VMG1312-B10A: AAISP Configuration: Difference between revisions

← Older edit

VMG1312-B10A: AAISP Configuration (view source)

Revision as of 00:22, 18 August 2018

2,525 bytes added , 18 August 2018

clean up

Reedy

editor

699

edits

Revision as of 09:01, 17 June 2015 (view source) AA-Andrew (talk \| contribs) mNo edit summary ← Older edit		Latest revision as of 00:22, 18 August 2018 (view source) Reedy (talk \| contribs) (clean up)
(38 intermediate revisions by 2 users not shown)
Customers are free to alter the configuration as supplied, sending a configuration from the Control Pages will overwrite any settings changed though. Here is an overview of the settings that are modified from the default:, you can sort the table by the date added column to see any new changes. {\| class="wikitable sortable" \|- !Area !!Setting !!Note !!Date added \|- \| Broadband \|\| Configure WAN interface \|\| (Further Settings on Control Pages: ADSL/FTTC, Bridge or WAN on port 4 (FTTP)) \|\| 2015-02-01 \|- \| ~~Configure~~ ~~PPP~~Broadband ~~settings~~\|\| asConfigure ~~per~~WAN ~~the~~VLAN ~~service~~802.1q=101 \|\| Only for the VDSL WAN interface. \|\| 2015-02-01 \|- \| ~~Configure~~ ~~DHCP~~Broadband \|\| ~~(Further~~Configure ~~Settings~~PPP on\|\| ~~Control Pages, Default=All IPs using AAISP DNS servers or~~Settings as ~~set on~~per ~~Control~~the ~~Pages)~~service \|\| 2015-02-01 \|- \| Home Network \|\| Configure DHCP \|\| Further Settings on Control Pages, Default=All IPs using AAISP DNS servers or as set on Control Pages \|\| 2015-02-01 ~~\| Configure LAN subnet if line has a block of public IPs. \|\| (else default is 192.168.1.1) \|\| 2015-02-01~~ \|- \| Home Network \|\| Configure ~~WiFi~~LAN subnet \|\| ~~(Further~~If line has a block ~~Settings~~of onpublic ~~Control~~IPs ~~Pages:~~use ~~SSID~~them, ~~Password~~else ordefault ~~disable~~is ~~WiFi)~~192.168.1.1 \|\| 2015-02-01 \|- \| Home Network \|\| Configure ~~WiFi~~LAN ~~for~~subnet ~~20Mhz~~\|\| ~~instead~~If ofrouter ~~the~~set ~~40Mhz~~for ~~default~~bridge \|\|mode, ~~(see~~leave ~~[[VMG1312:~~IP ~~WiFi~~as ~~Tips]])~~192.168.1.1 \|\| 2015-0206-0119 \|- \| Wireless \|\| Configure WiFi ~~for~~\|\| ~~AES~~Further ~~only~~Settings ~~(not~~on ~~legacy~~Control ~~TKIP)\|\|~~Pages: SSID, Password or disable WiFi \|\| 2015-0602-1601 \|- \| Wireless \|\| Configure ~~Firewall~~WiFi ~~on/off~~for 20 MHz \|\| ~~(Settings~~Instead of on40 MHz ~~Control~~see ~~Pages,~~[[VMG1312: ~~Default=Enabled)~~WiFi Tips]] \|\| 2015-02-01 \|- \| Wireless \|\| Configure WiFi for AES only\|\| This disables legacy/insecure TKIP see [[VMG1312: WiFi Tips]] \|\| 2015-06-16 \| Configure TR-069 so the router can be managed by AAISP \|\| (we give customer the same controls as staff get) \|\| 2015-02-01▼ \|- \| Firewall \|\| Configure ~~Local~~Firewall ~~logging (~~on/off ~~router)~~ to\|\| ~~log:~~Settings ~~System,~~on ~~PPPoE,~~Control ~~XDSL~~Pages, ~~Internet, Attack,~~Default=Enabled ~~Account.~~ ~~(added~~\|\| 2015-0502-~~29)~~01 \|- ▲\| TR-069 \|\| Configure TR-069 so\|\| Allows the router ~~can~~to be managed by AAISP, ~~\|\| (~~we give customer the same controls as staff get) \|\| 2015-02-01 \| Add a Firewall rule to allow ICMPv6 \|\| \|\|2015-06-16 ▼ \|- \| Log \|\| Configure Local logging \|\| Logs: System, PPPoE, XDSL, Internet, Attack, Account. \|\| 2015-05-29 ~~\| Disable NAT, if customer has a public IP block \|\| \|\| 2015-02-01~~ \|- ▲\| ~~Add a~~ Firewall ~~rule~~\|\| Rule to allow ICMPv6 to LAN \|\| Helps make IPv6 work! \|\|2015-06-16 ~~\| Disable SNMP \|\| \|\| 2015-02-01~~ \|- \| ~~Disable~~ 3GHome ~~backup~~Network \|\| Disable NAT \|\| If customer has a public IP block \|\| 2015-02-01 \|- \| Maintenance \|\| Disable SNMP \|\| SNMP has a habit of having vulnerabilities, we are not aware of any for the VMG1312 though \|\| 2015-02-01 \| Disable 'DoS Protection