EM G3 4 2 5 - Q1 0 A Dual-Band Wireless AC/N Gigabit Ethernet Gateway Version 1.00 Edition 1, 08/2015 Quick Start Guide Use r ’s Gu ide D e fa u lt Login D e t a ils LAN IP Address http://192.168.1.1 (Router Mode) www.zyxel.comhttp://192.168.1.
IMPORTANT! READ CAREFULLY BEFORE USE. KEEP THIS GUIDE FOR FUTURE REFERENCE. Screenshots and graphics in this book may differ slightly from your product due to differences in your product firmware or your computer operating system. Every effort has been made to ensure that the information in this manual is accurate. Related Documentation • Quick Start Guide The Quick Start Guide shows how to connect the EMG3425-Q10A and access the Web Configurator wizards.
Contents Overview Contents Overview User’s Guide ....................................................................................................................................... 11 Introduction .............................................................................................................................................12 Introducing the Web Configurator ...........................................................................................................19 EMG3425-Q10A Modes ....
Table of Contents Table of Contents Contents Overview ..............................................................................................................................3 Table of Contents .................................................................................................................................4 Part I: User’s Guide ......................................................................................... 11 Chapter 1 Introduction...........................................
Table of Contents Chapter 5 Access Point Mode.............................................................................................................................31 5.1 Overview ...........................................................................................................................................31 5.2 What You Can Do .............................................................................................................................31 5.3 What You Need to Know .........
Table of Contents 8.3.1 Configuring Your Internet Connection ......................................................................................57 8.4 Management WAN ............................................................................................................................59 8.4.1 Add/Edit WAN Connection .......................................................................................................60 Chapter 9 Wireless LAN........................................................
Table of Contents 11.4 DHCP Client List Screen .................................................................................................................97 Chapter 12 NAT.......................................................................................................................................................99 12.1 Overview ......................................................................................................................................99 12.1.1 What You Can Do ...
Table of Contents 16.3 Services Screen ............................................................................................................................ 119 Chapter 17 Content Filtering ...............................................................................................................................122 17.1 Overview .......................................................................................................................................122 17.2 Content Filter .........
Table of Contents 21.6 SNMP Screen ...............................................................................................................................152 21.7 Wake On LAN Screen ...................................................................................................................154 21.8 TR069 Screen ...............................................................................................................................155 Chapter 22 Universal Plug-and-Play (UPnP)...........
Table of Contents 25.8 Restart Screen ..............................................................................................................................183 25.9 System Operation Mode Overview ...............................................................................................183 25.10 Sys OP Mode Screen ..................................................................................................................184 25.11 Language Screen ...........................................
P ART I User’s Guide 11
C HAPT ER 1 Introduction 1.1 Overview This chapter introduces the main features and applications of the EMG3425-Q10A. The EMG3425-Q10A extends the range of your existing wired network without additional wiring, providing easy network access to mobile users. You can set up a wireless network with other IEEE 802.11a/ac/b/g/n compatible devices. A range of services such as a firewall and content filtering are also available for secure Internet computing.
Chapter 1 Introduction 1.1.1 Dual-Band The EMG3425-Q10A is a dual-band AP and able to function both 2.4G and 5G networks at the same time. You could use the 2.4 GHz band for regular Internet surfing and downloading while using the 5 GHz band for time sensitive traffic like high-definition video, music, and gaming. Figure 1 Dual-Band Application 1.2 Applications You can have the following networks with the EMG3425-Q10A: • W ir e d.
Chapter 1 Introduction 1.4 Good Habits for Managing the EMG3425-Q10A Do the following things regularly to make the EMG3425-Q10A more secure and to manage the EMG3425-Q10A more effectively. • Change the password. Use a password that’s not easy to guess and that consists of different types of characters, such as numbers and letters. • Write down the password and put it in a safe place. • Back up the configuration (and make sure you know how to restore it).
Chapter 1 Introduction You can use the WPS button ( ) on the front panel of the EMG3425-Q10A to activate WPS in order to quickly set up a wireless network with strong security. 1 Make sure the power LED is on (not blinking). 2 Press the WPS button for more than three seconds and release it. Press the WPS button on another WPS-enabled device within range of the EMG3425-Q10A. Note: You must activate WPS on the EMG3425-Q10A and on another wireless device within two minutes of each other.
Chapter 1 Introduction Figure 3 Front Panel Pow e r WAN WLAN 2 .4 G I nt e r ne t WLAN 5 G U SB 1 -2 LAN 1 -4 WPS The following table describes the LEDs and the WPS button. Table 1 Front panel LEDs and WPS button LED STATUS WPS Button Press this button for 1 second to set up a wireless connection via WiFi Protected Setup with another WPS-enabled client. You must press the WPS button on the client side within 120 seconds for a successful connection. See Section 1.6 on page 14 and Section 6.
Chapter 1 Introduction Table 1 Front panel LEDs and WPS button (continued) LED STATUS DESCRIPTION USB 1-2 On The EMG3425-Q10A has a USB device installed. Blinking The EMG3425-Q10A is transmitting and/or receiving data from routers through an installed USB device. Off There is no USB device connected to the EMG3425-Q10A. 1.8 Wall Mounting You may need screw anchors if mounting on a concrete or brick wall. Table 2 Wall Mounting Information Distance between holes 12.
Chapter 1 Introduction Figure 4 Wall Mounting Example EMG3425-Q10A User’s Guide 18
C HAPT ER 2 Introducing the Web Configurator 2.1 Overview This chapter describes how to access the EMG3425-Q10A Web Configurator and provides an overview of its screens. The Web Configurator is an HTML-based management interface that allows easy setup and management of the EMG3425-Q10A via Internet browser. Use Internet Explorer 9.0 and later versions, Mozilla Firefox 21 and later versions, Safari 6.0 and later versions or Google Chrome 26.0 and later versions.
Chapter 2 Introducing the Web Configurator 3 The EMG3425-Q10A is in router mode by default. Type "http://192.168.1.1" as the website address. If the EMG3425-Q10A is in access point, the IP address is 192.168.1.2. See Chapter 3 on page 23 for more information about the modes of the EMG3425-Q10A. Your computer must be in the same subnet in order to access this website address. 2.3.1 Login Screen The Web Configurator initially displays the following login screen.
Chapter 2 Introducing the Web Configurator 2.3.2 Password Screen You should see a screen asking you to change your password (highly recommended) as shown next. Figure 6 Change Password Screen The following table describes the labels in this screen. Table 4 Change Password Screen LABEL DESCRIPTION New Password Type a new password. Retype to Confirm Retype the password for confirmation. Apply Click Apply to save your changes back to the EMG3425-Q10A.
Chapter 2 Introducing the Web Configurator The following table describes the labels in this screen. Table 5 Change Weather LABEL DESCRIPTION Change Unit Choose which temperature unit you want the EMG3425-Q10A to display. Change Location Select the location for which you want to know the weather. If the city you want is not listed, choose one that is closest to it. Finish Click this to apply the settings and refresh the date and time display.
C HAPT ER 3 EMG3425-Q10A Modes 3.1 Overview This chapter introduces the operating mode of your EMG3425-Q10A, or simply how the EMG3425Q10A is being used in the network. 3.1.1 Device Modes This refers to the operating mode of the EMG3425-Q10A, which can act as a: • Rout e r : This is the default device mode of the EMG3425-Q10A. Use this mode to connect the local network to another network, like the Internet. Go to Section 4.2 on page 24 to view the St a t us screen in this mode.
C HAPT ER 4 Router Mode 4.1 Overview The EMG3425-Q10A is set to router mode by default. Routers are used to connect the local network to another network (for example, the Internet). In the figure below, the EMG3425-Q10A connects the local network (LAN 1 ~ LAN 4 ) to the Internet. Figure 8 EMG3425-Q10A Network Modem 4.2 Router Mode Status Screen Click to open the status screen.
Chapter 4 Router Mode Figure 9 Status Screen: Router Mode The following table describes the icons shown in the St a t u s screen. Table 6 Status Screen Icon Key ICON Logout DESCRIPTION Click this at any time to exit the Web Configurator. Click this icon to view copyright and a link for related product information. Select a number of seconds or N on e from the drop-down list box to refresh all screen statistics automatically at the end of every time interval or to not refresh the screen statistics.
Chapter 4 Router Mode Table 6 Status Screen Icon Key (continued) ICON DESCRIPTION Click this icon to see the M on it or navigation menu. Click this icon to see the Con figu r a t ion navigation menu. Click this icon to see the M a in t e n a n ce navigation menu. The following table describes the labels shown in the St a t u s screen.
Chapter 4 Router Mode Table 7 Status Screen: Router Mode (continued) LABEL DESCRIPTION Summary Packet Statistics Click D e t a ils... to go to the M on it or > Pa ck e t St a t ist ics screen (Section 7.5 on page 53). Use this screen to view port status and packet specific statistics. WLAN 2.4G Station Status Click D e t a ils... to go to the M on it or > W LAN 2 .4 G St a t ion St a t u s screen (Section 7.6 on page 54).
Chapter 4 Router Mode Figure 10 Navigation Panel: Router Mode The following table describes the sub-menus. Table 8 Navigation Panel: Router Mode LINK TAB Status FUNCTION This screen shows the EMG3425-Q10A’s general device, system and interface status information. Use this screen to access the wizard, and summary statistics tables. M ON I TOR Log Use this screen to view the list of activities recorded by your EMG3425Q10A. DHCP Table Use this screen to view current DHCP client information.
Chapter 4 Router Mode Table 8 Navigation Panel: Router Mode (continued) LINK TAB FUNCTION General Use this screen to enable the wireless LAN and configure wireless LAN and wireless security settings. More AP Use this screen to configure multiple BSSs on the EMG3425-Q10A. MAC Filter Use the MAC filter screen to configure the EMG3425-Q10A to block access to devices or block the devices from accessing the EMG3425-Q10A. Advanced This screen allows you to configure advanced wireless settings.
