter the VoIP device’s MAC address in the Mac Address field and click Apply to allow only the VoIP device to associate with the EMG1302-R10A using this SSID.
P ART II Technical Reference 53
C HAPT ER 7 WAN 7.1 Overview This chapter discusses the EMG1302-R10A’s WAN screens. Use these screens to configure your EMG1302-R10A for Internet access. A WAN (Wide Area Network) connection is an outside connection to another network or the Internet. It connects your private networks such as a LAN (Local Area Network) and other networks, so that a computer in one location can communicate with computers in other locations. Figure 24 LAN and WAN LAN WAN 7.
Chapter 7 WAN 7.3 What You Need To Know The information in this section can help you configure the screens for your WAN connection, as well as enable/disable some advanced features of your EMG1302-R10A. 7.3.1 Configuring Your Internet Connection Encapsulation Method Encapsulation is used to include data from an upper layer protocol into a lower layer protocol. To set up a WAN connection to the Internet, you need to use the same encapsulation method used by your ISP (Internet Service Provider).
Chapter 7 WAN WAN MAC Address The MAC address screen allows users to configure the WAN port's MAC address by either using the factory default or cloning the MAC address from a computer on your LAN. Choose Factory Default to select the factory assigned default MAC Address. Otherwise, click Clone the computer's MAC address and enter the IP address of the computer on the LAN whose MAC you are cloning. Once it is successfully configured, the address will be copied to configuration file.
Chapter 7 WAN Auto-IP-Change When the EMG1302-R10A gets a WAN IP address which is in the same subnet as the LAN IP address 192.168.1.1, Auto-IP-Change allows the EMG1302-R10A to change its LAN IP address to 10.0.0.1 automatically. If the EMG1302-R10A’s original LAN IP address is 10.0.0.1 and the WAN IP address is in the same subnet, such as 10.0.0.3, the EMG1302-R10A switches to use 192.168.1.1 as its LAN IP address. Figure 26 Auto-IP-Change LAN 192.168.1.1 WAN 192.168.1.23 10.0.0.
Chapter 7 WAN 7.4 Management WAN Use this screen to view, change, or add your EMG1302-R10A’s Internet access settings. Click Configuration > Network > WAN. The following screen opens. Figure 27 Configuration > Network > Management WAN The following table describes the labels in this screen. Table 11 Configuration > Network > Management WAN LABEL DESCRIPTION Add New WAN Entry Click this to create a new WAN interface entry. # This is the index number of the connection.
Chapter 7 WAN 7.4.1 Add/Edit Internet Connection Click the Add New WAN Entry in the Configuration > WAN screen or the Edit icon next to the connection you want to configure. Use this screen to configure a WAN connection. The screen varies depending on the encapsulation you select. This screen displays when you select Add New WAN Entry encapsulation.
Chapter 7 WAN The following table describes the labels in this screen. Table 12 Configuration > WAN > Add New WAN Entry LABEL DESCRIPTION ISP Parameters for Internet Access WAN Name Enter the name designation for this setting. Note: Only the following parameters are available in Bridge mode: WAN name, encapsulation and VID. Encapsulation Select the encapsulation type: PPPoE, PPTP, IPoE, or Bridge. VID (1~4094) Enter a VLAN identifier between 1 to 4094 (the 802.
Chapter 7 WAN 7.4.1.1 PPPoE Encapsulation The EMG1302-R10A supports PPPoE (Point-to-Point Protocol over Ethernet). PPPoE is an IETF standard (RFC 2516) specifying how a personal computer (PC) interacts with a broadband modem (DSL, cable, wireless, etc.) connection. The PPP over Ethernet option is for a dial-up connection using PPPoE. For the service provider, PPPoE offers an access and authentication method that works with existing access control systems (for example Radius).
Chapter 7 WAN This screen displays when you select PPP over Ethernet encapsulation.
Chapter 7 WAN The following table describes the labels in this screen. Table 13 Internet Connection: PPP over Ethernet Encapsulation LABEL DESCRIPTION ISP Parameters for Internet Access Encapsulation Select PPP over Ethernet if you connect to your Internet via dial-up. IPv4 / IPv6 Click the drop-down menu to select either an IPv4 Only or dual stack interface. Enable VID VID (1~4094) Enter a VLAN identifier between 1 to 4094 (the 802.
Chapter 7 WAN Table 13 Internet Connection: PPP over Ethernet Encapsulation (continued) LABEL DESCRIPTION Passthrough PPTP Passthrough L2TP Passthrough IPSec Passthrough Apply Click Apply to save your changes back to the EMG1302-R10A. Cancel Click Cancel to exit this screen without saving. 7.4.1.
Chapter 7 WAN This screen displays when you select PPTP encapsulation.
Chapter 7 WAN The following table describes the labels in this screen. Table 14 Internet Connection:PPTP Encapsulation LABEL DESCRIPTION ISP Parameters for Internet Access Encapsulation Select PPTP to create a Virtual Private Network (VPN) using TCP/IP-based network. Enable VID VID (1~4094) Enter a VLAN identifier between 1 to 4094 (the 802.1Q tag specifies only a priority and is referred to as a priority tag). In bridge mode, VID 1 (the default VLAN ID) is reserved for a management VLAN.
Chapter 7 WAN Table 14 Internet Connection:PPTP Encapsulation (continued) LABEL DESCRIPTION WAN MAC Address Factory default Select Factory default to use the factory assigned default MAC Address. Clone the computer’s MAC address Select Clone the computer's MAC address and enter the IP address of the computer on the LAN whose MAC you are cloning. Set WAN MAC Address Select this option and enter the MAC address you want to use.
Chapter 7 WAN This screen displays when you select IPoE encapsulation.
Chapter 7 WAN The following table describes the labels in this screen. Table 15 Internet Connection: IP over Ethernet Encapsulation LABEL DESCRIPTION ISP Parameters for Internet Access Encapsulation You must choose the IPoE option when the WAN port is used as a regular Ethernet. IPv4 / IPv6 Click the drop down menu to select the available options: IPv4 only, dual stack, or IPv6. Enable VID VID (1~4094) Enter a VLAN identifier between 1 to 4094 (the 802.
Chapter 7 WAN Table 15 Internet Connection: IP over Ethernet Encapsulation (continued) LABEL DESCRIPTION Passthrough PPTP Passthrough L2TP Passthrough IPSec Passthrough Apply Click Apply to save your changes back to the EMG1302-R10A. Cancel Click Cancel to exit this screen without saving. 7.4.2 Bridge Encapsulation This screen displays when you select Bridge encapsulation. Figure 32 Internet Connection: Bridge Encapsulation The following table describes the labels in this screen.
Chapter 7 WAN 7.5 Advanced WAN Screen Use this screen to enable Multicast and enable Auto-IP-Change mode. To change your EMG1302-R10A’s advanced WAN settings, click Configuration > Network > WAN > Advanced. The screen appears as shown. Figure 33 Configuration > Network > WAN > Advanced The following table describes the labels in this screen. Table 17 Configuration > Network > WAN > Advanced LABEL DESCRIPTION Multicast Setup Multicast Setup Select IGMPv1/v2/v3 to enable multicasting.
