User Guide
Page 1
KEEP THIS GUIDE FOR FUTURE REFERENCE. ISG50 Integrated Service Gateway Default Login Details LAN IP Address https://192.168.1.1 User Name admin Password 1234 Version 2.30 Editionw3w,w.0zy5x/el2.c0om12 www.zyxel.com IMPORTANT! Copyright © 2012 ZyXEL Communications Corporation READ CAREFULLY BEFORE USE.
KEEP THIS GUIDE FOR FUTURE REFERENCE. ISG50 Integrated Service Gateway Default Login Details LAN IP Address https://192.168.1.1 User Name admin Password 1234 Version 2.30 Editionw3w,w.0zy5x/el2.c0om12 www.zyxel.com IMPORTANT! Copyright © 2012 ZyXEL Communications Corporation READ CAREFULLY BEFORE USE.
User Guide
Page 3
Contents Overview Contents Overview User's Guide ...25 Introducing the ISG50 ...27 Features and Applications ...37 Web Configurator ...43 Installation Setup Wizard ...59 Quick Setup ...69 Configuration Basics ...87 General Tutorials ...107 PBX Tutorials ...135 Technical ... ADP ...411 Global PBX Settings ...429 Voice Interfaces ...448 Extension Management ...453 Outbound Trunk Group ...477 Auto-attendant ...503 LCR ...519 Group Management ...526 Call Services ...532 Call Recording ...544 ISG50 User's Guide 3
Contents Overview Contents Overview User's Guide ...25 Introducing the ISG50 ...27 Features and Applications ...37 Web Configurator ...43 Installation Setup Wizard ...59 Quick Setup ...69 Configuration Basics ...87 General Tutorials ...107 PBX Tutorials ...135 Technical ... ADP ...411 Global PBX Settings ...429 Voice Interfaces ...448 Extension Management ...453 Outbound Trunk Group ...477 Auto-attendant ...503 LCR ...519 Group Management ...526 Call Services ...532 Call Recording ...544 ISG50 User's Guide 3
User Guide
Page 4
Contents Overview Meet-me Conference ...547 Paging Group ...549 ACD ...553 Sound Files ...568 Auto Provision ...573 Voice Mail ...581 Phonebook ...587 Office Hours ...595 User/Group ...599 Addresses ...613 Services ...619 Schedules ...625 AAA Server ...631 Authentication Method ...639 Certificates ...643 ISP Accounts ...661 System ...665 Log and Report ...705 Call Detail Record (CDR) ...720 File Manager ...725 Diagnostics ...737 Packet Flow Explore ...745 Reboot ...753 Shutdown ...755 Extension Portal ...757 Troubleshooting ...765 4 ISG50 User's Guide
Contents Overview Meet-me Conference ...547 Paging Group ...549 ACD ...553 Sound Files ...568 Auto Provision ...573 Voice Mail ...581 Phonebook ...587 Office Hours ...595 User/Group ...599 Addresses ...613 Services ...619 Schedules ...625 AAA Server ...631 Authentication Method ...639 Certificates ...643 ISP Accounts ...661 System ...665 Log and Report ...705 Call Detail Record (CDR) ...720 File Manager ...725 Diagnostics ...737 Packet Flow Explore ...745 Reboot ...753 Shutdown ...755 Extension Portal ...757 Troubleshooting ...765 4 ISG50 User's Guide
User Guide
Page 8
...Accounts Based on Groups 120 7.7 How to Use Authentication Policies 122 7.7.1 Configure the Authentication Policy 122 7.8 How to Configure Service Control 123 7.8.1 Allow HTTPS Administrator Access Only From the LAN 123 7.9 How to Allow Incoming H.323 Peer-to-peer Calls...for ITSP 151 8.4.3 Assigning an LCR to an Authority Group 152 8.5 Making ISDN Calls ...154 8.5.1 The ISDN Connection ...155 8.5.2 Creating a Dialing Rule for ISDN 156 8.5.3 Assigning an LCR to an Authority Group 158 8.6 ISDN Network Configuration Examples 159 8.6.1 Example 1: Small/Medium Business 160 8.6.2 Example 2:...
