VMG1312-B10A: AAISP Configuration: Difference between revisions
mNo edit summary |
mNo edit summary |
||
| Line 9: | Line 9: | ||
!Area !!Setting !!Note !!Date added |
!Area !!Setting !!Note !!Date added |
||
|- |
|- |
||
| Broadband || Configure WAN interface || |
| Broadband || Configure WAN interface || Further Settings on Control Pages: ADSL/FTTC, Bridge or WAN on port 4 (FTTP) || 2015-02-01 |
||
|- |
|- |
||
| Broadband || Configure PPP || |
| Broadband || Configure PPP || Settings as per the service || 2015-02-01 |
||
|- |
|- |
||
| Home Network || Configure DHCP || |
| Home Network || Configure DHCP || Further Settings on Control Pages, Default=All IPs using AAISP DNS servers or as set on Control Pages || 2015-02-01 |
||
|- |
|- |
||
| Home Network || Configure LAN subnet || |
| Home Network || Configure LAN subnet || If line has a block of public IPs use them, else default is 192.168.1.1 || 2015-02-01 |
||
|- |
|- |
||
| Wireless || Configure WiFi || Further Settings on Control Pages: SSID, Password or disable WiFi || 2015-02-01 |
| Wireless || Configure WiFi || Further Settings on Control Pages: SSID, Password or disable WiFi || 2015-02-01 |
||
|- |
|- |
||
| Wireless || Configure WiFi for 20Mhz || |
| Wireless || Configure WiFi for 20Mhz || Instead of 40Mhz see [[VMG1312: WiFi Tips]] || 2015-02-01 |
||
|- |
|- |
||
| Wireless || Configure WiFi for AES only|| This disables legacy/insecure TKIP see [[VMG1312: WiFi Tips]] || 2015-06-16 |
| Wireless || Configure WiFi for AES only|| This disables legacy/insecure TKIP see [[VMG1312: WiFi Tips]] || 2015-06-16 |
||
| Line 25: | Line 25: | ||
| Firewall || Configure Firewall on/off || Settings on Control Pages, Default=Enabled || 2015-02-01 |
| Firewall || Configure Firewall on/off || Settings on Control Pages, Default=Enabled || 2015-02-01 |
||
|- |
|- |
||
| TR-069 || Configure TR-069 || |
| TR-069 || Configure TR-069 || Allows the router to be managed by AAISP, we give customer the same controls as staff get || 2015-02-01 |
||
|- |
|- |
||
| Log || Configure Local logging || |
| Log || Configure Local logging || Logs: System, PPPoE, XDSL, Internet, Attack, Account. || 2015-05-29 |
||
|- |
|- |
||
| Firewall || Add a Firewall rule to allow ICMPv6 to LAN || Helps make IPv6 work! ||2015-06-16 |
| Firewall || Add a Firewall rule to allow ICMPv6 to LAN || Helps make IPv6 work! ||2015-06-16 |
||
|- |
|- |
||
| Home Network || Disable NAT || |
| Home Network || Disable NAT || If customer has a public IP block || 2015-02-01 |
||
|- |
|- |
||
| Maintenance || Disable SNMP || || 2015-02-01 |
| Maintenance || Disable SNMP || SNMP has a habit of having vulnerabilities, we are not aware of any for the VMG1312 though || 2015-02-01 |
||
|- |
|- |
||
| Maintenance || Disable 3G backup || || 2015-02-01 |
| Maintenance || Disable 3G backup || Not usually required || 2015-02-01 |
||
|- |
|- |
||
| Firewall || Disable 'DoS Protection Blocking' || |
| Firewall || Disable 'DoS Protection Blocking' || It does odd things, like blocking WebUI over WiFi! || 2015-06-16 |
||
|- |
|- |
||
| Maintenance || Change NTP servers || |
| Maintenance || Change NTP servers || time.aa.net.uk and 0.uk.pool.ntp.org || 2015-02-01 |
||
|- |
|- |
||
| Maintenance || Change 'supervisor' password || Setting on Control Pages || 2015-02-01 |
| Maintenance || Change 'supervisor' password || Setting on Control Pages (same as admin) || 2015-02-01 |
||
|- |
|- |
||
| Maintenance || Change 'admin' password || Setting on Control Pages || 2015-02-01 |
| Maintenance || Change 'admin' password || Setting on Control Pages || 2015-02-01 |
||
| Line 47: | Line 47: | ||
| Firewall || Change Remote Management Options || Further Settings on Control Pages || 2015-02-01 |
| Firewall || Change Remote Management Options || Further Settings on Control Pages || 2015-02-01 |
||
|- |
|- |
||
| QoS || Change QoS || to give upstream priority based on 'Packet Length' See: [[VMG1312: QoS]] || 2015-02-01 |
| QoS || Change QoS || Set to give upstream priority based on 'Packet Length' See: [[VMG1312: QoS]] || 2015-02-01 |
||
|- |
|- |
||
| Firewall || Change 'Deny Ping Response' to Disable, || |
| Firewall || Change 'Deny Ping Response' to Disable, || Allows the router to reply to pings || 2015-02-01 |
||
|- |
|- |
||
| QoS || Disable the default QoS Classes || See: [[VMG1312: QoS]] || 2015-02-01 |
| QoS || Disable the default QoS Classes || See: [[VMG1312: QoS]] || 2015-02-01 |
||
|- |
|- |
||
| Maintenance || Remove the default read-only zyuser user || || 2015-02-01 |
| Maintenance || Remove the default read-only zyuser user as no need for it || || 2015-02-01 |
||
|} |
|} |
||
Revision as of 19:36, 18 Haziran 2015
AAISP configure routers via TR-069 protocol. We generate a config file and this is sent to the router. Firmware updates are also able to be sent to the router.