Chapter 7 WAN 7.6 IPv6 Screen Use this section to enable and configure IPv6 addresses. By using IPv6, you are able to receive services such as: quality of service (QoS), end-to-end security, and globally unique addresses. Figure 34 Configuration > Network > WAN > IPv6 The following table describes the labels in this screen. Table 18 Configuration > Network > WAN > IPv6 LABEL DESCRIPTION IPv6 Setup IPv6 Select a field to Enable or Disable the IPv6 standard.
Chapter 7 WAN Table 18 Configuration > Network > WAN > IPv6 (continued) LABEL Address Mode DESCRIPTION Click Dynamic IP if your ISP assigs an IP address. If you have a fixed IP address assigned to you, click Static IP, and type the IP Address, Username and Password in the following fields. Username Enter the username as it is assigned for this account. Password Enter the designated password for the username in the previous field.. Service Name Enter a name to assign this service.
C HAPT ER 8 Wireless LAN 8.1 Overview This chapter discusses how to configure the wireless network settings in your EMG1302-R10A. See the appendices for more detailed information about wireless networks. The following figure provides an example of a wireless network. Figure 35 Example of a Wireless Network The wireless network is the part in the blue circle. In this wireless network, devices A and B are called wireless clients.
Chapter 8 Wireless LAN • Use the QoS screen to ensure Quality of Service (QoS) in your wireless network (Section 8.9 on page 87). • Use the WPS screen to quickly set up a wireless network with strong security, without having to configure security settings manually (Section 8.10 on page 88). • Use the WPS Station screen to add a wireless station using WPS (Section 8.11 on page 89). • Use the Scheduling screen to set the times your wireless LAN is turned on and off (Section 8.12 on page 90).
Chapter 8 Wireless LAN 00:A0:C5:00:00:02. To get the MAC address for each wireless client, see the appropriate User’s Guide or other documentation. You can use the MAC address filter to tell the AP which wireless clients are allowed or not allowed to use the wireless network. If a wireless client is allowed to use the wireless network, it still has to have the correct settings (SSID, channel, and security).
Chapter 8 Wireless LAN Usually, you should set up the strongest encryption that every wireless client in the wireless network supports. For example, suppose the AP does not have a local user database, and you do not have a RADIUS server. Therefore, there is no user authentication. Suppose the wireless network has two wireless clients. Device A only supports WEP, and device B supports WEP and WPA. Therefore, you should set up Static WEP in the wireless network.
Chapter 8 Wireless LAN Click Configuration > Network > Wireless LAN to open the General screen. Figure 36 Configuration > Network > Wireless LAN > General The following table describes the general wireless LAN labels in this screen. Table 20 Configuration > Network > Wireless LAN > General LABEL DESCRIPTION Wireless Setup Wireless LAN Status This is turned on by default. You can enable or disable the wireless LAN by using the WLAN switch located on the back panel of the EMG1302-R10A.
Chapter 8 Wireless LAN Table 20 Configuration > Network > Wireless LAN > General (continued) LABEL DESCRIPTION Channel Width Select whether the EMG1302-R10A uses a wireless channel width of 20MHz or Auto. If Auto is selected, the EMG1302-R10A will use 40MHz if it is supported. A standard 20MHz channel offers transfer speeds of up to 150Mbps whereas a 40MHz channel uses two standard channels and offers speeds of up to 300 Mbps.
Chapter 8 Wireless LAN 8.5 Wireless Security Use this part of the General screen to select the wireless security mode. Click Network > Wireless LAN to open the General screen. The screen varies depending on what you select in the Security Mode field. 8.5.1 No Security Select No Security to allow wireless clients to communicate with the access points without any data encryption.
Chapter 8 Wireless LAN 8.5.2 WPA2-PSK Select WPA2-PSK from the Security Mode list. Figure 38 Wireless LAN > General: Security: WPA2-PSK The following table describes the labels in this screen. Table 22 Wireless LAN > General: Security: WPA-PSK/WPA2-PSK LABEL DESCRIPTION Security Mode Select WPA-PSK or WPA2-PSK to enable data encryption. WPA-PSK Compatible This field appears when you choose WPA2-PSK as the Security Mode.
Chapter 8 Wireless LAN 8.6 More AP This screen allows you to enable and configure multiple wireless networks on the EMG1302-R10A. Select Configuration > Network > Wireless LAN > More AP. The screen appears as shown. Figure 39 Wireless LAN > More AP The following table describes the labels in this screen. Table 23 Wireless LAN > More AP LABEL DESCRIPTION # This is the index number of each SSID profile. Status Shows the status of the SSID.
Chapter 8 Wireless LAN 8.6.1 More AP Edit Use this screen to edit an SSID profile. Click the Edit icon next to an SSID in the Configuration > Network > Wireless LAN > More AP screen. The following screen displays. Figure 40 Wireless LAN > More AP: Edit The following table describes the labels in this screen. Table 24 Wireless LAN > More AP LABEL DESCRIPTION Wireless Setup Active Click the check box to activate wireless LAN.
Chapter 8 Wireless LAN Table 24 Wireless LAN > More AP (continued) LABEL DESCRIPTION Group Key Update Timer The Group Key Update Timer is the rate at which the RADIUS server sends a new group key out to all clients. Note: No Security and WPA2-PSK can be configured when WPS is enabled. Apply Click Apply to save your changes back to the EMG1302-R10A. Cancel Click Cancel to exit this screen without saving. 8.
Chapter 8 Wireless LAN The following table describes the labels in this menu. Table 25 Configuration > Network > Wireless LAN > MAC Filter LABEL DESCRIPTION MAC Address Filter Select Disable to deactivate the MAC filtering rule you configure below. Filter Action Select Allow to permit access to the EMG1302-R10A, MAC addresses not listed will be denied access to the EMG1302-R10A.
Chapter 8 Wireless LAN Table 26 Configuration > Network > Wireless LAN > Advanced (continued) LABEL DESCRIPTION Intra-BSS Traffic A Basic Service Set (BSS) exists when all communications between wireless clients or between a wireless client and a wired network client go through one access point (AP). Intra-BSS traffic is traffic between wireless clients in the BSS. When Intra-BSS is enabled, wireless client A and B can access the wired network and communicate with each other.
Chapter 8 Wireless LAN 8.10 WPS Screen Use this screen to enable/disable WPS, view or generate a new PIN number and check current WPS status. To open this screen, click Configuration > Network > Wireless LAN > WPS. Note: With WPS, wireless clients can only connect to the wireless network using the first SSID on the EMG1302-R10A. Figure 44 Configuration > Network > Wireless LAN > WPS The following table describes the labels in this screen.
Chapter 8 Wireless LAN Table 28 Configuration > Network > Wireless LAN > WPS (continued) LABEL DESCRIPTION Apply Click Apply to save your changes back to the EMG1302-R10A. Cancel Click Cancel to exit this screen without saving. 8.11 WPS Station Screen Use this screen when you want to add a wireless station using WPS. To open this screen, click Configuration > Network > Wireless LAN > WPS Station.
Chapter 8 Wireless LAN 8.12 Scheduling Screen Use this screen to set the times your wireless LAN is turned on and off. Wireless LAN scheduling is disabled by default. The wireless LAN can be scheduled to turn on or off on certain days and at certain times. To open this screen, click Configuration > Network > Wireless LAN > Scheduling. Figure 46 Configuration > Network > Wireless LAN > Scheduling The following table describes the labels in this screen.
