User Guide
Page 3
... a basic knowledge of TCP/IP networking concepts and topology. The Technical Writing Team, ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 30099, Taiwan. VSG1432-B101 Series User's Guide 3 It contains information on setting up and running right away. About... This User's Guide About This User's Guide Intended Audience This manual is intended for people who want to : techwriters@zyxel.com.tw Thank you get...
... a basic knowledge of TCP/IP networking concepts and topology. The Technical Writing Team, ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 30099, Taiwan. VSG1432-B101 Series User's Guide 3 It contains information on setting up and running right away. About... This User's Guide About This User's Guide Intended Audience This manual is intended for people who want to : techwriters@zyxel.com.tw Thank you get...
User Guide
Page 4
.... Customer Support In the event of problems that cannot be here. If you cannot contact your vendor, then contact a ZyXEL office for contact information. See http://www.zyxel.com/ web/contact_us.php for the region in which you bought the device. About This User's Guide • Download Library Search for the latest... description of answers to solve it. Every effort has been made to ensure that you received your product, the answer may differ slightly from this manual, you should contact your vendor. This is accurate. 4 VSG1432-B101 Series User's Guide
.... Customer Support In the event of problems that cannot be here. If you cannot contact your vendor, then contact a ZyXEL office for contact information. See http://www.zyxel.com/ web/contact_us.php for the region in which you bought the device. About This User's Guide • Download Library Search for the latest... description of answers to solve it. Every effort has been made to ensure that you received your product, the answer may differ slightly from this manual, you should contact your vendor. This is accurate. 4 VSG1432-B101 Series User's Guide
User Guide
Page 17
... You Need to Know 246 21.2 The IPSec Status Screen 247 21.3 The IPSec Settings Screen 248 21.3.1 Add/Edit IPSec Setting 249 21.3.2 Configuring Manual Key 254 21.4 Technical Reference ...256 21.4.1 IPSec Architecture 257 21.4.2 Encapsulation ...258 21.4.3 IKE Phases ...259 21.4.4 Negotiation Mode 260 21.4.5 IPSec and NAT... ...273 25.1 Overview ...273 25.1.1 What You Can Do in this Chapter 273 25.2 The WAN Status Screen 274 25.3 The LAN Status Screen 276 VSG1432-B101 Series User's Guide 17
... You Need to Know 246 21.2 The IPSec Status Screen 247 21.3 The IPSec Settings Screen 248 21.3.1 Add/Edit IPSec Setting 249 21.3.2 Configuring Manual Key 254 21.4 Technical Reference ...256 21.4.1 IPSec Architecture 257 21.4.2 Encapsulation ...258 21.4.3 IKE Phases ...259 21.4.4 Negotiation Mode 260 21.4.5 IPSec and NAT... ...273 25.1 Overview ...273 25.1.1 What You Can Do in this Chapter 273 25.2 The WAN Status Screen 274 25.3 The LAN Status Screen 276 VSG1432-B101 Series User's Guide 17
User Guide
Page 46
...SSID Security Mode Pre-Shared Key 802.11 Mode Example WPA-PSK DoNotStealMyWirelessNetwork 802.11b/g/n Mixed 46 VSG1432-B101 Series User's Guide In this wireless network, the ZyXEL Device serves as zyxel.com to see if you need to configure the WAN screens. 4.3 Setting Up a Secure Wireless ...set up a wireless network. Then he can set up a wireless network using WPS (Section 4.3.2 on page 48) or manual configuration (Section 4.3.3 on the ZyXEL Device. Be sure to configure the wireless network settings on page 52). 4.3.1 Configuring the Wireless Network Settings This example uses the...
...SSID Security Mode Pre-Shared Key 802.11 Mode Example WPA-PSK DoNotStealMyWirelessNetwork 802.11b/g/n Mixed 46 VSG1432-B101 Series User's Guide In this wireless network, the ZyXEL Device serves as zyxel.com to see if you need to configure the WAN screens. 4.3 Setting Up a Secure Wireless ...set up a wireless network. Then he can set up a wireless network using WPS (Section 4.3.2 on page 48) or manual configuration (Section 4.3.3 on the ZyXEL Device. Be sure to configure the wireless network settings on page 52). 4.3.1 Configuring the Wireless Network Settings This example uses the...