Blocking' \|\| as it does odd things, like blocking WebUI over WiFi \|\| 2015-06-16▼ \|- \| ~~Change~~ ~~NTP servers~~Maintenance \|\| toDisable be3G backup \|\| ~~time.aa.net.uk~~Not ~~and~~usually ~~0.uk.pool.ntp.org~~required \|\| 2015-02-01 \|- ▲\| Firewall \|\| Disable 'DoS Protection Blocking' \|\| ~~as it~~It does odd things, like blocking WebUI over WiFi! \|\| 2015-06-16 ~~\| Change 'supervisor' password \|\| (Setting on Control Pages) \|\| 2015-02-01~~ \|- \| Maintenance \|\| Change ~~'admin'~~NTP ~~password~~servers \|\| ~~(Setting on~~time.aa.net.uk ~~Control~~and ~~Pages)~~0.uk.pool.ntp.org \|\| 2015-02-01 \|- \| ~~Change~~ ~~Remote~~Maintenance ~~Management~~\|\| ~~Options~~Change 'supervisor' password \|\| ~~(Further Settings~~Setting on Control Pages (same as admin) \|\| 2015-02-01 \|- \| ~~Change~~ ~~QoS~~Maintenance \|\| toChange ~~give~~'admin' ~~upstream~~password ~~priority~~\|\| ~~based~~Setting on ~~'Packet Length' (See: [[VMG1312:~~Control ~~QoS]])~~Pages \|\| 2015-02-01 \|- \| ~~Change~~ ~~'Deny~~Firewall ~~Ping~~\|\| ~~Response'~~Change toRemote ~~Disable,~~Management Options \|\| Further Settings on Control Pages. Default is to only allow the ~~router~~LAN toand ~~reply~~the toAAISP offices ~~ping~~access. \|\| 2015-02-01 \|- \| ~~Disable~~ ~~the~~QoS ~~default~~\|\| Change QoS ~~Classes~~ \|\| (Set to give upstream priority based on 'Packet Length' See: [[VMG1312: QoS]]) \|\| 2015-02-01 \|- \| Firewall \|\| Change 'Deny Ping Response' to Disable, \|\| Allows the router to reply to pings \|\| 2015-02-01 \| Remove the default read-only zyuser user \|\| \|\| 2015-02-01▼ \|- \| QoS \|\| Disable the default QoS Classes \|\| See: [[VMG1312: QoS]] \|\| 2015-02-01 \|- ▲\| Maintenance \|\| Remove ~~the~~zyuser user \|\| It is a default read-only ~~zyuser~~ user, \|\|there is no need for it \|\| 2015-02-01 \|} *[[VMG1312: Static Routes\|Static routes]] are currently not configured. (Only applicable if you have multiple public IP blocks and need them routed to a secondary router. These can be configured manually though. This list may not be exhaustive, and may change over time. ==WAN Configuration== As mentioned above, the WAN side of the router is configured depending on the Service provided and the settings on the Control Pages. {\| class="wikitable" !Service !Bridge !WAN port !Note: WAN !Note: LAN !Note: WiFi !Other notes \|---- !colspan="7"\|Routing Configurations - Connecting to phone line \|---- !ADSL \|No \|DSL \|Plugs in to phone line \|Customer LAN \|Customer LAN \|MTU 1492 \|---- !FTTC wires only \|No \|DSL \|Plugs in to phone line \|Customer LAN \|Customer LAN \|MTU 1492, WAN VLAN 802.1q=101 \|---- !colspan="7"\|Routing Configurations - Connecting to another modem \|---- !FTTC engineer install (not available for new installations) \|No \|Port 4 \|plugs in to Openreach modem (no longer supplied) \|Customer LAN \|Customer LAN \|1492 MTU, WAN VLAN 802.1q=101. QoS will not know the uplink speed automatically, The rate can be set under Network Setting - Broadband - #3 edit \|---- !FTTP \|No \|Port 4 \|plugs in to Openreach modem \|Customer LAN \|Customer LAN \|1492 MTU. QoS will not know the uplink speed automatically, The rate can be set under Network Setting - Broadband - #3 edit \|---- !colspan="7"\|Bridge Configurations \|---- !FTTC wires only with Customer own PPPoE router \|Yes \|DSL \|Plugs in to phone line \|Customer PPPoE router \|Usually Disabled \|ZyXEL becomes a bridging modem. MTU 1492. WAN VLAN 802.1q=101 \|---- !ADSL with Customer own PPPoE router \|Yes \|DSL \|Plugs in to phone line \|Customer PPPoE router \|Usually Disabled \|ZyXEL becomes a bridging modem. MTU 1492 \|---- \|} =Making Changes= If you make changes to your configuration then you may want to back it up. See: [[VMG1312: Backup Configuration]] [[Category:~~ZyXEL_VMG1312~~ZyXEL VMG1312-B10A\|AAISP Configuration]]