User Guide
Page 7
...100H 2.1.2 Rear Panel (left to right 5 11H 101H 2.2 PROCEDURE FOR HARDWARE INSTALLATION 6 12H 102H 2.2.1 Power On ...6 13H 103H 2.2.2 Setup LAN Connection 6 14H 104H 2.2.3 Setup WAN Connection 6 15H 105H CHAPTER3 NETWORK SETTINGS FOR YOUR PC 7 16H 106H 3.1 FOR WINDOWS XP USERS 7 17H 107H 3.2 FOR WINDOWS...ACCESSING THE GATEWAY 15 21H 111H 4.1 START-UP AND LOG-IN 15 22H 112H CHAPTER5 BASIC SETTINGS 16 23H 113H 5.1 WAN SETUP ...16 24H 114H 5.1.1 DHCP (automatic IP address assignment 18 25H 115H 5.1.2 Static (Fixed IP address assignment 18 26H 116H ...
...100H 2.1.2 Rear Panel (left to right 5 11H 101H 2.2 PROCEDURE FOR HARDWARE INSTALLATION 6 12H 102H 2.2.1 Power On ...6 13H 103H 2.2.2 Setup LAN Connection 6 14H 104H 2.2.3 Setup WAN Connection 6 15H 105H CHAPTER3 NETWORK SETTINGS FOR YOUR PC 7 16H 106H 3.1 FOR WINDOWS XP USERS 7 17H 107H 3.2 FOR WINDOWS...ACCESSING THE GATEWAY 15 21H 111H 4.1 START-UP AND LOG-IN 15 22H 112H CHAPTER5 BASIC SETTINGS 16 23H 113H 5.1 WAN SETUP ...16 24H 114H 5.1.1 DHCP (automatic IP address assignment 18 25H 115H 5.1.2 Static (Fixed IP address assignment 18 26H 116H ...
User Guide
Page 8
... VPN / IPsec Settings 53 60H 150H 7.8.2 Add VPN / IPsec Rule 54 61H 151H CHAPTER8 APPLICATIONS SETTINGS 56 62H 152H 8.1 PORT RANGE FORWARD SETUP 56 63H 153H 8.1.1 Port Range Forward Settings 57 64H 154H 8.1.2 Add Port Range Forwarding Rule 58 65H 155H 8.2 1-1 NAT ...59 66H 156H... Add 1-1 NAT Rule ...59 68H 158H 8.3 STREAMING/VPN PASS-THROUGH 61 69H 159H 8.4 UPnP/NAT-PMP SETUP 62 70H 160H CHAPTER9 DYNAMIC BANDWIDTH MANAGEMENT 63 71H 161H 9.1 DBM SETUP ...63 72H 162H 9.1.1 DBM Settings ...63 73H 163H 9.1.2 Add SBM Rules...65 74H 164H 9.1.3 Add DBM...
... VPN / IPsec Settings 53 60H 150H 7.8.2 Add VPN / IPsec Rule 54 61H 151H CHAPTER8 APPLICATIONS SETTINGS 56 62H 152H 8.1 PORT RANGE FORWARD SETUP 56 63H 153H 8.1.1 Port Range Forward Settings 57 64H 154H 8.1.2 Add Port Range Forwarding Rule 58 65H 155H 8.2 1-1 NAT ...59 66H 156H... Add 1-1 NAT Rule ...59 68H 158H 8.3 STREAMING/VPN PASS-THROUGH 61 69H 159H 8.4 UPnP/NAT-PMP SETUP 62 70H 160H CHAPTER9 DYNAMIC BANDWIDTH MANAGEMENT 63 71H 161H 9.1 DBM SETUP ...63 72H 162H 9.1.1 DBM Settings ...63 73H 163H 9.1.2 Add SBM Rules...65 74H 164H 9.1.3 Add DBM...