Customers are free to alter the configuration as supplied, sending a configuration from the Control Pages will overwrite any settings changed though.
Here is an overview of the settings that are modified from the default, you can sort the table by the date added column to see any new changes.
| Area | Setting | Note | Date added |
|---|---|---|---|
| Broadband | Configure WAN interface | Further Settings on Control Pages: ADSL/FTTC, Bridge or WAN on port 4 (FTTP) | 2015-02-01 |
| Broadband | Configure PPP | Settings as per the service | 2015-02-01 |
| Home Network | Configure DHCP | Further Settings on Control Pages, Default=All IPs using AAISP DNS servers or as set on Control Pages | 2015-02-01 |
| Home Network | Configure LAN subnet | If line has a block of public IPs use them, else default is 192.168.1.1 | 2015-02-01 |
| Wireless | Configure WiFi | Further Settings on Control Pages: SSID, Password or disable WiFi | 2015-02-01 |
| Wireless | Configure WiFi for 20Mhz | Instead of 40Mhz see VMG1312: WiFi Tips | 2015-02-01 |
| Wireless | Configure WiFi for AES only | This disables legacy/insecure TKIP see VMG1312: WiFi Tips | 2015-06-16 |
| Firewall | Configure Firewall on/off | Settings on Control Pages, Default=Enabled | 2015-02-01 |
| TR-069 | Configure TR-069 | Allows the router to be managed by AAISP, we give customer the same controls as staff get | 2015-02-01 |
| Log | Configure Local logging | Logs: System, PPPoE, XDSL, Internet, Attack, Account. | 2015-05-29 |
| Firewall | Add a Firewall rule to allow ICMPv6 to LAN | Helps make IPv6 work! | 2015-06-16 |
| Home Network | Disable NAT | If customer has a public IP block | 2015-02-01 |
| Maintenance | Disable SNMP | SNMP has a habit of having vulnerabilities, we are not aware of any for the VMG1312 though | 2015-02-01 |
| Maintenance | Disable 3G backup | Not usually required | 2015-02-01 |
| Firewall | Disable 'DoS Protection Blocking' | It does odd things, like blocking WebUI over WiFi! | 2015-06-16 |
| Maintenance | Change NTP servers | time.aa.net.uk and 0.uk.pool.ntp.org | 2015-02-01 |
| Maintenance | Change 'supervisor' password | Setting on Control Pages (same as admin) | 2015-02-01 |
| Maintenance | Change 'admin' password | Setting on Control Pages | 2015-02-01 |
| Firewall | Change Remote Management Options | Further Settings on Control Pages | 2015-02-01 |
| QoS | Change QoS | Set to give upstream priority based on 'Packet Length' See: VMG1312: QoS | 2015-02-01 |
| Firewall | Change 'Deny Ping Response' to Disable, | Allows the router to reply to pings | 2015-02-01 |
| QoS | Disable the default QoS Classes | See: VMG1312: QoS | 2015-02-01 |
| Maintenance | Remove the default read-only zyuser user as no need for it | 2015-02-01 |
- Static routes are currently not configured. (Only applicable if you have multiple public IP blocks and need them routed to a secondary router. These can be configured manually though.
This list may not be exhaustive, and may change over time.