VSG-1200 Vantage Service Gateway User’s Guide Version 1.
VSG-1200 User’s Guide Copyright Copyright © 2006 by ZyXEL Communications Corporation. The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation.
VSG-1200 User’s Guide Federal Communications Commission (FCC) Interference Statement This device complies with Part 15 of FCC rules. Operation is subject to the following two conditions: • This device may not cause harmful interference. • This device must accept any interference received, including interference that may cause undesired operations. This equipment has been tested and found to comply with the limits for a Class B digital device pursuant to Part 15 of the FCC Rules.
VSG-1200 User’s Guide ZyXEL Limited Warranty ZyXEL warrants to the original end user (purchaser) that this product is free from any defects in materials or workmanship for a period of up to two years from the date of purchase.
VSG-1200 User’s Guide Safety Warnings 1 To reduce the risk of fire, use only No. 26 AWG or larger telephone wire. 2 Do not use this product near water, for example, in a wet basement or near a swimming pool. 3 Avoid using this product during an electrical storm. There may be a remote risk of electric shock from lightening.
VSG-1200 User’s Guide Customer Support Please have the following information ready when you contact customer support. • • • • Product model and serial number. Warranty Information. Date that you received your device. Brief description of the problem and the steps you took to solve it. METHOD SUPPORT E-MAIL TELEPHONEA WEB SITE FAX FTP SITE REGULAR MAIL LOCATION CORPORATE HEADQUARTERS (WORLDWIDE) CZECH REPUBLIC DENMARK FINLAND SALES E-MAIL support@zyxel.com.tw +886-3-578-3942 sales@zyxel.com.
VSG-1200 User’s Guide TELEPHONEA WEB SITE SALES E-MAIL FAX FTP SITE info@pl.zyxel.com +48-22-5286603 www.pl.zyxel.com ZyXEL Communications ul.Emilli Plater 53 00-113 Warszawa Poland www.zyxel.ru ZyXEL Russia Ostrovityanova 37a Str. Moscow, 117279 Russia www.zyxel.es ZyXEL Communications Alejandro Villegas 33 1º, 28043 Madrid Spain www.zyxel.se ZyXEL Communications A/S Sjöporten 4, 41764 Göteborg Sweden www.ua.zyxel.com ZyXEL Ukraine 13, Pimonenko Str.
VSG-1200 User’s Guide 8 Customer Support
VSG-1200 User’s Guide Table of Contents Copyright .................................................................................................................. 2 Federal Communications Commission (FCC) Interference Statement ............... 3 ZyXEL Limited Warranty.......................................................................................... 4 Safety Warnings ....................................................................................................... 5 Customer Support.........
VSG-1200 User’s Guide 2.2.4 Turning on the VSG ..................................................................................39 2.2.5 Methods of Restoring Factory Defaults ....................................................39 Chapter 3 The Web Configurator............................................................................................ 41 3.1 Introducing the Web Configurator ......................................................................41 3.2 Accessing the Web Configurator .........
VSG-1200 User’s Guide 5.3.1 Example 1: One-to-One ............................................................................67 5.3.2 Example 2: Many-to-One ..........................................................................68 5.3.3 Example 3: One-to-One and Many-to-One ...............................................68 5.4 Configuring NAT Pool .........................................................................................69 Chapter 6 Authentication ........................................
VSG-1200 User’s Guide Chapter 9 Dynamic Subscriber Accounts ............................................................................. 95 9.1 About Dynamic Subscriber Accounts .................................................................95 9.2 Dynamic Account General Settings ...................................................................95 9.3 Creating Dynamic Accounts ...............................................................................97 9.3.
VSG-1200 User’s Guide Chapter 14 Account Printout .................................................................................................. 129 14.1 About the Account Printout ............................................................................129 14.1.1 Customizing the Account Printout .........................................................129 Chapter 15 User Agreement Page.......................................................................................... 137 15.
VSG-1200 User’s Guide Chapter 21 Syslog and Session Trace ................................................................................... 163 21.1 Syslog ............................................................................................................163 21.1.1 Syslog Server Setup .............................................................................163 21.1.2 Configure Log Settings .........................................................................164 21.2 Session Trace .......
VSG-1200 User’s Guide Chapter 26 The SMT ................................................................................................................ 199 26.1 Introduction to the SMT ..................................................................................199 26.1.1 Establishing a Console Port Connection ..............................................199 26.2 SMT Login Screen .........................................................................................200 26.
VSG-1200 User’s Guide 29.1.3 The WAN Port LEDs .............................................................................228 29.2 The Console Port ...........................................................................................228 29.3 Web Configurator ...........................................................................................229 29.4 Internet Access ..............................................................................................229 29.5 The Statement Printer ....
VSG-1200 User’s Guide List of Figures Figure 1 Application: Internet Access for LAN Networks .............................................. 33 Figure 2 Application: Internet Access in Public Areas .................................................. 33 Figure 3 Application: Hotel ............................................................................................ 34 Figure 4 Rack Mount: Attaching Brackets .....................................................................
VSG-1200 User’s Guide 18 Figure 39 System Setting: Create Static Subscriber Account ......................................... 87 Figure 40 Create Static Subscriber Account: Generate Automatically ............................ 88 Figure 41 Create Static Subscriber Account: Manual ..................................................... 89 Figure 42 Static Subscriber Account: Backup and Restore ............................................
VSG-1200 User’s Guide Figure 82 Static Account Printout: Statement Printer Example ....................................... 133 Figure 83 Static Account with PMS Billing Printout: Statement Printer Example ............ 134 Figure 84 Dynamic Account Printout Example ............................................................... 134 Figure 85 Dynamic Account Printout: Statement Printer Example .................................. 135 Figure 86 Customization: User Agreement Page ........................
VSG-1200 User’s Guide Figure 125 System Setting: Authentication: Activate SSL Login ...................................... 192 Figure 126 Installing the SSL Security Certificate: First Security Alert ............................. 193 Figure 127 Installing the SSL Security Certificate: Second Security Alert ........................ 193 Figure 128 Installing the SSL Security Certificate: View Certificate ..................................
VSG-1200 User’s Guide Figure 168 IP Address Conflicts: Scenario 4 ................................................................... 235 Figure 169 Subscriber Login Screen: Framed Example .................................................. 237 Figure 170 Subscriber Login: Information Window Example ........................................... 237 Figure 171 SP-200: Daily Account ................................................................................... 244 Figure 172 SP-200: Monthly Account .....
VSG-1200 User’s Guide 22 List of Figures
VSG-1200 User’s Guide List of Tables Table 1 Front Panel LEDs ............................................................................................ 38 Table 2 Web Configurator Screen Overview ................................................................ 44 Table 3 System Setting: System ................................................................................... 46 Table 4 System Tools: System Account .......................................................................
VSG-1200 User’s Guide 24 Table 39 Customization: Information Window ................................................................ 126 Table 40 Customization: Account Printout ...................................................................... 131 Table 41 Customization: User Agreement Page ............................................................ 138 Table 42 Bandwidth Management: Equal Share ............................................................ 143 Table 43 Portal Page ..........
VSG-1200 User’s Guide Table 82 Troubleshooting the Statement Printer ............................................................ 230 Table 83 Product Specifications: General ....................................................................... 231 Table 84 Product Specifications: Performance and Management .................................. 232 Table 85 Product Specifications: Physical and Environmental ....................................... 232 Table 86 VSG-1200 Supported VSAs ................
VSG-1200 User’s Guide 26 List of Tables
VSG-1200 User’s Guide Preface Congratulations on your purchase of the VSG-1200 Vantage Service Gateway. Your VSG1200 is easy to install and configure. About This User's Guide This manual is designed to guide you through the configuration of your VSG-1200 for its various applications. The web configurator parts of this guide contain background information on features configurable by web configurator.
VSG-1200 User’s Guide Graphics Icons Key 28 Vantage Service Gateway Computer Notebook computer Server DSLAM Firewall Telephone Switch Router Statement Printer (SP200) Access Point Preface
VSG-1200 User’s Guide CHAPTER 1 Getting to Know Your VSG This chapter introduces the features and applications of the VSG. 1.1 Introducing the VSG The VSG (Vantage Service Gateway) is a rack-mountable Internet Service Gateway that provides multiple subscribers easy Internet connectivity. The VSG is ideal for office, hotspot and hotel environments. Hotspots are public areas, such as airports, hotels, coffee shops, where end users (or subscribers) can access the Internet at any time. 1.
VSG-1200 User’s Guide SSL Secure Login With Secure Socket Layer (SSL) security activated upon login, data exchanged between the VSG and client computers is encrypted and protected. PPPoE Support (RFC2516) PPPoE (Point-to-Point Protocol over Ethernet) emulates a dial-up connection. It allows your ISP to use their existing network configuration with newer broadband technologies such as ADSL.
VSG-1200 User’s Guide DHCP Support DHCP (Dynamic Host Configuration Protocol) allows the individual computers (DHCP clients) to obtain TCP/IP configuration at start-up from a centralized DHCP server. The VSG has built-in DHCP server capability. It can assign IP addresses, an IP default gateway and DNS servers to DHCP clients. The VSG can also act as a surrogate DHCP server (DHCP Relay) where it relays IP address assignment from another DHCP server to the DHCP clients.
VSG-1200 User’s Guide NAT (Network Address Translation) NAT (RFC 1631) is the translation of the IP address of a host in a packet, for example, the source address of an outgoing packet, used within one network to a different IP address known within another network. The VSG automatically performs NAT on the LAN. You can also set the VSG to perform NAT on the WAN for VPN (IPSec and PPTP) connections.
VSG-1200 User’s Guide 1.3 Applications The following sections describe network application examples in which the VSG is used. 1.3.1 Internet Access for LAN Networks With a broadband service account set up, the VSG allows the attached computers to enjoy high speed Internet access. Figure 1 Application: Internet Access for LAN Networks 1.3.2 Internet Access in Public Areas In public areas, such as a hotel, the VSG provides high speed Internet access to subscribers.
VSG-1200 User’s Guide 1.3.3 Hotel Application with PMS The following figure depicts an example where the VSG is used in a hotel to provide Internet service as one of their in-room services. Billing is done through an existing PMS in the hotel.
VSG-1200 User’s Guide CHAPTER 2 Hardware Installation and Connection This chapter shows you how to install the VSG and make hardware connections. 2.1 Installation Options The following sections describe the different installation options. Note: Do NOT block the ventilation holes and leave adequate space on the rear and sides of the VSG during hardware installation or when stacking. 2.1.1 Desktop Installation 1 Make sure the VSG is clean and dry.
VSG-1200 User’s Guide Figure 4 Rack Mount: Attaching Brackets 2 After attaching both mounting brackets, position the VSG in the rack by lining up the holes in the brackets with the appropriate holes on the rack. Secure the VSG to the rack with rack-mounting screws. Figure 5 Rack Mount: Securing to the Rack 2.2 Hardware Connections The following sections describe the hardware connections of the VSG. 2.2.
VSG-1200 User’s Guide Figure 6 Front Panel Reset Button Console Port PMS Port LED Reset ResetPort WAN Butto LAN ResetPorts Button 2.2.1.1 Four LAN 10/100M Ports Ethernet 10Base-T/100Base-T networks use Ethernet cables with RJ-45 connectors. The LAN ports are auto-crossover, so you may use a crossover Ethernet cable or a straight-through Ethernet cable to connect your VSG to a computer or external switch.
VSG-1200 User’s Guide 2.2.1.5 The Reset Button Use a pointed object to press this button in once to reset the VSG back to the factory defaults. Note: All your custom configuration including the system usernames and passwords will be erased. This will NOT delete the subscriber database or the port-location mappings. 2.2.2 Front Panel LEDs The following table describes the LEDs on the front panel. When turned on, all LEDs are green unless otherwise specified.
