ZyXEL Communications SBG3300 series User manual

SBG3300 Series
IPSec VPN and Multiple-WAN Small Business Gateway
(Green Product)
Support Notes
January 2013
Edition 1.0

Content
Why use the SBG3300?..................................................................................5
Key Application Scenario............................................................................................8
Access Application Notes .........................................................................................11
Web GUI .......................................................................................................11
ADSL 2+ WAN Mode.....................................................................................13
IP Multicast Introduction .............................................................................16
NAT Introduction..........................................................................................16
Data Service FTP Downloading Scenario .....................................................17
Port Forwarding Configuration ....................................................................19
How to switch USE mode from storage to modem .....................................20
Wireless Application Notes ......................................................................................29
Wireless Introduction...................................................................................29
Wireless Configuration.................................................................................39
Virtual Private Network Application Notes..............................................................44
What is a Virtual Private Network?..........................................................................44
IPSec VPN configuration...............................................................................45
L2TP VPN configuration ...............................................................................48
PPTP VPN Overview .....................................................................................49
PPTP VPN Settings Configuration.................................................................49
WPS Application Notes ............................................................................................54
What is WPS? ...............................................................................................54
WPS configuration........................................................................................55
Maintenance Log......................................................................................................56
Internal Maintenance...................................................................................56
Maintenance Tools...................................................................................................58
Maintenance Procedure ..............................................................................58
Product FAQ .............................................................................................................61
Will the device work with my Internet connection?....................................61
Why do I need to use SBG3300?..................................................................61
What is PPPoE? ............................................................................................61
Does the device support PPPoE? .................................................................62
How do I know I am using PPPoE?...............................................................62

Why does my provider use PPPoE? .............................................................62
Which Internet Applications can I use with the device? .............................62
How can I configure the device?..................................................................62
What can we do with the device?................................................................63
Does the device support dynamic IP addressing? .......................................63
What is the difference between the internal IP and the real IP from my ISP?
......................................................................................................................63
What DHCP capability does the device support? ........................................63
How do I use the reset button, and what parameters will be reset by the
reset button?................................................................................................64
What network interfaces does the new device series support? .................64
How does the device support TFTP? ...........................................................64
Can the device support TFTP over WAN? ....................................................64
When do I need NAT? ..................................................................................64
What is BOOTP/DHCP?.................................................................................65
What is DDNS? .............................................................................................65
When do I need DDNS service? ...................................................................66
Wireless FAQ ............................................................................................................67
What is a Wireless LAN? ..............................................................................67
What are the advantages of Wireless LANs? ...............................................67
What are the disadvantages of Wireless LANs? ..........................................68
Where can you find wireless 802.11 networks?..........................................68
What is an Access Point? .............................................................................68
What is IEEE 802.11?....................................................................................68
What is 802.11b? .........................................................................................69
How fast is 802.11b?....................................................................................69
What is 802.11a? .........................................................................................69
What is 802.11g? .........................................................................................70
What is 802.11n? .........................................................................................70
Is it possible to use products from a variety of vendors?............................70
What is Wi-Fi? ..............................................................................................70
What types of devices use the 2.4 GHz Band? ............................................71
Does the 802.11 interfere with Bluetooth devices? ....................................71
Can radio signals pass through walls?..........................................................71
What are potential factors that may cause interference for WLAN products?
......................................................................................................................72
What's the difference between a WLAN and a WWAN? .............................72
What is Ad Hoc mode?.................................................................................72

What is Infrastructure mode?......................................................................73
How many Access Points are required in a given area? ..............................73
What is Direct-Sequence Spread Spectrum Technology –(DSSS)?..............73
What is Frequency-hopping Spread Spectrum Technology –(FHSS)?.........73
Do I need the same kind of antenna on both sides of a link? .....................74
What is the 2.4 GHz Frequency range?........................................................74
What is Server Set ID (SSID)? .......................................................................74
What is an ESSID?.........................................................................................74
How do I secure the data across an Access Point's radio link?....................75
What is WEP?...............................................................................................75
What is the difference between 40-bit and 64-bit WEP?............................75
What is a WEP key?......................................................................................76
Can the SSID be encrypted?.........................................................................76
By turning off the broadcast of SSID, can someone still sniff the SSID? ......76
What are Insertion Attacks?.........................................................................76
What is a Wireless Sniffer? ..........................................................................77
What is the difference between Open System and Shared Key of
Authentication Type? ...................................................................................77
What is 802.1x?............................................................................................77
What is the difference between No authentication required, No access
allowed and Authentication required? ........................................................77
What is AAA?................................................................................................78
What is RADIUS? ..........................................................................................78
What is WPA? ...............................................................................................79
What is WPA-PSK?........................................................................................79
What is WPA2?.............................................................................................79