User Guide
Page 83
... 802.1p priority level (from 1 to 4094) for traffic through this screen without saving. 6.2.2.1 Bridge This screen displays when you configure manually. VLAN (These fields appear when the Type is set to VDSL or Ethernet) Active Select this option to add the VLAN tag (specified... higher the priority level. Figure 21 Broadband: Add/Edit: Bridge Mode VSG1432-B101 Series User's Guide 83 Chapter 6 Broadband Table 7 Broadband: Add/Edit: Routing Mode LABEL DESCRIPTION DNS Select Dynamic if you want the ZyXEL Device use the DNS server addresses assigned by the ISP. Click Cancel ...
... 802.1p priority level (from 1 to 4094) for traffic through this screen without saving. 6.2.2.1 Bridge This screen displays when you configure manually. VLAN (These fields appear when the Type is set to VDSL or Ethernet) Active Select this option to add the VLAN tag (specified... higher the priority level. Figure 21 Broadband: Add/Edit: Bridge Mode VSG1432-B101 Series User's Guide 83 Chapter 6 Broadband Table 7 Broadband: Add/Edit: Routing Mode LABEL DESCRIPTION DNS Select Dynamic if you want the ZyXEL Device use the DNS server addresses assigned by the ISP. Click Cancel ...
User Guide
Page 105
...without having to configure security settings manually. Click Network Settings > Wireless > WPS. Table 17 Network Settings > Wireless > WPS LABEL DESCRIPTION Enable WPS Select Enable to activate WPS on your ZyXEL Device. Set up a WPS wireless network using Push Button Configuration (PBC). Method 1 Use this screen. VSG1432-B101 Series User's Guide 105 The ...Settings > Wireless > WPS The following screen displays. Chapter 7 Wireless 7.5 The WPS Screen Use this screen to configure WiFi Protected Setup (WPS) on the ZyXEL Device. If you want to activate the WPS function.
...without having to configure security settings manually. Click Network Settings > Wireless > WPS. Table 17 Network Settings > Wireless > WPS LABEL DESCRIPTION Enable WPS Select Enable to activate WPS on your ZyXEL Device. Set up a WPS wireless network using Push Button Configuration (PBC). Method 1 Use this screen. VSG1432-B101 Series User's Guide 105 The ...Settings > Wireless > WPS The following screen displays. Chapter 7 Wireless 7.5 The WPS Screen Use this screen to configure WiFi Protected Setup (WPS) on the ZyXEL Device. If you want to activate the WPS function.
User Guide
Page 108
... MAC Address # MAC Address Select Enabled to turn on WDS and enter the peer device's MAC address manually in a valid MAC address format (six hexadecimal character pairs, for your ZyXEL Device. Table 19 Network Settings > Wireless > WDS LABEL DESCRIPTION Wireless Bridge Setup AP Mode Select the operating... mode for example 12:34:56:78:9a:bc). Select Disable to turn off WDS. VSG1432-B101 Series User's Guide The ZyXEL Device functions as a wireless network bridge and establishes wireless links with other APs. This field is the index number of ...
... MAC Address # MAC Address Select Enabled to turn on WDS and enter the peer device's MAC address manually in a valid MAC address format (six hexadecimal character pairs, for your ZyXEL Device. Table 19 Network Settings > Wireless > WDS LABEL DESCRIPTION Wireless Bridge Setup AP Mode Select the operating... mode for example 12:34:56:78:9a:bc). Select Disable to turn off WDS. VSG1432-B101 Series User's Guide The ZyXEL Device functions as a wireless network bridge and establishes wireless links with other APs. This field is the index number of ...
User Guide
Page 120
... button in their configuration utilities instead of or in each device. for the ZyXEL Device, see Section 7.6 on page 106). 3 Press the button on the other ) in addition to configure security settings manually. For the ZyXEL Device you to quickly set up a wireless network with strong security, without ...more than three seconds. 4 Within two minutes, press the button on one of associated wireless clients in the list, WPS was successful. 120 VSG1432-B101 Series User's Guide You do this - Each WPS connection works between two devices. If you want to set up WPS using the button. ...
