User Guide
Page 3
... ...15 The Web Configurator ...21 Quick Start ...29 Tutorials ...31 Technical Reference ...54 Network Map and Status Screens ...55 Broadband ...59 Wireless ...85 Home Networking ...116 Routing ...132 Quality of Service (QoS) ...139 Network Address Translation (NAT) ...157 DNS Setup ...173 IGMP/MLD ...177 VLAN Group ...180 Interface Group ...183 USB Service ...188 Firewall ...193 MAC Filter ...200 Parental Control ...202 Scheduler Rule ...206 Certificates ...208 Log ...215 Traffic Status ...218 ARP Table ...221 Routing Table ...223 Multicast Status ...225...
... ...15 The Web Configurator ...21 Quick Start ...29 Tutorials ...31 Technical Reference ...54 Network Map and Status Screens ...55 Broadband ...59 Wireless ...85 Home Networking ...116 Routing ...132 Quality of Service (QoS) ...139 Network Address Translation (NAT) ...157 DNS Setup ...173 IGMP/MLD ...177 VLAN Group ...180 Interface Group ...183 USB Service ...188 Firewall ...193 MAC Filter ...200 Parental Control ...202 Scheduler Rule ...206 Certificates ...208 Log ...215 Traffic Status ...218 ARP Table ...221 Routing Table ...223 Multicast Status ...225...
User Guide
Page 15
... make the VMG more effectively. • Change the password. VMG3925-B10A User's Guide 15 It has a DSL port and a Gigabit Ethernet port for your VMG's specific model. You could simply restore your last configuration. The VMG supports both Packet Transfer Mode (PTM) and Asynchronous Transfer Mode (ATM). This is a wireless VDSL router and Gigabit Ethernet gateway. CHAPTER 1 Introducing the VMG 1.1 Overview The VMG is an auto-configuration server used to remotely configure your device. 1.3 Good Habits for Managing...
... make the VMG more effectively. • Change the password. VMG3925-B10A User's Guide 15 It has a DSL port and a Gigabit Ethernet port for your VMG's specific model. You could simply restore your last configuration. The VMG supports both Packet Transfer Mode (PTM) and Asynchronous Transfer Mode (ATM). This is a wireless VDSL router and Gigabit Ethernet gateway. CHAPTER 1 Introducing the VMG 1.1 Overview The VMG is an auto-configuration server used to remotely configure your device. 1.3 Good Habits for Managing...
User Guide
Page 25
... to open screens to configure policy routing on the VMG. You can also add new WAN connections. 3G Backup Use this screen to configure VMG features. Guest/More AP Use this screen to view and configure ISP parameters, WAN IP address assignment, and other advanced properties. STB Vendor ID Use this screen to configure 3G WAN connection. VMG3925-B10A User's Guide 25 Network Setting Broadband Broadband Use this screen to set up Wireless Distribution System (WDS) links to remotely turn UPnP and UPnP NAT-T on...
... to open screens to configure policy routing on the VMG. You can also add new WAN connections. 3G Backup Use this screen to configure VMG features. Guest/More AP Use this screen to view and configure ISP parameters, WAN IP address assignment, and other advanced properties. STB Vendor ID Use this screen to configure 3G WAN connection. VMG3925-B10A User's Guide 25 Network Setting Broadband Broadband Use this screen to set up Wireless Distribution System (WDS) links to remotely turn UPnP and UPnP NAT-T on...
User Guide
Page 26
.... USB Service File Sharing Use this screen to view and manage the list of certain MAC addresses to configure a default server which receives packets from the specified interface. Trusted CA Use this screen to enable file sharing via the VMG. Policer Setup Use this screen to add Internet services and configure firewall rules. Dynamic DNS Use this screen to allow traffic from devices of the trusted CAs. Protocol Use this screen to configure QoS policers. System Monitor VMG3925-B10A User's Guide 26 NAT Port Forwarding Use...