VSG-1200 User’s Guide 2.2.4 Turning on the VSG Connect the female end of the supplied power cord to the power socket on the back of the VSG and the male end to an appropriate power source. When the power source is turned on, the PWR LED on the front panel turns on. 2.2.5 Methods of Restoring Factory Defaults You can erase the current configuration and restore factory defaults in two ways: • Use the RESET button on the front panel of the VSG (press this button once).
VSG-1200 User’s Guide 40 Chapter 2 Hardware Installation and Connection
VSG-1200 User’s Guide CHAPTER 3 The Web Configurator This chapter introduces how to access the web configurator and perform general system configuration. 3.1 Introducing the Web Configurator The web configurator is best viewed with Internet Explorer (version 4.0 or above) or Netscape (version 6. or later). Note: JavaScript support must be enabled. 3.2 Accessing the Web Configurator Follow the steps below to access the web configurator. Note: The VSG allows only one web configurator session at a time.
VSG-1200 User’s Guide Note: The user name and password are case sensitive. Figure 9 Web Configurator: Login Firmware version 5 You should see the main screen as shown. Figure 10 Web Configurator: Main Menu Note: Please note that if there is no activity for longer than five minutes after you log in, the VSG will automatically log you out. If this happens, simply log back in again. You can change the timeout period in the web configurator (refer to Section 4.8 “Server Configuration” on page 61).
VSG-1200 User’s Guide 3.3 The Navigation Panels The VSG web configurator provides two levels of navigation: the Configuration Menu panel and a screen-specific link panel. 3.3.1 The Configuration Menu Panel The Configuration Menu panel on the left of all web pages provides a consistent way to access the configuration screens. Click each heading to expand the menu. Figure 11 Navigation Panel 3.3.
VSG-1200 User’s Guide 3.4 Screen Overview The following table lists the various web configurator screens. Table 2 Web Configurator Screen Overview SYSTEM SETTING ADVANCED SETTINGS SYSTEM STATUS SYSTEM TOOLS 3.5 General System Setting The System screen displays first when you access the web configurator. The Domain Name entry is what is propagated to the DHCP clients on the LAN. If you leave this blank, the domain name obtained by a DHCP server is used.
VSG-1200 User’s Guide Figure 13 System Setting: System Chapter 3 The Web Configurator 45
VSG-1200 User’s Guide The following table describes the labels in this screen. Table 3 System Setting: System LABEL DESCRIPTION System/ Host Name Enter a descriptive name (up to 32 characters) for identification purposes. Domain Name Enter the domain name (if you know it) here. If you leave this field blank, the VSG may obtain a domain name from a DHCP server. The domain name entered by you is given priority over the DHCP server assigned domain name.
VSG-1200 User’s Guide Table 3 System Setting: System (continued) LABEL DESCRIPTION Layer 2 Isolation Security If you activate NAT, select Enable in this field to prevent communication between subscribers. This is the default selection. Select Disable to deactivate layer 2 security and allow communication between subscribers. Console Type Use this field to set the function of the Console port on the front panel of the VSG.
VSG-1200 User’s Guide • The account manager account is used for subscriber account management only. No system configuration is allowed. This account is useful for front desk personnel (such as in a hotel) for setting up subscriber accounts without tampering with the system configuration. The default user name and password are “account”. • With the supervisor account, you can view the system status and change the supervisor account password.
VSG-1200 User’s Guide The following table describes the labels in this screen. Table 4 System Tools: System Account LABEL DESCRIPTION Administrator Account This account permits full access to all system configurations. Username Enter the user name for the administrative account. The default is admin. Password Enter a new administrative account password. Confirm Enter the new administrator password again for confirmation. Accounting Manager This account allows you to set up subscriber accounts.
VSG-1200 User’s Guide Figure 15 System Tools: Reset 2 Scroll down to the Reset the system back to factory defaults section at the bottom of the screen. 3 If you want to keep all subscriber account information, select Keep subscriber profile and/or Keep port-location mapping profile. 4 Click Apply. 5 Wait for the VSG to finish restarting before accessing the VSG again. 3.
VSG-1200 User’s Guide 3.9 Logging Out of the Web Configurator In the Main Menu screen, click System Tools, Logout and click Apply to exit from the web configurator.
VSG-1200 User’s Guide 52 Chapter 3 The Web Configurator
VSG-1200 User’s Guide CHAPTER 4 LAN, WAN and Server Setup This chapter shows you how to configure LAN and WAN ports and server settings. 4.1 Factory Ethernet Defaults The Ethernet parameters of the VSG are preset to the following values: 1 WAN IP address of 192.168.1.1 with subnet mask of 255.255.255.0. 2 LAN IP address of 10.59.1.1. 3 DHCP server enabled on the LAN with a 252 client IP address pool starting from 10.59.1.2 These parameters should work for the majority of installations.
VSG-1200 User’s Guide 4.4.1 IP Address and Subnet Mask Like houses on a street that share a common street name, the computers on a LAN share one common network number. Where you obtain your network number depends on your particular situation. If the ISP or your network administrator assigns you a block of registered IP addresses, follow their instructions in selecting the IP addresses and the subnet mask.
VSG-1200 User’s Guide 4.5 DNS Server Address DNS (Domain Name System) is for mapping a domain name to its corresponding IP address and vice versa, for example, the IP address of www.zyxel.com is 204.217.0.2. The DNS server is extremely important because without it, you must know the IP address of a machine before you can access it. The DNS server addresses that you enter in the DHCP setup are passed to the client machines along with the assigned IP address and subnet mask.
VSG-1200 User’s Guide Note: You must restart the VSG if you change the IP address. If you set the VSG as a DHCP server on the LAN, the VSG will automatically change the LAN DHCP settings based on the new LAN IP address. 4.7 WAN Configuration To configure the WAN settings on the VSG, click System Setting and WAN/LAN. The WAN/LAN screen varies depending on the settings in the WAN Port Mode field. 4.7.
VSG-1200 User’s Guide 4.7.2 MTU A maximum transmission unit (MTU) is the largest size packet or frame, specified in octets (eight-bit bytes) that can be sent in a packet- or frame-based network. The Transmission Control Protocol (TCP) uses the MTU to determine the maximum size of each packet in any transmission. Too large an MTU size may mean retransmissions if the packet encounters a router that can't handle that large a packet.
VSG-1200 User’s Guide Table 7 System Setting: WAN/LAN: WAN IP (continued) FIELD DESCRIPTION Use fixed IP address Select this option to set the VSG to use a static (or fixed) IP address. This is the default setting. IP Address Enter the static IP address in dotted decimal notation. The default WAN IP address is 192.168.1.1. Subnet Mask Enter the subnet mask in dotted decimal notation. Default IP Gateway Enter the IP address of the default gateway device.
VSG-1200 User’s Guide Figure 21 System Setting: WAN/LAN: PPPoE The following table describes the related fields in this screen. Table 8 System Setting: WAN/LAN: PPPoE FIELD DESCRIPTION WAN Port Mode PPPoE Select this option to activate PPPoE support. Username Enter the user name exactly as your ISP assigned. If assigned a name in the form user@domain where domain identifies a service name, then enter both components exactly as given. Password Enter the password associated with the user name above.
VSG-1200 User’s Guide 4.7.5 PPTP Point-to-Point Tunneling Protocol (PPTP) is a network protocol that enables transfers of data from a remote client to a private server, creating a Virtual Private Network (VPN) using TCP/ IP-based networks. PPTP supports on-demand, multi-protocol, and virtual private networking over public networks, such as the Internet.
VSG-1200 User’s Guide The following table describes the related fields in this screen. Table 9 System Setting: WAN/LAN: PPTP FIELD DESCRIPTION WAN Port Mode PPTP Select this option to activate PPTP support. Refer to Section 4.7.5 “PPTP” on page 60 for more information. PPTP Local IP Address Enter the IP address assigned to you. PPTP Local Subnet Mask Enter the subnet mask assigned to you. PPTP Local Default Gateway Enter the IP address of the gateway device.
VSG-1200 User’s Guide Figure 23 System Setting: Server The following table describes the labels in this screen. Table 10 System Setting: Server LABEL DESCRIPTION Web Server Server Port Specify the port number of the embedded web server on the VSG for accessing the web configurator. The default port number is 80. Enter a number between 8010 and 8060 to access the web configurator behind a NAT-enabled network.
VSG-1200 User’s Guide Table 10 System Setting: Server (continued) LABEL DESCRIPTION DHCP Server Select the DHCP mode on the LAN. Disable Select this option to disable DHCP server on the LAN. DHCP Relay Select this option to set the VSG to forward client DHCP requests to a DHCP server on the LAN network. Then configure the DHCP Server IP Address field. DHCP Server IP Address If you select DHCP Relay, enter the IP address of the real DHCP server.
VSG-1200 User’s Guide 64 Chapter 4 LAN, WAN and Server Setup
VSG-1200 User’s Guide CHAPTER 5 NAT Pool This chapter shows how to configure Network Address Translation (NAT) on the WAN for VPN packets. 5.1 NAT Introduction NAT (Network Address Translation - NAT, RFC 1631) is the translation of the IP address of a host in a packet, for example, the source address of an outgoing packet, used within one network to a different IP address known within another network. 5.1.
VSG-1200 User’s Guide 5.1.2 What NAT Does In the simplest form, NAT changes the source IP address in a packet received from a subscriber (the inside local address) to another (the inside global address) before forwarding the packet to the WAN side. When the response comes back, NAT translates the destination address (the inside global address) back to the inside local address before forwarding it to the original inside host.
VSG-1200 User’s Guide In order to allow subscribers to establish multiple VPN connections to a remote VPN device with single-connection-per-source limitation, set the VSG to perform NAT on the WAN. You need to configure the NAT address pool for use with VPN connections on the WAN port. The VSG automatically maps one/more private IP addresses to one/more public IP addresses for VPN packets. The following table describes the NAT mapping types on the WAN for VPN packets.
VSG-1200 User’s Guide 5.3.2 Example 2: Many-to-One The figure below shows an example where the two subscribers S1 and S2 try to establish a secure VPN connection to VPN servers V1 and V2 respectively at the same time. In this case, the VSG performs Many-to-One IP address translation on the WAN since the destination address is different. Figure 25 NAT Example: Many-to-One The following table shows the address mapping.
VSG-1200 User’s Guide Table 15 NAT Example: One-to-One and Many-to-One SUBSCRIBER ORIGINAL SOURCE IP TRANSLATED SOURCE IP S1 10.59.1.2 211.21.21.2 S2 10.59.1.3 211.21.21.2 S3 10.59.1.4 211.21.21.3 5.4 Configuring NAT Pool Note: You only need to set the NAT address pool if the remote VPN server(s) allows only one connection per source IP address. Note: You need to acquire additional public IP address(es) from your ISP to create NAT pool(s).
VSG-1200 User’s Guide Table 16 System Setting: NAT Pool LABEL DESCRIPTION Disable Select this option to deactivate this feature. Subscribers are not be able to establish multiple connections simultaneously to the same VPN server (that has the singleconnection-per-source limitation). Enable Select this option to perform address translation on the WAN to allow subscribers to establish simultaneous connections to the same VPN server (that has the singleconnection-per-source limitation).
VSG-1200 User’s Guide CHAPTER 6 Authentication This chapter shows you how to set up subscriber authentication on the VSG. 6.1 Authentication Overview You can set the VSG to authenticate subscribers in a number of ways: • • • • User agreement CAS (Central Authentication Service) Built-in authentication Remote RADIUS server By default, subscriber authentication is disabled. This allows all subscribers to access the Internet without entering account username and password. 6.1.
VSG-1200 User’s Guide 3 The guest enters the provided access information. 4 Once authentication is successful, CAS informs VSG to allow Internet access to the guest. 6.1.3 Accounting Methods The VSG provides two accounting methods: Accumulation and Time to Finish. • The Accumulation accounting method allows multiple re-logins until the allocated time period or until the subscriber account is expired. The VSG accounts for the time the subscriber logs in for Internet access.
