User Guide
Page 2
Every effort has been made to ensure that the information in this book may differ slightly from your product due to find other information on the VMG. Related Documentation • Quick Start Guide The Quick Start Guide shows how to connect the VMG and get up and running right away. • More Information Go to support.zyxel.com to differences in this manual is accurate. Screenshots and graphics in your product firmware or your computer operating system. VMG3925-B10B User's Guide 2 READ CAREFULLY BEFORE USE. KEEP THIS GUIDE FOR FUTURE REFERENCE. IMPORTANT!
Every effort has been made to ensure that the information in this book may differ slightly from your product due to find other information on the VMG. Related Documentation • Quick Start Guide The Quick Start Guide shows how to connect the VMG and get up and running right away. • More Information Go to support.zyxel.com to differences in this manual is accurate. Screenshots and graphics in your product firmware or your computer operating system. VMG3925-B10B User's Guide 2 READ CAREFULLY BEFORE USE. KEEP THIS GUIDE FOR FUTURE REFERENCE. IMPORTANT!
User Guide
Page 33
...Pre-Shared Key 802.11 Mode Example WPA2-PSK DoNotStealMyWirelessNetwork 802.11b/g/n Mixed 1 Click Network Setting > Wireless to access the Internet. VMG3925-B10B User's Guide 33 Select More Secure as the security level and WPA2-PSK as follows. Chapter 4 Tutorials 8 You should see ...for any information you have correctly set up a wireless network. Configure the screen using WPS (Section 4.3.2 on page 34) or manual configuration (Section 4.3.3 on page 38). 4.3.1 Configuring the Wireless Network Settings This example uses the following parameters to configure the wireless ...
...Pre-Shared Key 802.11 Mode Example WPA2-PSK DoNotStealMyWirelessNetwork 802.11b/g/n Mixed 1 Click Network Setting > Wireless to access the Internet. VMG3925-B10B User's Guide 33 Select More Secure as the security level and WPA2-PSK as follows. Chapter 4 Tutorials 8 You should see ...for any information you have correctly set up a wireless network. Configure the screen using WPS (Section 4.3.2 on page 34) or manual configuration (Section 4.3.3 on page 38). 4.3.1 Configuring the Wireless Network Settings This example uses the following parameters to configure the wireless ...
User Guide
Page 64
...AUTO - PPPoE pass through this if you select PPPoE or PPPoA in the IPv6/IPv4 Mode field.) VMG3925-B10B User's Guide 64 Select CBR (Continuous Bit Rate) to manually trigger the connection up. PPP Information (This is available only when you want to specify fixed (always-...in minutes that require closely controlled delay and delay variation. Auto Connect - select this if your VMG accepts CHAP only. Authentication Method Manual - PAP - Challenge Handshake Authentication Protocol (CHAP) provides authentication through a shared secret key and uses a three way handshake. It ...
...AUTO - PPPoE pass through this if you select PPPoE or PPPoA in the IPv6/IPv4 Mode field.) VMG3925-B10B User's Guide 64 Select CBR (Continuous Bit Rate) to manually trigger the connection up. PPP Information (This is available only when you want to specify fixed (always-...in minutes that require closely controlled delay and delay variation. Auto Connect - select this if your VMG accepts CHAP only. Authentication Method Manual - PAP - Challenge Handshake Authentication Protocol (CHAP) provides authentication through a shared secret key and uses a three way handshake. It ...
User Guide
Page 65
...an IGMP proxy on this option to establish membership in the DHCP Discovery packets that go to enable full cone NAT on the external network. VMG3925-B10B User's Guide 65 DHCP option 61 IAD This field displays when editing an existing WAN interface. The information is used to have the VMG act... is a fixed IP that your ISP. Select this option If the ISP assigned a fixed IP address. Static IP Address Select this if you configure manually. DNS Server1 DNS Server 2 Select Use Following Static DNS Address if you want the VMG to add in the IPv6/ IPv4 Mode field.) NAT Enable...
