VMG1312-B10A: AAISP Configuration: Difference between revisions

← Older edit

VMG1312-B10A: AAISP Configuration (view source)

Revision as of 00:22, 18 August 2018

2,573 bytes added , 18 August 2018

clean up

Reedy

editor

699

edits

Revision as of 08:59, 17 June 2015 (view source) AA-Andrew (talk \| contribs) mNo edit summary ← Older edit		Latest revision as of 00:22, 18 August 2018 (view source) Reedy (talk \| contribs) (clean up)
(41 intermediate revisions by 2 users not shown)
Customers are free to alter the configuration as supplied, sending a configuration from the Control Pages will overwrite any settings changed though. Here is an overview of the settings that are modified from the default:, you can sort the table by the date added column to see any new changes. {\| class="wikitable sortable" !Setting !!Note !!Date added▼ \|- ▲!Area !!Setting !!Note !!Date added Configure WAN interface \|\| (Further Settings on Control Pages: ADSL/FTTC, Bridge or WAN on port 4 (FTTP)) \|\| 2015-02-01▼ \|- ▲\| Broadband \|\| Configure WAN interface \|\| (Further Settings on Control Pages: ADSL/FTTC, Bridge or WAN on port 4 (FTTP)) \|\| 2015-02-01 ~~Configure PPP settings as per the service \|\| \|\| 2015-02-01~~ \|- \| Broadband \|\| Configure WAN VLAN 802.1q=101 \|\| Only for the VDSL WAN interface. \|\| 2015-02-01 ~~Configure DHCP \|\| (Further Settings on Control Pages, Default=All IPs using AAISP DNS servers or as set on Control Pages) \|\| 2015-02-01~~ \|- ~~Configure~~\| ~~LAN~~ ~~subnet~~Broadband if\|\| ~~line~~Configure ~~has a block of public IPs.~~PPP \|\| ~~(else~~Settings as ~~default~~per isthe ~~192.168.1.1)~~service \|\| 2015-02-01 \|- \| Home Network \|\| Configure ~~WiFi~~DHCP \|\| (Further Settings on Control Pages~~: SSID~~, ~~Password~~Default=All IPs using AAISP DNS servers or ~~disable~~as ~~WiFi)~~set on Control Pages \|\| 2015-02-01 \|- \| Home Network \|\| Configure ~~WiFi~~LAN ~~for~~subnet ~~20Mhz~~\|\| ~~instead~~If line has a block of ~~the~~public ~~40Mhz~~IPs ~~default~~use \|\|them, ~~(see~~else ~~[[VMG1312:~~default ~~WiFi~~is ~~Tips]])~~192.168.1.1 \|\| 2015-02-01 \|- \| Home Network \|\| Configure LAN subnet \|\| If router set for bridge mode, leave IP as 192.168.1.1 \|\| 2015-06-19 ~~Configure WiFi for AES only (not legacy TKIP)\|\| \|\| 2015-06-16~~ \|- ~~Configure~~\| ~~Firewall~~ ~~on/off~~Wireless \|\| Configure WiFi \|\| (Further Settings on Control Pages: SSID, ~~Default=Enabled)~~Password or disable WiFi \|\| 2015-02-01 \|- ~~Configure~~\| ~~TR-069~~ soWireless ~~the~~\|\| ~~router~~Configure ~~can~~WiFi befor ~~managed by AAISP~~20 MHz \|\| ~~(we give customer~~Instead ~~the~~of ~~same~~40 MHz ~~controls~~see as[[VMG1312: ~~staff~~WiFi ~~get)~~Tips]] \|\| 2015-02-01 \|- \| Wireless \|\| Configure ~~Local~~WiFi ~~logging~~for ~~(on~~AES ~~router)~~only\|\| toThis ~~log:~~disables ~~System,~~legacy/insecure ~~PPPoE,~~TKIP ~~XDSL,~~ ~~Internet,~~see [[VMG1312: ~~Attack,~~WiFi ~~Account.~~Tips]] ~~(added~~\|\| 2015-0506-~~29)~~16 \|- ~~Add~~\| a Firewall ~~rule~~\|\| toConfigure ~~allow~~Firewall on/off ~~ICMPv6~~ \|\| Settings on Control Pages, Default=Enabled \|\| 2015-0602-16 01 \|- ~~Disable~~\| TR-069 \|\| Configure TR-069 \|\| Allows the router to be managed by ~~NAT~~AAISP, ifwe give customer ~~has~~the asame ~~public~~controls IPas ~~block~~staff \|\|get \|\| 2015-02-01 \|- \| Log \|\| Configure Local logging \|\| Logs: System, PPPoE, XDSL, Internet, Attack, Account. \|\| 2015-05-29 ~~Disable SNMP \|\| \|\| 2015-02-01~~ \|- \| Firewall \|\| Rule to allow ICMPv6 to LAN \|\| Helps make IPv6 work! \|\|2015-06-16 ~~Disable 3G backup \|\| \|\| 2015-02-01~~ \|- ~~Disable~~\| ~~'DoS~~ ~~Protection~~Home ~~Blocking'~~Network \|\| asDisable itNAT ~~does~~\|\| ~~odd~~If ~~things,~~customer ~~like~~has ~~blocking~~a ~~WebUI~~public ~~over~~IP ~~WiFi~~block \|\| 2015-0602-1601 \|- \| Maintenance \|\| Disable SNMP \|\| SNMP has a habit of having