ZyXEL Communications SBG3300 series User manual

SBG3300 Series
IPSec VPN and Multiple-WAN Small Business Gateway
(Green Product)
Support Notes
January 2013
Edition 1.0

Content
Why use the SBG3300?..................................................................................5
Key Application Scenario............................................................................................8
Access Application Notes .........................................................................................11
Web GUI .......................................................................................................11
ADSL 2+ WAN Mode.....................................................................................13
IP Multicast Introduction .............................................................................16
NAT Introduction..........................................................................................16
Data Service FTP Downloading Scenario .....................................................17
Port Forwarding Configuration ....................................................................19
How to switch USE mode from storage to modem .....................................20
Wireless Application Notes ......................................................................................29
Wireless Introduction...................................................................................29
Wireless Configuration.................................................................................39
Virtual Private Network Application Notes..............................................................44
What is a Virtual Private Network?..........................................................................44
IPSec VPN configuration...............................................................................45
L2TP VPN configuration ...............................................................................48
PPTP VPN Overview .....................................................................................49
PPTP VPN Settings Configuration.................................................................49
WPS Application Notes ............................................................................................54
What is WPS? ...............................................................................................54
WPS configuration........................................................................................55
Maintenance Log......................................................................................................56
Internal Maintenance...................................................................................56
Maintenance Tools...................................................................................................58
Maintenance Procedure ..............................................................................58
Product FAQ .............................................................................................................61
Will the device work with my Internet connection?....................................61
Why do I need to use SBG3300?..................................................................61
What is PPPoE? ............................................................................................61
Does the device support PPPoE? .................................................................62
How do I know I am using PPPoE?...............................................................62

Why does my provider use PPPoE? .............................................................62
Which Internet Applications can I use with the device? .............................62
How can I configure the device?..................................................................62
What can we do with the device?................................................................63
Does the device support dynamic IP addressing? .......................................63
What is the difference between the internal IP and the real IP from my ISP?
......................................................................................................................63
What DHCP capability does the device support? ........................................63
How do I use the reset button, and what parameters will be reset by the
reset button?................................................................................................64
What network interfaces does the new device series support? .................64
How does the device support TFTP? ...........................................................64
Can the device support TFTP over WAN? ....................................................64
When do I need NAT? ..................................................................................64
What is BOOTP/DHCP?.................................................................................65
What is DDNS? .............................................................................................65
When do I need DDNS service? ...................................................................66
Wireless FAQ ............................................................................................................67
What is a Wireless LAN? ..............................................................................67
What are the advantages of Wireless LANs? ...............................................67
What are the disadvantages of Wireless LANs? ..........................................68
Where can you find wireless 802.11 networks?..........................................68
What is an Access Point? .............................................................................68
What is IEEE 802.11?....................................................................................68
What is 802.11b? .........................................................................................69
How fast is 802.11b?....................................................................................69
What is 802.11a? .........................................................................................69
What is 802.11g? .........................................................................................70
What is 802.11n? .........................................................................................70
Is it possible to use products from a variety of vendors?............................70
What is Wi-Fi? ..............................................................................................70
What types of devices use the 2.4 GHz Band? ............................................71
Does the 802.11 interfere with Bluetooth devices? ....................................71
Can radio signals pass through walls?..........................................................71
What are potential factors that may cause interference for WLAN products?
......................................................................................................................72
What's the difference between a WLAN and a WWAN? .............................72
What is Ad Hoc mode?.................................................................................72

What is Infrastructure mode?......................................................................73
How many Access Points are required in a given area? ..............................73
What is Direct-Sequence Spread Spectrum Technology –(DSSS)?..............73
What is Frequency-hopping Spread Spectrum Technology –(FHSS)?.........73
Do I need the same kind of antenna on both sides of a link? .....................74
What is the 2.4 GHz Frequency range?........................................................74
What is Server Set ID (SSID)? .......................................................................74
What is an ESSID?.........................................................................................74
How do I secure the data across an Access Point's radio link?....................75
What is WEP?...............................................................................................75
What is the difference between 40-bit and 64-bit WEP?............................75
What is a WEP key?......................................................................................76
Can the SSID be encrypted?.........................................................................76
By turning off the broadcast of SSID, can someone still sniff the SSID? ......76
What are Insertion Attacks?.........................................................................76
What is a Wireless Sniffer? ..........................................................................77
What is the difference between Open System and Shared Key of
Authentication Type? ...................................................................................77
What is 802.1x?............................................................................................77
What is the difference between No authentication required, No access
allowed and Authentication required? ........................................................77
What is AAA?................................................................................................78
What is RADIUS? ..........................................................................................78
What is WPA? ...............................................................................................79
What is WPA-PSK?........................................................................................79
What is WPA2?.............................................................................................79