VSG-1200 User’s Guide 6.1.5.2 Vendor Specific Attribute With RADIUS server authentication, you can define vendor specific attributes (VSAs) in addition to the set of standard RADIUS attributes defined in RFC 2865 and RFC 2866. A VSA is an attribute-value pair that is sent between a RADIUS server and the VSG.
VSG-1200 User’s Guide Figure 29 System Setting: Authentication 74 Chapter 6 Authentication
VSG-1200 User’s Guide The following table describes the labels in this screen. Table 17 System Setting: Authentication LABEL DESCRIPTION No Authentication Select this option to disable subscriber authentication. Subscribers can access the Internet without entering user names and passwords. This is the default setting. User Agreement Select User Agreement to direct a subscriber to an Internet service usage agreement page before accessing the Internet.
VSG-1200 User’s Guide Table 17 System Setting: Authentication (continued) LABEL DESCRIPTION Authentication Port Specify the authentication port of the RADIUS server. The common port numbers are 1645 and 1812. Accounting Port Specify the accounting port of the RADIUS server. The common port numbers are 1646 and 1813. Secret Key Specify a password (up to 31 alphanumeric characters) as the key to be shared between the RADIUS server and the VSG. The key is not sent over the network.
VSG-1200 User’s Guide When you select Built-in Authentication in the Authentication screen, you must select a pre-configured scenario option by clicking the Select option link to display a screen as shown next. Select a scenario option in the Items Check field and click Apply to save the settings. Then proceed to configure the billing and accounting settings. Figure 30 System: Authentication: Scenario Guide The following table describes each scenario.
VSG-1200 User’s Guide Table 18 System: Authentication: Scenario Guide OPTION DESCRIPTION SAMPLE SUBSCRIBER LOGIN SCREEN Scenario A Select this option to use PMS Figure 31 Subscriber Login: Scenario A billing with port-location mapping. Once you configure the portlocation mappings, subscribers are able to access the Internet without entering usernames and passwords. Subscribers can purchase additional time blocks with different billing plans. You can still create static or dynamic accounts.
VSG-1200 User’s Guide CHAPTER 7 Billing Profiles and PMS Configuration This chapter shows you how to set up subscriber billing and PMS (Property Management System) configuration. 7.1 About Billing Profiles A billing profile contains information such as time unit, unit cost and/or account expiration time. You must associate a subscriber account with a billing profile.
VSG-1200 User’s Guide Figure 34 System Setting: Billing: Billing Profile The following table describes the labels in this screen. Table 19 System Setting: Billing: Billing Profile LABEL DESCRIPTION Currency Specify the type of currency and/or dollar sign for billing. Number of decimal Specify the number of decimal places for the currency. The default is 2. places No This field displays the index number of a billing profile. Active Select this check box to enable the billing profile.
VSG-1200 User’s Guide Figure 35 System Setting: Billing: Billing Profile Setting The following table descries the labels in this screen. Table 20 System Setting: Billing: Billing Profile Setting LABEL DESCRIPTION No This read-only field displays the index number of the billing profile. Name Enter a descriptive name for the billing profile for identification purposes.
VSG-1200 User’s Guide Table 20 System Setting: Billing: Billing Profile Setting (continued) LABEL DESCRIPTION Duration Select a time period (minute, hour, day, week, month or Unlimited) and enter the time unit in the field provided (not available for Unlimited). Charge Specify the unit cost in this field. Check Time Select Period Time Finish for time-to-finish billing method. Refer to Section 6.1.5 “RADIUS” on page 72 for more information.
VSG-1200 User’s Guide Select Based on Room when location is important. If a subscriber disconnects from one location and reconnects in another location, the VSG prompts for the user name and password again. Select Based on Subscriber to allow a subscriber to freely move between different locations without prompting for user name and password. 7.2.2 PMS Configuration Click System Setting, Billing and click the PMS Configuration link to display the screen as shown next.
VSG-1200 User’s Guide Table 21 System Setting: Billing: PMS Configuration LABEL DESCRIPTION Charge Mode (only for Port-Location Mapping enabled) When you set up Port-Location Mapping, your VSG offers two billing modes: Based on Room and Based on Subscriber. Select Based on Room when location is important. If a subscriber disconnects from one location and reconnects in another location, the VSG prompts for the user name and password again.
VSG-1200 User’s Guide CHAPTER 8 Static Subscriber Accounts This chapter shows you how to set up and manage static subscriber accounts. 8.1 About Static Subscriber Accounts Static accounts are useful in locations such as hotels where you can match an account user name to a fixed location for easy management. Once a static subscriber account is created, it stays permanently in the VSG unless deleted manually. You can generate static accounts automatically or manually.
VSG-1200 User’s Guide Table 22 Static Account Settings: Global Settings LABEL DESCRIPTION Concurrent Access Select Allow concurrent access with one account to allow more than one users to access the Internet using the same account at the same time. Then specify the number of concurrent users from the Max. concurrent access dropdown list box. The default number of concurrent access is 2 users per account. Customize Printout Click Customize printout text to set the account printout page.
VSG-1200 User’s Guide Figure 39 System Setting: Create Static Subscriber Account There are two ways to create static subscriber accounts as described in the following sections. 8.3.1 Generating Static Accounts Automatically To generate a list of static subscriber accounts automatically, set the fields in Generate a batch of static accounts in the Create Static Subscriber Account screen.
VSG-1200 User’s Guide Figure 40 Create Static Subscriber Account: Generate Automatically The following table describes the related labels in this screen. Table 23 Create Static Subscriber Account: Generate Automatically LABEL DESCRIPTION Generate a batch of static accounts Prefix Specify the starting characters affixed to the beginning of all account user names. Postfix Specify the characters to append o the end of all account user names. From Enter the first number of the range of static accounts.
VSG-1200 User’s Guide Figure 41 Create Static Subscriber Account: Manual The following table describes the related labels in this screen. Table 24 Create Static Subscriber Account: Manual LABEL DESCRIPTION No This read-only field displays the index number of an entry. Username Enter the user name for a static subscriber account. Password Enter the password associated with the user name above. You may also set the VSG to generate a password automatically (refer to Section 8.
VSG-1200 User’s Guide 1 In the Create Static Subscriber Account screen and scroll down to the Static Accounts backup and restore section. 2 Click Backup. Figure 42 Static Subscriber Account: Backup and Restore 3 A File Download window displays. Click Save. Figure 43 Static Subscriber Account: Backup and Restore: File Download 4 A Save As window displays. Specify the filename and/or location and click Save to save the backup file.
VSG-1200 User’s Guide Figure 44 Static Subscriber Account: Backup and Restore: Save As You can view the backed up file using any text-editing program. 8.4.2 Restoring a Static Account List You may restore the static account list if you accidentally reset the VSG back to the factory defaults and erased the subscriber account information. Follow the steps below to restore a previously backed up subscriber account list.
VSG-1200 User’s Guide 8.5 Editing Subscriber Accounts To edit a subscriber account, click System Setting, Accounting and the Static Account Operator link to display the screen as shown next. Figure 46 Static Account Operator The following table describes the labels in this screen. Table 25 Static Account Operator 92 LABEL DESCRIPTION Refresh Click this button to update the screen. Print List Click this button to print a list of all subscriber accounts.
VSG-1200 User’s Guide 8.5.1 Static Account Information Print Preview To display a printout preview of static account information, click the Print icon to display a printout preview window showing the account information. An example is shown in the following figure. Refer to Section 14.1.1 “Customizing the Account Printout” on page 129 to configure the printout page.
VSG-1200 User’s Guide 8.6 Viewing the Static Account List To display the static account list, click Static Account List. Figure 48 Static Account List The following table describes the labels in this screen. Table 26 Static Account List LABEL DESCRIPTION Refresh Click Refresh to update this screen. Backup Click Backup to backup the account information to a computer.
VSG-1200 User’s Guide CHAPTER 9 Dynamic Subscriber Accounts This chapter shows you how to set up and manage dynamic subscriber accounts. 9.1 About Dynamic Subscriber Accounts Unlike a static account, a dynamic account is not permanent. Once the time allocated to a dynamic account is used up or a dynamic account remains un-used after the expiration time, the account is deleted from the account list automatically.
VSG-1200 User’s Guide For web-based dynamic account generation, you can specify up to four billing profiles (one for each of the four buttons you click to generate the accounts automatically on the web-based screen). Click System Setting, Accounting, Dynamic Account, and then Dynamic Account Setting link to display the screen as shown next. Figure 50 Accounting: Dynamic Account Setting The following table describes the labels in this screen.
VSG-1200 User’s Guide Table 27 Accounting: Dynamic Account Setting (continued) LABEL DESCRIPTION Billing Profile Select a billing profile to associate to the web-based and SP buttons from the dropdown list box. Only the activated billing profiles are displayed. Refer to Section 7.1.1 “Creating a Billing Profile” on page 79 for more information on creating billing profiles. General Settings Unused Accounts Specify the number of hours to wait before the VSG deletes an inactive dynamic account.
VSG-1200 User’s Guide Figure 52 Dynamic Account Operator Panel Click a button to generate a dynamic account based on the settings you configure for the button in the Dynamic Account Setting screen. A window displays showing a printout preview of the dynamic account generated. The following figure shows an example. Refer to Chapter 14, “Account Printout,” on page 129 on account printout to configure the printout page. Figure 53 Dynamic Account Information Printout Example 9.3.
VSG-1200 User’s Guide 1 Connect the statement printer to the port labeled CONSOLE. Refer to Section 2.2 “Hardware Connections” on page 36 for more information. 2 Configure the Console Type field in the System screen. Refer to Section 3.5 “General System Setting” on page 44. 3 Turn on the statement printer and make sure there is printing paper. 4 Press the button on the statement printer. A dynamic account is generated and the account information should be printed.
VSG-1200 User’s Guide Table 28 Dynamic Account List (continued) LABEL DESCRIPTION Billing Profile This field displays the index number and the name of a billing profile the account is using. Time Created This field displays the time the account is created. First Login This field displays the time a subscriber logs in using the account. Expiration When an account is currently in use, this field displays the time before which a subscriber can still use the account to access the Internet.
VSG-1200 User’s Guide Figure 56 Dynamic Account List Backup: Save As You can view the backed up file using any text-editing program.
VSG-1200 User’s Guide 102 Chapter 9 Dynamic Subscriber Accounts
VSG-1200 User’s Guide CHAPTER 10 Port-Location Mapping This chapter describes the port-location mapping feature. 10.1 About Port-Location Mapping With port-location mapping, you can map a port on the VSG or a VLAN-enabled switch to a room number in a building (such as a hotel). This is done using IEEE802.1q VLAN tags. The port-location mapping feature is used together with the PMS billing function so charges can be done automatically. 10.
VSG-1200 User’s Guide Figure 57 System Setting: Port-Location Mapping The following table describes the labels in this screen. Table 29 System Setting: Port-Location Mapping LABEL DESCRIPTION Single Create Set the related fields to create a port-location mapping one at a time. Location Identifier (ID) Enter an identity (up to 20 characters) for a mapping. This field must match the VLAN ID of a port. Port Identifier (ID) Enter the an ID number (between 1 and 999999) of a port for this mapping.
VSG-1200 User’s Guide Table 29 System Setting: Port-Location Mapping (continued) LABEL DESCRIPTION Status Select No Charge if you don’t want to bill a subscriber accessing the Internet at this port location. Select Charge for use to bill a subscriber accessing the Internet at this port location. Select Blocked to stop any subscriber from accessing the Internet at this port location. Add to List Click Add to List to insert a new mapping rule.
VSG-1200 User’s Guide Table 29 System Setting: Port-Location Mapping (continued) 106 LABEL DESCRIPTION Next Click Next to go to the next page. End Click End to go to the last page.