Chapter 4 Router Mode Table 8 Navigation Panel: Router Mode (continued) LINK TAB FUNCTION WWW Use this screen to configure through which interface(s) and from which IP address(es) users can use HTTP or HTTPS to manage the EMG3425-Q10A. Telnet Use this screen to configure through which interface(s) and from which IP address(es) users can use Telnet to manage the EMG3425-Q10A. SNMP Use this screen to to configure your EMG3425-Q10A's settings for Simple Network Management Protocol management.
C HAPT ER 5 Access Point Mode 5.1 Overview Use your EMG3425-Q10A as an access point (AP) if you already have a router or gateway on your network. In this mode your EMG3425-Q10A bridges a wired network (LAN) and wireless LAN (WLAN) in the same subnet. See the figure below for an example. Figure 11 Wireless Internet Access in Access Point Mode Many screens that are available in Rou t e r M ode are not available in Acce ss Point M ode , such as bandwidth management and firewall. 5.
Chapter 5 Access Point Mode 5.3.1 Setting your EMG3425-Q10A to AP Mode 1 Log into the Web Configurator if you haven’t already. See the Quick start Guide for instructions on how to do this. 2 To use your EMG3425-Q10A as an access point, go to M a int e na nce > Sys OP M ode and select Acce ss Point M ode . Figure 12 Changing to Access Point mode Note: You have to log in to the Web Configurator again when you change modes. As soon as you do, your EMG3425-Q10A is already in Access Point mode.
Chapter 5 Access Point Mode 4 After you’ve set your computer’s IP address, open a web browser such as Internet Explorer and type “192.168.1.2” as the web address in your web browser. 5.3.3 Configuring your WLAN and Maintenance Settings The configuration of wireless and maintenance settings in Acce ss Poin t M ode is the same as for Rout e r M ode . • See Chapter 9 on page 68 for information on the configuring your wireless network.
Chapter 5 Access Point Mode The following table describes the labels shown in the St a t u s screen. Table 9 Status Screen: Access Point Mode LABEL DESCRIPTION Device Information Host Name This is the Syst e m N a m e you enter in the M a in t e n a n ce > Ge n e r a l screen. It is for identification purposes. Model Number This is the model name of your device. Firmware Version This is the firmware version and the date created. Sys OP Mode This is the device mode (Section 3.1.
Chapter 5 Access Point Mode Table 9 Status Screen: Access Point Mode (continued) LABEL DESCRIPTION - CPU Usage This displays what percentage of the EMG3425-Q10A’s processing ability is currently used. When this percentage is close to 100%, the EMG3425-Q10A is running at full load, and the throughput is not going to improve anymore. If you want some applications to have more throughput, you should turn off other applications (for example, using bandwidth management.
Chapter 5 Access Point Mode Figure 16 Network > LAN > IP The table below describes the labels in the screen. Table 10 Network > LAN > IP LABEL DESCRIPTION Obtain an IP Address Automatically When you enable this, the EMG3425-Q10A gets its IP address from the network’s DHCP server (for example, your ISP). Users connected to the EMG3425-Q10A can now access the network (i.e., the Internet if the IP address is given by the ISP).
Chapter 5 Access Point Mode Table 10 Network > LAN > IP (continued) LABEL DESCRIPTION Apply Click Apply to save your changes to the EMG3425-Q10A. Cancel Click Ca n ce l to reload the previous configuration for this screen.
C HAPT ER 6 Tutorials 6.1 Overview This chapter provides tutorials for setting up your EMG3425-Q10A. • Set Up a Wireless Network Using WPS • Connect to EMG3425-Q10A Wireless Network without WPS • Using Multiple SSIDs on the EMG3425-Q10A 6.2 Set Up a Wireless Network Using WPS This section gives you an example of how to set up wireless network using WPS. This example uses the EMG3425-Q10A as the AP and NWD210N as the wireless client which connects to a notebook.
Chapter 6 Tutorials Note: Your EMG3425-Q10A has a WPS button located on its panel, as well as a WPS button in its configuration utility. Both buttons have exactly the same function; you can use one or the other. Note: It doesn’t matter which button is pressed first. You must press the second button within two minutes of pressing the first one. The EMG3425-Q10A sends the proper configuration settings to the wireless client. This may take up to two minutes.
Chapter 6 Tutorials 3 Click St a r t buttons (or button next to the PIN field) on both the wireless client utility screen and the EMG3425-Q10A’s W PS St a t ion screen within two minutes. The EMG3425-Q10A authenticates the wireless client and sends the proper configuration settings to the wireless client. This may take up to two minutes. Then the wireless client is able to communicate with the EMG3425-Q10A securely.
Chapter 6 Tutorials Follow the steps below to configure the wireless settings on your EMG3425-Q10A. The instructions require that your hardware is connected (see the Quick Start Guide) and you are logged into the Web Configurator through your LAN connection (see Section 2.3 on page 19). 1 Make sure the W I FI switch (at the back panel of the EMG3425-Q10A) is set to ON . 2 Open the Con figu r a t ion > N e t w or k > W ir e le ss LAN 2 .4 G > Ge ne r a l screen in the AP’s Web Configurator.
Chapter 6 Tutorials 5 Open the St a t us screen. Verify your wireless and wireless security settings under D e vice I nfor m a t ion and check if the WLAN connection is up under I nt e r fa ce St a t us. 6.3.1 Configure Your Notebook Note: In this example, we use the ZyXEL NWD6505 wireless adapter as the wireless client and use the Windows built-in utility (Windows Zero Configuration (WZC)) to connect to the wireless netwok. 1 The EMG3425-Q10A supports IEEE 802.11a, IEEE 802.11b, IEEE 802.11g, IEEE 802.
Chapter 6 Tutorials 2 Wireless adapters come with software sometimes called a “utility” that you install on your computer. See your wireless adapter’s User’s Guide for information on how to do that. 3 After you’ve installed the driver and attached the NWD6505 to your computer’s USB port, rightclick the W ir e le ss N e t w or k Conn e ct ion icon in your computer’s system tray, select and click Vie w Ava ila ble W ir e le ss N e t w or k s. 4 The W ir e le ss N e t w or k Conne ct ion screen displays.
Chapter 6 Tutorials 7 Check the status of your wireless connection in the screen below. 8 If the wireless client keeps trying to connect to or acquiring an IP address from the EMG3425Q10A, make sure you entered the correct security key. If the connection has limited or no connectivity, make sure the DHCP server is enabled on the EMG3425-Q10A. If your connection is successful, open your Internet browser and enter http://www.zyxel.com or the URL of any other web site in the address bar.
Chapter 6 Tutorials For example, you may set up three wireless networks (A, B and C) in your office. A is for workers, B is for guests and C is specific to a VoIP device in the meeting room. A SSI D _ W or k e r C SSI D _ VoI P B SSI D _ Gue st 6.4.1 Configuring Security Settings of Multiple SSIDs The EMG3425-Q10A is in router mode by default. This example shows you how to configure the SSIDs with the following parameters on your EMG3425-Q10A (in router mode).
Chapter 6 Tutorials 6 Type a new password and retype it to confirm, then click Apply. Otherwise, click I gn or e . 7 The Ea sy M ode appears. Click Ex pe r t M ode in the navigation panel. 8 Go to Configur a t ion > N e t w or k > W ir e le ss LAN 2 .4 G > M or e AP. Click the Edit icon of the first entry to configure wireless and security settings for SSI D _ W or k e r. 9 Configure the screen as follows.
Chapter 6 Tutorials 11 Configure the screen as follows. You do not enable I nt r a - BSS Tr a ffic for SSI D _ VoI P. Click Apply. 12 Click the Edit icon of the third entry to configure wireless and security settings for SSI D _ Gue st . 13 Configure the screen as follows. In this example, you enable I nt r a - BSS Tr a ffic for SSI D _ Gu e st to allow wireless clients in the same wireless network to communicate with each other. Select Ena ble Gu e st W LAN to allow clients to access the Internet only.
Chapter 6 Tutorials 14 Click the M AC Filt e r tab to configure MAC filtering for the SSI D _ V oI P wireless network. Select SSI D _ VoI P from the SSI D Se le ct drop-down list, enable MAC address filtering and set the Filt e r Act ion to Allow . Enter the VoIP device’s MAC address in the M a c Addr e ss field and click Apply to allow only the VoIP device to associate with the EMG3425-Q10A using this SSID.
Chapter 6 Tutorials EMG3425-Q10A User’s Guide 49
P ART II Technical Reference 50
C HAPT ER 7 Monitor 7.1 Overview This chapter discusses read-only information related to the device state of the EMG3425-Q10A. To access the Monitor screens, go to Ex pe r t M ode after login, then click . You can also click the links in the Sum m a r y table of the St a t us screen to view the packets sent/ received as well as the status of clients connected to the EMG3425-Q10A. 7.2 What You Can Do • Use the Log screen to see the logs for the activity on the EMG3425-Q10A (Section 7.3 on page 51).
Chapter 7 Monitor drop list. The log choices depend on your settings in the Log Se t t ing screen. Click Re fr e sh to renew the log screen. Click Cle a r Log to delete all the logs. Figure 19 View Log You can configure which logs to display in the Vie w Log screen. Go to the Log Se t t in g screen and select the logs you wish to display. Click Apply to save your settings. Click Ca nce l to start the screen afresh. Figure 20 Log Settings 7.
Chapter 7 Monitor Click M onit or > D H CP Ta ble or Configur a t ion > N e t w or k > D H CP Se r ve r > Clie nt List . Readonly information here relates to your DHCP status. The DHCP table shows current DHCP client information (including M AC Addr e ss, and I P Addr e ss) of all network clients using the EMG3425Q10A’s DHCP server. Figure 21 Monitor > DHCP Table The following table describes the labels in this screen.