...Accounts Based on Groups 120 7.7 How to Use Authentication Policies 122 7.7.1 Configure the Authentication Policy 122 7.8 How to Configure Service Control 123 7.8.1 Allow HTTPS Administrator Access Only From the LAN 123 7.9 How to Allow Incoming H.323 Peer-to-peer Calls...for ITSP 151 8.4.3 Assigning an LCR to an Authority Group 152 8.5 Making ISDN Calls ...154 8.5.1 The ISDN Connection ...155 8.5.2 Creating a Dialing Rule for ISDN 156 8.5.3 Assigning an LCR to an Authority Group 158 8.6 ISDN Network Configuration Examples 159 8.6.1 Example 1: Small/Medium Business 160 8.6.2 Example 2:...
User Guide
Page 10
....1 Overview ...229 11.1.1 What You Can Do in this Chapter 229 11.1.2 What you Need to Know ...229 11.2 The Registration Screen ...230 11.3 The Service Screen ...231 Chapter 12 Interfaces ...233 12.1 Interface Overview ...233 12.1.1 What You Can Do in this Chapter 233 12.1.2 What You Need to Know... 12.4.1 PPP Interface Summary ...247 12.4.2 PPP Interface Add or Edit 248 12.5 Cellular Configuration Screen (3G 251 12.5.1 Cellular Add/Edit Screen ...253 10 ISG50 User's Guide
....1 Overview ...229 11.1.1 What You Can Do in this Chapter 229 11.1.2 What you Need to Know ...229 11.2 The Registration Screen ...230 11.3 The Service Screen ...231 Chapter 12 Interfaces ...233 12.1 Interface Overview ...233 12.1.1 What You Can Do in this Chapter 233 12.1.2 What You Need to Know... 12.4.1 PPP Interface Summary ...247 12.4.2 PPP Interface Add or Edit 248 12.5 Cellular Configuration Screen (3G 251 12.5.1 Cellular Add/Edit Screen ...253 10 ISG50 User's Guide
User Guide
Page 16
...Office Hours 509 31.3.3 The Add/Edit Auto-Attendant Option Screen 511 31.3.4 The Auto-Attendant Sub Menu Screen 512 31.3.5 Auto Attendant Settings: Night Service 513 31.3.6 Greeting ...515 31.4 Technical Reference ...516 Chapter 32 LCR ...519 32.1 Overview ...519 32.1.1 What You Can Do in this Chapter...You Need to Know ...527 33.1.3 Before You Begin ...530 33.2 Group Management Screen ...530 33.2.1 Edit Group Management Associations 531 Chapter 34 Call Services ...532 34.1 Overview ...532 34.1.1 What You Can Do in this Chapter 532 34.1.2 What You Need to Know ...532 34.1.3 Before You Begin...
...Office Hours 509 31.3.3 The Add/Edit Auto-Attendant Option Screen 511 31.3.4 The Auto-Attendant Sub Menu Screen 512 31.3.5 Auto Attendant Settings: Night Service 513 31.3.6 Greeting ...515 31.4 Technical Reference ...516 Chapter 32 LCR ...519 32.1 Overview ...519 32.1.1 What You Can Do in this Chapter...You Need to Know ...527 33.1.3 Before You Begin ...530 33.2 Group Management Screen ...530 33.2.1 Edit Group Management Associations 531 Chapter 34 Call Services ...532 34.1 Overview ...532 34.1.1 What You Can Do in this Chapter 532 34.1.2 What You Need to Know ...532 34.1.3 Before You Begin...
User Guide
Page 19
....2 Address Summary Screen ...613 45.2.1 Address Add/Edit Screen ...614 45.3 Address Group Summary Screen 615 45.3.1 Address Group Add/Edit Screen 616 Chapter 46 Services ...619 46.1 Overview ...619 46.1.1 What You Can Do in this Chapter 619 46.1.2 What You Need to Know ...619 46.2 The...
....2 Address Summary Screen ...613 45.2.1 Address Add/Edit Screen ...614 45.3 Address Group Summary Screen 615 45.3.1 Address Group Add/Edit Screen 616 Chapter 46 Services ...619 46.1 Overview ...619 46.1.1 What You Can Do in this Chapter 619 46.1.2 What You Need to Know ...619 46.2 The...