Why use the SBG3300?
Key features of the SBG3300
The SBG3300 is a VDSL2 gateway providing high speed Internet access for
triple-play applications. It features VDSL2/ADSL2+ functionality, which
supports up to 17a profile in VDSL2. It is also equipped with 4-ports of Gigabit
Ethernet for LAN connections, 2-port USB host interfaces for file sharing or 3G
WAN backup, and built-in 802.11n (2 x 2 configuration) WLAN bringing relief
to those troublesome wirings.
VDSL2 high speed Internet access
The SBG3300 provides VDSL2 up to profile 17a with data rates up to
100 Mbps in downstream direction and 45 Mbps in upstream direction. The
VDSL2 technology can support the wide deployment of Triple Play services
such as voice, video, data, high definition television (HDTV) and interactive
gaming, it also enables operators and carriers to gradually, flexibly, and cost
efficiently upgrade existing xDSL-infrastructure.
Dual mode VDSL2/ADSL2+ functionality
SBG3300 series supports dual-mode functionality that enables service
providers to support ATM or PTM on the same device. It offers bi-directional
high speed VDSL2, VDSL connection with speed of up to 100/45 Mbps in PTM
mode and 24/1 Mbps ADSL2+, ADSL2 and ADSL connection in ATM mode. This
powerful feature ensures the service provider can support connections not
only on the IP network but also on the legacy ATM network without changing
the CPE.
Internet Access through 3G Networks
The SBG3300 with a USB interface for 3G USB dongles provides convenient
Internet access through 3G networks to eliminate the restrictions of wired
networks and to further extend last-mile connectivity. In Internet-challenged
environments, such as rural or mountain areas, 3G connectivity may be the
only viable solution; and it can be used to provide temporary Internet access
to places such as exhibition booths as well. Furthermore, 3G access can be

used as a WAN backup for high-availability Internet connections in office
environments.
802.11n wireless access
Built in with 802.11n technology, SBG3300 provides the ultimate solution
for speed and coverage. With data rate up to 300 Mbps, it provides stable and
reliable wireless connections for high speed data and multimedia delivery. It
eliminates dead zones and extends coverage by using coming IEEE 802.11n
technology and backwards compatible with any IEEE 802.11b/g/n Wi-Fi
certified device.
Quality of Service (QoS)
The SBG3300 series comes equipped with both ATM and IP QoS features. The
service provider can base its QoS policy on the service plan to freely design
and prioritize mission-critical services such as IPTV. This increases the network
efficiency and productivity to enable the service provider to bring real
multi-play into residential user’s life.
TR-069 Remote Management
With TR-069 standard management specifications, the service provider is able
to manage and configure the client devices remotely without end-user’s
manual intervention. This unique feature not only offers user truly
“plug-and-play” experience but also reduces the complexity of deployment
and therefore saves service provider’s operating and maintenance costs.
PPP over Ethernet
Since PPPoE benefits both Telco’s and ISPs, the SBG3300 implements this
feature and has tested it thoroughly with PPPoE servers.
NAT
NAT provides system administrators with an easy solution to create a private
IP network for security and IP management. Powered by NAT technology, the
SBG3300 supports complete NAT mapping and most popular Internet
multimedia applications, such as NetMeeting, MSN Messenger, Skype, ICQ,
IPTV, QuickTime, Real Player (RSP/RTSP), etc.

Key Application Scenario
Multi-Service application Scenario
The ZyXEL device provides shared Internet Access by connecting the DSL port to the
DSL or Modem jack on a splitter or your telephone jack. The SBG3300 serves as a
home gateway, providing high speed Internet service, and High Quality IPTV service.