.... USB Service File Sharing Use this screen to view and manage the list of certain MAC addresses to configure a default server which receives packets from the specified interface. Trusted CA Use this screen to enable file sharing via the VMG. Policer Setup Use this screen to add Internet services and configure firewall rules. Dynamic DNS Use this screen to allow traffic from devices of the trusted CAs. Protocol Use this screen to configure QoS policers. System Monitor VMG3925-B10A User's Guide 26 NAT Port Forwarding Use...
User Guide
Page 31
...; Configuring QoS Queue and Class Setup, see page 46 • Access the VMG Using DDNS, see page 50 • Configuring the MAC Address Filter, see page 51 • Access Your Shared Files From a Computer, see page 53 4.2 Setting Up an ADSL PPPoE Connection This tutorial shows you need to configure the Broadband screens. 1 Click Network Setting > Broadband to set up an ADSL Internet connection using the Web Configurator. General Name Type MyDSLConnection ADSL VMG3925-B10A User's Guide 31 Click Add New WAN Interface...
...; Configuring QoS Queue and Class Setup, see page 46 • Access the VMG Using DDNS, see page 50 • Configuring the MAC Address Filter, see page 51 • Access Your Shared Files From a Computer, see page 53 4.2 Setting Up an ADSL PPPoE Connection This tutorial shows you need to configure the Broadband screens. 1 Click Network Setting > Broadband to set up an ADSL Internet connection using the Web Configurator. General Name Type MyDSLConnection ADSL VMG3925-B10A User's Guide 31 Click Add New WAN Interface...
User Guide
Page 32
... User's Guide 32 Set the Type to save your DSL service provider. Then select DNS as Static and enter the DNS server addresses provided to you by your settings. Choose the Encapsulation specified by your DSL service provider. 5 Configure this example, the service provider requires a username and password to you , such as Default Gateway check box. Set the IPv4/IPv6 Mode to IPv4 Only. 4 Enter the account information provided to establish Internet connection. Chapter 4 Tutorials Connection Mode...
... User's Guide 32 Set the Type to save your DSL service provider. Then select DNS as Static and enter the DNS server addresses provided to you by your settings. Choose the Encapsulation specified by your DSL service provider. 5 Configure this example, the service provider requires a username and password to you , such as Default Gateway check box. Set the IPv4/IPv6 Mode to IPv4 Only. 4 Enter the account information provided to establish Internet connection. Chapter 4 Tutorials Connection Mode...
User Guide
Page 51
... Internet. To test this: 1 Open a web browser on Your VMG Configure the following settings in the Network Setting > DNS > Dynamic DNS screen. • Select Enable Dynamic DNS. • Select www.DynDNS.com as the service provider. • Type zyxelrouter.dyndns.org in the Host Name field. • Enter the user name (UserName1) and password (12345). VMG3925-B10A User's Guide 51 Chapter 4 Tutorials 4.7.2 Configuring DDNS on the computer (using the IP address a.b.c.d) that is connected to the Internet. 2 Type...
... Internet. To test this: 1 Open a web browser on Your VMG Configure the following settings in the Network Setting > DNS > Dynamic DNS screen. • Select Enable Dynamic DNS. • Select www.DynDNS.com as the service provider. • Type zyxelrouter.dyndns.org in the Host Name field. • Enter the user name (UserName1) and password (12345). VMG3925-B10A User's Guide 51 Chapter 4 Tutorials 4.7.2 Configuring DDNS on the computer (using the IP address a.b.c.d) that is connected to the Internet. 2 Type...
User Guide
Page 57
... DHCP server and relays DHCP requests and responses between the remote server and the clients. WLAN 2.4GHz Information / WLAN 5GHz Information MAC Address This shows the wireless adapter MAC (Media Access Control) Address of the VMG in the LAN. Channel This is using in the wireless LAN. 802.11 Mode This displays the type of security mode the wireless interface is using in the WAN. Security This displays the type of 802.11 mode the wireless interface is the channel number used by the wireless interface now. VMG3925-B10A User's Guide 57...