Chapter 7 Monitor Figure 22 Monitor > Packet Statistics The following table describes the labels in this screen. Table 12 Monitor > Packet Statistics LABEL DESCRIPTION Port This is the EMG3425-Q10A’s interface type. Status For the LAN ports, this displays the port speed and duplex setting or D ow n when the line is disconnected.
Chapter 7 Monitor Figure 23 Monitor > WLAN Station Status The following table describes the labels in this screen. Table 13 Monitor > WLAN Station Status LABEL DESCRIPTION # This is the index number of an associated wireless station. MAC Address This field displays the MAC address of an associated wireless station. Association Time This field displays the time a wireless station first associated with the EMG3425-Q10A’s WLAN. 7.
Chapter 7 Monitor The following table describes the labels in this screen. Table 14 Monitor > IGMP Statistics LABEL DESCRIPTION Refresh Click this button to update the information in the screen. IGMP Multicast Group Statistics This section shows statistics about the number of IGMP-related packets received for each IGMP multicast group. # This field is a sequential value, and it is not associated with a specific IGMP Statistics.
C HAPT ER 8 WAN 8.1 Overview This chapter discusses the EMG3425-Q10A’s W AN screens. Use these screens to configure your EMG3425-Q10A for Internet access. A WAN (Wide Area Network) connection is an outside connection to another network or the Internet. It connects your private networks such as a LAN (Local Area Network) and other networks, so that a computer in one location can communicate with computers in other locations. Figure 25 LAN and WAN 8.
Chapter 8 WAN over Ethernet) or PPTP (Point-to-Point Tunneling Protocol), they should also provide a username and password (and service name) for user authentication. WAN IP Address The WAN IP address is an IP address for the EMG3425-Q10A, which makes it accessible from an outside network. It is used by the EMG3425-Q10A to communicate with other devices in other networks. It can be static (fixed) or dynamically assigned by the ISP each time the EMG3425-Q10A tries to access the Internet.
Chapter 8 WAN Multicast Traditionally, IP packets are transmitted in one of either two ways - Unicast (1 sender - 1 recipient) or Broadcast (1 sender - everybody on the network). Multicast delivers IP packets to a group of hosts on the network - not everybody and not just 1. Figure 26 Multicast Example In the multicast example above, systems A and D comprise one multicast group. In multicasting, the server only needs to send one data stream and this is delivered to systems A and D.
Chapter 8 WAN The following table describes the labels in this screen. Table 15 Network > WAN > Management WAN LABEL DESCRIPTION Add New WAN Entries Click this to create a new WAN interface entry. # This is the index number of the connection. Default Select the WAN interface that you want to configure as default. Name This is the service name of the connection. Interface This is the interface of the connection. Type This shows the type of interface used by this connection.
Chapter 8 WAN Figure 28 Network > WAN > Internet Connection: IPoE Encapsulation (IPv4 Only) The following table describes the labels in this screen. Table 16 Network > WAN > Internet Connection: IPoE Encapsulation LABEL DESCRIPTION ISP Parameters for Internet Access WAN Name Enter the name to use for this connection definition. Encapsulation You must choose the I PoE option when the WAN port is used as a regular Ethernet. IPv4 / IPv6 Select I Pv4 On ly if you want the EMG3425-Q10A to run IPv4 only.
Chapter 8 WAN Table 16 Network > WAN > Internet Connection: IPoE Encapsulation (continued) LABEL DESCRIPTION VID Enter a VLAN identifier between 11 to 4094 (the 802.1Q tag specifies only a priority and is referred to as a priority tag). VID 1 (the default VLAN ID) is reserved for a management VLAN. Note: This field is not available when you are configuring the default WAN entry. IP Address This is not available when you select I Pv6 On ly in the I Pv6 / I Pv4 field.
Chapter 8 WAN Table 16 Network > WAN > Internet Connection: IPoE Encapsulation (continued) LABEL DESCRIPTION Service Provider IPv6 Prefix length Enter the IPv6 prefix length. IPv4 mask length Enter the subnet mask number (1~32) for the IPv4 network. An IPv6 prefix length specifies how many most significant bits (starting from the left) in the address compose the network address.
Chapter 8 WAN (DSL, cable, wireless, etc.) connection. The PPP ove r Et he r n e t option is for a dial-up connection using PPPoE. For the service provider, PPPoE offers an access and authentication method that works with existing access control systems (for example Radius). One of the benefits of PPPoE is the ability to let you access one of multiple network services, a function known as dynamic service selection.
Chapter 8 WAN Figure 29 Network > WAN > Internet Connection: PPPoE Encapsulation (IPv4 Only) The following table describes the labels in this screen. Table 17 Network > WAN > Internet Connection: PPPoE Encapsulation LABEL DESCRIPTION ISP Parameters for Internet Access WAN Name Enter the name to use for this connection definition. Encapsulation You must choose the PPPoE option when the WAN port is used as a regular Ethernet.
Chapter 8 WAN Table 17 Network > WAN > Internet Connection: PPPoE Encapsulation (continued) LABEL DESCRIPTION VID Enter a VLAN identifier between 11 to 4094 (the 802.1Q tag specifies only a priority and is referred to as a priority tag). VID 1 (the default VLAN ID) is reserved for a management VLAN. Note: This field is not available when you are configuring the default WAN entry. PPP Information PPP Username Type the user name given to you by your ISP.
Chapter 8 WAN Table 17 Network > WAN > Internet Connection: PPPoE Encapsulation (continued) LABEL DESCRIPTION First DNS Server Select Obt a in e d Fr om I SP if your ISP dynamically assigns DNS server information (and the EMG3425-Q10A's WAN IP address). The field to the right displays the (read-only) DNS server IP address that the ISP assigns. Second DNS Server Third DNS Server Select Use r - D e fin e d if you have the IP address of a DNS server.
C HAPT ER 9 Wireless LAN 9.1 Overview This chapter discusses how to configure the wireless network settings in your EMG3425-Q10A. The EMG3425-Q10A is able to function both 2.4GHz and 5GHz network at the same time. You can have different wireless and wireless security settings for 2.4GHz and 5GHz wireless LANs. Click Configur a t ion > N e t w or k > W ir e le ss LAN 2 .4 G or W ir e le ss LAN 5 G to configure to do so. See the appendices for more detailed information about wireless networks.
Chapter 9 Wireless LAN 9.1.1 What You Can Do • Use the Ge n e r a l screen to turn the wireless connection on or off, set up wireless security between the EMG3425-Q10A and the wireless clients, and make other basic configuration changes (Section 9.2 on page 73). • Use the M or e AP screen to set up multiple wireless networks on your EMG3425-Q10A (Section 9.4 on page 79).
Chapter 9 Wireless LAN MAC Address Filter Every wireless client has a unique identification number, called a MAC address.1 A MAC address is usually written using twelve hexadecimal characters2; for example, 00A0C5000002 or 00:A0:C5:00:00:02. To get the MAC address for each wireless client, see the appropriate User’s Guide or other documentation. You can use the MAC address filter to tell the AP which wireless clients are allowed or not allowed to use the wireless network.
Chapter 9 Wireless LAN The types of encryption you can choose depend on the type of user authentication. (See page 70 for information about this.) Table 18 Types of Encryption for Each Type of Authentication W e a k e st NO AUTHENTICATION RADIUS SERVER No Security WPA Static WEP WPA-PSK St r on ge st WPA2-PSK WPA2 For example, if the wireless network has a RADIUS server, you can choose W PA or W PA2 .
Chapter 9 Wireless LAN Figure 31 Guest Wireless LAN Network A Z N Guest WLAN Bandwidth The Guest WLAN Bandwidth function allows you to restrict the maximum bandwidth for the guest wireless network. Additionally, you can also define bandwidth for your home or office network. An example is shown next to define maximum bandwidth for your networks (A is Guest WLAN and N is home or company network.
Chapter 9 Wireless LAN Number) in the devices. Then, they connect and set up a secure network by themselves. See how to set up a secure wireless network using WPS in the Section 6.2 on page 38. 9.2 General Wireless LAN Screen Use this screen to configure the SSID and wireless security of the wireless LAN.
Chapter 9 Wireless LAN Table 19 Network > Wireless LAN 2.4G/5G > General (continued) LABEL DESCRIPTION Channel Selection Set the operating frequency/channel depending on your particular region. Select a channel from the drop-down list box. The options vary depending on the frequency band and the country you are in. Refer to the Connection Wizard chapter for more information on channels. This option is only available if Au t o Ch a n n e l Se le ct ion is disabled.
Chapter 9 Wireless LAN Table 19 Network > Wireless LAN 2.4G/5G > General (continued) LABEL DESCRIPTION Security Mode Select St a t ic W EP, W PA- PSK, W PA, W PA2 - PSK or W PA2 to add security on this wireless network. The wireless clients which want to associate to this network must have same wireless security settings as this device. After you select to use a security, additional options appears in this screen. See Section 9.3 on page 75 for detailed information on different security modes.
Chapter 9 Wireless LAN The following table describes the labels in this screen. Table 20 Network > Wireless LAN 2.4G/5G > General: No Security LABEL DESCRIPTION Security Mode Choose N o Se cu r it y from the drop-down list box. Apply Click Apply to save your changes back to the EMG3425-Q10A. Cancel Click Ca n ce l to reload the previous configuration for this screen. 9.3.2 WPA-PSK/WPA2-PSK Select W PA- PSK or W PA2 - PSK from the Se cu r it y M ode list. Figure 35 Network > Wireless LAN 2.
Chapter 9 Wireless LAN Table 21 Network > Wireless LAN 2.4G/5G > General: WPA-PSK/WPA2-PSK (continued) LABEL DESCRIPTION Apply Click Apply to save your changes back to the EMG3425-Q10A. Cancel Click Ca n ce l to reload the previous configuration for this screen. 9.3.3 WPA/WPA2 Select W PA or W PA2 from the Se cu r it y M ode list. Note: WPA or WPA2 is not available if you enable WPS before you configure WPA or WPA2 in the W ir e le ss LAN 2 .4 G/ 5 G > Ge n e r a l screen.