Why use the SBG3300?
Key features of the SBG3300
The SBG3300 is a VDSL2 gateway providing high speed Internet access for
triple-play applications. It features VDSL2/ADSL2+ functionality, which
supports up to 17a profile in VDSL2. It is also equipped with 4-ports of Gigabit
Ethernet for LAN connections, 2-port USB host interfaces for file sharing or 3G
WAN backup, and built-in 802.11n (2 x 2 configuration) WLAN bringing relief
to those troublesome wirings.
VDSL2 high speed Internet access
The SBG3300 provides VDSL2 up to profile 17a with data rates up to
100 Mbps in downstream direction and 45 Mbps in upstream direction. The
VDSL2 technology can support the wide deployment of Triple Play services
such as voice, video, data, high definition television (HDTV) and interactive
gaming, it also enables operators and carriers to gradually, flexibly, and cost
efficiently upgrade existing xDSL-infrastructure.
Dual mode VDSL2/ADSL2+ functionality
SBG3300 series supports dual-mode functionality that enables service
providers to support ATM or PTM on the same device. It offers bi-directional
high speed VDSL2, VDSL connection with speed of up to 100/45 Mbps in PTM
mode and 24/1 Mbps ADSL2+, ADSL2 and ADSL connection in ATM mode. This
powerful feature ensures the service provider can support connections not
only on the IP network but also on the legacy ATM network without changing
the CPE.
Internet Access through 3G Networks
The SBG3300 with a USB interface for 3G USB dongles provides convenient
Internet access through 3G networks to eliminate the restrictions of wired
networks and to further extend last-mile connectivity. In Internet-challenged
environments, such as rural or mountain areas, 3G connectivity may be the
only viable solution; and it can be used to provide temporary Internet access
to places such as exhibition booths as well. Furthermore, 3G access can be

used as a WAN backup for high-availability Internet connections in office
environments.
802.11n wireless access
Built in with 802.11n technology, SBG3300 provides the ultimate solution
for speed and coverage. With data rate up to 300 Mbps, it provides stable and
reliable wireless connections for high speed data and multimedia delivery. It
eliminates dead zones and extends coverage by using coming IEEE 802.11n
technology and backwards compatible with any IEEE 802.11b/g/n Wi-Fi
certified device.
Quality of Service (QoS)
The SBG3300 series comes equipped with both ATM and IP QoS features. The
service provider can base its QoS policy on the service plan to freely design
and prioritize mission-critical services such as IPTV. This increases the network
efficiency and productivity to enable the service provider to bring real
multi-play into residential user’s life.
TR-069 Remote Management
With TR-069 standard management specifications, the service provider is able
to manage and configure the client devices remotely without end-user’s
manual intervention. This unique feature not only offers user truly
“plug-and-play” experience but also reduces the complexity of deployment
and therefore saves service provider’s operating and maintenance costs.
PPP over Ethernet
Since PPPoE benefits both Telco’s and ISPs, the SBG3300 implements this
feature and has tested it thoroughly with PPPoE servers.
NAT
NAT provides system administrators with an easy solution to create a private
IP network for security and IP management. Powered by NAT technology, the
SBG3300 supports complete NAT mapping and most popular Internet
multimedia applications, such as NetMeeting, MSN Messenger, Skype, ICQ,
IPTV, QuickTime, Real Player (RSP/RTSP), etc.

Key Application Scenario
Multi-Service application Scenario
The ZyXEL device provides shared Internet Access by connecting the DSL port to the
DSL or Modem jack on a splitter or your telephone jack. The SBG3300 serves as a
home gateway, providing high speed Internet service, and High Quality IPTV service.

Internet Connection
A typical Internet access application of the SBG3300 is shown below. For a small
office, some components need to be checked before accessing the Internet.
Before we begin.
The device is shipped with the following factory defaults:
1. IP address = 192.168.1.1, subnet mask = 255.255.255.0 (24 bits).
2. DHCP server enabled with IP pool starting from 192.168.1.33.
3. Default user’s username/password = user/1234.
Setting up the PC (Windows OS).
1. Ethernet Connection
All PCs must have an Ethernet adapter card installed.
2. TCP/IP Installation
You must first install the TCP/IP software on each PC before you can use it for the
Internet access. If you have already installed the TCP/IP protocol, go to the next
section to configure it; otherwise, follow these steps to install:
In the Control Panel/Network window, click Add button.
In the Select Network Component Type windows, select Protocol and click
Add.

In the Select Network Protocol windows, select Microsoft from the list of
manufacturers, then select TCP/IP from the Network Protocols and click OK.
3. TCP/IP Configuration
Follow these steps to configure Windows TCP/IP:
In the Control Panel/Network window, click the TCP/IP entry to select it and
click Properties button.
In the TCP/IP Properties window, select obtain an IP address automatically.
Note: Do not assign any arbitrary IP address and subnet mask to your PCs; otherwise,
you will not be able to access the Internet.
Click the WINS configuration tab and select Disable WINS Resolution.
Click the Gateway tab. Highlight any installed gateways and click the Remove
button until there are none listed.
Click the DNS Configuration tab and select Disable DNS.
Click OK to save and close the TCP/IP properties window.
Click OK to close the Network window. You will be prompted to insert your
Windows CD or disk. When the drivers are updated, you will be asked if you
want to restart the PC. Make sure that your Device is powered on before
answering “Yes” to the prompt. Repeat the aforementioned steps for each
Windows PC on your network.