...an IGMP proxy on this option to establish membership in the DHCP Discovery packets that go to enable full cone NAT on the external network. VMG3925-B10B User's Guide 65 DHCP option 61 IAD This field displays when editing an existing WAN interface. The information is used to have the VMG act... is a fixed IP that your ISP. Select this option If the ISP assigned a fixed IP address. Static IP Address Select this if you configure manually. DNS Server1 DNS Server 2 Select Use Following Static DNS Address if you want the VMG to add in the IPv6/ IPv4 Mode field.) NAT Enable...
User Guide
Page 67
...for this feature to exit this traffic. Select Enable and enter a DSCP (DiffServ Code Point) value to traffic through this if you configure manually. Type the VLAN ID number (from the ISP automatically. Use this WAN interface. ADSL use same VLAN in Bridge and Route modes. Select... settings in both routing and bridge mode. IPv6 DNS Server 1 Enter the first IPv6 DNS server address assigned by the ISP. Enable this connection. VMG3925-B10B User's Guide 67 Enter a priority level (from 0 to 7) to add to the VMG. The greater the number, the higher the priority level...
...for this feature to exit this traffic. Select Enable and enter a DSCP (DiffServ Code Point) value to traffic through this if you configure manually. Type the VLAN ID number (from the ISP automatically. Use this WAN interface. ADSL use same VLAN in Bridge and Route modes. Select... settings in both routing and bridge mode. IPv6 DNS Server 1 Enter the first IPv6 DNS server address assigned by the ISP. Enable this connection. VMG3925-B10B User's Guide 67 Enter a priority level (from 0 to 7) to add to the VMG. The greater the number, the higher the priority level...
User Guide
Page 72
... user name above. IP Address Enter your ISP disabled PIN code authentication, leave this to have the VMG use the DNS server addresses you configure manually. The VMG will e-mail you cannot use the account to be in this to you enter the PIN code incorrectly, the 3G card may provide... ISP. Mail Server Select a mail server for example) provided by the ISP. Type a title that elapses before the VMG automatically disconnects from the ISP automatically. VMG3925-B10B User's Guide 72
... user name above. IP Address Enter your ISP disabled PIN code authentication, leave this to have the VMG use the DNS server addresses you configure manually. The VMG will e-mail you cannot use the account to be in this to you enter the PIN code incorrectly, the 3G card may provide... ISP. Mail Server Select a mail server for example) provided by the ISP. Type a title that elapses before the VMG automatically disconnects from the ISP automatically. VMG3925-B10B User's Guide 72
User Guide
Page 82
... a priority frame, meaning that only the priority level is significant and the default VID of www.zyxel.com is 204.217.0.2. everybody on the network - not everybody and not just 1. The address 224...network). All hosts must know the IP address of a computer before you DNS server addresses, manually enter them in wide use. This is still in the DNS server fields. 2 If ... in the following ways. 1 The ISP tells you the DNS server addresses, usually in two ways: VMG3925-B10B User's Guide 82 Unicast (1 sender - 1 recipient) or Broadcast (1 sender - IPv6 Addressing The 128...
... a priority frame, meaning that only the priority level is significant and the default VID of www.zyxel.com is 204.217.0.2. everybody on the network - not everybody and not just 1. The address 224...network). All hosts must know the IP address of a computer before you DNS server addresses, manually enter them in wide use. This is still in the DNS server fields. 2 If ... in the following ways. 1 The ISP tells you the DNS server addresses, usually in two ways: VMG3925-B10B User's Guide 82 Unicast (1 sender - 1 recipient) or Broadcast (1 sender - IPv6 Addressing The 128...
User Guide
Page 89
... the RADIUS server sends a new group key out to all clients. 7.3 The Guest / More AP Screen This screen allows you can manually type a preshared key from the drop-down list box. to 64 case-sensitive keyboard characters. Select TKIP if your wireless clients can all...when you select this section. The VMG supports WPA-PSK and WPA2-PSK simultaneously. The following table describes the labels in this option. VMG3925-B10B User's Guide 89 Table 19 Wireless > General: More Secure: WPA(2)-PSK LABEL Security Level Security Mode Generate password automatically Password DESCRIPTION Select...