... button in their configuration utilities instead of or in each device. for the ZyXEL Device, see Section 7.6 on page 106). 3 Press the button on the other ) in addition to configure security settings manually. For the ZyXEL Device you to quickly set up a wireless network with strong security, without ...more than three seconds. 4 Within two minutes, press the button on one of associated wireless clients in the list, WPS was successful. 120 VSG1432-B101 Series User's Guide You do this - Each WPS connection works between two devices. If you want to set up WPS using the button. ...
User Guide
Page 134
... (although you must still enter the password to automatically configure the ZyXEL Device so that they can communicate through the ZyXEL Device by using NAT traversal. this screen. Double-click Add/Remove Programs. 134 VSG1432-B101 Series User's Guide Figure 47 Network Settings > Home Networking > ... steps below to activate UPnP. Chapter 8 Home Networking Use the following table describes the labels in this eliminates the need to manually configure port forwarding for the UPnP enabled application. Table 27 Network Settings > Home Networking > UPnP LABEL DESCRIPTION UPnP Select Enable...
... (although you must still enter the password to automatically configure the ZyXEL Device so that they can communicate through the ZyXEL Device by using NAT traversal. this screen. Double-click Add/Remove Programs. 134 VSG1432-B101 Series User's Guide Figure 47 Network Settings > Home Networking > ... steps below to activate UPnP. Chapter 8 Home Networking Use the following table describes the labels in this eliminates the need to manually configure port forwarding for the UPnP enabled application. Table 27 Network Settings > Home Networking > UPnP LABEL DESCRIPTION UPnP Select Enable...
User Guide
Page 139
Internet Connection Properties: Advanced Settings Internet Connection Properties: Advanced Settings: Add 5 When the UPnP-enabled device is disconnected from your computer, all port mappings will be deleted automatically. 6 Select Show icon in the system tray. An icon displays in notification area when connected option and click OK. System Tray Icon VSG1432-B101 Series User's Guide 139 Chapter 8 Home Networking 4 You may edit or delete the port mappings or click Add to manually add port mappings.
Internet Connection Properties: Advanced Settings Internet Connection Properties: Advanced Settings: Add 5 When the UPnP-enabled device is disconnected from your computer, all port mappings will be deleted automatically. 6 Select Show icon in the system tray. An icon displays in notification area when connected option and click OK. System Tray Icon VSG1432-B101 Series User's Guide 139 Chapter 8 Home Networking 4 You may edit or delete the port mappings or click Add to manually add port mappings.
User Guide
Page 143
.... Do not assign static IP addresses from a server. VSG1432-B101 Series User's Guide 143 When configured as a DHCP server or disable it . IP Pool Setup The ZyXEL Device is extremely important because without it, you must be manually configured. You can access it . If you turn DHCP... service off, you can configure the ZyXEL Device as a server, the ZyXEL Device provides the TCP/IP configuration for the ...
.... Do not assign static IP addresses from a server. VSG1432-B101 Series User's Guide 143 When configured as a DHCP server or disable it . IP Pool Setup The ZyXEL Device is extremely important because without it, you must be manually configured. You can access it . If you turn DHCP... service off, you can configure the ZyXEL Device as a server, the ZyXEL Device provides the TCP/IP configuration for the ...
User Guide
Page 181
... to a single LAN IP address. The problem is that sends traffic to the WAN to manually replace the LAN computer's IP address in the forwarding port with another computer on the LAN can... use the application. After that computer's connection for that sent the request. VSG1432-B101 Series User's Guide 181 Apply Click Apply to dynamically take turns using the service. Trigger port... on a different LAN computer, you have chosen in from the drop-down list box and the ZyXEL Device automatically configures the protocol, start, end, and map port number that you want a different ...
... to a single LAN IP address. The problem is that sends traffic to the WAN to manually replace the LAN computer's IP address in the forwarding port with another computer on the LAN can... use the application. After that computer's connection for that sent the request. VSG1432-B101 Series User's Guide 181 Apply Click Apply to dynamically take turns using the service. Trigger port... on a different LAN computer, you have chosen in from the drop-down list box and the ZyXEL Device automatically configures the protocol, start, end, and map port number that you want a different ...