Chapter 8 Wireless LAN 8.13 WDS A Wireless Distribution System is a wireless connection between two or more APs. Use this screen to set the operating mode of your EMG1302-R10A to AP + Bridge or Bridge Only and establish wireless links with other APs. You need to know the MAC address of the peer device, which also must be in bridge mode. Note: You must enable the same wireless security settings on the EMG1302-R10A and on all wireless clients that you want to associate with it.
Chapter 8 Wireless LAN 92 EMG1302-R10A User’s Guide
C HAPT ER 9 LAN 9.1 Overview This chapter describes how to configure LAN settings. A Local Area Network (LAN) is a shared communication system to which many computers are attached. A LAN is a computer network limited to the immediate area, usually the same building or floor of a building. The LAN screens can help you configure a LAN DHCP server, manage IP addresses, and partition your physical network into logical networks.
Chapter 9 LAN 9.3 What You Need To Know The actual physical connection determines whether the EMG1302-R10A ports are LAN or WAN ports. There are two separate IP networks, one inside the LAN network and the other outside the WAN network as shown next. Figure 49 LAN and WAN IP Addresses The LAN parameters of the EMG1302-R10A are preset in the factory with the following values: • IP address of 192.168.1.1 with subnet mask of 255.255.255.
Chapter 9 LAN 9.4 LAN IP Screen Use this screen to change the IP address for your EMG1302-R10A. Click Configuration > Network > LAN > IP. Figure 50 Configuration > Network > LAN > IP The following table describes the labels in this screen. Table 32 Configuration > Network > LAN > IP LABEL DESCRIPTION IP Address Type the IP address of your EMG1302-R10A in dotted decimal notation. IP Subnet Mask The subnet mask specifies the network number portion of an IP address.
Chapter 9 LAN 96 EMG1302-R10A User’s Guide
C HAPTER 10 DHCP Server 10.1 Overview Dynamic Host Configuration Protocol (DHCP), RFC 2131 and RFC 2132 allow individual clients to obtain TCP/IP configuration at start-up from a server. You can configure the EMG1302-R10A’s LAN as a DHCP server or disable it. When configured as a server, the EMG1302-R10A provides the TCP/ IP configuration for the clients. If DHCP service is disabled, you must have another DHCP server on your LAN, or else the computer must be manually configured. 10.
Chapter 10 DHCP Server 10.4 The DHCP General Screen Use this screen to enable the DHCP server. Click Configuration > Network > DHCP Server. The General screen displays. Figure 51 Configuration > Network > DHCP Server > General The following table describes the labels in this screen. Table 33 Configuration > Network > DHCP Server > General LABEL DESCRIPTION Enable DHCP Server Select the checkbox to enable DHCP for LAN.
Chapter 10 DHCP Server 10.5 The DHCP Advanced Screen This screen allows you to assign IP addresses on the LAN to specific individual computers based on their MAC addresses. You can also use this screen to configure the DNS server information that the EMG1302-R10A sends to the DHCP clients. To change your EMG1302-R10A’s static DHCP settings, click Configuration > Network > DHCP Server > Advanced. The following screen displays.
Chapter 10 DHCP Server Table 34 Configuration > Network > DHCP Server > Advanced (continued) LABEL DESCRIPTION First DNS Server Select From ISP if your ISP dynamically assigns DNS server information (and the EMG1302-R10A's WAN IP address). The field to the right displays the (read-only) DNS server IP address that the ISP assigns. Second DNS Server Select User-Defined if you have the IP address of a DNS server. Enter the DNS server's IP address in the field to the right.
Chapter 10 DHCP Server Table 35 Configuration > Network > DHCP Server > Client List (continued) LABEL DESCRIPTION MAC Address Every Ethernet device has a unique MAC (Media Access Control) address. The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02. This indicates the MAC address of the client device. Reserve Select this if you want to reserve the IP address for this specific MAC address.
Chapter 10 DHCP Server 102 EMG1302-R10A User’s Guide
C HAPTER 11 Quality of Service (QoS) 11.1 Overview Use the QoS screen to set up your EMG1302-R10A to use QoS for traffic management. Quality of Service (QoS) refers to both a network’s ability to deliver data with minimum delay, and the networking methods used to control bandwidth. QoS allows the EMG1302-R10A to group and prioritize application traffic and fine-tune network performance. Without QoS, all traffic data are equally likely to be dropped when the network is congested.
Chapter 11 Quality of Service (QoS) 11.1.1 What You Can Do in the QoS Screens • Use the General screen (Section 11.2 on page 104) to enable QoS on the EMG1302-R10A, and specify the type of scheduling. • Use the Rule-based QoS screen (Section 11.3 on page 105) to define and setup QoS-specific rules. 11.1.2 What You Need to Know About QoS 802.1p QoS is used to prioritize source-to-destination traffic flows. All packets in the same flow are given the same priority. 802.
Chapter 11 Quality of Service (QoS) The following table describes the labels in this screen. Table 36 Configuration > Network > QoS > General LABEL DESCRIPTION QoS Select Enable or Disable to activate/disable the service. Bandwidth of Upstream Enter the amount of upstream bandwidth for the WAN interfaces that you want to allocate using QoS. The recommendation is to set this speed to match the interfaces’ actual transmission speed.
Chapter 11 Quality of Service (QoS) The following table describes the labels in this screen. Table 37 Configuration > Network > QoS > Queue LABEL DESCRIPTION # This is the index number of the entry. Status This field displays whether the queue is active or not. A yellow bulb signifies that this queue is active. A gray bulb signifies that this queue is not active. Grouping This field displays the IP or MAC interface this rule uses.
Chapter 11 Quality of Service (QoS) Table 38 Rule Setup: Edit (continued) LABEL DESCRIPTION Control Direction Select the direciton of the traffic (In / Out / Both) for this rule. Apply Click Apply to save your changes back to the EMG1302-R10A. Cancel Click Cancel to begin configuring this screen afresh. 11.4 QoS Technical Reference This section provides some technical background information about the topics covered in this chapter. 11.4.1 IEEE 802.1p IEEE 802.
Chapter 11 Quality of Service (QoS) The following table shows you the internal layer-2 and layer-3 QoS mapping on the EMG1302R10A. On the EMG1302-R10A, traffic assigned to higher priority queues gets through faster while traffic in lower index queues is dropped if the network is congested. Table 40 Internal Layer2 and Layer3 QoS Mapping LAYER 2 LAYER 3 PRIORITY QUEUE IEEE 802.
C HAPTER 12 NAT 12.1 Overview NAT (Network Address Translation - NAT, RFC 1631) is the translation of the IP address of a host in a packet. For example, the source address of an outgoing packet, used within one network is changed to a different IP address known within another network. The figure below is a simple illustration of a NAT network.
Chapter 12 NAT • Use the Port Forwarding screen to change your EMG1302-R10A’s port forwarding settings (Section 12.5 on page 112). • Use the Port Trigger screen to view and configure your EMG1302-R10A’s trigger port settings (Section 12.5 on page 112). • Use the ALG screen to 12.3 What You Need To Know The following terms and concepts may help as you read through this chapter.
Chapter 12 NAT global address) back to the inside local address before forwarding it to the original inside host. Note that the IP address (either local or global) of an outside host is never changed. The global IP addresses for the inside hosts can be either static or dynamically assigned by the ISP. In addition, you can designate servers, for example, a web server and a telnet server, on your local network and make them accessible to the outside world.