... the RADIUS server sends a new group key out to all clients. 7.3 The Guest / More AP Screen This screen allows you can manually type a preshared key from the drop-down list box. to 64 case-sensitive keyboard characters. Select TKIP if your wireless clients can all...when you select this section. The VMG supports WPA-PSK and WPA2-PSK simultaneously. The following table describes the labels in this option. VMG3925-B10B User's Guide 89 Table 19 Wireless > General: More Secure: WPA(2)-PSK LABEL Security Level Security Mode Generate password automatically Password DESCRIPTION Select...
User Guide
Page 92
... directly. See Section 7.9.9.3 on page 108 for more information about this field. Select Enable and click Apply to configure security settings manually. Specify the maximum rate for downstream wireless traffic to WPA2-PSK or No Security. Or you can configure the WPS settings in...Secure (WPA(2)-PSK) to save your VMG. Specify the maximum rate for upstream wireless traffic to configure WiFi Protected Setup (WPS) on this screen. VMG3925-B10B User's Guide 92 Chapter 7 Wireless Table 21 Network Setting > Wireless > Guest / More AP > Edit (continued) LABEL Access Scenario Max. ...
... directly. See Section 7.9.9.3 on page 108 for more information about this field. Select Enable and click Apply to configure security settings manually. Specify the maximum rate for downstream wireless traffic to WPA2-PSK or No Security. Or you can configure the WPS settings in...Secure (WPA(2)-PSK) to save your VMG. Specify the maximum rate for upstream wireless traffic to configure WiFi Protected Setup (WPS) on this screen. VMG3925-B10B User's Guide 92 Chapter 7 Wireless Table 21 Network Setting > Wireless > Guest / More AP > Edit (continued) LABEL Access Scenario Max. ...
User Guide
Page 95
... APs wirelessly when WDS is compatible with other ZyXEL APs only. This field is the index number of the entry. You can function as a wireless network bridge allowing you to turn on WDS and enter the peer device's MAC address manually in this screen. VMG3925-B10B User's Guide 95 The VMG functions as a wireless...
... APs wirelessly when WDS is compatible with other ZyXEL APs only. This field is the index number of the entry. You can function as a wireless network bridge allowing you to turn on WDS and enter the peer device's MAC address manually in this screen. VMG3925-B10B User's Guide 95 The VMG functions as a wireless...
User Guide
Page 105
...synchronization field in conjunction with strong security, without having to configure security settings manually. At the time of the APs you to quickly set up a wireless .... Use the dynamic setting to automatically use the same preamble mode in busy wireless networks. VMG3925-B10B User's Guide 105 AP 1 has no wired Internet connection, but it , and to ... WDS security is compatible with AP 2, the notebook computer can establish a WDS link with other ZyXEL access points only. Short preamble increases performance as a wireless network bridge and establish WDS (Wireless ...
...synchronization field in conjunction with strong security, without having to configure security settings manually. At the time of the APs you to quickly set up a wireless .... Use the dynamic setting to automatically use the same preamble mode in busy wireless networks. VMG3925-B10B User's Guide 105 AP 1 has no wired Internet connection, but it , and to ... WDS security is compatible with AP 2, the notebook computer can establish a WDS link with other ZyXEL access points only. Short preamble increases performance as a wireless network bridge and establish WDS (Wireless ...
User Guide
Page 117
...server for the LAN interface's link-local address. DHCP centralizes IP address management on the VMG. Link Local Address Type EUI64 Select this to manually enter an interface ID for resolving domain names. Chapter 8 Home Networking Table 29 Network Setting > Home Networking > LAN Setup (continued) ... the DHCP server. Select DNS Proxy if you select Enable in the DHCP field. Select Static if you are assigned to. VMG3925-B10B User's Guide 117 DHCP Server State DHCP Select Enable to stop the DHCP server on central computers that you have the DNS ...