... DHCP server and relays DHCP requests and responses between the remote server and the clients. WLAN 2.4GHz Information / WLAN 5GHz Information MAC Address This shows the wireless adapter MAC (Media Access Control) Address of the VMG in the LAN. Channel This is using in the wireless LAN. 802.11 Mode This displays the type of security mode the wireless interface is using in the WAN. Security This displays the type of 802.11 mode the wireless interface is the channel number used by the wireless interface now. VMG3925-B10A User's Guide 57...
User Guide
Page 59
... the VMG (Section 6.5 on page 71). • Use the Advanced screen to enable or disable PTM over PTM DSL LINK TYPE N/A MODE Routing Bridge ENCAPSULATION CONNECTION SETTINGS PPPoE IPoE N/A PPP information, IPv4/IPv6 IP address, routing feature, DNS server, VLAN, QoS, and MTU IPv4/IPv6 IP address, routing feature, DNS server, VLAN, QoS, and MTU VLAN and QoS VMG3925-B10A User's Guide 59 Table 6 WAN Setup Overview LAYER-2 INTERFACE INTERNET CONNECTION CONNECTION ADSL/VDSL over ADSL, Annex M/Annex J, and DSL PhyR functions...
... the VMG (Section 6.5 on page 71). • Use the Advanced screen to enable or disable PTM over PTM DSL LINK TYPE N/A MODE Routing Bridge ENCAPSULATION CONNECTION SETTINGS PPPoE IPoE N/A PPP information, IPv4/IPv6 IP address, routing feature, DNS server, VLAN, QoS, and MTU IPv4/IPv6 IP address, routing feature, DNS server, VLAN, QoS, and MTU VLAN and QoS VMG3925-B10A User's Guide 59 Table 6 WAN Setup Overview LAYER-2 INTERFACE INTERNET CONNECTION CONNECTION ADSL/VDSL over ADSL, Annex M/Annex J, and DSL PhyR functions...
User Guide
Page 85
Use these screens to set up your VMG's wireless connection. • Use the General screen to enable the Wireless LAN, enter the SSID and select the wireless security mode (Section 7.2 on page 91). • Use the MAC Authentication screen to other ZyXEL access points (Section 7.7 on page 97). • Use the Others screen to configure wireless advanced features, such as the RTS/CTS Threshold (Section 7.8 on page 99). • Use the Channel Status screen to scan wireless LAN channel noises...
Use these screens to set up your VMG's wireless connection. • Use the General screen to enable the Wireless LAN, enter the SSID and select the wireless security mode (Section 7.2 on page 91). • Use the MAC Authentication screen to other ZyXEL access points (Section 7.7 on page 97). • Use the Others screen to configure wireless advanced features, such as the RTS/CTS Threshold (Section 7.8 on page 99). • Use the Channel Status screen to scan wireless LAN channel noises...
User Guide
Page 87
... wireless LAN is Network Name associated. Select None to not be in this network at the same time. Wireless Network Settings Wireless The SSID (Service Set IDentity) identifies the service set the VMG's password generation to set with no spaces). Passphrase Key Select Variable to use . Set whether the control channel (set the wireless channel width to lessen radio interference with no spaces). Specify the maximum number of clients that can Enable or Disable the wireless LAN in the Lower or Upper range...
... wireless LAN is Network Name associated. Select None to not be in this network at the same time. Wireless Network Settings Wireless The SSID (Service Set IDentity) identifies the service set the VMG's password generation to set with no spaces). Passphrase Key Select Variable to use . Set whether the control channel (set the wireless channel width to lessen radio interference with no spaces). Specify the maximum number of clients that can Enable or Disable the wireless LAN in the Lower or Upper range...
User Guide
Page 92
... a password. Wireless Network Settings VMG3925-B10A User's Guide 92 Table 21 Network Setting > Wireless > Guest / More AP > Edit LABEL DESCRIPTION Wireless Network Setup Wireless You can Enable or Disable the wireless LAN in this field determines how the VMG generates the password. Select Variable to use a 16 to use a 16-character passphrase for the wireless LAN and have the VMG generate a password, the setting in this screen. Select None to set security for generating a password. Passphrase Type If you set the...