Chapter 12 NAT 12.4 The NAT General Screen Use this screen to enable NAT and set a default server. Click Configuration > Network > NAT to open the General screen. Figure 60 Configuration > Network > NAT > General The following table describes the labels in this screen.
Chapter 12 NAT The following table describes the labels in this screen. Table 43 Configuration > Network > NAT > Port Forwarding LABEL DESCRIPTION Service Name Select User-Defined and type a name (of up to 31 printable characters) to identify this rule in the first field next to Service Name. Otherwise, select a predefined service in the second field next to Service Name. The predefined service name and port number(s) will display in the Service Name and Port fields.
Chapter 12 NAT Use this screen to view and configure your EMG1302-R10A’s trigger port settings. Click Configuration > Network > NAT > Port Trigger to open the Port Trigger screen. Figure 62 Configuration > Network > NAT > Port Trigger The following table describes the labels in this screen. Table 44 Configuration > Network > NAT > Port Trigger LABEL DESCRIPTION Application Rules Summary Port Trigger Rules 114 # This is the rule index number (read-only).
Chapter 12 NAT 12.7 The ALG Screen Click Configuration > Network > NAT > ALG. The screen appears as shown. Figure 63 Configuration > Network > NAT > ALG The following table describes the labels in this screen. Table 45 Configuration > Network > NAT > ALG LABEL DESCRIPTION ALG-SIP Apply Click Apply to save your changes back to the EMG1302-R10A. Cancel Click Cancel to begin configuring this screen afresh.
Chapter 12 NAT 116 EMG1302-R10A User’s Guide
C HAPTER 13 DDNS 13.1 Overview Dynamic Domain Name Service (DDNS) services let you use a fixed domain name with a dynamic IP address. Users can always use the same domain name instead of a different dynamic IP address that changes each time to connect to the EMG1302-R10A or a server in your network. Note: The EMG1302-R10A must have a public global IP address and you should have your registered DDNS account information on hand. 13.
Chapter 13 DDNS Table 46 Configuration > Network > Dynamic DNS > Dynamic DNS (continued) LABEL DESCRIPTION Service Provider Select the name of your Dynamic DNS service provider. Host Name The host name is the domain name that the DDNS service will map to your dynamic global IP address. Type the host name fully qualified, for example, ‘yourhost.mydomain.net’. You can specify up to two host names in the field separated by a comma (",").
C HAPTER 14 Routing 14.1 Overview This chapter shows you how to configure static routes for your EMG1302-R10A. Each remote node specifies only the network to which the gateway is directly connected, and the EMG1302-R10A has no knowledge of the networks beyond. For instance, the EMG1302-R10A knows about network N2 in the following figure through remote node Router 1.
Chapter 14 Routing The following table describes the labels in this screen. Table 47 Configuration > Network > Routing > Static Route LABEL DESCRIPTION Add Static Route Click this to create a new rule. Static Route Rules # This is the index number of an individual static route. The first entry is for the default route and not editable. Status This field indicates weather the rule is active (yellow bulb) or not (gray bulb). Destination Displays the IP network address of the final destination.
Chapter 14 Routing Table 48 Configuration > Network > Routing > Static Route > Add Static Route (continued) LABEL DESCRIPTION Apply Click Apply to save your changes back to the EMG1302-R10A. Cancel Click Cancel to exit this screen without saving. 14.3 The Dynamic Routing Screen Click Configuration > Network > Routing > Dynamic Routing to open the Dynamic Routing screen. Figure 68 Configuration > Network > Routing > Dynamic Routing The following table describes the labels in this screen.
Chapter 14 Routing 122 EMG1302-R10A User’s Guide
C HAPTER 15 Interface Group 15.1 Overview By default, all LAN and WAN interfaces on the EMG1302-R10A are in the same group and can communicate with each other. You can create multiple groups to have the EMG1302-R10A assign the IP addresses in different domains to different groups. Each group acts as an independent network on the EMG1302-R10A. 15.2 The Interface Group Screen You can manually add a LAN interface or a VLAN ID to a new group.
Chapter 15 Interface Group 15.2.1 Add Interface Group Click the Add button in the Interface Group screen to open the following screen. Use this screen to create a new interface group. Note: An interface can belong to a group only. Figure 70 Interface Group > Add New Group The following table describes the fields in this screen. Table 51 Interface Group > Add New Group LABEL DESCRIPTION Interface Grouping 124 Group Name Enter a name to identify this group.
C HAPTER 16 Security 16.1 Overview Use these screens to enable and configure the firewall that protects your EMG1302-R10A and your LAN from unwanted or malicious traffic. Enable the firewall to protect your LAN computers from attacks by hackers on the Internet and control access between the LAN and WAN. By default the firewall: • allows traffic that originates from your LAN computers to go to all of the networks. • blocks traffic that originates on the other networks from going to the LAN.
Chapter 16 Security 16.3 What You Need To Know The following terms and concepts may help as you read through this chapter. What is a Firewall? Originally, the term “firewall” referred to a construction technique designed to prevent the spread of fire from one room to another. The networking term "firewall" is a system or group of systems that enforces an access-control policy between two networks. It may also be defined as a mechanism used to protect a trusted network from a network that is not trusted.
Chapter 16 Security Guidelines For Enhancing Security With Your Firewall 1 Change the default password via Web Configurator. 2 Think about access control before you connect to the network in any way, including attaching a modem to the port. 3 Limit who can access your router. 4 Don't enable any local service (such as NTP) that you don't use. Any enabled service could present a potential security risk.
Chapter 16 Security 16.5 The Firewall Services Screen If an outside user attempts to probe an unsupported port on your EMG1302-R10A, an ICMP response packet is automatically returned. This allows the outside user to know the EMG1302-R10A exists. Use this screen to prevent the ICMP response packet from being sent. This keeps outsiders from discovering your EMG1302-R10A when unsupported ports are probed. Click Configuration > Security > Firewall > Services to display the following screen.
Chapter 16 Security Table 53 Configuration > Security > Firewall > Services (continued) LABEL DESCRIPTION WAN Stealth Mode Enable WAN Stealth Mode Enable Firewall Rule Enable Firewall Rule Select this check box to enable firewall rule and click Apply. Add Firewall Rule Service Name Enter a name that identifies or describes the firewall rule. MAC Address Enter the MAC address of the computer for which the firewall rule applies.
Chapter 16 Security 130 EMG1302-R10A User’s Guide
C HAPTER 17 Content Filtering 17.1 Overview This chapter provides a brief overview of content filtering using the embedded web GUI. Internet content filtering allows you to create and enforce Internet access policies tailored to your needs. Content filtering is the ability to block certain web features or specific URL keywords. 17.2 What You Need To Know The following terms and concepts may help as you read through this chapter.
Chapter 17 Content Filtering 17.3 Content Filter Use this screen to restrict web features, add keywords for blocking and designate a trusted computer. Click Configuration > Security > Content Filter to open the Content Filter screen. Figure 74 Configuration > Security > Content Filter The following table describes the labels in this screen.
Chapter 17 Content Filtering Table 54 Configuration > Security > Content Filter (continued) LABEL DESCRIPTION Cookies Used by Web servers to track usage and provide service based on ID. Web Proxy A server that acts as an intermediary between a user and the Internet to provide security, administrative control, and caching service. When a proxy server is located on the WAN it is possible for LAN users to circumvent content filtering by pointing to this proxy server.