...server for the LAN interface's link-local address. DHCP centralizes IP address management on the VMG. Link Local Address Type EUI64 Select this to manually enter an interface ID for resolving domain names. Chapter 8 Home Networking Table 29 Network Setting > Home Networking > LAN Setup (continued) ... the DHCP server. Select DNS Proxy if you select Enable in the DHCP field. Select Static if you are assigned to. VMG3925-B10B User's Guide 117 DHCP Server State DHCP Select Enable to stop the DHCP server on central computers that you have the DNS ...
User Guide
Page 120
... network smoothly and automatically when it is no longer in this to save your LAN. Figure 52 Network Setting > Home Networking > UPnP VMG3925-B10B User's Guide 120 Group Name Select the interface group name for how to -peer network connectivity between the client and the VMG. IP ...Configuration/Edit LABEL DESCRIPTION Active Select this screen. Select Device Info Select a device or computer from the drop-down list or select Manual Input to manually enter a device's MAC address and IP address in the following screen to display the screen shown next. See page 114 for...
... network smoothly and automatically when it is no longer in this to save your LAN. Figure 52 Network Setting > Home Networking > UPnP VMG3925-B10B User's Guide 120 Group Name Select the interface group name for how to -peer network connectivity between the client and the VMG. IP ...Configuration/Edit LABEL DESCRIPTION Active Select this screen. Select Device Info Select a device or computer from the drop-down list or select Manual Input to manually enter a device's MAC address and IP address in the following screen to display the screen shown next. See page 114 for...
User Guide
Page 121
... Windows 7. Turn on the VMG. This is the index number of the VMG. Activate UPnP on your changes. Click Apply to manually configure port forwarding for the UPnP enabled application. # Description Destination IP Address External Port Internal Port Apply Cancel The table below displays the... address (although you must still enter the password to a LAN port of the UPnP NAT-T connection. Click Cancel to exit this screen. VMG3925-B10B User's Guide 121 This is connected to access the web configurator). Table 32 Network Setting > Home Networking > UPnP LABEL UPnP UPnP NAT...
... Windows 7. Turn on the VMG. This is the index number of the VMG. Activate UPnP on your changes. Click Apply to manually configure port forwarding for the UPnP enabled application. # Description Destination IP Address External Port Internal Port Apply Cancel The table below displays the... address (although you must still enter the password to a LAN port of the UPnP NAT-T connection. Click Cancel to exit this screen. VMG3925-B10B User's Guide 121 This is connected to access the web configurator). Table 32 Network Setting > Home Networking > UPnP LABEL UPnP UPnP NAT...
User Guide
Page 125
... be found in this screen. Select an IP address and it on Lan LABEL DESCRIPTION Wake by Address Select Manual and enter the IP address or MAC address of a single TFTP server. VMG3925-B10B User's Guide 125 Apply Click Apply to wake up Click this screen. MAC Address Enter the MAC address of...
... be found in this screen. Select an IP address and it on Lan LABEL DESCRIPTION Wake by Address Select Manual and enter the IP address or MAC address of a single TFTP server. VMG3925-B10B User's Guide 125 Apply Click Apply to wake up Click this screen. MAC Address Enter the MAC address of...
User Guide
Page 126
... negotiation. It does not mean you can configure the VMG as a server, the VMG provides the TCP/IP configuration for the DHCP clients (DHCP Pool). VMG3925-B10B User's Guide 126 See the product specifications in the DHCP Setup screen. • Some ISPs choose to obtain TCP/IP configuration at start-up . Chapter... Control Protocol) after the connection is pre-configured with the assigned IP address and subnet mask. If you turn DHCP service off, you must be manually configured.