User Guide
Page 196
... Address Enter the IP address of the DNS entry. The screen appears as shown. Click Add new DNS entry in this screen to save your ZyXEL Device's DDNS. Apply Click Apply to change your changes. Figure 78 DNS Entry: Add/Edit The following table describes the labels in the DNS ... this screen. Click Advanced > DNS Setting > Dynamic DNS. Cancel Click Cancel to edit. Chapter 13 Dynamic DNS Setup 13.2.1 Add/Edit DNS Entry You can manually add or edit the ZyXEL Device's DNS name and IP address entry. The screen shown next appears. Figure 79 Advanced > DNS Setting > Dynamic DNS 196...
... Address Enter the IP address of the DNS entry. The screen appears as shown. Click Add new DNS entry in this screen to save your ZyXEL Device's DDNS. Apply Click Apply to change your changes. Figure 78 DNS Entry: Add/Edit The following table describes the labels in the DNS ... this screen. Click Advanced > DNS Setting > Dynamic DNS. Cancel Click Cancel to edit. Chapter 13 Dynamic DNS Setup 13.2.1 Add/Edit DNS Entry You can manually add or edit the ZyXEL Device's DNS name and IP address entry. The screen shown next appears. Figure 79 Advanced > DNS Setting > Dynamic DNS 196...
User Guide
Page 200
.... Chapter 14 IGMP multicast hosts to learn multicast groups without you having to manually configure them. The ZyXEL Device forwards multicast traffic destined for one upstream interface (also known as a computer). 200 VSG1432-B101 Series User's Guide IGMP snooping allows the ZyXEL Device to learn the IP multicast group membership. A downstream interface is an IGMP...
.... Chapter 14 IGMP multicast hosts to learn multicast groups without you having to manually configure them. The ZyXEL Device forwards multicast traffic destined for one upstream interface (also known as a computer). 200 VSG1432-B101 Series User's Guide IGMP snooping allows the ZyXEL Device to learn the IP multicast group membership. A downstream interface is an IGMP...
User Guide
Page 211
... to assign IP addresses based on the client's DHCP Vendor ID option information, you can have the ZyXEL Device assign the IP addresses in the same group and can manually add a LAN interface to an interface group's LAN interfaces communicate through the interface group's WAN or ...let you set the ZyXEL Device to an interface group when its DHCP Vendor ID option information matches one listed for more information. This lets devices connected to a new group. If you create multiple networks on the ZyXEL Device (Section 15.2 on the ZyXEL Device. VSG1432-B101 Series User's Guide 211...
... to assign IP addresses based on the client's DHCP Vendor ID option information, you can have the ZyXEL Device assign the IP addresses in the same group and can manually add a LAN interface to an interface group's LAN interfaces communicate through the interface group's WAN or ...let you set the ZyXEL Device to an interface group when its DHCP Vendor ID option information matches one listed for more information. This lets devices connected to a new group. If you create multiple networks on the ZyXEL Device (Section 15.2 on the ZyXEL Device. VSG1432-B101 Series User's Guide 211...
User Guide
Page 249
... policies. You only configure VPN manual key when you select Auto(IKE) in the IPSec > Settings screen to remove an existing VPN configuration. 21.3.1 Add/Edit IPSec Setting Click Add New Connection or a policy's Edit icon in the Key Exchange VSG1432-B101 Series User's Guide 249 Note: The ZyXEL Device uses the system default... is generally recommended. Chapter 21 IPSec Table 86 Security Settings > IPSec > Settings LABEL DESCRIPTION Local Addresses This is the IP address of computer(s) on your ZyXEL Device.
... policies. You only configure VPN manual key when you select Auto(IKE) in the IPSec > Settings screen to remove an existing VPN configuration. 21.3.1 Add/Edit IPSec Setting Click Add New Connection or a policy's Edit icon in the Key Exchange VSG1432-B101 Series User's Guide 249 Note: The ZyXEL Device uses the system default... is generally recommended. Chapter 21 IPSec Table 86 Security Settings > IPSec > Settings LABEL DESCRIPTION Local Addresses This is the IP address of computer(s) on your ZyXEL Device.