Chapter 9 Wireless LAN The following table describes the labels in this screen. Table 22 Network > Wireless LAN 2.4G/5G > General: WPA/WPA2 LABEL DESCRIPTION Security Mode Select W PA or W PA2 to enable data encryption. WPA Compatible This check box is available only when you select W PA2 - PSK or W PA2 in the Se cu r it y M ode field. Select the check box to have both WPA2 and WPA wireless clients be able to communicate with the EMG3425-Q10A even when the EMG3425-Q10A is using WPA2PSK or WPA2.
Chapter 9 Wireless LAN 9.4 More AP Screen This screen allows you to enable and configure multiple wireless networks and guest wireless network settings on the EMG3425-Q10A. You can configure up to four SSIDs to enable multiple BSSs (Basic Service Sets) on the EMG3425Q10A. This allows you to use one access point to provide several BSSs simultaneously. You can then assign varying security types to different SSIDs. Wireless clients can use different SSIDs to associate with the same access point.
Chapter 9 Wireless LAN Figure 38 Network > Wireless LAN 2.4G/5G > More AP: Edit Figure 39 Network > Wireless LAN 2.4G/5G > More AP: Edit (the last SSID) The following table describes the labels in this screen. Table 24 Network > Wireless LAN 2.4G/5G > More AP: Edit LABEL DESCRIPTION Active Select this to activate the SSID profile. Name (SSID) The SSID (Service Set IDentity) identifies the Service Set with which a wireless client is associated.
Chapter 9 Wireless LAN Table 24 Network > Wireless LAN 2.4G/5G > More AP: Edit (continued) LABEL DESCRIPTION Intra-BSS Traffic A Basic Service Set (BSS) exists when all communications between wireless clients or between a wireless client and a wired network client go through one access point (AP). Intra-BSS traffic is traffic between wireless clients in the BSS. When Intra-BSS is enabled, wireless clients can access the wired network and communicate with each other.
Chapter 9 Wireless LAN Figure 40 Network > Wireless LAN 2.4G/5G > MAC Filter The following table describes the labels in this menu. Table 25 Network > Wireless LAN 2.4G/5G > MAC Filter LABEL DESCRIPTION SSID Select Select the SSID for which you want to configure MAC filtering. MAC Address Filter Select to turn on (En a ble ) or off (D isa ble ) MAC address filtering. Filter Action Define the filter action for the list of MAC addresses in the M AC Filt e r Su m m a r y table.
Chapter 9 Wireless LAN 9.6 Wireless LAN Advanced Screen Use this screen to allow wireless advanced features, such as the output power, RTS/CTS Threshold settings. Click N e t w or k > W ir e le ss LAN 2 .4 G/ 5 G > Adva nce d. The screen appears as shown. Figure 41 Network > Wireless LAN 2.4G/5G > Advanced The following table describes the labels in this screen. Table 26 Network > Wireless LAN 2.
Chapter 9 Wireless LAN Figure 42 Network > Wireless LAN 2.4G/5G > QoS The following table describes the labels in this screen. Table 27 Network > Wireless LAN 2.4G/5G > QoS LABEL DESCRIPTION WMM QoS Select En a ble to have the EMG3425-Q10A automatically give a service a priority level according to the ToS value in the IP header of packets it sends. WMM QoS (Wifi MultiMedia Quality of Service) gives high priority to voice and video, which makes them run more smoothly.
Chapter 9 Wireless LAN Figure 43 Network > Wireless LAN 2.4G/5G > WPS The following table describes the labels in this screen. Table 28 Network > Wireless LAN 2.4G/5G > WPS LABEL DESCRIPTION WPS Setup WPS Select En a ble to turn on the WPS feature. Otherwise, select D isa ble . PIN Code Select En a ble and click Apply to allow the PIN Configuration method. If you select D isa ble , you cannot create a new PIN number.
Chapter 9 Wireless LAN Table 28 Network > Wireless LAN 2.4G/5G > WPS (continued) LABEL DESCRIPTION Apply Click Apply to save your changes back to the EMG3425-Q10A. Cancel Click Ca n ce l to reload the previous configuration for this screen. 9.9 WPS Station Screen Use this screen when you want to add a wireless station using WPS. To open this screen, click N e t w or k > W ir e le ss LAN 2 .4 G/ 5 G > W PS St a t ion tab.
Chapter 9 Wireless LAN Figure 45 Network > Wireless LAN 2.4G/5G > Scheduling The following table describes the labels in this screen. Table 30 Network > Wireless LAN 2.4G/5G > Scheduling LABEL DESCRIPTION Wireless LAN Scheduling Wireless LAN Scheduling Select En a ble to activate the wireless LAN scheduling feature. Select D isa ble to turn it off. Scheduling WLAN Status Select On or Off to specify whether the Wireless LAN is turned on or off.
C HAPTER 10 LAN 10.1 Overview This chapter describes how to configure LAN settings. A Local Area Network (LAN) is a shared communication system to which many computers are attached. A LAN is a computer network limited to the immediate area, usually the same building or floor of a building. Figure 46 LAN Example The LAN screens can help you configure a manage IP address, and partition your physical network into logical networks. 10.
Chapter 10 LAN 10.3 What You Need To Know The actual physical connection determines whether the EMG3425-Q10A ports are LAN or WAN ports. There are two separate IP networks, one inside the LAN network and the other outside the WAN network as shown next. Figure 47 LAN and WAN IP Addresses The LAN parameters of the EMG3425-Q10A are preset in the factory with the following values: • IP address of 192.168.1.1 with subnet mask of 255.255.255.
Chapter 10 LAN 10.4 LAN IP Screen Use this screen to change the IP address for your EMG3425-Q10A. Click N e t w or k > LAN > I P. Figure 48 Network > LAN > IP The following table describes the labels in this screen. Table 31 Network > LAN > IP LABEL DESCRIPTION IP Address Type the IP address of your EMG3425-Q10A in dotted decimal notation. IP Subnet Mask The subnet mask specifies the network number portion of an IP address.
Chapter 10 LAN The following table describes the labels in this screen. Table 32 Network > LAN > IP Alias LABEL DESCRIPTION IP Alias 1, 2 Check this to enable IP alias to configure another LAN network for the EMG3425-Q10A. IP Address Type the IP alias address of your EMG3425-Q10A in dotted decimal notation. IP Subnet Mask The subnet mask specifies the network number portion of an IP address. Your EMG3425-Q10A will automatically calculate the subnet mask based on the IP address that you assign.
Chapter 10 LAN Table 33 Network > LAN > IPv6 LAN (continued) LABEL DESCRIPTION Autoconfiguration Type Select SLAAC + RD N SS to enable IPv6 stateless auto-configuration on this interface. The interface will generate an IPv6 IP address itself from a prefix obtained from an IPv6 router in the network. Select SLAAC + St a t e le ss D H CPv6 to enable IPv6 stateless auto-configuration on this interface. The interface will get an IPv6 address from an IPv6 router and the DHCP server.
Chapter 10 LAN Table 34 Network > LAN > IGMP Snooping (continued) LABEL DESCRIPTION Status Select this option to activate IGMP snooping. This allows the EMG3425-Q10A to passively learn multicast group. IGMP Mode Select St a n da r d M ode to have the EMG3425-Q10A forward multicast packets to a port that joins the multicast group and broadcast unknown multicast packets from the WAN to all LAN ports. Select Block in g M ode to have the EMG3425-Q10A block all unknown multicast packets from the WAN.
C HAPTER 11 DHCP Server 11.1 Overview DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at start-up from a server. You can configure the EMG3425-Q10A’s LAN as a DHCP server or disable it. When configured as a server, the EMG3425-Q10A provides the TCP/ IP configuration for the clients. If DHCP service is disabled, you must have another DHCP server on your LAN, or else the computer must be manually configured. 11.1.
Chapter 11 DHCP Server Figure 52 Network > DHCP Server > General The following table describes the labels in this screen. Table 35 Network > DHCP Server > General LABEL DESCRIPTION DHCP Server Select En a ble to activate DHCP for LAN. DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual clients (computers) to obtain TCP/IP configuration at startup from a server. Enable the DHCP server unless your ISP instructs you to do otherwise.
Chapter 11 DHCP Server Figure 53 Network > DHCP Server > Advanced The following table describes the labels in this screen. Table 36 Network > DHCP Server > Advanced LABEL DESCRIPTION Static DHCP Table # This is the index number of the static IP table entry (row). MAC Address Type the MAC address (with colons) of a computer on your LAN. IP Address Type the LAN IP address of a computer on your LAN.
Chapter 11 DHCP Server Table 36 Network > DHCP Server > Advanced (continued) LABEL DESCRIPTION First DNS Server Select Obt a in e d Fr om I SP if your ISP dynamically assigns DNS server information (and the EMG3425-Q10A's WAN IP address). The field to the right displays the (readonly) DNS server IP address that the ISP assigns. Second DNS Server Third DNS Server Select Use r - D e fin e d if you have the IP address of a DNS server. Enter the DNS server's IP address in the field to the right.
Chapter 11 DHCP Server Table 37 Network > DHCP Server > Client List (continued) LABEL DESCRIPTION MAC Address This field shows the MAC address of the computer with the name in the H ost N a m e field. Every Ethernet device has a unique MAC (Media Access Control) address which uniquely identifies a device. The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02.
C HAPTER 12 NAT 12.1 Overview NAT (Network Address Translation - NAT, RFC 1631) is the translation of the IP address of a host in a packet. For example, the source address of an outgoing packet, used within one network is changed to a different IP address known within another network. The figure below is a simple illustration of a NAT network.
Chapter 12 NAT • Use the Por t For w a r ding screen to set a default server and change your EMG3425-Q10A’s port forwarding settings to forward incoming service requests to the server(s) on your local network (Section 12.3 on page 102). • Use the Por t Tr igge r screen to change your EMG3425-Q10A’s trigger port settings (Section 12.5.3 on page 107). 12.1.2 What You Need To Know The following terms and concepts may help as you read through this chapter.