... negotiation. It does not mean you can configure the VMG as a server, the VMG provides the TCP/IP configuration for the DHCP clients (DHCP Pool). VMG3925-B10B User's Guide 126 See the product specifications in the DHCP Setup screen. • Some ISPs choose to obtain TCP/IP configuration at start-up . Chapter... Control Protocol) after the connection is pre-configured with the assigned IP address and subnet mask. If you turn DHCP service off, you must be manually configured.
User Guide
Page 131
... the DNS route. 9.3.1 The DNS Route Add Screen You can manually add the VMG's DNS route entry. Table 39 Network Setting > Routing > DNS Route LABEL Add New DNS Route # Status Domain Name Interface Subnet Mask Modify DESCRIPTION Click this screen. VMG3925-B10B User's Guide 131 The gateway is the index number of the...
... the DNS route. 9.3.1 The DNS Route Add Screen You can manually add the VMG's DNS route entry. Table 39 Network Setting > Routing > DNS Route LABEL Add New DNS Route # Status Domain Name Interface Subnet Mask Modify DESCRIPTION Click this screen. VMG3925-B10B User's Guide 131 The gateway is the index number of the...
User Guide
Page 158
...(coming in from the drop-down list box. Trigger port forwarding solves this problem by allowing computers on a different LAN computer, you have to manually replace the LAN computer's IP address in the forwarding port with a specific port number and protocol ("open" port), the VMG forwards the traffic to...the LAN can use a dedicated range of ports on the client side and a dedicated range of a computer on the server side. For example: VMG3925-B10B User's Guide 158 The VMG records the IP address of the application here. OK Click OK to request a service with a specific port number and...
...(coming in from the drop-down list box. Trigger port forwarding solves this problem by allowing computers on a different LAN computer, you have to manually replace the LAN computer's IP address in the forwarding port with a specific port number and protocol ("open" port), the VMG forwards the traffic to...the LAN can use a dedicated range of ports on the client side and a dedicated range of a computer on the server side. For example: VMG3925-B10B User's Guide 158 The VMG records the IP address of the application here. OK Click OK to request a service with a specific port number and...
User Guide
Page 170
... the entry. Click Add New DNS Entry in this to edit the rule. Click the Delete icon to edit. Figure 92 DNS Entry: Add/Edit VMG3925-B10B User's Guide 170 Chapter 12 Dynamic DNS Setup If you have a private WAN IP address, then you want to delete an existing rule. 12.2.1 Add.../Edit DNS Entry You can manually add or edit the VMG's DNS name and IP address entry. This indicates the IP address assigned to view and configure DNS routes on the...
... the entry. Click Add New DNS Entry in this to edit the rule. Click the Delete icon to edit. Figure 92 DNS Entry: Add/Edit VMG3925-B10B User's Guide 170 Chapter 12 Dynamic DNS Setup If you have a private WAN IP address, then you want to delete an existing rule. 12.2.1 Add.../Edit DNS Entry You can manually add or edit the VMG's DNS name and IP address entry. This indicates the IP address assigned to view and configure DNS routes on the...
User Guide
Page 174
... server on the client's DHCP Vendor ID option information, you can have the VMG assign the IP addresses in different domains to different groups. VMG3925-B10B User's Guide 174 If you create multiple networks on the VMG (Section 14.2 on page 113 for both the default and user-defined groups.... through the interface group's WAN or LAN interfaces but not other . See Chapter 8 on page 174). 14.2 The Interface Group Screen You can manually add a LAN interface to a new group. Create interface groups to have the VMG automatically add the incoming traffic and the LAN interface on the ...
... server on the client's DHCP Vendor ID option information, you can have the VMG assign the IP addresses in different domains to different groups. VMG3925-B10B User's Guide 174 If you create multiple networks on the VMG (Section 14.2 on page 113 for both the default and user-defined groups.... through the interface group's WAN or LAN interfaces but not other . See Chapter 8 on page 174). 14.2 The Interface Group Screen You can manually add a LAN interface to a new group. Create interface groups to have the VMG automatically add the incoming traffic and the LAN interface on the ...