User Guide
Page 20
... One-Time Schedule Add/Edit Screen 627 47.2.2 The Recurring Schedule Add/Edit Screen 628 Chapter 48 AAA Server...631 48.1 Overview ...631 48.1.1 Directory Service (AD/LDAP 631 48.1.2 RADIUS Server ...631 48.1.3 ASAS ...632 48.1.4 What You Can Do in this Chapter 632 48.1.5 What You Need To Know... Certificates Edit Screen 651 50.2.3 The My Certificates Import Screen 653 50.3 The Trusted Certificates Screen 654 50.3.1 The Trusted Certificates Edit Screen 656 20 ISG50 User's Guide
... One-Time Schedule Add/Edit Screen 627 47.2.2 The Recurring Schedule Add/Edit Screen 628 Chapter 48 AAA Server...631 48.1 Overview ...631 48.1.1 Directory Service (AD/LDAP 631 48.1.2 RADIUS Server ...631 48.1.3 ASAS ...632 48.1.4 What You Can Do in this Chapter 632 48.1.5 What You Need To Know... Certificates Edit Screen 651 50.2.3 The My Certificates Import Screen 653 50.3 The Trusted Certificates Screen 654 50.3.1 The Trusted Certificates Edit Screen 656 20 ISG50 User's Guide
User Guide
Page 21
... Overview ...678 52.7.1 Service Access Limitations 678 52.7.2 System Timeout ...678 52.7.3 HTTPS ...679 52.7.4 Configuring WWW Service Control 680 52.7.5 Service Control Rules ...683 52.7.6 Customizing the WWW Login Page 683 52.7.7 HTTPS Example ...687 52.8 SSH ...693 52.8.1 How SSH Works ...694 52.8.2 SSH Implementation on the ISG50 695 52.8.3 Requirements for...
... Overview ...678 52.7.1 Service Access Limitations 678 52.7.2 System Timeout ...678 52.7.3 HTTPS ...679 52.7.4 Configuring WWW Service Control 680 52.7.5 Service Control Rules ...683 52.7.6 Customizing the WWW Login Page 683 52.7.7 HTTPS Example ...687 52.8 SSH ...693 52.8.1 How SSH Works ...694 52.8.2 SSH Implementation on the ISG50 695 52.8.3 Requirements for...
User Guide
Page 24
Table of Contents 61.1 Resetting the ISG50 ...774 61.2 Getting More Troubleshooting Help 774 Appendix A Log Descriptions...775 Appendix B Common Services ...827 Appendix C Importing Certificates 831 Appendix D Legal Information ...855 Index ...857 24 ISG50 User's Guide
Table of Contents 61.1 Resetting the ISG50 ...774 61.2 Getting More Troubleshooting Help 774 Appendix A Log Descriptions...775 Appendix B Common Services ...827 Appendix C Importing Certificates 831 Appendix D Legal Information ...855 Index ...857 24 ISG50 User's Guide
User Guide
Page 27
...within an organization typically consisting of a PBX. IP stands for Internet Protocol, and PBX stands for reliable, secure voice and data service. 1.1.1 PBX An IP PBX is a telephone exchange device located at a company site which allows an organization to set up and...8226; A traditional Public Switched Telephone Network (PSTN): ISG50-PSTN • An Internet connection to an Internet Telephony Service Provider (ITSP): all ISG50 models • An Integrated Services Digital Network/Basic Rate Interface Network (ISDN BRI): ISG50-ISDN Each telephone connected to an IP PBX has an extension...
...within an organization typically consisting of a PBX. IP stands for Internet Protocol, and PBX stands for reliable, secure voice and data service. 1.1.1 PBX An IP PBX is a telephone exchange device located at a company site which allows an organization to set up and...8226; A traditional Public Switched Telephone Network (PSTN): ISG50-PSTN • An Internet connection to an Internet Telephony Service Provider (ITSP): all ISG50 models • An Integrated Services Digital Network/Basic Rate Interface Network (ISDN BRI): ISG50-ISDN Each telephone connected to an IP PBX has an extension...