Chapter 12 NAT network and make them accessible to the outside world. If you do not define any servers, NAT offers the additional benefit of firewall protection. With no servers defined, your EMG3425-Q10A filters out all incoming inquiries, thus preventing intruders from probing your network. For more information on IP address translation, refer to RFC 1631, The I P Net work Address Translat or ( NAT) . How NAT Works Each packet has two addresses – a source address and a destination address.
Chapter 12 NAT The following table describes the labels in this screen. Table 39 Network > NAT > General LABEL DESCRIPTION Network Address Translation (NAT) Network Address Translation (NAT) allows the translation of an Internet protocol address used within one network (for example a private IP address used in a local network) to a different IP address known within another network (for example a public IP address used on the Internet). Select En a ble to activate NAT. Select D isa ble to turn it off.
Chapter 12 NAT Figure 58 Network > NAT > Port Forwarding The following table describes the labels in this screen. Table 40 Network > NAT > Port Forwarding LABEL DESCRIPTION Default Server Setup Default Server In addition to the servers for specified services, NAT supports a default server. A default server receives packets from ports that are not specified in the Por t For w a r din g screen. You can decide whether you want to use the default server or specify a server manually.
Chapter 12 NAT Table 40 Network > NAT > Port Forwarding (continued) LABEL DESCRIPTION Apply Click Apply to save your changes back to the EMG3425-Q10A. Cancel Click Ca n ce l to begin configuring this screen afresh. 12.3.1 Port Forwarding Edit Screen This screen lets you edit a port forwarding rule. Click a rule’s Edit icon in the Por t For w a r din g screen to open the following screen. Figure 59 Network > NAT > Port Forwarding Edit The following table describes the labels in this screen.
Chapter 12 NAT 12.4 Port Trigger Screen To change your EMG3425-Q10A’s trigger port settings, click N e t w or k > N AT > Por t Tr igge r. The screen appears as shown. Note: Only one LAN computer can use a trigger port (range) at a time. Figure 60 Network > NAT > Port Trigger The following table describes the labels in this screen. Table 42 Network > NAT > Port Trigger LABEL DESCRIPTION # This is the rule index number (read-only).
Chapter 12 NAT 12.5 Technical Reference The following section contains additional technical information about the EMG3425-Q10A features described in this chapter. 12.5.1 NATPort Forwarding: Services and Port Numbers A port forwarding set is a list of inside (behind NAT on the LAN) servers, for example, web or FTP, that you can make accessible to the outside world even though NAT makes your whole inside network appear as a single machine to the outside world.
Chapter 12 NAT 12.5.3 Trigger Port Forwarding Some services use a dedicated range of ports on the client side and a dedicated range of ports on the server side. With regular port forwarding you set a forwarding port in NAT to forward a service (coming in from the server on the WAN) to the IP address of a computer on the client side (LAN). The problem is that port forwarding only forwards a service to a single LAN IP address.
Chapter 12 NAT 12.5.5 Two Points To Remember About Trigger Ports 1 Trigger events only happen on data that is coming from inside the EMG3425-Q10A and going to the outside. 2 If an application needs a continuous data stream, that port (range) will be tied up so that another computer on the LAN can’t trigger it.
C HAPTER 13 DDNS 13.1 Overview DDNS services let you use a domain name with a dynamic IP address. 13.1.1 What You Need To Know The following terms and concepts may help as you read through this chapter. What is DDNS? Dynamic Domain Name Service (DDNS) services let you use a fixed domain name with a dynamic IP address. Users can always use the same domain name instead of a different dynamic IP address that changes each time to connect to the EMG3425-Q10A or a server in your network.
Chapter 13 DDNS The following table describes the labels in this screen. Table 43 Dynamic DNS LABEL DESCRIPTION Dynamic DNS Select En a ble to use dynamic DNS. Select D isa ble to turn this feature off. Service Provider Select the name of your Dynamic DNS service provider. Host Name Enter a host names in the field provided. You can specify up to two host names in the field separated by a comma (","). Username Enter your user name. Password Enter the password assigned to you.
C HAPTER 14 Static Route 14.1 Overview This chapter shows you how to configure static routes for your EMG3425-Q10A. The EMG3425-Q10A usually uses the default gateway to route outbound traffic from computers on the LAN to the Internet. To have the EMG3425-Q10A send data to devices not reachable through the default gateway, use static routes. For example, the next figure shows a computer (A) connected to the EMG3425-Q10A’s LAN interface.
Chapter 14 Static Route Figure 65 Network > Static Route The following table describes the labels in this screen. Table 44 Network > Static Route LABEL DESCRIPTION Add Static Route Click this to create a new rule. # This is the number of an individual static route. Status This field indicates whether the rule is active (yellow bulb) or not (gray bulb). Name This field displays a name to identify this rule. Destination This parameter specifies the IP network address of the final destination.
Chapter 14 Static Route The following table describes the labels in this screen. Table 45 Network > Static Route: Add/Edit LABEL DESCRIPTION Static Route Select to enable or disable this rule. Route Name Type a name to identify this rule. You can use up to 31 printable English keyboard characters, including spaces. Destination IP Address This parameter specifies the IP network address of the final destination. Routing is always based on network number.
C HAPTER 15 Interface Group 15.1 Overview By default, all LAN and WAN interfaces on the EMG3425-Q10A are in the same group and can communicate with each other. Each group acts as an independent network on the EMG3425-Q10A. 15.2 The Interface Group Screen You can manually add a LAN and/or WLAN interface to a new group. Click N e t w or k > I n t e r fa ce Gr oup to open the following screen. Figure 67 Network > Interface Group The following table describes the fields in this screen.
Chapter 15 Interface Group 15.2.1 Add Interface Group Click the Add button in the I nt e r fa ce Gr ou p screen to open the following screen. Use this screen to create a new interface group. Note: An interface can belong to a group only. Figure 68 Interface Group > Add New Group The following table describes the fields in this screen. Table 47 Interface Group > Add New Group LABEL DESCRIPTION Group Name Enter a name to identify this group.
Chapter 15 Interface Group Table 47 Interface Group > Add New Group LABEL DESCRIPTION # This shows the index number of the rule. Filter Criteria This shows the filtering criteria. The LAN interface on which the matched traffic is received will belong to this group automatically. Back Click this button to return to the previous screen without saving any changes. Apply Click this button to save your settings back to the EMG3425-Q10A. Cancel Click Ca n ce l to begin configuring this screen afresh.
C HAPTER 16 Firewall 16.1 Overview Use these screens to enable and configure the firewall that protects your EMG3425-Q10A and your LAN from unwanted or malicious traffic. Enable the firewall to protect your LAN computers from attacks by hackers on the Internet and control access between the LAN and WAN. By default the firewall: • allows traffic that originates from your LAN computers to go to all of the networks. • blocks traffic that originates on the other networks from going to the LAN.
Chapter 16 Firewall What is a Firewall? Originally, the term “firewall” referred to a construction technique designed to prevent the spread of fire from one room to another. The networking term "firewall" is a system or group of systems that enforces an access-control policy between two networks. It may also be defined as a mechanism used to protect a trusted network from a network that is not trusted. Of course, firewalls cannot solve every security problem.
Chapter 16 Firewall 3 Limit who can access your router. 4 Don't enable any local service (such as NTP) that you don't use. Any enabled service could present a potential security risk. A determined hacker might be able to find creative ways to misuse the enabled services to access the firewall or the network. 5 For local services that are enabled, protect against misuse.
Chapter 16 Firewall Figure 72 Security > Firewall > Services l The following table describes the labels in this screen. Table 50 Security > Firewall > Services LABEL DESCRIPTION LABEL DESCRIPTION ICMP Internet Control Message Protocol is a message control and error-reporting protocol between a host server and a gateway to the Internet. ICMP uses Internet Protocol (IP) datagrams, but the messages are processed by the TCP/IP software and directly apparent to the application user.
Chapter 16 Firewall Table 50 Security > Firewall > Services (continued) LABEL DESCRIPTION Source IP Address Enter the IP address of the computer that initializes traffic for the application or service. The EMG3425-Q10A applies the firewall rule to traffic initiating from this computer. Protocol Select the protocol (TCP, UD P or I CM P) used to transport the packets for which you want to apply the firewall rule.
C HAPTER 17 Content Filtering 17.1 Overview This chapter shows you how to configure content filtering. Content filtering is the ability to block certain web features. 17.2 Content Filter Use this screen to restrict web features, and designate a trusted computer. Click Se cu r it y > Cont e nt Filt e r to open the Con t e nt Filt e r screen. Figure 73 Security > Content Filter The following table describes the labels in this screen.
Chapter 17 Content Filtering Table 51 Security > Content Filter (continued) LABEL DESCRIPTION Web Proxy A server that acts as an intermediary between a user and the Internet to provide security, administrative control, and caching service. When a proxy server is located on the WAN it is possible for LAN users to circumvent content filtering by pointing to this proxy server. Apply Click Apply to save your changes.
C HAPTER 18 IPv6 Firewall 18.1 Overview This chapter shows you how to enable and create IPv6 firewall rules to block unwanted IPv6 traffic. 18.2 IPv6 Firewall Screen Click Con figu r a t ion > Se cu r it y > I Pv6 Fir e w a ll. The Se r vice screen appears as shown.
Chapter 18 IPv6 Firewall The following table describes the labels in this screen. Table 52 Configuration > Security > IPv6 Firewall LABEL DESCRIPTION ICMPv6 Internet Control Message Protocol for IPv6 (ICMPv6 or ICMP for IPv6) is defined in RFC 4443. ICMPv6 has a preceding Next Header value of 58, which is different from the value used to identify ICMP for IPv4. ICMPv6 is an integral part of IPv6.