User Guide
Page 15
Plug one end of The ZyXEL VFG6005 Series VPN Firewall Gateway's LAN ports (yellow). 2.2.3 Setup WAN Connection Choose how to connect the ZyXEL VFG6005 Series VPN Firewall Gateway to the Internet. A: Connecting via xDSL or cable modem: take an Ethernet cable and plug one end of .... 2.2 PROCEDURE FOR HARDWARE INSTALLATION 2.2.1 Power On Take the provided power adapter. The ZyXEL VFG6005 Series VPN Firewall Gateway POWER LED will blink during the boot up phase and be ready when its POWER LED is solid. 2.2.2 Setup LAN Connection Take an Ethernet cable. Plug one of the cable into your modem...
Plug one end of The ZyXEL VFG6005 Series VPN Firewall Gateway's LAN ports (yellow). 2.2.3 Setup WAN Connection Choose how to connect the ZyXEL VFG6005 Series VPN Firewall Gateway to the Internet. A: Connecting via xDSL or cable modem: take an Ethernet cable and plug one end of .... 2.2 PROCEDURE FOR HARDWARE INSTALLATION 2.2.1 Power On Take the provided power adapter. The ZyXEL VFG6005 Series VPN Firewall Gateway POWER LED will blink during the boot up phase and be ready when its POWER LED is solid. 2.2.2 Setup LAN Connection Take an Ethernet cable. Plug one of the cable into your modem...
User Guide
Page 24
... [ HTTP://192.168.10.1] 90H When you need to the configuration interface for the ZyXEL VFG6005 Series VPN Firewall Gateway, the login screen will now see the Router>Status page of The ZyXEL VFG6005 Series VPN Firewall Gateway. For initial Router Setup, please consult the Quick Start Guide. 15 CHAPTER4 ACCESSING THE GATEWAY For Windows...
... [ HTTP://192.168.10.1] 90H When you need to the configuration interface for the ZyXEL VFG6005 Series VPN Firewall Gateway, the login screen will now see the Router>Status page of The ZyXEL VFG6005 Series VPN Firewall Gateway. For initial Router Setup, please consult the Quick Start Guide. 15 CHAPTER4 ACCESSING THE GATEWAY For Windows...
User Guide
Page 25
Click on [Setup] - [WAN] tab. CHAPTER5 BASIC SETTINGS 5.1 WAN SETUP 23. You will see the following screen. 16
Click on [Setup] - [WAN] tab. CHAPTER5 BASIC SETTINGS 5.1 WAN SETUP 23. You will see the following screen. 16
User Guide
Page 29
... might not be needed.) 20 You can also type in the MAC Address which has the right MAC address to what your ISP. Click on [Setup] - [MAC Address Clone] tab. If your ISP only grants access to a fixed MAC address, please select Enable. You may also choose from the list...only allow a registered MAC address to access to set up a cloned MAC address for The ZyXEL VFG6005 Series VPN Firewall Gateway using the pre-registered MAC address. 1. To bypass the rule, you use to configure The ZyXEL VFG6005 Series VPN Firewall Gateway is the device which has been granted access by your ISP. 5.1.5 ...
... might not be needed.) 20 You can also type in the MAC Address which has the right MAC address to what your ISP. Click on [Setup] - [MAC Address Clone] tab. If your ISP only grants access to a fixed MAC address, please select Enable. You may also choose from the list...only allow a registered MAC address to access to set up a cloned MAC address for The ZyXEL VFG6005 Series VPN Firewall Gateway using the pre-registered MAC address. 1. To bypass the rule, you use to configure The ZyXEL VFG6005 Series VPN Firewall Gateway is the device which has been granted access by your ISP. 5.1.5 ...
User Guide
Page 34
... WAN connection. If at any time the connection ping is still connected. If the Host has not responded for the threshold set, the VFG6005 series will generate a PING packet to this if you wish for failover from Ethernet WAN to Ethernet WAN when it is required Detection for...link down. Custom Detection Host Enter the IP address or domain name of WAN Failover following screen. 4. Fallback Enable this IP periodically. Click on [Setup] - [WAN Failover] tab. Detection Type Select Gateway or use your own custom Host IP. 5.2 WAN DETECT 3. You will see the following the...