vulnerabilities, we are not aware of any for the VMG1312 though \|\| 2015-02-01 ~~Change NTP servers \|\| to be time.aa.net.uk and 0.uk.pool.ntp.org \|\| 2015-02-01~~ \|- ~~Change~~\| ~~'supervisor'~~ ~~password~~Maintenance \|\| ~~(Setting~~Disable on3G backup \|\| ~~Control~~Not ~~Pages)~~usually required \|\| 2015-02-01 \|- \| Firewall \|\| Disable 'DoS Protection Blocking' \|\| It does odd things, like blocking WebUI over WiFi! \|\| 2015-06-16 ~~Change 'admin' password \|\| (Setting on Control Pages) \|\| 2015-02-01~~ \|- ~~Change~~\| ~~Remote~~ ~~Management Options~~Maintenance \|\| ~~(Further~~Change ~~Settings~~NTP servers \|\| ontime.aa.net.uk ~~Control~~and ~~Pages)~~0.uk.pool.ntp.org \|\| 2015-02-01 \|- ~~Change~~\| ~~QoS~~ Maintenance \|\| toChange ~~give~~'supervisor' ~~upstream~~password ~~priority~~\|\| ~~based~~Setting on ~~'Packet~~Control ~~Length'~~Pages (~~See:~~same ~~[[VMG1312:~~as ~~QoS]]~~admin) \|\| 2015-02-01 \|- ~~Change~~\| ~~'Deny~~ ~~Ping Response' to Disable,~~Maintenance \|\| toChange ~~allow~~'admin' ~~the~~password ~~router~~\|\| toSetting ~~reply~~on toControl ~~ping.~~Pages \|\| 2015-02-01 \|- \| Firewall \|\| Change Remote Management Options \|\| Further Settings on Control Pages. Default is to only allow the LAN and the AAISP offices access. \|\| 2015-02-01 Disable the default QoS Classes \|\| (See: [[VMG1312: QoS]]) \|\| 2015-02-01▼ \|- \| QoS \|\| Change QoS \|\| Set to give upstream priority based on 'Packet Length' See: [[VMG1312: QoS]] \|\| 2015-02-01 ~~Remove the default read-only zyuser user \|\| \|\| 2015-02-01~~ \|- \| Firewall \|\| Change 'Deny Ping Response' to Disable, \|\| Allows the router to reply to pings \|\| 2015-02-01 \|- ▲\| QoS \|\| Disable the default QoS Classes \|\| (See: [[VMG1312: QoS]]) \|\| 2015-02-01 \|- \| Maintenance \|\| Remove zyuser user \|\| It is a default read-only user, there is no need for it \|\| 2015-02-01 \|} *[[VMG1312: Static Routes\|Static routes]] are currently not configured. (Only applicable if you have multiple public IP blocks and need them routed to a secondary router. These can be configured manually though. This list may not be exhaustive, and may change over time. ==WAN Configuration== As mentioned above, the WAN side of the router is configured depending on the Service provided and the settings on the Control Pages. {\| class="wikitable" !Service !Bridge !WAN port !Note: WAN !Note: LAN !Note: WiFi !Other notes \|---- !colspan="7"\|Routing Configurations - Connecting to phone line \|---- !ADSL \|No \|DSL \|Plugs in to phone line \|Customer LAN \|Customer LAN \|MTU 1492 \|---- !FTTC wires only \|No \|DSL \|Plugs in to phone line \|Customer LAN \|Customer LAN \|MTU 1492, WAN VLAN 802.1q=101 \|---- !colspan="7"\|Routing Configurations - Connecting to another modem \|---- !FTTC engineer install (not available for new installations) \|No \|Port 4 \|plugs in to Openreach modem (no longer supplied) \|Customer LAN \|Customer LAN \|1492 MTU, WAN VLAN 802.1q=101. QoS will not know the uplink speed automatically, The rate can be set under Network Setting - Broadband - #3 edit \|---- !FTTP \|No \|Port 4 \|plugs in to Openreach modem \|Customer LAN \|Customer LAN \|1492 MTU. QoS will not know the uplink speed automatically, The rate can be set under Network Setting - Broadband - #3 edit \|---- !colspan="7"\|Bridge Configurations \|---- !FTTC wires only with Customer own PPPoE router \|Yes \|DSL \|Plugs in to phone line \|Customer PPPoE router \|Usually Disabled \|ZyXEL becomes a bridging modem. MTU 1492. WAN VLAN 802.1q=101 \|---- !ADSL with Customer own PPPoE router \|Yes \|DSL \|Plugs in to phone line \|Customer PPPoE router \|Usually Disabled \|ZyXEL becomes a bridging modem. MTU 1492 \|---- \|} =Making Changes= If you make changes to your configuration then you may want to back it up. See: [[VMG1312: Backup Configuration]] [[Category:~~ZyXEL_VMG1312~~ZyXEL VMG1312-B10A\|AAISP Configuration]]