Internet Connection
A typical Internet access application of the SBG3300 is shown below. For a small
office, some components need to be checked before accessing the Internet.
Before we begin.
The device is shipped with the following factory defaults:
1. IP address = 192.168.1.1, subnet mask = 255.255.255.0 (24 bits).
2. DHCP server enabled with IP pool starting from 192.168.1.33.
3. Default user’s username/password = user/1234.
Setting up the PC (Windows OS).
1. Ethernet Connection
All PCs must have an Ethernet adapter card installed.
2. TCP/IP Installation
You must first install the TCP/IP software on each PC before you can use it for the
Internet access. If you have already installed the TCP/IP protocol, go to the next
section to configure it; otherwise, follow these steps to install:
In the Control Panel/Network window, click Add button.
In the Select Network Component Type windows, select Protocol and click
Add.

In the Select Network Protocol windows, select Microsoft from the list of
manufacturers, then select TCP/IP from the Network Protocols and click OK.
3. TCP/IP Configuration
Follow these steps to configure Windows TCP/IP:
In the Control Panel/Network window, click the TCP/IP entry to select it and
click Properties button.
In the TCP/IP Properties window, select obtain an IP address automatically.
Note: Do not assign any arbitrary IP address and subnet mask to your PCs; otherwise,
you will not be able to access the Internet.
Click the WINS configuration tab and select Disable WINS Resolution.
Click the Gateway tab. Highlight any installed gateways and click the Remove
button until there are none listed.
Click the DNS Configuration tab and select Disable DNS.
Click OK to save and close the TCP/IP properties window.
Click OK to close the Network window. You will be prompted to insert your
Windows CD or disk. When the drivers are updated, you will be asked if you
want to restart the PC. Make sure that your Device is powered on before
answering “Yes” to the prompt. Repeat the aforementioned steps for each
Windows PC on your network.

Access Application Notes
Web GUI
The following procedure describes the most typical operation of the device using a
browser. The device features an embedded Web server that allows you to use Web
browser to configure it. Please make sure there is no Telnet or Console login session
before configuring the router using a browser.
-Accessing the Prestige Web
Please enter the LAN IP address of the Prestige router in the URL location to retrieve
the web screen from the device. The default LAN IP of the device is 192.168.1.1. See
the example below.
-Log into the SBG3300 via Web GUI.
1. Set up your PC/NB IP address to be a DHCP client.
2. Connect to a LAN port of SBG3300 via RJ45 Ethernet cable and open your
Web browser.
3. The default IP of SBG3300 is 192.168.1.1
Username/password = admin/1234

3G Backup Connection
1. Go to Network Setting> Broadband > 3G WAN.
2. Card Description will show what dongle model is plugged into
SBG3300 Series.
3. If SBG3300 Series supports that dongle, 3G status will read Enable.
4. Fill in the PIN number.
5. Enter the APN string or number.

Application Scenario
The following example demonstrates a Triple Play service configuration running Data
and IPTV. The step by step guide beneath the following scenario illustration will take
you through the setup of the WAN Interface, NAT Port forwarding (using FTP service
to demonstrate Data service), Quality of Service and WLAN setting (to demonstrate
WPS setup).
The following figure is a simplified overall scenario diagram of WAN interface
configuration.
ADSL 2+ WAN Mode
In the ADSL WAN mode, we will set up two WAN interfaces: for data and IPTV
services. Based on the current implementation, the IPTV service will go through the
data WAN interface in routing mode.

1. Go to Networking Setting > Broadband and select Broadband tag.
2. Click the “Add new WAN Interface” button to create the data WAN interface.
3. In Add New Interface, give this interface a name (e.g. IPTV) and select the
ADSL over ATM interface Type.
4. Set interface Mode to Routing.
5. Choose IPoE (IP over Ethernet) WAN service Type.
6. Configure the PVC parameters (VPI/VCI). In this example, set 0/33.
7. Please set Service Category to “UBR without PCR” for Data and IPTV service
for medium priority.
8. Set IP Address to “Obtain an IP Address Automatically”.
9. Enable all Routing Features: select NAT Enable, IGMP Proxy Enable and Apply
as Default Gateway.
10. For DNS Server setting, choose “Obtain DNS info Automatically”.
11. Click Apply.