... WAN connection. If at any time the connection ping is still connected. If the Host has not responded for the threshold set, the VFG6005 series will generate a PING packet to this if you wish for failover from Ethernet WAN to Ethernet WAN when it is required Detection for...link down. Custom Detection Host Enter the IP address or domain name of WAN Failover following screen. 4. Fallback Enable this IP periodically. Click on [Setup] - [WAN Failover] tab. Detection Type Select Gateway or use your own custom Host IP. 5.2 WAN DETECT 3. You will see the following the...
User Guide
Page 35
5.3 LAN SETUP 1. You will see the following the instructions listed below. Configure your network in Internal IP Address Select Netmask from the selection list. Internal IP Address Netmask Spanning Tree Protocol (STP) MTU Please key in a ring topology. Click Enable only if you will cause network breakdown with STP enabled.) Maximum transmission unit: up to 1500 bytes. 26 Click on [Setup] - [LAN] tab. Other switches in the LAN must also support STP. (A cyclic topology will deploy your LAN following screen. 2.
5.3 LAN SETUP 1. You will see the following the instructions listed below. Configure your network in Internal IP Address Select Netmask from the selection list. Internal IP Address Netmask Spanning Tree Protocol (STP) MTU Please key in a ring topology. Click Enable only if you will cause network breakdown with STP enabled.) Maximum transmission unit: up to 1500 bytes. 26 Click on [Setup] - [LAN] tab. Other switches in the LAN must also support STP. (A cyclic topology will deploy your LAN following screen. 2.
User Guide
Page 36
... DNS here. 27 Otherwise choose ISP DNS Server to use your ISP's default server or Custom to enter your LAN following screen. 2. 5.4 DHCP SERVER SETUP The ZyXEL VFG6005 Series VPN Firewall Gateway provides DHCP server service in order to offer IP addresses to enable/disable DHCP Server. Please enter the domain name. The...
... DNS here. 27 Otherwise choose ISP DNS Server to use your ISP's default server or Custom to enter your LAN following screen. 2. 5.4 DHCP SERVER SETUP The ZyXEL VFG6005 Series VPN Firewall Gateway provides DHCP server service in order to offer IP addresses to enable/disable DHCP Server. Please enter the domain name. The...
User Guide
Page 37
...you will cause difficulty for other internet users to connect to a computer/router which has a dynamic IP address. In this case, you configure DDNS on [Setup] - [DDNS] tab. Register with the virtual server feature. For example, you connect to sign up a personal web server. The DDNS service helps users... However, you will see the following screen. 28 To enable DDNS, you obtain a different IP address from your web server. Click on the ZyXEL VFG6005 Series VPN Firewall Gateway. 2. This makes it possible for DDNS services from DynDNS.org, TZO.com or ZoneEdit.com.
...you will cause difficulty for other internet users to connect to a computer/router which has a dynamic IP address. In this case, you configure DDNS on [Setup] - [DDNS] tab. Register with the virtual server feature. For example, you connect to sign up a personal web server. The DDNS service helps users... However, you will see the following screen. 28 To enable DDNS, you obtain a different IP address from your web server. Click on the ZyXEL VFG6005 Series VPN Firewall Gateway. 2. This makes it possible for DDNS services from DynDNS.org, TZO.com or ZoneEdit.com.
User Guide
Page 39
... prevent certain access for visitors. Select Enable if you would like to block traffic from 10%, 25%, 50%, 75%, and 100%. CHAPTER6 WIRELESS SETTINGS 6.1 BASIC SETUP Multiple SSIDs allow traffic from one SSID to another . 30 Select which channel to be set by users for both convenience and increased protection. You...