VSG-1200 User’s Guide C H A P T E R 11 Credit Card Billing and Customization This chapter shows you how to configure secure online credit card service on the VSG and customize the subscriber credit card information screen. 11.1 Credit Card Billing Overview Your VSG is integrated with the Authroize.net and SecurePay online secure credit card billing service providers, allowing you to process credit card transactions via the Internet. Note: You must register with the Authorize.Net credit card service (www.
VSG-1200 User’s Guide 4 Configure the subscriber credit card information screen (see Chapter 12, “Subscriber Login Screen,” on page 117 for more information). 11.2 Setting up Credit Card Billing Service After you have obtained an Authorize.net or SecurePay account, set up the online credit card billing information in the Credit Card screen. Click Advanced Setting, Credit Card to displays the screen as shown below. Enter your account information in this screen.
VSG-1200 User’s Guide Table 30 Advanced Setting: Credit Card (continued) LABEL DESCRIPTION Merchant Password Select Need if a password is required for the Authroize.net account. Then enter the password exactly as you received it from Authorize.Net in the Password field. Merchant Transaction Key Enter the transaction key exactly as you received it from Authorize.Net. The transaction key is similar to a password. The Authorize.Net gateway uses the transaction key to authenticate transactions.
VSG-1200 User’s Guide In the Credit Card Customization screen, enter the message in the Credit Card Message field and click Apply to save the changes. Figure 59 Credit Card Customization: Standard Login Screen Message Click Preview of Standard Login Page to display a preview screen. Figure 60 Credit Card Customization: Standard Login Screen Message: Preview 11.3.
VSG-1200 User’s Guide Figure 61 Credit Card Customization: Service Selection Page The following table describes the labels in this screen.
VSG-1200 User’s Guide Table 31 Credit Card Customization: Service Selection Page LABEL DESCRIPTION Service Selection Page Customize the message for the service selection page. Specify the service selection messages in the fields provided. Service Selection Enter a message to instruct the subscribers to select a billing profile. Messages Purchase Unit Enter a message to instruct the subscribers to select the number of time units to Message purchase.
VSG-1200 User’s Guide Table 31 Credit Card Customization: Service Selection Page (continued) LABEL DESCRIPTION Phone Select this check box to display this field and specify the label name of a field in whish subscribers enter the phone numbers. Fax Select this check box to display this field and specify the label name of the field in which subscribers enter the fax numbers.
VSG-1200 User’s Guide Figure 63 Credit Card Customization: Successful Page The following table describes the labels in this screen. Table 32 Credit Card Customization: Successful Page 114 LABEL DESCRIPTION Successful Message Enter a message to notify the subscribers that the credit card validation is successful. Notification Message 1 .. 2 Enter additional message(s). For example, you may enter a refund policy. Account Information Enter the caption for the account information.
VSG-1200 User’s Guide The following figure shows an example. Figure 64 Credit Card Customization: Successful Page: Preview 11.3.4 Fail Page You can customize the notification screen to display on the subscriber’s computer when the credit card is not validated or the transaction is not successful. Scroll down the Credit Card Customization screen and configure the Fail Page fields and click Apply to save the changes.
VSG-1200 User’s Guide The following table describes the labels in this screen. Table 33 Credit Card Customization: Fail Page LABEL DESCRIPTION Notification Message 1 .. 3 Enter additional message(s). For example, why the transaction failed. Try Again Button Enter the label name for the button subscribers click to display the screen in which the subscribers can enter the credit card information again. Close Button Enter the label name for the button subscribers click to close this screen.
VSG-1200 User’s Guide CHAPTER 12 Subscriber Login Screen This chapter shows you how to customize the subscriber login screen when subscriber control is activated. 12.1 About the Subscriber Login Screen When subscriber authentication is activated in the Authentication Configuration screen, the subscriber login screen is the first screen that all subscribers see when trying to access the Internet.
VSG-1200 User’s Guide Figure 67 Customization: Login 12.2.1 Standard Subscriber Login Screen The standard subscriber login screen is the VSG’s pre-configured, default simple login screen. You can modify the screen color and title and add copyright information and a footnote.
VSG-1200 User’s Guide In the Login Screen Configuration screen, select Standard. Figure 68 Customization: Login: Standard The following table describes the related labels in this screen. Table 34 Customization: Login: Standard LABEL DESCRIPTION Standard Select this option to use the standard subscriber login screen. Title Enter the login page title (up to 80 characters) in the field provided.
VSG-1200 User’s Guide Figure 69 Subscriber Login Screen Example: Standard Note: For credit card settings, refer to Chapter 11, “Credit Card Billing and Customization,” on page 107. 12.2.2 Redirect Subscriber Login Screen You can set the VSG to redirect the subscribers a to another login screen. In the Login Screen Configuration screen, select Redirect. Figure 70 Customization: Login Screen: Redirect The following table describes the related fields.
VSG-1200 User’s Guide 12.2.3 Advanced Subscriber Login Screen Use the Advanced login screen option to customize a login screen where you can create a welcome slogan and add advertising information. Figure 71 Customization: Login Screen: Advanced The following table describes the related fields. Table 36 Customization: Login Screen: Advanced FIELD DESCRIPTION Advanced Select this option to set the VSG to display the advanced subscriber login screen.
VSG-1200 User’s Guide Table 36 Customization: Login Screen: Advanced (continued) FIELD DESCRIPTION Information Enter information such address and telephone or fax numbers in the text box provided. Up to 80 characters allowed. Comments Enter any comments (up to 80 characters long) in the text box provided. The following figure shows an example. Figure 72 Subscriber Login Screen Example: Advanced 12.2.
VSG-1200 User’s Guide The following table describes the related fields. Table 37 Customization: Login Screen: Frame FIELD DESCRIPTION Frame Select this option to configure and set the VSG to display the subscriber login screen in two frames. Top Frame Enter a web site address in the URL field, for example, http://www.zyxel.com. Bottom Frame The bottom frame of the subscriber login screen displays the default login prompt. You cannot configure this part of the screen.
VSG-1200 User’s Guide Figure 75 Customization: Service Selection Customization The following table describes the related labels. Table 38 Customization: Service Selection Customization LABEL DESCRIPTION Service Selection Customization Service Selection Enter a message to instruct the subscribers to select a billing profile. Messages Purchase Unit Enter a message to instruct the subscribers to select the number of time units to Message purchase.
VSG-1200 User’s Guide CHAPTER 13 Subscriber Information Window This chapter shows you how to customize the subscriber information window. 13.1 About the Information Window You can set the VSG to display an information window after a subscriber has successfully logged in. This information window shows the amount of time a subscriber has used or the time the subscriber still has to access the Internet.
VSG-1200 User’s Guide Figure 77 Customization: Information Window The following table describes the labels in this screen that you set to customize the information window. Table 39 Customization: Information Window 126 LABEL DESCRIPTION Window Name Enter a descriptive name (up to 30 characters) as the title of the window. Main message Enter a short message (up to 30 characters). Message Description Enter a short description about the information window.
VSG-1200 User’s Guide The following figure shows an information window example.
VSG-1200 User’s Guide 128 Chapter 13 Subscriber Information Window
VSG-1200 User’s Guide CHAPTER 14 Account Printout This chapter describes how you can customize and display a preview of the information of an account. 14.1 About the Account Printout After you have created the subscriber accounts, you can print out the account information. The printout page is different for static and dynamic subscriber accounts. 14.1.
VSG-1200 User’s Guide Figure 79 Customization: Account Printout 130 Chapter 14 Account Printout
VSG-1200 User’s Guide The following table describes the labels in this screen. Table 40 Customization: Account Printout LABEL DESCRIPTION Title Enter a title (up to 24 characters) for the printout. Subtitle Enter a subtitle (up to 80 characters) for the printout. Username Enter the label name for the field displaying the account username. Password Enter the label name for the field displaying the account password.
VSG-1200 User’s Guide Note: The account information printout for a static account varies depending on whether PMS billing is used or not. The following figures show the account printout examples.
VSG-1200 User’s Guide Figure 82 Static Account Printout: Statement Printer Example Chapter 14 Account Printout 133
VSG-1200 User’s Guide Figure 83 Static Account with PMS Billing Printout: Statement Printer Example Figure 84 Dynamic Account Printout Example 134 Chapter 14 Account Printout
VSG-1200 User’s Guide Figure 85 Dynamic Account Printout: Statement Printer Example Chapter 14 Account Printout 135
VSG-1200 User’s Guide 136 Chapter 14 Account Printout
VSG-1200 User’s Guide CHAPTER 15 User Agreement Page This chapter describes how you can customize and display a preview of the subscriber user agreement page. 15.1 About the User Agreement Page In cases where authentication is not required and anyone can access the Internet through the VSG, you can set the VSG to require users to accept a service usage agreement before they can access the Internet. The VSG has a built-in user agreement page that you can customize. 15.
VSG-1200 User’s Guide Figure 86 Customization: User Agreement Page The following table describes the labels in this screen. Table 41 Customization: User Agreement Page 138 LABEL DESCRIPTION Title Enter a title (up to 100 characters) for the user agreement page. Title Text Color Set the color of the title text. For example, use ‘000000’ for black. Click View Color Grid to display a list of web-friendly colors and corresponding hexadecimal values.
VSG-1200 User’s Guide Table 41 Customization: User Agreement Page (continued) LABEL DESCRIPTION Article Background Color Set the background color for the article. For example, use ‘FFFFFF’ for white. Click View Color Grid to display a list of web-friendly colors and corresponding hexadecimal values. Page Background Color Set the background color for the page. For example, use ‘FFFFFF’ for white. Click View Color Grid to display a list of web-friendly colors and corresponding hexadecimal values.
VSG-1200 User’s Guide 140 Chapter 15 User Agreement Page
VSG-1200 User’s Guide CHAPTER 16 Bandwidth Management This chapter describes the bandwidth feature and shows you how to configure bandwidth control. 16.1 Bandwidth Management Overview Bandwidth management allows you to control the amount of outbound and inbound traffic on the LAN. This helps reduce delays and dropped packets due to busy network traffic.
VSG-1200 User’s Guide Figure 88 Bandwidth Management: Activate 16.1.2 Configuring Equal Share Bandwidth Management To configure the VSG to impose the same bandwidth limits on all subscribers, select Equal bandwidth for all subscribers in the Bandwidth Management screen and set the related fields. Figure 89 Bandwidth Management: Equal Share The following table describes the related labels in this screen.
VSG-1200 User’s Guide Table 42 Bandwidth Management: Equal Share LABEL DESCRIPTION Maximum Upstream Bandwidth To use a pre-defined option, select the first option and choose a bandwidth from the drop-down list box. To manually set the bandwidth, select the second option and specify the bandwidth in the field provided. To use a pre-defined option, select the first option and choose a bandwidth from the Maximum Downstream drop-down list box.
VSG-1200 User’s Guide 144 Chapter 16 Bandwidth Management
VSG-1200 User’s Guide CHAPTER 17 Portal Page, Advertisement Link and Walled Garden This chapter shows you how to set a portal web site, advertisement links and create walled garden web sites. 17.1 Introduction When you enable subscriber authentication in the Authentication Configuration screen, you can set the VSG to redirect a subscriber to a portal web site, display advertisement links or activate the walled garden feature for generating on-line advertising revenue. 17.
VSG-1200 User’s Guide 17.3 Advertisement Links You can set the VSG to display an advertisement web page first on the subscriber’s computer once connected to the Internet. Click Advanced and Advertisement to display the screen as shown next. Figure 92 Advertisement The following table describes the labels in this screen.
VSG-1200 User’s Guide 17.4 Walled Garden A subscriber must log in before the VSG allows the subscriber access to the Internet. However, with walled garden, you can define the web site address(es) which all users can access without logging in. Note: A walled garden web site may not display properly or even be accessible if the domain name contains multiple IP addresses. Click Advanced and then Walled Garden to display the screen as shown.