After completion, you will see two new WAN interfaces as shown in the following
screenshot.

IP Multicast Introduction
What is the IP Multicast?
Traditionally, the IP packets are transmitted in two ways: unicast or broadcast.
Multicast is a third way to deliver the IP packets to a group of hosts. Host groups are
identified by class D IP addresses, i.e., those with "1110" as their higher-order bits. In
dotted decimal notation, host group addresses range from 224.0.0.0 to
239.255.255.255. Among them, 224.0.0.1 is assigned to the permanent IP hosts
group, and 224.0.0.2 is assigned to the multicast routers group.
The IGMP (Internet Group Management Protocol) is the protocol used to support
multicast groups. The latest version is version 2 (See RFC2236). The IP hosts use
IGMP to report their multicast group membership to any immediate-neighbor
multicast routers, so the multicast routers can decide if a multicast packet needs to
be forwarded. At the start-up, the Prestige queries all directly connected networks to
gather group membership.
After that, the CPE updates the information by periodic queries. The device
implementation of IGMP is also compatible with version 1. The multicast setting can
be turned on or off on the Ethernet and remote nodes.
NAT Introduction
What is NAT?
NAT (Network Address Translation-NAT RFC 1631) is the translation of an
Internet Protocol address used within one network to a different IP address known
within another network. One network is designated as the inside network and the
other is the outside. Typically, a company maps its local inside network addresses to
one or more global outside IP addresses and "unmaps" the global IP addresses on
the incoming packets back into local IP addresses. The IP addresses for NAT can be
either fixed or dynamically assigned by the ISP. In addition, you can designate servers,
e.g., a Web server and a Telnet server, on your local network and make them
accessible to the outside world. If you do not define any servers, the NAT offers the
additional benefit of firewall protection. In such case, all incoming connections to

your network will be filtered out by the CPE, thus preventing intruders from probing
your network.
For more information on IP address translation, please refer to RFC 1631, The IP
Network Address Translator (NAT).
How does NAT work?
According to the following figure, we define the local IP addresses as the Internal
Local Addresses (ILA) and the global IP addresses as the Inside Global Addresses
(IGA). The term 'inside' refers to the set of networks that are subject to translation.
The NAT operates by mapping the ILA to the IGA required for communication with
hosts on other networks. It replaces the original IP source address (and TCP or UDP
source port numbers) and then forwards each packet to the Internet ISP, thus
making the packets appear as if they came from the NAT system itself (e.g., the CPE
router). The CPE keeps track of the original addresses and port numbers, so the
incoming reply packets can have their original values restored.
Data Service FTP Downloading Scenario
Topology

NAT provides system administrators with an easy solution to create a private IP
network for security and IP management. Powered by NAT technology, the SBG3300
supports complete NAT mapping and most popular Internet multimedia applications.
This functionality is best demonstrated with the NAT port forwarding feature
implemented in the CPE. In a scenario shown in the above diagram, we have an FTP
server installed behind the CPE with an IP assigned by the local DHCP server
(192.168.1.33). How should we configure the SBG3300, so that the notebook at the
WAN site can access the FTP server? The following step-by-step guide illustrates the
setup procedure.
PS: Make sure that NAT is enabled on the WAN interface.

Port Forwarding Configuration
a. Create a port forwarding rule for the FTP server.
1. Go to Network Setting> NAT > Port Forwarding and click “add new rule”.
2. Write the Service Name, e.g. “FTP”.
3. Select the WAN Interface, e.g. “ETHWAN”.
4. Enter the Server IP Address, e.g. “192.168.1.33”.
5. Click Apply.

How to switch USE mode from storage to modem
To add new 3G USB dongle, there are several information you need to fill in. These
information is Default VID, Default PID and Message Content.
To get above information, we need to plug the 3G usb dongle into the USB port of
SBG-3300 and then connect the console cable to SBG3300.
After login the command line, first thing is we need to enable the 3GWWAN debug
mode with command “celld Debug” via console.
After enabled the debug mode, we need to use “sh” command first to change the
shell mode.
To get the DefaultVID, DefaultPID and Message Content, please follow below steps.