Chapter 17 Content Filtering 134 EMG1302-R10A User’s Guide
C HAPTER 18 IPv6 Firewall 18.1 Overview 18.2 The IPv6 Firewall Screen Click Configuration > Security > IPv6 Firewall. The Service screen appears as shown. Figure 75 Configuration > Security > IPv6 Firewall The following table describes the labels in this screen.
Chapter 18 IPv6 Firewall Table 55 Configuration > Security > IPv6 Firewall (continued) LABEL DESCRIPTION Add Firewall Rule Service Name Enter a name that identifies or describes the firewall rule. MAC Address Enter the MAC address of the computer for which the firewall rule applies. Dest IP Address Enter the IP address of the computer to which traffic for the application or service is entering. The EMG1302-R10A applies the firewall rule to traffic initiations from this computer.
C HAPTER 19 Remote Management 19.1 Overview This chapter provides information on the Remote Management screens. Remote Management allows you to manage your EMG1302-R10A from a remote location through the following interfaces: • LAN and WAN • LAN only Note: The EMG1302-R10A is managed using the Web Configurator. 19.2 What You Need to Know Remote management over LAN or WAN will not work when: 1 The IP address in the Secured Client IP Address field (Section 19.
Chapter 19 Remote Management • Your EMG1302-R10A can act as an SNMP agent, which allows a manager station to manage and monitor the EMG1302-R10A through the network. Use the SNMP screen to configure SNMP settings. You can also specify from which IP addresses the access can come (Section 19.6 on page 140). • Use the TR069 screen to configure the EMG1302-R10A’s TR-069 auto-configuration settings (Section 19.7 on page 142). 19.
Chapter 19 Remote Management Table 56 Configuration > Management > Remote MGMT > WWW (continued) LABEL DESCRIPTION Access Status Select the interface(s) through which a computer may access the EMG1302-R10A using this HTTP service. Secured Client IP Address Select All to allow all computers to access the EMG1302-R10A. Apply Click Apply to save your changes back to the EMG1302-R10A. Cancel Click Cancel to exit this screen without saving.
Chapter 19 Remote Management 19.6 The SNMP Screen Simple Network Management Protocol is a protocol used for exchanging management information between network devices. Your EMG1302-R10A supports SNMP agent functionality, which allows a manager station to manage and monitor the EMG1302-R10A through the network. The EMG1302R10A supports SNMP version one (SNMPv1) and version two (SNMPv2c). The next figure illustrates an SNMP management operation.
Chapter 19 Remote Management To change your EMG1302-R10A’s SNMP settings, click Configuration > Management > Remote MGMT > SNMP to display the screen as shown. Figure 79 Configuration > Management > Remote MGMT > SNMP The following table describes the labels in this screen. Table 58 Configuration > Management > Remote MGMT > SNMP LABEL DESCRIPTION SNMP Settings Server Access Select the interface(s) through which a computer may access the EMG1302-R10A using this service.
Chapter 19 Remote Management Table 58 Configuration > Management > Remote MGMT > SNMP (continued) LABEL DESCRIPTION Trap Community Type the trap community, which is the password sent with each trap to the SNMP manager. The default is public and allows all requests. Apply Click Apply to save your changes back to the EMG1302-R10A. Cancel Click Cancel to exit this screen without saving. 19.
Chapter 19 Remote Management Table 59 Configuration > Management > Remote MGMT > TR069 (continued) LABEL DESCRIPTION ACS Password Enter the TR-069 password for authentication with the auto-configuration server. ConnectionRequest Port Connection Request Username Enter the connection request user name. Connection Request Password Enter the connection request password. Interface Select the network interface. Apply Click Apply to save your changes back to the EMG1302-R10A.
Chapter 19 Remote Management 144 EMG1302-R10A User’s Guide
C HAPTER 20 Universal Plug-and-Play (UPnP) 20.1 Overview This chapter introduces the UPnP feature in the web configurator. Universal Plug and Play (UPnP) is a distributed, open networking standard that uses TCP/IP for simple peer-to-peer network connectivity between devices. A UPnP device can dynamically join a network, obtain an IP address, convey its capabilities and learn about other devices on the network. In turn, a device can leave a network smoothly and automatically when it is no longer in use.
Chapter 20 Universal Plug-and-Play (UPnP) All UPnP-enabled devices may communicate freely with each other without additional configuration. Disable UPnP if this is not your intention. 20.3 UPnP Screen Use this screen to enable UPnP on your EMG1302-R10A. Click Configuration > Management > UPnP to display the screen shown next. Figure 81 Configuration > Management > UPnP The following table describes the fields in this screen.
Chapter 20 Universal Plug-and-Play (UPnP) 2 Right-click the icon and select Properties. Figure 82 Network Connections 3 In the Internet Connection Properties window, click Settings to see the port mappings there were automatically created.
Chapter 20 Universal Plug-and-Play (UPnP) 4 You may edit or delete the port mappings or click Add to manually add port mappings. Figure 84 Internet Connection Properties: Advanced Settings Figure 85 Internet Connection Properties: Advanced Settings: Add Note: When the UPnP-enabled device is disconnected from your computer, all port mappings will be deleted automatically. 5 Select Show icon in notification area when connected option and click OK. An icon displays in the system tray.
Chapter 20 Universal Plug-and-Play (UPnP) 6 Double-click on the icon to display your current Internet connection status. Figure 87 Internet Connection Status 20.4.2 Web Configurator Easy Access With UPnP, you can access the web-based configurator on the EMG1302-R10A without finding out the IP address of the EMG1302-R10A first. This comes helpful if you do not know the IP address of the EMG1302-R10A. Follow the steps below to access the web configurator. 1 Click Start and then Control Panel.
Chapter 20 Universal Plug-and-Play (UPnP) 3 Select My Network Places under Other Places. Figure 88 Network Connections 4 An icon with the description for each UPnP-enabled device displays under Local Network. 5 Right-click on the icon for your EMG1302-R10A and select Invoke. The web configurator login screen displays.
Chapter 20 Universal Plug-and-Play (UPnP) 6 Right-click on the icon for your EMG1302-R10A and select Properties. A properties window displays with basic information about the EMG1302-R10A.
Chapter 20 Universal Plug-and-Play (UPnP) 152 EMG1302-R10A User’s Guide
C HAPTER 21 Maintenance 21.1 Overview This chapter provides information on the Maintenance screens. 21.2 What You Can Do • Use the General screen to set the timeout period of the management session (Section 21.3 on page 153). • Use the Password screen to change your EMG1302-R10A’s system password (Section 21.4 on page 154). • Use the Time screen to change your EMG1302-R10A’s time and date (Section 21.5 on page 156). • Use the Firmware Upgrade screen to upload firmware to your EMG1302-R10A (Section 21.
Chapter 21 Maintenance The following table describes the labels in this screen. Table 61 Maintenance > General LABEL DESCRIPTION System Name System Name is a unique name to identify the EMG1302-R10A in an Ethernet network. Domain Name Enter the domain name you want to give to the EMG1302-R10A. Administrator Inactivity Timer Type how many minutes a management session can be left idle before the session times out. The default is 5 minutes.