VSG-1200 User’s Guide Table 45 Walled Garden LABEL DESCRIPTION Link 1 … 10 In the Name field, enter a descriptive name (up to 80 characters) for the walled garden link to be displayed in the web browser. In the URL field, enter the web site address (up to 200 characters) of the web site. Apply Click Apply to save the changes. The following figure shows a subscriber login screen example with walled garden links.
VSG-1200 User’s Guide CHAPTER 18 Passthrough This chapter shows you how to set up computer and web site passthrough. 18.1 About the Passthrough There are two types of pass through you can set up on the VSG: by device or by web site address You can set the VSG to allow specific computers (based on the IP or MAC address) to access the Internet without prompting for a user name and password.
VSG-1200 User’s Guide Figure 95 Passthrough: Subscriber IP and MAC Address The following table describes the fields in this screen. Table 46 Passthrough: Subscriber IP and MAC Address FIELD DESCRIPTION Subscriber IP & MAC Address Passthrough 150 No. This read-only field displays the index number of an entry. IP Address Enter the IP address of a computer (in dotted decimal notation) whose packets are allowed to pass through the VSG. For example, 10.59.1.10.
VSG-1200 User’s Guide 18.2.2 Destination URL and IP Address Passthrough You can specify the IP address or the URL of the web site(s) that any user can access without entering a user name or password. Figure 96 Passthrough: Destination URL and IP The following table describes the fields in this screen.
VSG-1200 User’s Guide Table 47 Passthrough: Destination URL and IP FIELD DESCRIPTION Destination IP Address Passthrough No. This read-only field displays the index number of an entry. IP Address Enter the IP address of a web site in dotted decimal notation, for example, 192.168.1.10 Pass Through Destination URL 152 No. This read-only field displays the index number of an entry. URL Link Page Enter the web site address, for example, http://www.zyxel.com.
VSG-1200 User’s Guide CHAPTER 19 LAN Devices This chapter describes how you can remotely access devices on the LAN through the VSG. 19.1 LAN Devices and NAT Overview NAT (Network Address Translation - NAT, RFC 1631) is the translation of the IP address of a host in a packet. Form example, the source address of an outgoing packet, used within one network is changed to a different IP address known within another network.
VSG-1200 User’s Guide Figure 97 LAN Devices The following table describes the labels in this screen. Table 48 LAN Devices 154 LABEL DESCRIPTION Polling Interval Specify the time interval (in minutes) between the VSG’s probes for device availability. No. This read-only field displays the index number of an entry. Device Name Enter the name of the LAN device for identification purposes.
VSG-1200 User’s Guide Table 48 LAN Devices (continued) LABEL DESCRIPTION Device IP Address Enter the IP address of a LAN device in dotted decimal notation. For example, 10.59.1.111. Device Server Port Enter the port number of a management service (for example, 80 for HTTP) on the LAN device. MAC Address Enter the MAC address of the LAN device in hexadecimal notation in 6 hexadecimal pairs, for example, 0050BA8D2296. Note: Make sure you enter the correct MAC address.
VSG-1200 User’s Guide Figure 99 LAN Devices: Example 1 To access the web-based management interface, enter the WAN IP address of your VSG and the virtual port number of the LAN device separated by a colon. In this example, to access the access point (AP), enter “http:// 192.168.1.1:60001” where 192.168.1.1 is the WAN IP address of the VSG. The login screen of the LAN device management interface should display. You can also access the LAN devices through the VSG web configurator, refer to Section 24.7.
VSG-1200 User’s Guide To access an inside server on the LAN, enter the WAN IP address of your VSG and the virtual port number of the inside server separated by a colon. In this example, to access the web server, enter “http:// 192.168.1.1:9602” where 192.168.1.1 is the WAN IP address of the VSG. You can also access the server by entering the domain name provided that you specified a DNS server on the VSG. Enter the domain name and the virtual port number separated by a colon, for example, http://www.
VSG-1200 User’s Guide 158 Chapter 19 LAN Devices
VSG-1200 User’s Guide CHAPTER 20 Static Route This chapter shows you how to configure static routes to specified destinations. 20.1 Static Route Overview Static routes tell the VSG routing information that it cannot learn automatically through other means. This can arise in cases where RIP is disabled on the LAN or a remote network is beyond the one that is directly connected to a remote node.
VSG-1200 User’s Guide Figure 103 Advanced: Static Route The following table describes the labels in this screen. Table 49 Advanced: Static Route LABEL DESCRIPTION Static Route Set the fields below to configure static route settings. You can configure up to 20 static routes at a time. No. This is the index number of the static route that you chose in menu 12.1. Destination IP Address This parameter specifies the IP network address of the final destination. Routing is always based on network number.
VSG-1200 User’s Guide Table 49 Advanced: Static Route (continued) LABEL DESCRIPTION Destination Subnet Mask This field displays the subnet mask of the final destination. Gateway IP Address This field displays the IP address of the gateway device. Hop Count This field displays the “cost” of this static route. Delete Click Delete to remove the selected static route(s).
VSG-1200 User’s Guide 162 Chapter 20 Static Route
VSG-1200 User’s Guide CHAPTER 21 Syslog and Session Trace This chapter shows you how to configure syslog logging and set the VSG to send subscriber session information. 21.1 Syslog Syslog logging allows the VSG to send logs to an external syslog server that is used to store and analyze logs. 21.1.1 Syslog Server Setup Use the Syslog screen to configure to where the VSG is to send logs. To configure the syslog settings, click Advanced, Logs to display the screen as shown next.
VSG-1200 User’s Guide Table 50 Logs: Syslog (continued) LABEL DESCRIPTION Server 1 IP Address Enter the IP address of the first syslog server on the WAN in dotted decimal notation. Server 2 IP Address Enter the IP address of the second syslog server on the WAN in dotted decimal notation. Apply Click Apply to save the settings. 21.1.
VSG-1200 User’s Guide Figure 105 Logs: Log Settings The following table describes the labels in this screen.
VSG-1200 User’s Guide Table 51 Logs: Log Settings LABEL DESCRIPTION Syslog Name This field displays the name (or type) of the log. Select the check box(es) to send the syslog. Description This field displays a short description about the syslog. Interval Time This field displays how often the VSG sends the logs. If available, enter the number of minutes the VSG waits between sending the syslog. Type This field displays the type number of a log. This number is read-only.
VSG-1200 User’s Guide Table 52 Logs: Log Format (continued) SYSLOG NAME FORMAT CREATED Billing Log Id Billing Log Where: Charge From = PMS | Dynamic Billing profile name = Name Log time = MM/DD/YYYY HH:MM:SS Usage time = “x minutes” | “Expire when 00:00” Billing profile information = index, name When a log is created LAN Devices Information Id LAN Devices Information
VSG-1200 User’s Guide Figure 106 Advanced: Session Trace The following table describes the labels in this screen. Table 53 Advanced: Session Trace LABEL DESCRIPTION Session Trace Select Enable to set the VSG to record and send subscriber session information. Select Disable to de-activate this feature. TFTP Server IP Address Specify the primary and/or secondary TFTP IP address in the Primary TFTP Server IP Address and/or Secondary TFTP IP Address fields.
VSG-1200 User’s Guide Figure 107 Session Trace Information Example Host Name User Name Date VLANId SourceIP SourceMac SourcePort DestIP DestPort MIS Cindy 22Oct04130403 192.168.1.10 0085A0010104 3974 192.168.1.1 80 MIS Cindy 22Oct04130404 192.168.1.10 0085A0010104 3977 172.20.0.63 53 MIS Cindy 22Oct04130440 192.168.1.10 0085A0010104 3991 172.20.0.27 80 The following table describes the fields in a session information file.
VSG-1200 User’s Guide 170 Chapter 21 Syslog and Session Trace
VSG-1200 User’s Guide CHAPTER 22 SNMP This chapter shows you how to set up SNMP. 22.1 SNMP Overview Simple Network Management Protocol (SNMP) is a protocol used for exchanging management information between network devices. SNMP is a member of the TCP/IP protocol suite. Your VSG supports SNMP version one and version 2. The next figure illustrates an SNMP management operation. Figure 108 SNMP Management Model An SNMP managed network consists of two main components: agents and a manager.
VSG-1200 User’s Guide The managed devices contain object variables/managed objects that define each piece of information to be collected about a device. Examples of variables include such as number of packets received, node port status etc. A Management Information Base (MIB) is a collection of managed objects. SNMP allows a manager and agents to communicate for the purpose of accessing these objects. SNMP itself is a simple request/response protocol based on the manager/agent model.
VSG-1200 User’s Guide The following table describes the labels in this screen. Table 55 SNMP LABEL DESCRIPTION SNMP Select Enable to activate SNMP support. Select Disable to de-activate the SNMP support. Port SNMP Port Enter a port number on the VSG for SNMP management. The default is 161. Otherwise enter a port number between 16100 and 16199. Trap Port Enter a port number on the VSG for sending SNMP traps. The default is 162. Otherwise enter a port number between 16200 and 16299.
VSG-1200 User’s Guide 174 Chapter 22 SNMP
VSG-1200 User’s Guide CHAPTER 23 MAC Filter This chapter describes how you can configure the MAC filter feature. 23.1 About the MAC Filter The MAC Filter screen allows you to configure the VSG to block devices from accessing the Internet through the VSG. Every Ethernet device has a unique MAC (Media Access Control) address. The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters, for example, 00A0C5000002.
VSG-1200 User’s Guide The following table describes the labels in this screen. Table 56 MAC Filter 176 LABEL DESCRIPTION MAC Address Enter the MAC addresses (in XXXXXXXXXXXX format) of the devices that are denied access to the VSG in these address fields. Apply Click Apply to save the changes.
VSG-1200 User’s Guide CHAPTER 24 System Status This chapter describes the screens under System Status. 24.1 About System Status The screens in System Status show the current state of the VSG. 24.2 View System Information Click System Status and System to display the screen as shown next. The System screen automatically updates every 5 seconds.
VSG-1200 User’s Guide Figure 111 System Status The following table describes the fields in this screen. Table 57 System Status FIELD DESCRIPTION System Status Host Name This field displays the description name of the VSG for identification purposes. Domain Name This field displays the domain name of the VSG. Bootrom Version This field displays the version of the bootrom. Firmware Version This field displays the version of the firmware on the VSG.
VSG-1200 User’s Guide Table 57 System Status (continued) FIELD DESCRIPTION Concurrent User This field displays the maximum number of users that can log in simultaneously for Limitation Internet access. WAN MAC This field displays the MAC address of the VSG on the WAN. Address LAN MAC Address This field displays the MAC address of the VSG on the LAN. WAN IP Settings WAN Port Mode This field displays the DHCP mode of the WAN port. IP Address This field displays the IP address of the WAN port on the VSG.
VSG-1200 User’s Guide 24.3 Current User List The Current User List screen displays a list of subscribers currently logged on to the VSG for Internet access. Click System Status and Current User List to display the screen as shown. Click a column heading to sort the entries if applicable. The Username, Billing Profile, Login Time, expiration and Disconnect fields and buttons Figure 112 Current User List The following table describes the labels in this screen.
VSG-1200 User’s Guide Table 58 Current User List (continued) LABEL DESCRIPTION First Click First to go to the first page. Previous Click Previous to return to the previous page. Next Click Next to go to the next page. End Click End to go to the last page. 24.4 DHCP Clients The DHCP client table shows current DHCP client information of all network clients using the DHCP server on the VSG. Click System Status and DHCP to display the screen as shown.
VSG-1200 User’s Guide Figure 114 Session List The following table describes the labels in this screen. Table 60 Session List LABEL DESCRIPTION No This field displays the index number of an entry. TCP/UDP This field displays the type of traffic (TCP or UDP). IP Client This field displays the IP address of the client computer. Port Client This field displays the port number through which the client computer transmits the traffic. Port Fake This field displays the virtual port number for a session.