User Guide
Page 251
... the local and remote IP address(es) both . When the remote IP address type is not available. This field displays ESP and the ZyXEL Device uses ESP (Encapsulation Security Payload) for a single IP address. Select Subnet to the remote IPSec router's configured remote IP addresses. When...is active at any time. Select Auto(IKE) or Manual from local IP addresses Specify the IP addresses of the devices behind the remote IPSec router that can have the local and remote IP address(es) both . VSG1432-B101 Series User's Guide 251 You can configure multiple SAs ...
... the local and remote IP address(es) both . When the remote IP address type is not available. This field displays ESP and the ZyXEL Device uses ESP (Encapsulation Security Payload) for a single IP address. Select Subnet to the remote IPSec router's configured remote IP addresses. When...is active at any time. Select Auto(IKE) or Manual from local IP addresses Specify the IP addresses of the devices behind the remote IPSec router that can have the local and remote IP address(es) both . VSG1432-B101 Series User's Guide 251 You can configure multiple SAs ...
User Guide
Page 253
...the two VPN gateways to the IPSec screen. AES is more processing power, resulting in this screen without saving. 21.3.1.2 Manual Key Setup Manual key management is slower. Select SHA1 or MD5 from the remote VPN gateway to the local VPN gateway. Other options ...generally considered stronger than 3DES. The SPI (Security Parameter Index) along with the SPI to generate and verify a message authentication code. VSG1432-B101 Series User's Guide 253 Integrity Algorithm Select DiffieHellman Group for Key Exchange Key Life Time (Seconds) When you have problems with Auto...
...the two VPN gateways to the IPSec screen. AES is more processing power, resulting in this screen without saving. 21.3.1.2 Manual Key Setup Manual key management is slower. Select SHA1 or MD5 from the remote VPN gateway to the local VPN gateway. Other options ...generally considered stronger than 3DES. The SPI (Security Parameter Index) along with the SPI to generate and verify a message authentication code. VSG1432-B101 Series User's Guide 253 Integrity Algorithm Select DiffieHellman Group for Key Exchange Key Life Time (Seconds) When you have problems with Auto...
User Guide
Page 254
... VPN policy. Table 88 IPSec Settings > Add/Edit: Manual LABEL DESCRIPTION Enable Select this check box to identify this VPN policy. Chapter 21 IPSec Current ZyXEL implementation assumes identical outgoing and incoming SPIs. 21.3.2 Configuring Manual Key You only configure VPN manual key when you 're making the VPN connection. 254 VSG1432-B101 Series User's Guide
... VPN policy. Table 88 IPSec Settings > Add/Edit: Manual LABEL DESCRIPTION Enable Select this check box to identify this VPN policy. Chapter 21 IPSec Current ZyXEL implementation assumes identical outgoing and incoming SPIs. 21.3.2 Configuring Manual Key You only configure VPN manual key when you 're making the VPN connection. 254 VSG1432-B101 Series User's Guide
User Guide
Page 255
... if you have the same local or remote IP address, but not both . VSG1432-B101 Series User's Guide 255 Select Subnet to Single Address, enter a (static) IP address on the LAN behind the ZyXEL Device that can configure multiple SAs between the same local and remote IP addresses, ... configured to specify IP addresses on the LAN behind the remote IPSec router. Chapter 21 IPSec Table 88 IPSec Settings > Add/Edit: Manual LABEL DESCRIPTION Tunnel access from the drop-down list box. The remote IP addresses must correspond to the remote IPSec router's configured local ...
... if you have the same local or remote IP address, but not both . VSG1432-B101 Series User's Guide 255 Select Subnet to Single Address, enter a (static) IP address on the LAN behind the ZyXEL Device that can configure multiple SAs between the same local and remote IP addresses, ... configured to specify IP addresses on the LAN behind the remote IPSec router. Chapter 21 IPSec Table 88 IPSec Settings > Add/Edit: Manual LABEL DESCRIPTION Tunnel access from the drop-down list box. The remote IP addresses must correspond to the remote IPSec router's configured local ...