Chapter 21 Maintenance In User Account Entries in Maintenance > Account > User Account, click Edit icon under Modify. The screen appears as shown. Figure 93 Maintenance > Password The following table describes the labels in this screen. Table 63 Maintenance > Account > User Account > Edit LABEL DESCRIPTION Username The user account name. Old Password Type the default password or the existing password you use to access the system in this field.
Chapter 21 Maintenance 21.5 Time Setting Screen Use this screen to configure the EMG1302-R10A’s time based on your local time zone. To change your EMG1302-R10A’s time and date, click Maintenance > Time. The screen appears as shown. Figure 94 Maintenance > Time The following table describes the labels in this screen. Table 64 Maintenance > Time LABEL DESCRIPTION Current Time and Date Current Time This field displays the time of your EMG1302-R10A.
Chapter 21 Maintenance Table 64 Maintenance > Time (continued) LABEL New Date (yyyy/mm/ dd) DESCRIPTION This field displays the last updated date from the time server or the last date configured manually. When you select Manual, enter the new date in this field and then click Apply. Get from Time Server Select this radio button to have the EMG1302-R10A get the time and date from the time server you specified below.
Chapter 21 Maintenance Click Maintenance > Firmware Upgrade. Follow the instructions in this screen to upload firmware to your EMG1302-R10A. Figure 95 Maintenance > Firmware Upgrade The following table describes the labels in this screen. Table 65 Maintenance > Firmware Upgrade LABEL DESCRIPTION Firmware Upgrade File Path Type in the location of the file you want to upload in this field or click Browse... to find it. Browse... Click Browse... to find the .bin file you want to upload.
Chapter 21 Maintenance recommended that you back up your configuration file before making configuration changes. The backup configuration file will be useful in case you need to return to your previous settings. Restore configuration allows you to upload a new or previously saved configuration file from your computer to your EMG1302-R10A. Click Maintenance > Backup/Restore. Information related to factory defaults, backup configuration, and restoring configuration appears as shown next.
Chapter 21 Maintenance Table 66 Maintenance > Backup/Restore (continued) LABEL DESCRIPTION Upload Click Upload to begin the upload process. Note: Do not turn off the EMG1302-R10A while configuration file upload is in progress. After you see a “configuration upload successful” screen, you must then wait one minute before logging into the EMG1302-R10A again. The EMG1302-R10A automatically restarts in this time causing a temporary network disconnect.
C HAPTER 22 Troubleshooting 22.1 Overview This chapter offers some suggestions to solve problems you might encounter. The potential problems are divided into the following categories. • Power, Hardware Connections, and LEDs • EMG1302-R10A Access and Login • Internet Access • Resetting the EMG1302-R10A to Its Factory Defaults • Wireless Router/AP Troubleshooting 22.2 Power, Hardware Connections, and LEDs The EMG1302-R10A does not turn on. None of the LEDs turn on.
Chapter 22 Troubleshooting 22.3 EMG1302-R10A Access and Login I don’t know the IP address of my EMG1302-R10A. 1 The default IP address is 192.168.1.1. 2 If you changed the IP address and have forgotten it, you might get the IP address of the EMG1302R10A by looking up the IP address of the default gateway for your computer. To do this in most Windows computers, click Start > Run, enter cmd, and then enter ipconfig.
Chapter 22 Troubleshooting 3 Make sure your Internet browser does not block pop-up windows and has JavaScript and Java enabled. See Appendix B on page 173. 4 Make sure your computer is in the same subnet as the EMG1302-R10A. (If you know that there are routers between your computer and the EMG1302-R10A, skip this step.) • If there is a DHCP server on your network, make sure your computer is using a dynamic IP address. See Section 9.4 on page 95.
Chapter 22 Troubleshooting 1 Check the hardware connections, and make sure the LEDs are behaving as expected. See the Quick Start Guide. 2 If you are trying to access the Internet wirelessly, make sure the wireless settings in the wireless client are the same as the settings in the AP. 3 Disconnect all the cables from your device, and follow the directions in the Quick Start Guide again. 4 Go to Maintenance > Sys OP Mode. Check your Configuration Mode setting.
Chapter 22 Troubleshooting You will lose all of your changes when you push the RESET button. To reset the EMG1302-R10A: 1 Make sure the power LED is on. 2 Press the RESET button for longer than 1 second to restart/reboot the EMG1302-R10A. 3 Press the RESET button for longer than five seconds to set the EMG1302-R10A back to its factorydefault configurations. If the EMG1302-R10A restarts automatically, wait for the EMG1302-R10A to finish restarting, and log in to the Web Configurator.
Chapter 22 Troubleshooting Make sure that you select the Enable URL Keyword Blocking check box in the Content Filtering screen. Make sure that the keywords that you type are listed in the Keyword List. I can access the Internet, but I cannot open my network folders. Make sure your account has access rights to the folder you are trying to open. I cannot access the Web Configurator after I switched to AP mode.
A PPENDIX A Customer Support In the event of problems that cannot be solved by using this manual, you should contact your vendor. If you cannot contact your vendor, then contact a ZyXEL office for the region in which you bought the device. Regional websites are listed below (see also http://www.zyxel.com/ about_zyxel/zyxel_worldwide.shtml). Please have the following information ready when you contact an office. Required Information • Product model and serial number. • Warranty Information.
Appendix A Customer Support Korea • ZyXEL Korea Corp. • http://www.zyxel.kr Malaysia • ZyXEL Malaysia Sdn Bhd. • http://www.zyxel.com.my Pakistan • ZyXEL Pakistan (Pvt.) Ltd. • http://www.zyxel.com.pk Philipines • ZyXEL Philippines • http://www.zyxel.com.ph Singapore • ZyXEL Singapore Pte Ltd. • http://www.zyxel.com.sg Taiwan • ZyXEL Communications Corporation • http://www.zyxel.com Thailand • ZyXEL Thailand Co., Ltd • http://www.zyxel.co.
Appendix A Customer Support Belgium • ZyXEL Communications B.V. • http://www.zyxel.com/be/nl/ Bulgaria • ZyXEL България • http://www.zyxel.com/bg/bg/ Czech • ZyXEL Communications Czech s.r.o • http://www.zyxel.cz Denmark • ZyXEL Communications A/S • http://www.zyxel.dk Estonia • ZyXEL Estonia • http://www.zyxel.com/ee/et/ Finland • ZyXEL Communications • http://www.zyxel.fi France • ZyXEL France • http://www.zyxel.fr Germany • ZyXEL Deutschland GmbH • http://www.zyxel.
Appendix A Customer Support Lithuania • ZyXEL Lithuania • http://www.zyxel.com/lt/lt/homepage.shtml Netherlands • ZyXEL Benelux • http://www.zyxel.nl Norway • ZyXEL Communications • http://www.zyxel.no Poland • ZyXEL Communications Poland • http://www.zyxel.pl Romania • ZyXEL Romania • http://www.zyxel.com/ro/ro Russia • ZyXEL Russia • http://www.zyxel.ru Slovakia • ZyXEL Communications Czech s.r.o. organizacna zlozka • http://www.zyxel.sk Spain • ZyXEL Spain • http://www.zyxel.
Appendix A Customer Support Turkey • ZyXEL Turkey A.S. • http://www.zyxel.com.tr UK • ZyXEL Communications UK Ltd. • http://www.zyxel.co.uk Ukraine • ZyXEL Ukraine • http://www.ua.zyxel.com Latin America Argentina • ZyXEL Communication Corporation • http://www.zyxel.com/ec/es/ Ecuador • ZyXEL Communication Corporation • http://www.zyxel.com/ec/es/ Middle East Egypt • ZyXEL Communication Corporation • http://www.zyxel.com/homepage.shtml Middle East • ZyXEL Communication Corporation • http://www.zyxel.