VSG-1200 User’s Guide The following table describes the labels in this screen. Table 61 NAT Pool Table LABEL DESCRIPTION No This field displays the index number of an entry. Source IP Address This field displays the IP address of the subscriber device on the LAN that is using the VPN. Source MAC This field displays the MAC address of the subscriber device on the LAN that is using the Address VPN.
VSG-1200 User’s Guide Table 62 System Status: LAN Device Status (continued) LABEL DESCRIPTION Device MAC Address This field displays the MAC address of the LAN device. Application This field displays the type of application packet that is forwarded to the LAN device. 24.7.1 Accessing the LAN Device Before you can access a LAN device behind the VSG, the following requirements must be met. • The LAN device has a web-based management interface and it is enabled.
VSG-1200 User’s Guide Figure 117 System Status: Billing Log The following table describes the labels in this screen. Table 63 System Status: Billing Log LABEL DESCRIPTION Refresh Click Refresh to update the screen. Export to Txt File Click Export to File to back the billing logs. Refer to Section 24.8.1 “Billing Logs Backup” on page 185 for instructions. Clear Log Click Clear Log to clear all log entries. No This field displays the index number of the entry.
VSG-1200 User’s Guide 1 In the Billing Log screen, click the Export to Txt File link. A File Download screen displays. Figure 118 Billing Log Backup: File Download 2 Select Save this file to disk and click OK. A Save As window displays. Figure 119 Billing Log Backup: Save As 3 Specify the file name and/or location and click Save to start the backup process. To view the billing logs, open the log file using any text editor. The following figure shows an example.
VSG-1200 User’s Guide Figure 120 Billing Log Backup: Example File Content [Billing Log Profile] NO. Username/Location 1 Cindy Profile 1 2 Cindy Profile 1 3 bwh2y936 Profile BillingProfile Log Time Usage Time Bill Charge from Status 2004/10/22 12:00:28 1 day(s) 10.00 Static In-Use 2004/10/22 13:03:59 1 day(s) 10.00 Static In-Use 1 2004/10/21 11:53:06 1 day(s) 10.00 Dynamic Expired 24.9 PMS Transaction This screen is applicable when account billing is done using a PMS.
VSG-1200 User’s Guide Figure 122 System Status: Static Route Table The following table describes the labels in this screen. Table 64 System Status: Static Route Table LABEL DESCRIPTION Static Route Table This table displays the static routes configured. 188 No. This field displays the index number. Destination IP Address This field displays the IP address of the final destination. Destination Subnet Mask This field displays the subnet mask of the final destination.
VSG-1200 User’s Guide CHAPTER 25 Secure Socket Layer This chapter shows you how to setup and enable Secure Socket Layer (SSL) security on the VSG. 25.1 About SSL SSL (Secure Socket Layer) security is a standard Internet protocol for secure communications that uses a combination of certificate-based authentication and public-key encryption. SSL protects data transfer between the web configurator on the VSG and the web browser on a connected computer.
VSG-1200 User’s Guide Figure 123 SSL Certificate Download The following table describes the labels in this screen. Table 65 SSL Certificate Download LABEL DESCRIPTION Password Enter the secret password you used when applying for the certificate. Note: This password must be the same as the one you entered at the CA’s site when creating a certificate. Certificate File Specify the certificate sent to you by a CA. Private Key File Specify the file that holds the private key.
VSG-1200 User’s Guide Figure 124 System Setting: Server Configuration: Enable SSL Security 2 Click Apply to save the changes and restart the VSG when prompted.
VSG-1200 User’s Guide Figure 125 System Setting: Authentication: Activate SSL Login 4 Click Apply to save the changes and restart the VSG when prompted.
VSG-1200 User’s Guide 25.4 Installing SSL Certificate on a Computer After you enable and activate the SSL login security on the VSG, you can access the VSG through a secure connection. Follow the steps below to view and install the default SSL security certificate on a computer. 1 Access the VSG. A Security Alert window displays. Click OK to continue and close the window. Figure 126 Installing the SSL Security Certificate: First Security Alert 2 A second Security Alert window displays.
VSG-1200 User’s Guide Figure 128 Installing the SSL Security Certificate: View Certificate 4 Click Install Certificate to install the certificate to your computer. A Certificate Import Wizard window displays. Click Next. Figure 129 Installing the SSL Security Certificate: Certificate Import Wizard 5 Accept the default or specify the location to store the certificate. Click Next.
VSG-1200 User’s Guide Figure 130 Certificate Import Wizard: Location 6 Click Finish to import the certificate. Figure 131 Certificate Import Wizard: Finish 7 A Root Certificate Store window displays as shown. Click Yes to store the certificate to the computer.
VSG-1200 User’s Guide Figure 132 Root Certificate Store 8 When the certificate is saved successfully, a Certificate Import Wizard window displays. Click OK. Figure 133 Certificate Import Wizard 9 A Certificate window displays the detailed information. Notice that the certificate is now trusted.
VSG-1200 User’s Guide 10Click OK in the Certificate window to return to the Security Alert window as shown. Notice that the first item in the list changed to inform you that the certificate is from a trusted host. Click Yes to proceed to the login screen in secure mode. Figure 135 Security Alert: Trusted Note: Once you are logged in with SSL security, the URL starts with “https:// ” instead of “http://”.
VSG-1200 User’s Guide 198 Chapter 25 Secure Socket Layer
VSG-1200 User’s Guide CHAPTER 26 The SMT This chapter introduces the SMT (System Management Terminal), describes how to access the SMT and provides an overview of its menus. 26.1 Introduction to the SMT The System Management Terminal (SMT) is a menu – driven interface that you use to configure the VSG. Access the SMT using the console port. Note: You can connect the CONSOLE port on the VSG directly to a computer serial port or to a statement printer (also known as an account generator printer).
VSG-1200 User’s Guide Figure 136 HyperTerminal Communication Parameter Settings Example 26.2 SMT Login Screen Press [ENTER] to display the login screen. For your first login, enter the default administrator user name “admin” and default password “1234” and then press [ENTER]. Note: The user name and password are case sensitive. Figure 137 SMT: Login Screen VSG-1200 (c) 2003 ZyXEL Communications Corporation. All Rights Reserved. Version 1.
VSG-1200 User’s Guide 26.3 The SMT Main Menu Summary The SMT main menu is shown next. Figure 138 SMT: Main Menu Main Menu 1)System Configuration 2)Wan Configuration 3)Lan Configuration 4)System Status 5)Utilities 6)Restart 7)Logout 8)Factory Defaults Enter selection: Enter a numeric between 1 and 8. The following table describes the menu choices in this screen. Table 66 SMT: Main Menu NUMBER MENU TITLE FUNCTION 1 System Configuration Use this menu to set up general system setup.
VSG-1200 User’s Guide 26.4.1 The Navigation Keys The following table describes the keystrokes that you use in the SMT screens. Table 67 SMT: Control Key Descriptions KEY DESCRIPTION [ENTER] To go to the selected menu. [ESC] Press [ESC] and enter Y to discard any changes and return to the previous screen. [TAB] To move to the next configuration field. [SPACE] To toggle between field choices. 26.
VSG-1200 User’s Guide Table 68 SMT: System Configuration (continued) FIELD DESCRIPTION Web Server Port Specify the port number of the embedded web server on the VSG to access the web configurator. The default port number is 80. Enter a number between 8010 and 8060 to access the web configurator behind a NAT-enabled network. If you enter a number between 8010 and 8060, you need to append the port number to the WAN or LAN port IP address to access the web configurator.
VSG-1200 User’s Guide 4 Type your new system password in the Enter the new password field, and press [ENTER]. 5 Re-type your new system password in the Confirm the new password field for confirmation and press [ENTER]. 6 Save the settings. Note: Note that as you type a password, the screen displays an asterisk “*” for each character you type. 26.7 Restarting the VSG Follow the steps below to restart the VSG. 1 In the main menu, type 6 and press [ENTER]. A screen displays prompting you to confirm.
VSG-1200 User’s Guide 3 Type Y and press [ENTER] to retain the subscriber account information in the local subscriber database.Type N and press [ENTER] to delete all subscriber account information. 4 Press [ENTER] to reset the VSG. The VSG automatically restarts.
VSG-1200 User’s Guide 206 Chapter 26 The SMT
VSG-1200 User’s Guide CHAPTER 27 LAN and WAN Setup Using the SMT This chapter shows you how to configure the LAN and WAN settings on the VSG. 27.1 LAN and WAN Overview Refer to Chapter 4, “LAN, WAN and Server Setup,” on page 53 for more information. 27.2 WAN Configuration From the main menu, type 1 and press [ENTER] to display the System Configuration menu. The WAN Configuration menu varies depending on the selection in the WAN Type field. 27.2.
VSG-1200 User’s Guide The follow table describes the fields in this menu. Table 69 SMT: WAN Configuration: Static or Dynamic IP Address FIELD DESCRIPTION WAN Type? (D/S/ P/T) Enter D (Dynamic) to set the VSG to dynamically obtain an IP address and other network information (IP address, DNS information etc.) from a DHCP server on the WAN network. This is the default setting. Enter S (Static) to set the VSG to use a static (or fixed) IP address. Then set the following fields.
VSG-1200 User’s Guide The following table describes the PPPoE related fields in this menu. Table 70 SMT: WAN Configuration: PPPoE FIELD DESCRIPTION WAN Type? (D/S/ P/T) Enter P to enable PPPoE support. Username Enter the login user name assigned to you by your ISP. Password Enter the password associated with the user name above. Connect Setting? (C/K) Enter C (Connect on demand) when you don't want the connection up all the time and specify an idle time-out in the Max. Idle Timeout Setting field.
VSG-1200 User’s Guide Figure 145 SMT: WAN Configuration: PPTP WAN Type? (D/S/P/T) Local IP Address Local Subnet Mask Gateway IP Address Server IP Address Username Password Connect Setting? (C/K) Max idle Time(Min) Optional Setting Connection ID/Name PPP MTU Setting TCP MSS setting WAN Configuration :T : : : : : : :C :10 : :1460 :1400 The following table describes the PPTP-related fields in this menu.
VSG-1200 User’s Guide Table 71 SMT: WAN Configuration: PPTP (continued) FIELD DESCRIPTION TCP MSS Setting Enter the size of the Maximum Segment Size (MSS). At the “S)ave and return R)eturn without saving M)odify:” prompt, type S and press [ENTER] to save the changes and return to the previous screen, type R and press [ENTER] to discard all changes and return to the previous screen or type M and press [ENTER] to continue configuring the fields.
VSG-1200 User’s Guide Table 72 SMT: LAN Configuration (continued) FIELD DESCRIPTION Relay Server IP Address This field is only visible when you enter R in the DHCP Service field. If the VSG is set to function as a DHCP relay, enter the IP address of the DHCP server. These fields are visible when you enter S in the DHCP Service field. Primary/ Secondary DNS IP Enter the IP address of the DNS server(s) in the Primary DNS IP Address and/or Address Secondary DNS IP Address fields.
VSG-1200 User’s Guide The following table describes the fields in this screen. Table 73 SMT: System Status FIELD DESCRIPTION System Name This field displays the name of the VSG for identification purposes. Domain Name This field displays the domain name. Console Port Speed This field displays the console port speed (1200, 2400, 4800, 9600, 14400, 19200, 38400, 57600, or 115200). Web Server Port This field displays the port number for the embedded web server.
VSG-1200 User’s Guide 214 Chapter 27 LAN and WAN Setup Using the SMT
VSG-1200 User’s Guide CHAPTER 28 Configuration and Firmware Maintenance This chapter shows you how to maintain the firmware and configuration file. Warning: Do not interrupt the file upload process as this may PERMANENTLY damage the device. 28.1 Filename Convention The configuration file contains the factory default settings in the menus such as password, DHCP Setup, TCP/IP Setup, etc.