Chapter 18 IPv6 Firewall Table 52 Configuration > Security > IPv6 Firewall (continued) LABEL DESCRIPTION Delete Click D e le t e to remove the firewall rule. Cancel Click Ca n ce l to restore your previously saved settings.
C HAPTER 19 Parental Control 19.1 Overview Parental controls allow you to block specific URLs. You can also define time periods and days during which the EMG3425-Q10A performs parental control on a specific user. 19.1.1 What You Need To Know The following terms and concepts may help as you read through this chapter. Keyword Blocking URL Checking The EMG3425-Q10A checks the URL’s domain name (or IP address) and file path separately when performing keyword blocking.
Chapter 19 Parental Control Figure 75 Security > Parental Control The following table describes the fields in this screen. Table 53 Security > Parental Control LABEL DESCRIPTION Parental Control Select En a ble to activate parental control. Add new rules Click this if you want to configure a new parental control rule. # This shows the index number of the rule. Status This indicates whether the rule is active or not. A yellow bulb signifies that this rule is active.
Chapter 19 Parental Control Figure 76 Security > Parental Control: Add/Edit new rules The following table describes the fields in this screen. Table 54 Security > Parental Control: Add/Edit new rules LABEL DESCRIPTION General Active Select the checkbox to activate this parental control rule. Parental Control Profile Name Enter a descriptive name for the rule.
Chapter 19 Parental Control Table 54 Security > Parental Control: Add/Edit new rules (continued) LABEL DESCRIPTION Home Network User Select the LAN user that you want to apply this rule to from the drop-down list box. If you select Cu st om , enter the LAN user’s MAC address. If you select All, the rule applies to all LAN users. Internet Access Schedule Day Select check boxes for the days that you want the EMG3425-Q10A to perform parental control.
Chapter 19 Parental Control The following table describes the fields in this screen. Table 55 Security > Parental Control > Add/Edit new rules > Add/Edit new service LABEL DESCRIPTION Service Name Select the name of the service. Otherwise, select Use r D e fin e d and manually specify the name, protocol and the port of the service. Protocol Select the transport layer protocol used for the service. Choices are TCP, UD P, or TCP/ UD P.
Chapter 19 Parental Control File Name URL Checking Filename URL checking has the EMG3425-Q10A check all of the characters in the URL. For example, filename URL checking searches for keywords within the URL www.zyxel.com.tw/ news/pressroom.php. Use the ip urlfilter customize actionFlags 8 [disable | enable] command to extend (or not extend) the keyword blocking search to include the URL's complete filename.
C HAPTER 20 Bandwidth Management 20.1 Overview Quality of Service (QoS) refers to both a network’s ability to deliver data with minimum delay, and the networking methods used to control the use of bandwidth. Without QoS, all traffic data is equally likely to be dropped when the network is congested. This can cause a reduction in network performance and make the network inadequate for time-critical application such as video-ondemand.
Chapter 20 Bandwidth Management similar types of traffic together and treating each type as a class. You can use CoS to give different priorities to different packet types. CoS technologies include IEEE 802.1p layer 2 tagging and DiffServ (Differentiated Services or DS). IEEE 802.1p tagging makes use of three bits in the packet header, while DiffServ is a new protocol and defines a new DS field, which replaces the eight-bit ToS (Type of Service) field in the IP header.
Chapter 20 Bandwidth Management specify actions which are performed on the colored packets. See Section 20.6 on page 142 for more information on each metering algorithm. 20.3 Bandwidth MGMT General Screen Click M a n a ge m e nt > Ba n dw idt h M GM T > Ge ne r a l to open the screen as shown next. Use this screen to enable or disable QoS and set the upstream bandwidth. See Section 20.1 on page 133 for more information.
Chapter 20 Bandwidth Management Table 56 Management > Bandwidth MGMT > General (continued) (continued) LABEL DESCRIPTION LAN Managed Downstream Bandwidth Enter the amount of downstream bandwidth for the LAN interfaces (including WLAN) that you want to allocate using QoS. The recommendation is to set this speed to match the WAN interfaces’ actual transmission speed. For example, set the LAN managed downstream bandwidth to 100000 kbps if you use a 100 Mbps wired Ethernet WAN connection.
Chapter 20 Bandwidth Management Table 57 Management > Bandwidth MGMT > Queue Setup (continued) LABEL DESCRIPTION Priority This shows the priority of this queue. Weight This shows the weight of this queue. Buffer Management This shows the queue management algorithm used for this queue. Rate Limit This shows the maximum transmission rate allowed for traffic on this queue. Modify Click the Edit icon to edit the queue.
Chapter 20 Bandwidth Management Table 58 Management > Bandwidth MGMT > Queue Setup: Add/Edit new queue LABEL DESCRIPTION Rate Limit Specify the maximum transmission rate (in Kbps) allowed for traffic on this queue. Back Click this to return to the previous screen. Apply Click this to save your changes. Cancel Click this to exit this screen without saving. 20.5 The Class Setup Screen Use this screen to add, edit or delete QoS classifiers.
Chapter 20 Bandwidth Management Table 59 Management > Bandwidth MGMT > Class Setup (continued) LABEL DESCRIPTION To Queue This is the name of the queue in which traffic of this classifier is put. Modify Click the Edit icon to edit the classifier. Click the D e le t e icon to delete an existing classifier. Note that subsequent rules move up by one when you take this action. 20.5.
Chapter 20 Bandwidth Management The following table describes the labels in this screen. Table 60 Management > Bandwidth MGMT > Class Setup: Add/Edit new class LABEL DESCRIPTION Step 1: Class Configuration Active Select this to enable this classifier. Class Name Enter a descriptive name of up to 15 printable English keyboard characters, not including spaces.
Chapter 20 Bandwidth Management Table 60 Management > Bandwidth MGMT > Class Setup: Add/Edit new class LABEL MAC Mask DESCRIPTION Type the mask for the specified MAC address to determine which bits a packet’s MAC address should match. Enter “f” for each bit of the specified source MAC address that the traffic’s MAC address should match. Enter “0” for the bit(s) of the matched traffic’s MAC address, which can be of any hexadecimal character(s).
Chapter 20 Bandwidth Management Table 60 Management > Bandwidth MGMT > Class Setup: Add/Edit new class LABEL DESCRIPTION VLAN ID If you select Re m a r k , enter a VLAN ID number with which the EMG3425-Q10A replaces the VLAN ID of the frames. If you select Re m ove , the EMG3425-Q10A deletes the VLAN ID of the frames before forwarding them out. If you select Add, the EMG3425-Q10A treat all matched traffic untagged and add a second VLAN ID.
Chapter 20 Bandwidth Management Table 61 IEEE 802.1p Priority Level and Traffic Type PRIORITY LEVEL TRAFFIC TYPE Level 1 This is typically used for non-critical “background” traffic such as bulk transfers that are allowed but that should not affect other applications and users. Level 0 Typically used for best-effort traffic. DiffServ QoS is used to prioritize source-to-destination traffic flows. All packets in the flow are given the same priority.
Chapter 20 Bandwidth Management The following table shows you the internal layer-2 and layer-3 QoS mapping on the EMG3425Q10A. On the EMG3425-Q10A, traffic assigned to higher priority queues gets through faster while traffic in lower index queues is dropped if the network is congested. Table 62 Internal Layer2 and Layer3 QoS Mapping LAYER 2 LAYER 3 PRIORITY QUEUE IEEE 802.
Chapter 20 Bandwidth Management • If there are no tokens in the bucket, the EMG3425-Q10A stops transmitting until enough tokens are generated. • If not enough tokens are available, the EMG3425-Q10A treats the packet in either one of the following ways: In traffic shaping: • Holds it in the queue until enough tokens are available in the bucket. In traffic policing: • Drops it. • Transmits it but adds a DSCP mark. The EMG3425-Q10A may drop these marked packets if the network is overloaded.
Chapter 20 Bandwidth Management on the guaranteed and maximum bandwidth respectively as negotiated between a service provider and client. The trTCM evaluates incoming packets and marks them with one of three colors which refer to packet loss priority levels. High packet loss priority level is referred to as red, medium is referred to as yellow and low is referred to as green. The trTCM is based on the token bucket filter and has two token buckets (Committed Burst Size (CBS) and Peak Burst Size (PBS)).
C HAPTER 21 Remote Management 21.1 Overview This chapter provides information on the Remote Management screens. Remote Management allows you to manage your EMG3425-Q10A from a remote location through the following interfaces: • LAN and WAN • LAN only • WAN only Note: The EMG3425-Q10A is managed using the Web Configurator. 21.
Chapter 21 Remote Management 2 There is already another remote management session. You may only have one remote management session running at one time. 3 There is a firewall rule that blocks it. 21.3.1 Remote Management and NAT When NAT is enabled: • Use the EMG3425-Q10A’s WAN IP address when configuring from the WAN. • Use the EMG3425-Q10A’s LAN IP address when configuring from the LAN. 21.3.2 System Timeout There is a default system management idle timeout of five minutes (three hundred seconds).
Chapter 21 Remote Management Figure 83 Configuration > Management > Remote MGMT > WWW The following table describes the labels in this screen. Table 63 Configuration > Management > Remote MGMT > WWW LABEL DESCRIPTION HTTPS Port You may change the server port number for a HTTPS service if needed. However you must use the same port number in order to use that service for remote management.
Chapter 21 Remote Management Table 63 Configuration > Management > Remote MGMT > WWW (continued) LABEL DESCRIPTION Secured Client IP Address Select En a ble ALL to allow all computers to access the EMG3425-Q10A using the HTTPS service. Otherwise, select D isa ble ALL. Or you can select Tr u st D om a in to specify the IP address/domain of the computer that can access the EMG3425-Q10A. Click Add to add the IP address/domain to the trust domain.
Chapter 21 Remote Management 21.5 Telnet Screen To change your EMG3425-Q10A’s remote management settings, click M a na ge m e nt > Re m ot e M GM T > Te lne t to open the Te lne t screen. Figure 84 Configuration> Management > Remote MGMT > Telnet The following table describes the labels in this screen.