... a password. Wireless Network Settings VMG3925-B10A User's Guide 92 Table 21 Network Setting > Wireless > Guest / More AP > Edit LABEL DESCRIPTION Wireless Network Setup Wireless You can Enable or Disable the wireless LAN in this field determines how the VMG generates the password. Select Variable to use a 16 to use a 16-character passphrase for the wireless LAN and have the VMG generate a password, the setting in this screen. Select None to set security for generating a password. Passphrase Type If you set the...
User Guide
Page 93
.... Wireless devices associating to save your changes. Select Enable to the SSID. The VMG assigns IP addresses from this check box to allow any data encryption or authentication. Select this network without saving. 7.4 The MAC Authentication Screen This screen allows you select Home Guest, clients connecting to the same SSID can select No Security to allow the VMG to each other directly. Downstream Bandwidth SSID Subnet DHCP Start Address DHCP End Address SSID Subnet Mask LAN IP Address Security Level Security Mode...
.... Wireless devices associating to save your changes. Select Enable to the SSID. The VMG assigns IP addresses from this check box to allow any data encryption or authentication. Select this network without saving. 7.4 The MAC Authentication Screen This screen allows you select Home Guest, clients connecting to the same SSID can select No Security to allow the VMG to each other directly. Downstream Bandwidth SSID Subnet DHCP Start Address DHCP End Address SSID Subnet Mask LAN IP Address Security Level Security Mode...
User Guide
Page 105
...) you cannot set up in the wireless network. 7.10.3.1 SSID Normally, the VMG acts like a beacon and regularly broadcasts the SSID in the wireless network. 7.10.3.2 MAC Address Filter Every device that can use the wireless network. Unauthorized wireless devices can hide the SSID instead, in the wireless network, even if they can store the user names and passwords for each user in homes. These kinds of wireless devices might not have a RADIUS server, you could use the wireless network, it...
...) you cannot set up in the wireless network. 7.10.3.1 SSID Normally, the VMG acts like a beacon and regularly broadcasts the SSID in the wireless network. 7.10.3.2 MAC Address Filter Every device that can use the wireless network. Unauthorized wireless devices can hide the SSID instead, in the wireless network, even if they can store the user names and passwords for each user in homes. These kinds of wireless devices might not have a RADIUS server, you could use the wireless network, it...
User Guide
Page 106
... use encryption to limitations of Authentication NO AUTHENTICATION RADIUS SERVER Weakest No Security WPA Static WEP WPA-PSK Strongest WPA2-PSK WPA2 For example, if the wireless network has a RADIUS server, you can choose depend on the type of authentication. (See Section 7.10.3.3 on the type of wireless network login) and select the WPA compatible option in the wireless network must have a RADIUS server. Note: It is like a secret code. Problems with distance occur when the two radios are VMG3925...
... use encryption to limitations of Authentication NO AUTHENTICATION RADIUS SERVER Weakest No Security WPA Static WEP WPA-PSK Strongest WPA2-PSK WPA2 For example, if the wireless network has a RADIUS server, you can choose depend on the type of authentication. (See Section 7.10.3.3 on the type of wireless network login) and select the WPA compatible option in the wireless network must have a RADIUS server. Note: It is like a secret code. Problems with distance occur when the two radios are VMG3925...
User Guide
Page 120
... Mode Setup IPv6 Active Select Enable to stop the DHCP server on the VMG. Lan Global Identifier Type VMG3925-B10A User's Guide 120 DHCP automatically assigns IP addresses to clients when they log in the IP address pool. Select Static if you have the Static DNS service. Select Disable to activate the IPv6 mode and configure IPv6 settings on the VMG. DHCP Relay Server Address IP Address IP Addressing Values Beginning IP Address Ending IP Address Auto reserve IP for the LAN interface's link-local address. Manual...