Appendix A Customer Support Oceania Australia • ZyXEL Communications Corporation • http://www.zyxel.com/au/en/ Africa South Africa • Nology (Pty) Ltd. • http://www.zyxel.co.
A PPENDIX B Pop-up Windows, JavaScript and Java Permissions In order to use the web configurator you need to allow: • Web browser pop-up windows from your device. • JavaScript (enabled by default). • Java permissions (enabled by default). Note: The screens used below belong to Internet Explorer version 6, 7 and 8. Screens for other Internet Explorer versions may vary. Internet Explorer Pop-up Blockers You may have to disable pop-up blocking to log into your device.
Appendix B Pop-up Windows, JavaScript and Java Permissions 2 Clear the Block pop-ups check box in the Pop-up Blocker section of the screen. This disables any web pop-up blockers you may have enabled. Figure 100 Internet Options: Privacy 3 Click Apply to save this setting. Enable Pop-up Blockers with Exceptions Alternatively, if you only want to allow pop-up windows from your device, see the following steps. 1 174 In Internet Explorer, select Tools, Internet Options and then the Privacy tab.
Appendix B Pop-up Windows, JavaScript and Java Permissions 2 Select Settings…to open the Pop-up Blocker Settings screen. Figure 101 Internet Options: Privacy 3 Type the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.167.1.
Appendix B Pop-up Windows, JavaScript and Java Permissions 4 Click Add to move the IP address to the list of Allowed sites. Figure 102 Pop-up Blocker Settings 5 Click Close to return to the Privacy screen. 6 Click Apply to save this setting. JavaScript If pages of the web configurator do not display properly in Internet Explorer, check that JavaScript are allowed.
Appendix B Pop-up Windows, JavaScript and Java Permissions 1 In Internet Explorer, click Tools, Internet Options and then the Security tab. Figure 103 Internet Options: Security 2 Click the Custom Level... button. 3 Scroll down to Scripting. 4 Under Active scripting make sure that Enable is selected (the default). 5 Under Scripting of Java applets make sure that Enable is selected (the default).
Appendix B Pop-up Windows, JavaScript and Java Permissions 6 Click OK to close the window. Figure 104 Security Settings - Java Scripting Java Permissions 178 1 From Internet Explorer, click Tools, Internet Options and then the Security tab. 2 Click the Custom Level... button. 3 Scroll down to Microsoft VM. 4 Under Java permissions make sure that a safety level is selected.
Appendix B Pop-up Windows, JavaScript and Java Permissions 5 Click OK to close the window. Figure 105 Security Settings - Java JAVA (Sun) 1 From Internet Explorer, click Tools, Internet Options and then the Advanced tab. 2 Make sure that Use Java 2 for
Appendix B Pop-up Windows, JavaScript and Java Permissions 3 Click OK to close the window. Figure 106 Java (Sun) Mozilla Firefox Mozilla Firefox 2.0 screens are used here. Screens for other versions may vary slightly. The steps below apply to Mozilla Firefox 3.0 as well. You can enable Java, Javascript and pop-ups in one screen. Click Tools, then click Options in the screen that appears.
Appendix B Pop-up Windows, JavaScript and Java Permissions Click Content to show the screen below. Select the check boxes as shown in the following screen. Figure 108 Mozilla Firefox Content Security Opera Opera 10 screens are used here. Screens for other versions may vary slightly.
Appendix B Pop-up Windows, JavaScript and Java Permissions Allowing Pop-Ups From Opera, click Tools, then Preferences. In the General tab, go to Choose how you prefer to handle pop-ups and select Open all pop-ups. Figure 109 Opera: Allowing Pop-Ups Enabling Java From Opera, click Tools, then Preferences. In the Advanced tab, select Content from the leftside menu. Select the check boxes as shown in the following screen.
Appendix B Pop-up Windows, JavaScript and Java Permissions To customize JavaScript behavior in the Opera browser, click JavaScript Options. Figure 111 Opera: JavaScript Options Select the items you want Opera’s JavaScript to apply.
Appendix B Pop-up Windows, JavaScript and Java Permissions 184 EMG1302-R10A User’s Guide
A PPENDIX C Wireless LANs Wireless LAN Topologies This section discusses ad-hoc and infrastructure wireless LAN topologies. Ad-hoc Wireless LAN Configuration The simplest WLAN configuration is an independent (Ad-hoc) WLAN that connects a set of computers with wireless adapters (A, B, C). Any time two or more wireless adapters are within range of each other, they can set up an independent network, which is commonly referred to as an ad-hoc network or Independent Basic Service Set (IBSS).
Appendix C Wireless LANs disabled, wireless client A and B can still access the wired network but cannot communicate with each other. Figure 113 Basic Service Set ESS An Extended Service Set (ESS) consists of a series of overlapping BSSs, each containing an access point, with each access point connected together by a wired network. This wired connection between APs is called a Distribution System (DS). This type of wireless LAN topology is called an Infrastructure WLAN.
Appendix C Wireless LANs An ESSID (ESS IDentification) uniquely identifies each ESS. All access points and their associated wireless clients within the same ESS must have the same ESSID in order to communicate. Figure 114 Infrastructure WLAN Channel A channel is the radio frequency(ies) used by wireless devices to transmit and receive data. Channels available depend on your geographical area.
Appendix C Wireless LANs cannot "hear" each other, that is they do not know if the channel is currently being used. Therefore, they are considered hidden from each other. Figure 115 RTS/CTS When station A sends data to the AP, it might not know that the station B is already using the channel. If these two stations send data at the same time, collisions may occur when both sets of data arrive at the AP at the same time, resulting in a loss of messages for both stations.
Appendix C Wireless LANs If the Fragmentation Threshold value is smaller than the RTS/CTS value (see previously) you set then the RTS (Request To Send)/CTS (Clear to Send) handshake will never occur as data frames will be fragmented before they reach RTS/CTS size. Preamble Type Preamble is used to signal that data is coming to the receiver. Short and long refer to the length of the synchronization field in a packet.
Appendix C Wireless LANs The following figure shows the relative effectiveness of these wireless security methods available on your EMG1302-R10A.
Appendix C Wireless LANs Types of RADIUS Messages The following types of RADIUS messages are exchanged between the access point and the RADIUS server for user authentication: • Access-Request Sent by an access point requesting authentication. • Access-Reject Sent by a RADIUS server rejecting access. • Access-Accept Sent by a RADIUS server allowing access. • Access-Challenge Sent by a RADIUS server requesting more information in order to allow access.
Appendix C Wireless LANs encrypting the password with the challenge and sends back the information. Password is not sent in plain text. However, MD5 authentication has some weaknesses. Since the authentication server needs to get the plaintext passwords, the passwords must be stored. Thus someone other than the authentication server may access the password file. In addition, it is possible to impersonate an authentication server as MD5 authentication method does not perform mutual authentication.
Appendix C Wireless LANs For added security, certificate-based authentications (EAP-TLS, EAP-TTLS and PEAP) use dynamic keys for data encryption. They are often deployed in corporate environments, but for public deployment, a simple user name and password pair is more practical. The following table is a comparison of the features of authentication types.