Chapter 21 Remote Management Table 64 Configuration > Management > Remote MGMT > Telnet (continued) LABEL DESCRIPTION Trust Domain This is available only when you select Tr u st D om a in in the Se cur e d Clie nt I P Addr e ss field. # This displays the index number of the trust domain. IP Address/Domain This field displays the IP address/domain. Modify Click the Edit icon to go to the screen where you can edit the IP address/domain.
Chapter 21 Remote Management The managed devices contain object variables/managed objects that define each piece of information to be collected about a device. Examples of variables include such as number of packets received, node port status etc. A Management Information Base (MIB) is a collection of managed objects. SNMP allows a manager and agents to communicate for the purpose of accessing these objects. SNMP itself is a simple request/response protocol based on the manager/agent model.
Chapter 21 Remote Management Table 65 Configuration > Management > Remote MGMT > SNMP (continued) LABEL DESCRIPTION Server Access Select the interface(s) through which a computer may access the EMG3425-Q10A using this service. Secured Ip Select All to allow all computers to access the EMG3425-Q10A. Otherwise, check Se le ct e d and specify the IP address of the computer that can access the EMG3425-Q10A. SNMP Enable Select this to enable SNMP on this device.
Chapter 21 Remote Management The following table describes the labels in this screen. Table 66 Configuration > Management > Remote MGMT > Wake On LAN LABEL DESCRIPTION Wake On LAN over WAN Settings Enable WOL over WAN Select this option to have the EMG3425-Q10A forward a WoL “Magic Packet” to all devices on the LAN if the packet comes from the WAN or remote network and uses the port number specified in the Por t field.
Chapter 21 Remote Management Figure 88 Configuration > Management > Remote MGMT > TR069 The following table describes the labels in this screen. Table 67 Configuration > Management > Remote MGMT > TR069 LABEL DESCRIPTION Inform Select En a ble for the EMG3425-Q10A to send periodic inform via TR-069 on the WAN. Otherwise, select D isa ble . Inform Interval Enter the time interval (in seconds) at which the EMG3425-Q10A sends information to the auto-configuration server.
Chapter 21 Remote Management Table 67 Configuration > Management > Remote MGMT > TR069 (continued) LABEL DESCRIPTION File Path Type in the location of the certificate you want to upload in this field or click Ch oose File to find it. Choose File Click Choose File to find the certificate you want to upload. You cannot import a certificate with the same name as a certificate that is already in the EMG3425-Q10A. Upload Click Uploa d to begin the upload process.
C HAPTER 22 Universal Plug-and-Play (UPnP) 22.1 Overview This chapter introduces the UPnP feature in the web configurator. Universal Plug and Play (UPnP) is a distributed, open networking standard that uses TCP/IP for simple peer-to-peer network connectivity between devices. A UPnP device can dynamically join a network, obtain an IP address, convey its capabilities and learn about other devices on the network. In turn, a device can leave a network smoothly and automatically when it is no longer in use.
Chapter 22 Universal Plug-and-Play (UPnP) All UPnP-enabled devices may communicate freely with each other without additional configuration. Disable UPnP if this is not your intention. 22.3 UPnP Screen Use this screen to enable UPnP on your EMG3425-Q10A. Click M a n a ge m e nt > UPnP to display the screen shown next. Figure 89 Management > UPnP The following table describes the fields in this screen. Table 68 Management > UPnP LABEL DESCRIPTION UPnP Select En a ble to activate UPnP.
Chapter 22 Universal Plug-and-Play (UPnP) Figure 90 Network Connections 3 In the I nt e r ne t Conne ct ion Pr ope r t ie s window, click Se t t ings to see the port mappings there were automatically created. Figure 91 Internet Connection Properties 4 You may edit or delete the port mappings or click Add to manually add port mappings.
Chapter 22 Universal Plug-and-Play (UPnP) Figure 93 Internet Connection Properties: Advanced Settings: Add Note: When the UPnP-enabled device is disconnected from your computer, all port mappings will be deleted automatically. 5 Select Sh ow icon in not ifica t ion a r e a w he n conn e ct e d option and click OK. An icon displays in the system tray. Figure 94 System Tray Icon 6 Double-click on the icon to display your current Internet connection status. Figure 95 Internet Connection Status 22.4.
Chapter 22 Universal Plug-and-Play (UPnP) 3 Select M y N e t w or k Pla ce s under Ot h e r Pla ce s. Figure 96 Network Connections 4 An icon with the description for each UPnP-enabled device displays under Loca l N e t w or k . 5 Right-click on the icon for your EMG3425-Q10A and select I nvok e . The web configurator login screen displays. Figure 97 Network Connections: My Network Places 6 Right-click on the icon for your EMG3425-Q10A and select Pr ope r t ie s.
Chapter 22 Universal Plug-and-Play (UPnP) Figure 98 Network Connections: My Network Places: Properties: Example EMG3425-Q10A User’s Guide 163
C HAPTER 23 USB Media Sharing 23.1 Overview This chapter describes how to configure the media sharing settings on the EMG3425-Q10A. Note: The read and write performance may be affected by amount of file-sharing traffic on your network, type of connected USB device and your USB version (1.1 or 2.0).
Chapter 23 USB Media Sharing File-Sharing Server You can also share files on a USB memory stick or hard drive connected to your EMG3425-Q10A with users on your network. The following figure is an overview of the EMG3425-Q10A’s file-sharing server feature. Computers A and B can access files on a USB device (C) which is connected to the EMG3425-Q10A (D ). Figure 100 File Sharing Overview B C A D 23.
Chapter 23 USB Media Sharing Workgroup name This is the name given to a set of computers that are connected on a network and share resources such as a printer or files. Windows automatically assigns the workgroup name when you set up a network. File Systems A file system is a way of storing and organizing files on your hard drive and storage device. Often different operating systems such as Windows or Linux have different file systems.
Chapter 23 USB Media Sharing Note: If your USB device cannot be detected by the EMG3425-Q10A, see the troubleshooting for suggestions. 23.5 DLNA Screen Use this screen to have the EMG3425-Q10A act as a DLNA-compliant media server that lets DLNAcompliant media clients on your network play video, music, and photos from the EMG3425-Q10A (without having to copy them to another computer). Click M a na ge m e nt > USB M e dia Sh a r ing > D LN A.
Chapter 23 USB Media Sharing Figure 102 Management > USB Media Sharing > SAMBA The following table describes the labels in this screen. Table 70 Management > USB Media Sharing > SAMBA LABEL DESCRIPTION Enable SAMBA Select this to enable file sharing through the EMG3425-Q10A using Windows Explorer or by browsing to your work group. Name Specify the name to identify the EMG3425-Q10A in a work group. Work Group You can add the EMG3425-Q10A to an existing or a new workgroup on your network.
Chapter 23 USB Media Sharing Table 70 Management > USB Media Sharing > SAMBA (continued) LABEL DESCRIPTION Enable This field displays whether a user account is activated or not. Select the check box to enable the account. Clear the check box to disable the account. User Name Enter a user name that will be allowed to access the shared files. You can enter up to 20 characters. Only letters and numbers allowed. Password Enter the password used to access the shared files.
Chapter 23 USB Media Sharing Table 71 Management > USB Media Sharing > FTP (continued) LABEL DESCRIPTION Enable This field displays whether a user account is activated or not. Select the check box to enable the account. Clear the check box to disable the account. User Name Enter a user name that will be allowed to access the shared files. You can enter up to 20 characters. Only letters and numbers allowed. Password Enter the password used to access the shared files.
Chapter 23 USB Media Sharing 1 In Windows Explorer’s Address bar type a double backslash “\\” followed by the IP address of the EMG3425-Q10A (the default IP address of the EMG3425-Q10A in router mode is 192.168.1.1) and press [ENTER]. A screen asking for password authentication appears. Type the user name and password (Bob and 1234 in this example) and click OK. Note: Once you log into the shared folder via your EMG3425-Q10A, you do not have to relogin unless you restart your computer.
Chapter 23 USB Media Sharing 2 You can also use the workgroup name to access files by browsing to the workgroup folder using the folder tree on the left side of the screen. It is located under M y N e t w or k Pla ce s. In this example the workgroup name is the default “Workgroup”. 23.8.2 Use FTP to Share Files You can use FTP to access the USB storage devices connected to the EMG3425-Q10A. In this example, we use the web browser to share files via FTP from the LAN.
Chapter 23 USB Media Sharing 2 A screen asking for password authentication appears. Enter the user name and password (you configured in the USB M e dia Sha r ing > FTP screen) and click Log On. 3 The screen changes and shows you the folder for the USB storage device connected to your EMG3425-Q10A. Double-click the folder to display the contents in it.
C HAPTER 24 Port Configuration 24.1 Overview The EMG3425-Q10A has 1000Base-T auto-negotiating Ethernet ports. In 10/100/1000 Mbps Gigabit Ethernet, the speed can be 10 Mbps, 100 Mbps or 1000 Mbps. The duplex mode can be both half or full duplex. An auto-negotiating port can detect and adjust to the optimum Ethernet speed (10/100/1000 Mbps) and duplex mode (full duplex or half duplex) of the connected device. 24.
Chapter 24 Port Configuration Table 72 Management > Port Configuration (continued) LABEL DESCRIPTION Duplex Select the duplex mode of the Ethernet connection on this port. The choices are Au t o, Fu ll and H a lf. Selecting Au t o (auto-negotiation) allows one port to negotiate with a peer port automatically to obtain the duplex mode that both ends support.
C HAPTER 25 Maintenance 25.1 Overview This chapter provides information on the M a int e na nce screens. 25.2 What You Can Do • Use the Ge n e r a l screen to set the timeout period of the management session (Section 25.3 on page 176). • Use the Account screen to change your EMG3425-Q10A’s system password (Section 25.4 on page 177). • Use the Tim e screen to change your EMG3425-Q10A’s time and date (Section 25.5 on page 178).