... prevent certain access for visitors. Select Enable if you would like to block traffic from 10%, 25%, 50%, 75%, and 100%. CHAPTER6 WIRELESS SETTINGS 6.1 BASIC SETUP Multiple SSIDs allow traffic from one SSID to another . 30 Select which channel to be set by users for both convenience and increased protection. You...
User Guide
Page 44
Click on [Wireless] - [Advanced] tab. You will see the following screen. 35 6.2 ADVANCED SETUP 3.
Click on [Wireless] - [Advanced] tab. You will see the following screen. 35 6.2 ADVANCED SETUP 3.
User Guide
Page 45
... MSDU Aggregate Tx Burst Packet Aggregate HT Control Field Reverse Direction Grant Link Adapt Short Guard Interval (SGI) Operation Mode HT Band Width Block Ack Setup Automatically Block Ack Window Size Reject Block Ack MCS Enter the fragmentation bytes. Select different transmission mode. An aggregation method like A-MSDU, it can be...
... MSDU Aggregate Tx Burst Packet Aggregate HT Control Field Reverse Direction Grant Link Adapt Short Guard Interval (SGI) Operation Mode HT Band Width Block Ack Setup Automatically Block Ack Window Size Reject Block Ack MCS Enter the fragmentation bytes. Select different transmission mode. An aggregation method like A-MSDU, it can be...
User Guide
Page 46
... generated by clicking the Generate PIN Code button. If you will have two minutes to go to automatically generate a random WPS PIN code. WIFI PROTECTED SETUP 1. Click on that device within 2 minutes. Click ―Generate PIN Code‖ to your computer asks for a WPS PIN Code, that has generated a PIN code...
... generated by clicking the Generate PIN Code button. If you will have two minutes to go to automatically generate a random WPS PIN code. WIFI PROTECTED SETUP 1. Click on that device within 2 minutes. Click ―Generate PIN Code‖ to your computer asks for a WPS PIN Code, that has generated a PIN code...
User Guide
Page 47
...continuously wait for the incoming packets. memory, CPU) to reply and to disable SPI Firewall Protection. ICMP Broadcasting Protection The ZyXEL VFG6005 Series VPN Firewall Gateway is under such an attack. Uncheck to enable TCP SYN DoS Protection. Check to disable ICMP ...consume computing resources (e.g. This will then consequently result in the server will see the following the instructions below. CHAPTER7 SECURITY SETTINGS 7.1 FIREWALL SETUP 1. Click on [Security] - [Firewall] tab. ICMP broadcasting attack is generated and sent to a server (like a connection request, ...
...continuously wait for the incoming packets. memory, CPU) to reply and to disable SPI Firewall Protection. ICMP Broadcasting Protection The ZyXEL VFG6005 Series VPN Firewall Gateway is under such an attack. Uncheck to enable TCP SYN DoS Protection. Check to disable ICMP ...consume computing resources (e.g. This will then consequently result in the server will see the following the instructions below. CHAPTER7 SECURITY SETTINGS 7.1 FIREWALL SETUP 1. Click on [Security] - [Firewall] tab. ICMP broadcasting attack is generated and sent to a server (like a connection request, ...
User Guide
Page 49
... ACL. ACL Default ACL Action Select Enable to enable a specific MAC Filter rule. Configure Access Control List (ACL) Settings following screen. Select Disable to the ZyXEL VFG6005 Series VPN Firewall Gateway. 40 Be aware that adding the MAC address of your managing computer is required in the MAC Filter Rule. Uncheck Enable... rule. Click on [Security] - [Access Control] tab. Please do not change the parameters unless you wish to customize it by yourself. 2. 7.2 ACCESS CONTROL LIST (ACL) SETUP 7.2.1 ACL Settings 1. You will see the following the instructions below.