VSG-1200 User’s Guide Figure 148 Firmware Upgrade: Links 28.2.1.1 Manual Firmware Upgrade Follow the steps below to upgrade the firmware manually. 1 Download the latest firmware from www.zyxel.com to your computer. Unzip the file if it is zipped. 2 Access the web configurator. Refer to the section on accessing the web configurator for instructions. 3 Click System Tools, Firmware and the Manual Firmware Upgrade link to display the screen as shown.
VSG-1200 User’s Guide 2 Run a TFTP server program and specify the location of the firmware file and the communication mode. Refer to the documentation that comes with your TFTP server program for instructions. 3 Access the web configurator. Refer to the section on accessing the web configurator for instructions. 4 Click System Tools, Firmware and the Manual Firmware Upgrade link to display the screen as shown.
VSG-1200 User’s Guide Figure 153 Scheduled Firmware Upgrade Example The following describes the automatic firmware upgrade process. 1 The VSG checks the synchronization file on the TFTP server for the firmware version number. 2 If the synchronization file has the latest firmware version number, VSG retrieves the latest firmware file as specified in the synchronization file. 3 VSG upgrades the firmware and restarts.
VSG-1200 User’s Guide Table 74 Firmware Upgrade: Scheduled (continued) LABEL DESCRIPTION Synchronization Check File A Synchronization Check file is a file containing the latest firmware filename and version number on the TFTP server. Click View Sample File to display an example. Enter the name of the check file. Frequency Set how often (Weekly, Daily or Hourly) you want to have the VSG check for new firmware and upgrade to new firmware if available (default Weekly).
VSG-1200 User’s Guide Figure 156 SMT: Firmware Upgrade Firmware Upgrade TFTP Server IP Address :172.21.4.72 Download Filename :VSG1200V108.bin E)xecute Download Enter Selection: R)eturn to Main Menu M)odify Enter the command key and press enter. 6 Type E at the “Enter Selection:” prompt to get the firmware file from the TFTP server. Figure 157 SMT: Firmware Upgrade Process Firmware Upgrade TFTP Server IP Address :172.21.4.72 Download Filename :VSG1200V108.
VSG-1200 User’s Guide 1 Click System Tools and Configuration. A screen displays as shown next. Figure 158 System Tools: Configuration: Backup 2 Click Backup. A File Download window displays as shown next. Figure 159 Configuration Backup: File Download 3 Select Save this file to disk and click OK. A Save As window displays.
VSG-1200 User’s Guide Figure 160 Configuration Backup: Save As 4 Specify the file name and/or location and click Save to start the backup process. 28.3.2 Backup Configuration Using TFTP 1 Click System Tools and Configuration. A screen displays as shown next. 2 In the Backup section, enter the IP address of the TFTP server in dotted decimal notation in the TFTP Server IP Address field. 3 Specify a file name for the configuration backup in the Text File Name field.
VSG-1200 User’s Guide Figure 161 System Tools: Configuration: Backup using TFTP 4 Click Apply. When the file transfer process is complete, a screen displays as follows. Figure 162 Configuration Backup: TFTP: Successful 28.3.3 Restore Configuration Using HTTP This section shows you how to restore a previously saved configuration.
VSG-1200 User’s Guide Figure 163 System Tools: Configuration: Restore 2 In the Restore section, specify the location and filename of a configuration file in the File Path field or click Browse. 3 Click Apply to start the configuration restore process. The VSG automatically restarts after the restoration process is complete. 28.3.4 Restore Configuration Using TFTP This section shows you how to restore a previously saved configuration.
VSG-1200 User’s Guide Figure 164 System Tools: Configuration: Restore: TFTP 2 In the Restore section, Enter the IP address of the TFTP server in dotted decimal notation in the TFTP Server IP Address field. 3 Specify a file name for the configuration backup in the Text File Name field. 4 Click Apply to start the configuration restore process. The VSG automatically restarts after the restoration process is complete.
VSG-1200 User’s Guide 226 Chapter 28 Configuration and Firmware Maintenance
VSG-1200 User’s Guide CHAPTER 29 Troubleshooting This chapter covers potential problems and possible remedies. After each problem description, some instructions are provided to help you to diagnose and to solve the problem. 29.1 Using the LEDs to Diagnose Problems The LEDs are useful aides for finding possible problem causes. 29.1.1 The Power LED The PWR LED on the front panel does not light up.
VSG-1200 User’s Guide 29.1.3 The WAN Port LEDs None of the LEDs for the WAN port light up when connected to an Ethernet device. Table 77 Troubleshooting the WAN LED STEP CORRECTIVE ACTION 1 Verify that the attached device(s) is turned on and properly connected to the VSG. 2 Verify that Ethernet cable length does not exceed 100 meters. 3 Make sure the network adapters are working on the attached devices. 29.2 The Console Port I cannot access the VSG through the console port.
VSG-1200 User’s Guide 29.3 Web Configurator I cannot access the web configurator. Table 79 Troubleshooting Web Configurator STEP CORRECTIVE ACTION 1 Make sure you are using the correct WAN or LAN IP address. 2 Make sure you entered the correct username and password. The default administrator username is “admin” and the default password is “1234”. The username and password are case-sensitive.
VSG-1200 User’s Guide 29.5 The Statement Printer (This section is applicable when you purchase an external statement printer, also known as an account generator printer). I cannot print account information using a statement printer. Table 82 Troubleshooting the Statement Printer 230 STEP CORRECTIVE ACTION 1 Make sure the statement printer is connected to a power source and is turned on. 2 Check that the statement printer is connected to the port labeled Console.
VSG-1200 User’s Guide Appendix A Product Specifications Table 83 Product Specifications: General Standard IEEE 802.3 10BASE-T Ethernet IEEE 802.
VSG-1200 User’s Guide Table 84 Product Specifications: Performance and Management Maximum Throughput 15.
VSG-1200 User’s Guide Appendix B IP Address Assignment Conflicts This appendix describes situations where IP address conflicts may occur. Subscribers with duplicate IP addresses will not be able to access the Internet. Scenario 1: The VSG is using the same LAN and WAN IP addresses The following figure shows an example where the VSG is using a WAN IP address that is the same as the IP address of a computer on the LAN.
VSG-1200 User’s Guide Scenario 3: The Subscriber IP address is the same as the IP address of a network device The following figure depicts an example where the subscriber IP address is the same as the IP address of a network device not attached to the VSG. Figure 167 IP Address Conflicts: Scenario 3 You must set the VSG to use different LAN and WAN IP addresses on different subnets if you enable DHCP server on the VSG. For example, you set the WAN IP address to 192.59.1.1 and the LAN IP address to 10.59.
VSG-1200 User’s Guide Figure 168 IP Address Conflicts: Scenario 4 This problem can be solved by adding a VLAN-enabled switch or setting the computers to obtain IP addresses dynamically.
VSG-1200 User’s Guide 236 Appendix B IP Address Assignment Conflicts
VSG-1200 User’s Guide Appendix C Subscriber Login To log in as a subscriber, enter a web site address such as www.zyxel.com in a web browser. Depending on the settings, a subscriber login screen displays prompting for a user name and password. Figure 169 Subscriber Login Screen: Framed Example Enter a user name and password and click Enter. Depending on the settings in the VSG, either the specified web page or an advertisement web page displays. After a successful login, an information window may display.
VSG-1200 User’s Guide 238 Appendix C Subscriber Login
VSG-1200 User’s Guide Appendix D Vendor Specific Attributes This appendix describes the format of the vendor specific attributes supported. Overview With RADIUS server authentication, you can define vendor specific attributes (VSAs) in addition to the set of standard RADIUS attributes defined in RFC 2865 and RFC 2866. A VSA is an attribute-value pair that is sent between a RADIUS server and the VSG.
VSG-1200 User’s Guide Table 86 VSG-1200 Supported VSAs NO. NAME DESCRIPTION TYPE 1 Traffic-Limit This attribute defines total bandwidth (in Mbytes) allowed for a Integer subscriber. Internet access is based on the total upload/ download bandwidth regardless of the account expiration time. This attribute is supported when you set the VSG to use an external RADIUS server for user authentication in accumulation mode.
VSG-1200 User’s Guide Error Messages The following table describes the VSA-related error messages. Table 87 VSA-related Error Messages ERROR MESSAGE DESCRIPTION VSA Error!-Traffic limitTime to finish is selected The VSG is set to use the “Time to Finish” mode while the VSA response from the external RADIUS server include the Traffic-limit attribute. VSA Error!-Traffic limitOver value The value for Traffic-limit attribute is more than the maximum allowed (4095).
VSG-1200 User’s Guide 242 Appendix D Vendor Specific Attributes
VSG-1200 User’s Guide Appendix E Report Printing Using the SP-200 This appendix shows you how to print reports using the SP-200. Overview The SP-200 allows you to print status reports about the subscriber accounts and general VSG system information . Simply press a key combination on the SP-200 to print a report instantly without accessing the web configurator. The following lists the reports that you can print using the SP-200.
VSG-1200 User’s Guide Table 88 SP-200: Report Printing Key Combination REPORT TYPE KEY COMBINATION Daily Account Summary ABCAA Monthly Account Summary ABCBB System Status ABCCC Network Statistics ABCAB The following sections describe each report printout in detail. Daily Account Summary This report shows the username and price for the subscriber account(s) that is created for the current day. Key combination: A B C A A The following figure shows an example.
VSG-1200 User’s Guide The following figure shows an example. Figure 172 SP-200: Monthly Account Monthly Account ---------------------------2004/10 ---------------------------Username Price bwh2y936 10.00 Cindy 10.00 9v269m55 10.00 bwh2y943 20.00 ---------------------------TOTAL ACCOUTNS: 4 TOTAL PRICE: $ 50.00 ---------------------------2004/10/28 14:11:26 ---End--- System Status This report shows the current system information such as the host name and WAN IP address.
VSG-1200 User’s Guide Figure 173 SP-200: System Status System Status ---------------------------ITEM DESCRIPTION ---------------------------WAST ESTABLISHED SYST 02D:02H:42M:46S ---------------------------HOST VSG-1200 FRMW 1.05 BTRM 1.01 LOCA WAMA 00-90-0E-00-4A-29 LAMA 00-90-0E-00-4A-28 WATP DHCP WAIP 172.21.2.67 WASM 255.255.0.0 WAGW 172.21.0.254 PDNS 172.20.0.63 SDNS 172.20.0.27 DHCP DHCP SERVER DHSP 10.59.1.2 DHEP 10.59.1.
VSG-1200 User’s Guide Table 89 SP-200: System Status (continued) LABEL DESCRIPTION DHCP This field displays the DHCP mode (DHCP Server, Relay or DHCP Disable) on the LAN. DHSP If the DHCP field is DHCP Server, this field displays the first of the continuous addresses in the IP address pool. If the DHCP field is DHCP Relay, this field displays the DHCP server IP address. DHEP This field is visible when the DHCP is DHCP Server.
VSG-1200 User’s Guide Table 90 SP-200: Network Statistics 248 LABEL DESCRIPTION WAST This field displays the WAN connection status. SYST This field displays the time since the system was last restarted. WATD This field displays the number of packets transmitted on the WAN. WARD This field displays the number of packets received on the WAN. WATE This field displays the number of error packets transmitted on the WAN. WARE This field displays the number of error packets received on the WAN.
VSG-1200 User’s Guide Appendix F Cable Types and Cable Pin Assignments RJ-45 Ethernet Port The following table describes the types of network cable used for the different connection speeds. Note: Make sure the Ethernet cable length between connections does not exceed 100 meters (328 feet).
VSG-1200 User’s Guide Figure 175 WAN Port Cable Pin Assignments The LAN Port The following table describes the Ethernet cable pin assignments for the LAN port.
VSG-1200 User’s Guide Table 94 Console Port Pin Assignment PIN NO MNEMONIC FUNCTION 1 DCD Received Line Signal Detector to the VSG. 2 TXT Transmitted Data from the VSG. 3 RXT Received Data to the VSG. 4 DTR Data Terminal Ready from the VSG. 5 GND Signal Ground (Common) 6 DSR Data Set Ready to the VSG. 7 RTS Request to Send from the VSG. 8 CTS Clear to Send to the VSG. 9 RI Ring Indicator to the VSG.