Chapter 25 Maintenance Figure 105 Maintenance > General The following table describes the labels in this screen. Table 73 Maintenance > General LABEL DESCRIPTION System Name System Name is a unique name to identify the EMG3425-Q10A in an Ethernet network. Domain Name Enter the domain name you want to give to the EMG3425-Q10A. Administrator Inactivity Timer Type how many minutes a management session can be left idle before the session times out. The default is 5 minutes.
Chapter 25 Maintenance Table 74 Maintenance > Account (continued) LABEL DESCRIPTION Group The belonging of the user account. Modify Click the Edit icon to open the Account Setup screen. Accou n t Se t u p screen allows to change the user account password. 25.4.1 Account Setup Screen This screen allows you to change a user account password. In the M a int e na nce > Accou n t screen, click an Edit icon under M odify. The screen appears as shown.
Chapter 25 Maintenance Figure 108 Maintenance > Time The following table describes the labels in this screen. Table 76 Maintenance > Time LABEL DESCRIPTION Current Time and Date Current Time This field displays the time of your EMG3425-Q10A. Each time you reload this page, the EMG3425-Q10A synchronizes the time with the time server. Current Date This field displays the date of your EMG3425-Q10A. Each time you reload this page, the EMG3425-Q10A synchronizes the date with the time server.
Chapter 25 Maintenance Table 76 Maintenance > Time (continued) LABEL DESCRIPTION Time Zone Setup Time Zone Choose the time zone of your location. This will set the time difference between your time zone and Greenwich Mean Time (GMT). Daylight Savings Daylight saving is a period from late spring to early fall when many countries set their clocks ahead of normal local time by one hour to give more daytime light in the evening. Select this option if you use Daylight Saving Time.
Chapter 25 Maintenance Figure 109 Maintenance > Firmware Upgrade The following table describes the labels in this screen. Table 77 Maintenance > Firmware Upgrade LABEL DESCRIPTION Firmware Upgrade File Path Type in the location of the file you want to upload in this field or click Ch oose File to find it. Choose File Click Ch oose File to find the .bin file you want to upload. Remember that you must decompress compressed (.zip) files before you can upload them.
Chapter 25 Maintenance Click M a in t e n a n ce > Ba ck u p/ Re st or e . Information related to factory defaults, backup configuration, and restoring configuration appears as shown next. Figure 111 Maintenance > Backup/Restore The following table describes the labels in this screen. Table 78 Maintenance > Backup/Restore LABEL DESCRIPTION Backup Configuration Backup Click Ba ck u p to save the EMG3425-Q10A’s current configuration to your computer.
Chapter 25 Maintenance 25.8 Restart Screen System restart allows you to reboot the EMG3425-Q10A without turning the power off. Click M a int e na nce > Re st a r t to open the following screen. Figure 112 Maintenance > Restart Click Re st a r t to have the EMG3425-Q10A reboot. This does not affect the EMG3425-Q10A's configuration. 25.9 System Operation Mode Overview The Sys OP M ode (System Operation Mode) function lets you configure your EMG3425-Q10A as an router or access point.
Chapter 25 Maintenance Figure 114 Access Point Mode 25.10 Sys OP Mode Screen Use this screen to select how you want to use your EMG3425-Q10A. Note: If you select the incorrect System Operation Mode you may not be able to connect to the Internet. Figure 115 Maintenance > Sys OP Mode The following table describes the labels in the Sys OP M ode screen.
Chapter 25 Maintenance Table 79 Maintenance > Sys OP Mode (continued) LABEL DESCRIPTION Access Point Select Acce ss Poin t M ode if your device bridges traffic between clients on the same network. • • • • In Acce ss Poin t M ode , all Ethernet ports have the same IP address. All ports on the rear panel of the device are LAN ports, including the port labeled WAN. There is no WAN port. The DHCP server on your device is disabled. The IP address of the device on the local network is set to 192.168.1.2.
Chapter 25 Maintenance Figure 117 Maintenance > Diagnostic > Ping The following table describes the labels in the Sys OP M ode screen. Table 80 Maintenance > Sys OP Mode LABEL DESCRIPTION Type the IP address of a computer that you want to perform ping in order to test a connection. IPv4_Ping Click this to ping the IP address that you entered.
C HAPTER 26 Troubleshooting 26.1 Overview This chapter offers some suggestions to solve problems you might encounter. The potential problems are divided into the following categories. • Power, Hardware Connections, and LEDs • EMG3425-Q10A Access and Login • Internet Access • Resetting the EMG3425-Q10A to Its Factory Defaults • Wireless Connections • USB Device Problems 26.2 Power, Hardware Connections, and LEDs The EMG3425-Q10A does not turn on. None of the LEDs turn on.
Chapter 26 Troubleshooting 5 If the problem continues, contact the vendor. 26.3 EMG3425-Q10A Access and Login I don’t know the IP address of my EMG3425-Q10A. 1 The default IP address of the EMG3425-Q10A in Rou t e r M ode is 1 9 2 .1 6 8 .1 .1 . The default IP address of the EMG3425-Q10A in Acce ss Point M ode is 1 9 2 .1 6 8 .1 .2 .
Chapter 26 Troubleshooting 2 Check the hardware connections, and make sure the LEDs are behaving as expected. See the Quick Start Guide. 3 Make sure your Internet browser does not block pop-up windows and has JavaScript and Java enabled. See Appendix A on page 194. 4 Make sure your computer is in the same subnet as the EMG3425-Q10A. (If you know that there are routers between your computer and the EMG3425-Q10A, skip this step.
Chapter 26 Troubleshooting 1 Check the hardware connections, and make sure the LEDs are behaving as expected. See the Quick Start Guide. 2 Go to M a int e n a n ce > Sys OP M ode . Check your System Operation Mode setting. • If the EMG3425-Q10A is in Rou t e r M ode , make sure the WAN port is connected to a broadband modem or router with Internet access. Your computer and the EMG3425-Q10A should be in the same subnet.
Chapter 26 Troubleshooting • Check the settings for QoS. If it is disabled, you might consider activating it. 26.5 Resetting the EMG3425-Q10A to Its Factory Defaults If you reset the EMG3425-Q10A, you lose all of the changes you have made. The EMG3425-Q10A re-loads its default settings, and the password resets to 1 2 3 4 . You have to make all of your changes again. You will lose all of your changes when you push the RESET button. To reset the EMG3425-Q10A: 1 Make sure the power LED is on.
Chapter 26 Troubleshooting 6 Make sure traffic between the WLAN and the LAN is not blocked by the firewall on the EMG3425Q10A. 7 Make sure you allow the EMG3425-Q10A to be remotely accessed through the WLAN interface. Check your remote management settings. • See the chapter on Wireless LAN in the User’s Guide for more information. I set up URL keyword blocking, but I can still access a website that should be blocked.
Chapter 26 Troubleshooting • Try closing some programs that use the Internet, especially peer-to-peer applications. If the wireless client is sending or receiving a lot of information, it may have too many programs open that use the Internet. • Position the antennas for best reception. If the AP is placed on a table or floor, point the antennas upwards. If the AP is placed at a high position, point the antennas downwards.
A PPENDIX A Pop-up Windows, JavaScript and Java Permissions In order to use the web configurator you need to allow: • Web browser pop-up windows from your device. • JavaScript (enabled by default). • Java permissions (enabled by default). Note: The screens used below belong to Internet Explorer version 6, 7 and 8. Screens for other Internet Explorer versions may vary. Internet Explorer Pop-up Blockers You may have to disable pop-up blocking to log into your device.
Appendix A Pop-up Windows, JavaScript and Java Permissions Figure 119 Internet Options: Privacy 3 Click Apply to save this setting. Enable Pop-up Blockers with Exceptions Alternatively, if you only want to allow pop-up windows from your device, see the following steps. 1 In Internet Explorer, select Tools, I nt e r ne t Opt ions and then the Pr iva cy tab. 2 Select Se t t ings…to open the Pop- up Block e r Se t t ings screen.
Appendix A Pop-up Windows, JavaScript and Java Permissions Figure 120 Internet Options: Privacy 3 Type the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.167.1. 4 Click Add to move the IP address to the list of Allow e d sit e s.
Appendix A Pop-up Windows, JavaScript and Java Permissions 5 Click Close to return to the Pr iva cy screen. 6 Click Apply to save this setting. JavaScript If pages of the web configurator do not display properly in Internet Explorer, check that JavaScript are allowed. 1 In Internet Explorer, click Tools, I n t e r ne t Opt ion s and then the Se cur it y tab. Figure 122 Internet Options: Security 2 Click the Cu st om Le ve l... button. 3 Scroll down to Scr ipt ing.
Appendix A Pop-up Windows, JavaScript and Java Permissions Figure 123 Security Settings - Java Scripting Java Permissions 1 From Internet Explorer, click Tools, I nt e r ne t Opt ions and then the Se cu r it y tab. 2 Click the Cu st om Le ve l... button. 3 Scroll down to M icr osoft VM . 4 Under Ja va pe r m issions make sure that a safety level is selected. 5 Click OK to close the window.
Appendix A Pop-up Windows, JavaScript and Java Permissions Figure 124 Security Settings - Java JAVA (Sun) 1 From Internet Explorer, click Tools, I nt e r ne t Opt ions and then the Adva n ce d tab. 2 Make sure that Use Ja va 2 for < a pple t > under Ja va ( Sun) is selected. 3 Click OK to close the window.
Appendix A Pop-up Windows, JavaScript and Java Permissions Mozilla Firefox Mozilla Firefox 2.0 screens are used here. Screens for other versions may vary slightly. The steps below apply to Mozilla Firefox 3.0 as well. You can enable Java, Javascript and pop-ups in one screen. Click Tools, then click Opt ions in the screen that appears. Figure 126 Mozilla Firefox: TOOLS > Options Click Cont e n t to show the screen below. Select the check boxes as shown in the following screen.