... ACL. ACL Default ACL Action Select Enable to enable a specific MAC Filter rule. Configure Access Control List (ACL) Settings following screen. Select Disable to the ZyXEL VFG6005 Series VPN Firewall Gateway. 40 Be aware that adding the MAC address of your managing computer is required in the MAC Filter Rule. Uncheck Enable... rule. Click on [Security] - [Access Control] tab. Please do not change the parameters unless you wish to customize it by yourself. 2. 7.2 ACCESS CONTROL LIST (ACL) SETUP 7.2.1 ACL Settings 1. You will see the following the instructions below.
User Guide
Page 52
7.3 MAC ACCESS CONTROL SETUP 1. Click on [Security] - [MAC Access Control] tab. Example: Bind IP to the default action. MAC Access Control Default MAC Access Control Action Choose Enable/Disable ...
7.3 MAC ACCESS CONTROL SETUP 1. Click on [Security] - [MAC Access Control] tab. Example: Bind IP to the default action. MAC Access Control Default MAC Access Control Action Choose Enable/Disable ...
User Guide
Page 54
OpenDNS Service OpenDNS Username OpenDNS Password DNS Query Redirection to OpenDNS DNS Servers OpenDNS Label Choose Enable/Disable to the OpenDNS Server. Configure OpenDNS Settings following screen. 2. Choose Enable/Disable to enable/disable the data flow redirect to enable/disable OpenDNS Enter OpenDNS user name. You will see the following the instructions below. Enter OpenDNS password. Click on [Security] - [OpenDNS] tab. Users can get advanced content filtering function through the setting Enter the OpenDNS Label 45 7.4 OpenDNS SETUP 7.4.1 OpenDNS Settings 1.
OpenDNS Service OpenDNS Username OpenDNS Password DNS Query Redirection to OpenDNS DNS Servers OpenDNS Label Choose Enable/Disable to the OpenDNS Server. Configure OpenDNS Settings following screen. 2. Choose Enable/Disable to enable/disable the data flow redirect to enable/disable OpenDNS Enter OpenDNS user name. You will see the following the instructions below. Enter OpenDNS password. Click on [Security] - [OpenDNS] tab. Users can get advanced content filtering function through the setting Enter the OpenDNS Label 45 7.4 OpenDNS SETUP 7.4.1 OpenDNS Settings 1.
User Guide
Page 55
Click on [Security] - [Web Filtering] tab. 7.5 WEB FILTERING SETUP 1. You will see the following the instructions below. Web Filtering Activex Filtering Java/JavaScript Filtering Proxy Filtering Choose Enable/Disable to enable/disable Web Filtering Choose Enable/Disable to enable/disable Activex Filtering Choose Enable/Disable to enable/disable Java/JavaScript Filtering Choose Enable/Disable to enable/disable Proxy Filtering 46 Configure Web Filtering Settings following screen. 2.
Click on [Security] - [Web Filtering] tab. 7.5 WEB FILTERING SETUP 1. You will see the following the instructions below. Web Filtering Activex Filtering Java/JavaScript Filtering Proxy Filtering Choose Enable/Disable to enable/disable Web Filtering Choose Enable/Disable to enable/disable Activex Filtering Choose Enable/Disable to enable/disable Java/JavaScript Filtering Choose Enable/Disable to enable/disable Proxy Filtering 46 Configure Web Filtering Settings following screen. 2.
User Guide
Page 57
7.6 VPN / PPTP SETUP 7.6.1 VPN / PPTP Settings PPTP VPN allows you to your LAN. You will see the following screen. 48 PPTP can allow you to create a secure VPN connection remotely to connect using built in software clients such as Windows VPN client or smart devices such as Android phones/tablets, iPhones or iPads. 1. Click on [Security] - [VPN / PPTP] tab.
7.6 VPN / PPTP SETUP 7.6.1 VPN / PPTP Settings PPTP VPN allows you to your LAN. You will see the following screen. 48 PPTP can allow you to create a secure VPN connection remotely to connect using built in software clients such as Windows VPN client or smart devices such as Android phones/tablets, iPhones or iPads. 1. Click on [Security] - [VPN / PPTP] tab.