User Guide
Page 29
...put calls through the appropriate outbound line. 1.1.3.1 All-in-one Application Scenario Headquarters A LAN Chapter 1 Introducing the ISG50 B DMZ ISG FAX WAN1 C WAN2 ITSP PSTN/ISDN D VoIP Services: • VoIP phones and smartphones can also forward them by email. • Conference room extensions allow callers from.... • Use call recording to record all calls for VPN connections and VoIP. 1.1.3.2 DMZ Installation Use the ISG50 with a USG, ZyXEL's Unified Threat Management (UTM) firewall to add more security services like IDP and anti-virus. Figure 2 All-in-one Use the...
...put calls through the appropriate outbound line. 1.1.3.1 All-in-one Application Scenario Headquarters A LAN Chapter 1 Introducing the ISG50 B DMZ ISG FAX WAN1 C WAN2 ITSP PSTN/ISDN D VoIP Services: • VoIP phones and smartphones can also forward them by email. • Conference room extensions allow callers from.... • Use call recording to record all calls for VPN connections and VoIP. 1.1.3.2 DMZ Installation Use the ISG50 with a USG, ZyXEL's Unified Threat Management (UTM) firewall to add more security services like IDP and anti-virus. Figure 2 All-in-one Use the...
User Guide
Page 30
...USG provides additional WAN fail-over for the VoIP services. The ISG50 provides the VoIP services listed in the previous scenario, and the USG provides the security services. Figure 4 Installation Parallel to keep bursts of using the ISG50 along with a USG. Figure 3 DMZ Installation Headquarters... LAN A B DMZ USG WAN1 C ISG WAN2 FAX ITSP PSTN/ISDN D 1.1.3.3 Parallel to a USG Connect the ISG50 to the Internet and ...
...USG provides additional WAN fail-over for the VoIP services. The ISG50 provides the VoIP services listed in the previous scenario, and the USG provides the security services. Figure 4 Installation Parallel to keep bursts of using the ISG50 along with a USG. Figure 3 DMZ Installation Headquarters... LAN A B DMZ USG WAN1 C ISG WAN2 FAX ITSP PSTN/ISDN D 1.1.3.3 Parallel to a USG Connect the ISG50 to the Internet and ...
User Guide
Page 37
... over Internet Protocol (VoIP). A: IP Phones - Analog Telephone Adapters (for example ZyXEL's P-2024) aggregate a large number of the ISG50. 2.1 Features Voice over Internet Protocol (VoIP) Implementation The ISG50 uses SIP (Session Initiation Protocol) to the peer IP PBX without going through a telephone service provider. The following figure shows SIP devices communicating with built in...
... over Internet Protocol (VoIP). A: IP Phones - Analog Telephone Adapters (for example ZyXEL's P-2024) aggregate a large number of the ISG50. 2.1 Features Voice over Internet Protocol (VoIP) Implementation The ISG50 uses SIP (Session Initiation Protocol) to the peer IP PBX without going through a telephone service provider. The following figure shows SIP devices communicating with built in...
User Guide
Page 38
...on your IP network. Chapter 2 Features and Applications F: SIP Servers - Servers (D) located at your Internet Telephony Service Provider (ITSP) which process outgoing calls from the ISG50 and direct them to IP phones on the Internet or traditional phones on your telephone... service provider. Figure 12 SIP Devices and the ISG50 ITSP E PSTN F ISG D A C B PBX Telephony Features The ISG50 allows you can: • Import an LDAP-based (Lightweight Directory Access Protocol) contact list to provide intercom ...
...on your IP network. Chapter 2 Features and Applications F: SIP Servers - Servers (D) located at your Internet Telephony Service Provider (ITSP) which process outgoing calls from the ISG50 and direct them to IP phones on the Internet or traditional phones on your telephone... service provider. Figure 12 SIP Devices and the ISG50 ITSP E PSTN F ISG D A C B PBX Telephony Features The ISG50 allows you can: • Import an LDAP-based (Lightweight Directory Access Protocol) contact list to provide intercom ...
User Guide
Page 41
You can also set up additional connections to the Internet to provide better service. You can add interfaces and VPN tunnels to zones. ISG50 User's Guide 41 You can create your network. Figure 15 Applications: VPN Connectivity ISG Flexible Security Zones Many security settings are made by zone, not by interface, port, or network. As a result, it is much simpler to set up and to change security settings in the ISG50. Chapter 2 Features and Applications travelers to provide secure access to your own custom zones.