Appendix C Wireless LANs The RADIUS server distributes a Pairwise Master Key (PMK) key to the AP that then sets up a key hierarchy and management system, using the PMK to dynamically generate unique data encryption keys to encrypt every data packet that is wirelessly communicated between the AP and the wireless clients. This all happens in the background automatically. The Message Integrity Check (MIC) is designed to prevent an attacker from capturing data packets, altering them and resending them.
Appendix C Wireless LANs 2 The RADIUS server then checks the user's identification against its database and grants or denies network access accordingly. 3 A 256-bit Pairwise Master Key (PMK) is derived from the authentication process by the RADIUS server and the client. 4 The RADIUS server distributes the PMK to the AP. The AP then sets up a key hierarchy and management system, using the PMK to dynamically generate unique data encryption keys.
Appendix C Wireless LANs 4 The AP and wireless clients use the TKIP or AES encryption process, the PMK and information exchanged in a handshake to create temporal encryption keys. They use these keys to encrypt data exchanged between them. Figure 117 WPA(2)-PSK Authentication Security Parameters Summary Refer to this table to see what other security parameters you should configure for each authentication method or key management protocol type.
Appendix C Wireless LANs Antenna Overview An antenna couples RF signals onto air. A transmitter within a wireless device sends an RF signal to the antenna, which propagates the signal through the air. The antenna also operates in reverse by capturing RF signals from the air. Positioning the antennas properly increases the range and coverage area of a wireless LAN. Antenna Characteristics Frequency An antenna in the frequency of 2.4GHz (IEEE 802.11b and IEEE 802.11g) or 5GHz (IEEE 802.
Appendix C Wireless LANs Positioning Antennas In general, antennas should be mounted as high as practically possible and free of obstructions. In point-to–point application, position both antennas at the same height and in a direct line of sight to each other to attain the best performance. For omni-directional antennas mounted on a table, desk, and so on, point the antenna up. For omni-directional antennas mounted on a wall or ceiling, point the antenna down.
A PPENDIX D Common Services The following table lists some commonly-used services and their associated protocols and port numbers. For a comprehensive list of port numbers, ICMP type/code numbers and services, visit the IANA (Internet Assigned Number Authority) web site. • Name: This is a short, descriptive name for the service. You can use this one or create a different one, if you like. • Protocol: This is the type of IP protocol used by the service.
Appendix D Common Services Table 71 Commonly Used Services (continued) 200 NAME PROTOCOL PORT(S) DESCRIPTION HTTP TCP 80 Hyper Text Transfer Protocol - a client/ server protocol for the world wide web. HTTPS TCP 443 HTTPS is a secured http session often used in e-commerce. ICMP User-Defined 1 Internet Control Message Protocol is often used for diagnostic or routing purposes. ICQ UDP 4000 This is a popular Internet chat program.
Appendix D Common Services Table 71 Commonly Used Services (continued) NAME PROTOCOL PORT(S) DESCRIPTION SMTP TCP 25 Simple Mail Transfer Protocol is the message-exchange standard for the Internet. SMTP enables you to move messages from one e-mail server to another. SNMP TCP/UDP 161 Simple Network Management Program. SNMP-TRAPS TCP/UDP 162 Traps for use with the SNMP (RFC:1215).
Appendix D Common Services 202 EMG1302-R10A User’s Guide
A PPENDIX E Legal Information Copyright Copyright © 2013 by ZyXEL Communications Corporation. The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation.
Appendix E Legal Information 4 Consult the dealer or an experienced radio/TV technician for help. FCC Radiation Exposure Statement • This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter. • IEEE 802.11b or 802.11g operation of this product in the U.S.A. is firmware-limited to channels 1 through 11.
Appendix E Legal Information Registration Register your product online to receive e-mail notices of firmware upgrades and information at www.zyxel.com for global products, or at www.us.zyxel.com for North American products. Open Source Licenses This product contains in part some free software distributed under GPL license terms and/or GPL like licenses. Open source licenses are provided with the firmware package. You can download the latest firmware at www.zyxel.com.
Appendix E Legal Information [Slovenian] ZyXEL izjavlja, da je ta oprema v skladu z bistvenimi zahtevami in ostalimi relevantnimi določili direktive 1999/5/EC. [Slovak] ZyXEL týmto vyhlasuje, že zariadenia spĺňa základné požiadavky a všetky príslušné ustanovenia Smernice 1999/5/EC. [Finnish] ZyXEL vakuuttaa täten että laitteet tyyppinen laite on direktiivin 1999/5/EY oleellisten vaatimusten ja sitä koskevien direktiivin muiden ehtojen mukainen.
Appendix E Legal Information The Belgian Institute for Postal Services and Telecommunications (BIPT) must be notified of any outdoor wireless link having a range exceeding 300 meters. Please check http:// www.bipt.be for more details. Draadloze verbindingen voor buitengebruik en met een reikwijdte van meer dan 300 meter dienen aangemeld te worden bij het Belgisch Instituut voor postdiensten en telecommunicatie (BIPT). Zie http://www.bipt.be voor meer gegevens.
Appendix E Legal Information List of national codes COUNTRY ISO 3166 2 LETTER CODE COUNTRY ISO 3166 2 LETTER CODE Austria AT Malta MT Belgium BE Netherlands NL Cyprus CY Poland PL PT Czech Republic CR Portugal Denmark DK Slovakia SK Estonia EE Slovenia SI Finland FI Spain ES France FR Sweden SE Germany DE United Kingdom GB Greece GR Iceland IS Hungary HU Liechtenstein LI Ireland IE Norway NO Italy IT Switzerland CH Latvia LV Bulgaria BG Lithuania
Appendix E Legal Information • If you wall mount your device, make sure that no electrical lines, gas or water pipes will be damaged. Your product is marked with this symbol, which is known as the WEEE mark. WEEE stands for Waste Electronics and Electrical Equipment. It means that used electrical and electronic products should not be mixed with general waste. Used electrical and electronic equipment should be treated separately.
Appendix E Legal Information 210 EMG1302-R10A User’s Guide
Index Index Numbers Configuration restore 159 802.1p 107 contact information 167 content filtering 131 by keyword (in URL) 131 A ActiveX 132 Address Assignment 56 Cookies 133 CPU usage 38 CTS (Clear to Send) 188 customer support 167 Advanced Encryption Standard See AES.
Index E I EAP Authentication 191 IBSS 185 encryption 77, 193 and local (user) database 78 key 78 WPA compatible 78 IEEE 802.
Index cloning 57 MAC address filter 76 PPPoE 62 dial-up connection MAC address filtering 85 preamble mode 189 MAC filter 85 product registration 205 managing the device good habits 15 using the web configurator. See web configurator. using the WPS. See WPS. PSK 194 MBSSID 15 Media access control 85 Memory usage 38 Message Integrity Check (MIC) 193 mode 15 Multicast 57 IGMP 57 Q QoS 103 802.
Index S warranty 204 note 204 safety warnings 208 Web Configurator how to access 19 Overview 19 Scheduling 90 Service Set 79, 84 Service Set IDentification 79, 84 Service Set IDentity. See SSID.
Index WPA2-PSK 193, 194 application example 195 WPA-PSK 193, 194 application example 195 WPS 15 EMG1302-R10A User’s Guide 215