... Mode Setup IPv6 Active Select Enable to stop the DHCP server on the VMG. Lan Global Identifier Type VMG3925-B10A User's Guide 120 DHCP automatically assigns IP addresses to clients when they log in the IP address pool. Select Static if you have the Static DNS service. Select Disable to activate the IPv6 mode and configure IPv6 settings on the VMG. DHCP Relay Server Address IP Address IP Addressing Values Beginning IP Address Ending IP Address Auto reserve IP for the LAN interface's link-local address. Manual...
User Guide
Page 163
... request. Click Network Setting > NAT > Port Triggering to open " port), the VMG forwards the traffic to the LAN IP address of the entry. When the VMG's WAN port receives a response with TCP/IP (Transfer Control Protocol/Internet Protocol). This way you do not need to configure a new IP address each time you want a different LAN computer to use the service in this screen to view your VMG's trigger port settings. VMG3925-B10A User's Guide 163 A yellow...
... request. Click Network Setting > NAT > Port Triggering to open " port), the VMG forwards the traffic to the LAN IP address of the entry. When the VMG's WAN port receives a response with TCP/IP (Transfer Control Protocol/Internet Protocol). This way you do not need to configure a new IP address each time you want a different LAN computer to use the service in this screen to view your VMG's trigger port settings. VMG3925-B10A User's Guide 163 A yellow...
User Guide
Page 280
... Cipher block chaining Message authentication code Protocol (CCMP). Encryption WPA improves data encryption by the authentication server. The MIC provides a strong mathematical function in the background automatically. Appendix B Wireless LANs WPA2-PSK (WPA2-Pre-Shared Key) that only requires a single (identical) password entered into the network. AES (Advanced Encryption Standard) is used to a WLAN. The RADIUS server distributes a Pairwise Master Key (PMK) key to decrypt data on whether you have an external RADIUS server or...
... Cipher block chaining Message authentication code Protocol (CCMP). Encryption WPA improves data encryption by the authentication server. The MIC provides a strong mathematical function in the background automatically. Appendix B Wireless LANs WPA2-PSK (WPA2-Pre-Shared Key) that only requires a single (identical) password entered into the network. AES (Advanced Encryption Standard) is used to a WLAN. The RADIUS server distributes a Pairwise Master Key (PMK) key to decrypt data on whether you have an external RADIUS server or...
User Guide
Page 281
... run Windows XP to use it. The Windows XP patch is a free download that is the WPA patch for Windows XP, Funk Software's Odyssey client. Key caching allows a wireless client to Windows XP's built-in all wireless devices. "A" is 1812), and the RADIUS shared secret. "DS" is the distribution system. 1 The AP passes the wireless client's authentication request to the RADIUS server. 2 The RADIUS server then checks the user's identification against its port number (default is the RADIUS server.
... run Windows XP to use it. The Windows XP patch is a free download that is the WPA patch for Windows XP, Funk Software's Odyssey client. Key caching allows a wireless client to Windows XP's built-in all wireless devices. "A" is 1812), and the RADIUS shared secret. "DS" is the distribution system. 1 The AP passes the wireless client's authentication request to the RADIUS server. 2 The RADIUS server then checks the user's identification against its port number (default is the RADIUS server.
User Guide
Page 300
... all US model. ONLY qualified service personnel should service or disassemble this device before servicing or disassembling. • Use ONLY an appropriate power adaptor or cord for maximum output power are indoors. List of a device can expose you wall mount your device, make sure all cables from the device and the power source. • Do NOT attempt to repair the power adaptor or cord. There is a remote risk of...
... all US model. ONLY qualified service personnel should service or disassemble this device before servicing or disassembling. • Use ONLY an appropriate power adaptor or cord for maximum output power are indoors. List of a device can expose you wall mount your device, make sure all cables from the device and the power source. • Do NOT attempt to repair the power adaptor or cord. There is a remote risk of...