VSG-1200 User’s Guide 252 Appendix F Cable Types and Cable Pin Assignments
VSG-1200 User’s Guide Appendix G Setting up Your Computer’s IP Address All computers must have a 10M or 100M Ethernet adapter card and TCP/IP installed. Windows 95/98/Me/NT/2000/XP, Macintosh OS 7 and later operating systems and all versions of UNIX/LINUX include the software components you need to install and use TCP/IP on your computer. Windows 3.1 requires the purchase of a third-party TCP/IP application package.
VSG-1200 User’s Guide Figure 178 WIndows 95/98/Me: Network: Configuration Installing Components The Network window Configuration tab displays a list of installed components. You need a network adapter, the TCP/IP protocol and Client for Microsoft Networks. If you need the adapter: 1 In the Network window, click Add. 2 Select Adapter and then click Add. 3 Select the manufacturer and model of your network adapter and then click OK. If you need TCP/IP: 1 In the Network window, click Add.
VSG-1200 User’s Guide 3 Select Microsoft from the list of manufacturers. 4 Select Client for Microsoft Networks from the list of network clients and then click OK. 5 Restart your computer so the changes you made take effect. Configuring 1 In the Network window Configuration tab, select your network adapter's TCP/IP entry and click Properties 2 Click the IP Address tab. • • If your IP address is dynamic, select Obtain an IP address automatically.
VSG-1200 User’s Guide Figure 180 Windows 95/98/Me: TCP/IP Properties: DNS Configuration 4 Click the Gateway tab. • • If you do not know your gateway’s IP address, remove previously installed gateways. If you have a gateway IP address, type it in the New gateway field and click Add. 5 Click OK to save and close the TCP/IP Properties window. 6 Click OK to close the Network window. Insert the Windows CD if prompted. 7 Turn on your VSG-1200 and restart your computer when prompted.
VSG-1200 User’s Guide Figure 181 Windows XP: Start Menu 2 For Windows XP, click Network Connections. For Windows 2000/NT, click Network and Dial-up Connections. Figure 182 Windows XP: Control Panel 3 Right-click Local Area Connection and then click Properties.
VSG-1200 User’s Guide Figure 183 Windows XP: Control Panel: Network Connections: Properties 4 Select Internet Protocol (TCP/IP) (under the General tab in Win XP) and click Properties. Figure 184 Windows XP: Local Area Connection Properties 5 The Internet Protocol TCP/IP Properties window opens (the General tab in Windows XP). • 258 If you have a dynamic IP address click Obtain an IP address automatically.
VSG-1200 User’s Guide • If you have a static IP address click Use the following IP Address and fill in the IP address, Subnet mask, and Default gateway fields. Click Advanced. Figure 185 Windows XP: Advanced TCP/IP Settings 6 If you do not know your gateway's IP address, remove any previously installed gateways in the IP Settings tab and click OK. Do one or more of the following if you want to configure additional IP addresses: • • • • • • • • In the IP Settings tab, in IP addresses, click Add.
VSG-1200 User’s Guide • • Click Obtain DNS server address automatically if you do not know your DNS server IP address(es). If you know your DNS server IP address(es), click Use the following DNS server addresses, and type them in the Preferred DNS server and Alternate DNS server fields. If you have previously configured DNS servers, click Advanced and then the DNS tab to order them.
VSG-1200 User’s Guide Figure 187 Macintosh OS 8/9: Apple Menu 2 Select Ethernet built-in from the Connect via list. Figure 188 Macintosh OS 8/9: TCP/IP 3 For dynamically assigned settings, select Using DHCP Server from the Configure: list.
VSG-1200 User’s Guide 4 For statically assigned settings, do the following: • • • • From the Configure box, select Manually. Type your IP address in the IP Address box. Type your subnet mask in the Subnet mask box. Type the IP address of your VSG-1200 in the Router address box. 5 Close the TCP/IP Control Panel. 6 Click Save if prompted, to save changes to your configuration. 7 Turn on your VSG-1200 and restart your computer (if prompted).
VSG-1200 User’s Guide Figure 190 Macintosh OS X: Network 4 For statically assigned settings, do the following: • • • • From the Configure box, select Manually. Type your IP address in the IP Address box. Type your subnet mask in the Subnet mask box. Type the IP address of your VSG-1200 in the Router address box. 5 Click Apply Now and close the window. 6 Turn on your VSG-1200 and restart your computer (if prompted). Verifying Settings Check your TCP/IP properties in the Network window.
VSG-1200 User’s Guide 264 Appendix G Setting up Your Computer’s IP Address
VSG-1200 User’s Guide Appendix H IP Subnetting IP Addressing Routers “route” based on the network number. The router that delivers the data packet to the correct destination host uses the host ID. IP Classes An IP address is made up of four octets (eight bits), written in dotted decimal notation, for example, 192.168.1.1. IP addresses are categorized into different classes. The class of an address depends on the value of its first octet. • Class “A” addresses have a 0 in the left most bit.
VSG-1200 User’s Guide Since the first octet of a class “A” IP address must contain a “0”, the first octet of a class “A” address can have a value of 0 to 127. Similarly the first octet of a class “B” must begin with “10”, therefore the first octet of a class “B” address has a valid range of 128 to 191. The first octet of a class “C” address begins with “110”, and therefore has a range of 192 to 223.
VSG-1200 User’s Guide For example, 192.1.1.0 /25 is equivalent to saying 192.1.1.0 with mask 255.255.255.128. The following table shows all possible subnet masks for a class “C” address using both notations. Table 99 Alternative Subnet Mask Notation SUBNET MASK IP ADDRESS SUBNET MASK “1” BITS LAST OCTET BIT VALUE 255.255.255.0 /24 0000 0000 255.255.255.128 /25 1000 0000 255.255.255.192 /26 1100 0000 255.255.255.224 /27 1110 0000 255.255.255.240 /28 1111 0000 255.255.255.
VSG-1200 User’s Guide Table 101 Subnet 1 NETWORK NUMBER LAST OCTET BIT VALUE IP Address 192.168.1. 0 IP Address (Binary) 11000000.10101000.00000001. 00000000 Subnet Mask 255.255.255. 128 Subnet Mask (Binary) 11111111.11111111.11111111. 10000000 Subnet Address: 192.168.1.0 Lowest Host ID: 192.168.1.1 Broadcast Address: 192.168.1.127 Highest Host ID: 192.168.1.126 Table 102 Subnet 2 NETWORK NUMBER LAST OCTET BIT VALUE IP Address 192.168.1. 128 IP Address (Binary) 11000000.10101000.
VSG-1200 User’s Guide Example: Four Subnets The above example illustrated using a 25-bit subnet mask to divide a class “C” address space into two subnets. Similarly to divide a class “C” address into four subnets, you need to “borrow” two host ID bits to give four possible combinations of 00, 01, 10 and 11. The subnet mask is 26 bits (11111111.11111111.11111111.11000000) or 255.255.255.192.
VSG-1200 User’s Guide Table 106 Subnet 4 NETWORK NUMBER LAST OCTET BIT VALUE IP Address 192.168.1. 192 IP Address (Binary) 11000000.10101000.00000001. 11000000 Subnet Mask (Binary) 11111111.11111111.11111111. 11000000 Subnet Address: 192.168.1.192 Lowest Host ID: 192.168.1.193 Broadcast Address: 192.168.1.255 Highest Host ID: 192.168.1.254 Example Eight Subnets Similarly use a 27-bit mask to create 8 subnets (001, 010, 011, 100, 101, 110).
VSG-1200 User’s Guide Subnetting With Class A and Class B Networks. For class “A” and class “B” addresses the subnet mask also determines which bits are part of the network number and which are part of the host ID. A class “B” address has two host ID octets available for subnetting and a class “A” address has three host ID octets (see Table 96) available for subnetting. The following table is a summary for class “B” subnet planning. Table 109 Class B Subnet Planning NO.
VSG-1200 User’s Guide 272 Appendix H IP Subnetting
VSG-1200 User’s Guide Index Symbols “natural” mask 266 Numerics authentication port 76 authentication setup 73 Authroize.
VSG-1200 User’s Guide C CA 189 CAS 29, 71, 75 CAS (Central Authentication Service) 29, 71 certificate 189 private key 190 secret password 190 Certification Authority (CA) 189 change system password 203 Charge 4 class of service bandwidth management 143 class-based bandwidth allocation 141 activate 143 community 173 Components 4 Concurrent Access 86 concurrent access 94 concurrent user 86, 232 allowable 179 set 86 Condition 4 configuration file 215 backup 220 backup via TFTP 222 backup via web configurator
VSG-1200 User’s Guide Web-based Button 96 E edit a subscriber account 92 edit billing profiles 80 EIA standard size rack 35 E-mail forwarding 31 e-mail server redirect 203 Equal Value 4 equal-share bandwidth allocation 141 configure 142 error messages 241 Ethernet Cable 227 Ethernet cable length specifications 249 types 249 Ethernet port 249 speed 249 export billing logs 185 F factory defaults 30 Failure 4 FCC 3 features 29 filename 215 Finland, Contact Information 6 firmware 215 download to TFTP server
VSG-1200 User’s Guide M IP address conflicts 233 scenario 1 233 scenario 2 233 scenario 3 234 scenario 4 234 IP address setup 253 DNS information 255, 260 install components 254 Macintosh OS 8/9 260 Macintosh OS X 262 verify settings 256, 260, 263 Windows 2000/NT/XP 256 Windows 95/98/Me 253 IP Addressing 265 IP Classes 265 IP Static Route 159 IP subnetting 265 ipconfig 260 MAC (Media Access Control) 181 MAC (Media Access Control) Filter 32 MAC filter 175 Management Information Base (MIB) 172 manual firmw
VSG-1200 User’s Guide P Parts 4 passthrough 149 destination URL or IP 151 subscriber computer IP or MAC 149 types 149 pin assignment 249 pin assignments 249 Plug-and-Play Internet Access 30 PMS 29, 79, 82 Based on Room 83 Based on Subscriber 83 charge modes 82 connection speed 84 port-location mapping 82 type of 84 PMS billing 79 service selection messages 123 PMS port settings 84 PMS setup 83 PMS transaction 187 PMS transaction messages 187 Point-to-Point Tunneling Protocol (PPTP) 30 Poland, Contact Infor
VSG-1200 User’s Guide RJ-45 249 rubber feet 35 Russia, Contact Information 7 S scenario option 77 scheduled firmware upgrade 217 Secure Socket Layer 189 Secure Socket Layer (SSL) 30 security 231 serial console port 250 server port 153 server port number 229 Service 4 service selection messages 123 session information 181 client computer 182 total entries 181 update interval 181 session timeout messages 125 session trace 167 example 169 filename convention 168 number of records 167 setup 167 TFTP server 16
VSG-1200 User’s Guide dynamic 84, 95 expiration 100 printout 129 restore 89 static 84, 85 types 84 subscriber account first login 94 subscriber authentication 117 subscriber database 31 subscriber information window 125 subscriber login 237 information window 237 subscriber login page 32 subscriber login screen 117 advanced 121 credit card billing 109 customize 117 frame 122 redirect 120 standard 118 support documentation 27 Support E-mail 6 Supporting Disk 27 surrogate DHCP server 31 Sweden, Contact Infor
VSG-1200 User’s Guide important note 147 WAN port cable pin assignment 249 WAN port, the 36, 37, 249 Warranty 4 Warranty Period 4 Web Configurator 32 recommended web browser 32 Web configurator Administrator login 42 web server port 203 Web Site 6 web-based configurator 32 winipcfg 256 Workmanship 4 Worldwide Contact Information 6 Z ZyXEL Limited Warranty Note 4 280 Index