You can also set up additional connections to the Internet to provide better service. You can add interfaces and VPN tunnels to zones. ISG50 User's Guide 41 You can create your network. Figure 15 Applications: VPN Connectivity ISG Flexible Security Zones Many security settings are made by zone, not by interface, port, or network. As a result, it is much simpler to set up and to change security settings in the ISG50. Chapter 2 Features and Applications travelers to provide secure access to your own custom zones.
User Guide
Page 43
... to its HTTPS server, and it is properly connected. The Login screen appears. To protect against brute force, password-guessing attacks, the ISG50 blocks an account's access for 60 minutes after 3 consecutive, failed login attempts. You can use the Web Configurator, you must •... Use Internet Explorer 7 or later, or Firefox 1.5 or later • Allow pop-up windows (blocked by default in Windows XP Service Pack 2) • Enable JavaScript (enabled by default) • Enable Java permissions (enabled by default) • Enable cookies The recommended screen resolution is...
... to its HTTPS server, and it is properly connected. The Login screen appears. To protect against brute force, password-guessing attacks, the ISG50 blocks an account's access for 60 minutes after 3 consecutive, failed login attempts. You can use the Web Configurator, you must •... Use Internet Explorer 7 or later, or Firefox 1.5 or later • Allow pop-up windows (blocked by default in Windows XP Service Pack 2) • Enable JavaScript (enabled by default) • Enable Java permissions (enabled by default) • Enable cookies The recommended screen resolution is...
User Guide
Page 47
... dashboard displays general device information, system status, system resource usage, licensed service status, and interface status in widgets that have received an IP address from ISG50 interfaces using IP/ MAC binding. Login Users Lists the users currently logged into the ISG50. CTI Peer Displays status information about USB-connected storage devices. See Chapter...
... dashboard displays general device information, system status, system resource usage, licensed service status, and interface status in widgets that have received an IP address from ISG50 interfaces using IP/ MAC binding. Login Users Lists the users currently logged into the ISG50. CTI Peer Displays status information about USB-connected storage devices. See Chapter...
User Guide
Page 48
...Internet connection for Automatic Call Distribution (ACD) agents. DDNS Define and manage the ISG50's DDNS domain names. Licensing Registration Registration Register the device and activate trial services. VLAN Create and manage VLAN interfaces and virtual VLAN interfaces. IP/MAC Binding ... Menu Screens Summary (continued) FOLDER OR LINK FUNCTION BRI Trunk Displays status information about ISDN BRI outbound line groups configured on the ISG50. Ethernet Manage Ethernet interfaces and virtual Ethernet interfaces. PPP Create and manage PPPoE and PPTP interfaces....
...Internet connection for Automatic Call Distribution (ACD) agents. DDNS Define and manage the ISG50's DDNS domain names. Licensing Registration Registration Register the device and activate trial services. VLAN Create and manage VLAN interfaces and virtual VLAN interfaces. IP/MAC Binding ... Menu Screens Summary (continued) FOLDER OR LINK FUNCTION BRI Trunk Displays status information about ISDN BRI outbound line groups configured on the ISG50. Ethernet Manage Ethernet interfaces and virtual Ethernet interfaces. PPP Create and manage PPPoE and PPTP interfaces....
User Guide
Page 49
...users dial on the same subnet. QoS Configure DSCP settings for services passing through the email server. Click To Talk Configure Click-To-Talk (CTT) groups to enable or disable a feature the ISG50 supports. ISG50 User's Guide 49 Anti-X ADP General Display and manage ADP ...the Internet with a web-based IP phone. TAPI Configure TAPI line settings and download the ZYXEL TAPI driver. Auto-Attendant Configure the default and customized auto-attendants the ISG50 uses. FXO Configure settings for your outbound line groups. LCR Configure Least Cost Routing (...
...users dial on the same subnet. QoS Configure DSCP settings for services passing through the email server. Click To Talk Configure Click-To-Talk (CTT) groups to enable or disable a feature the ISG50 supports. ISG50 User's Guide 49 Anti-X ADP General Display and manage ADP ...the Internet with a web-based IP phone. TAPI Configure TAPI line settings and download the ZYXEL TAPI driver. Auto-Attendant Configure the default and customized auto-attendants the ISG50 uses. FXO Configure settings for your outbound line groups. LCR Configure Least Cost Routing (...