VMG1312-B10A: AAISP Configuration

AAISP configure routers via TR-069 protocol. We generate a config file and this is sent to the router. Firmware updates are also able to be sent to the router.

Customers are free to alter the configuration as supplied, sending a configuration from the Control Pages will overwrite any settings changed though.

Here is an overview of the settings that are modified from the default, you can sort the table by the date added column to see any new changes.

Area	Setting	Note	Date added
Broadband	Configure WAN interface	Further Settings on Control Pages: ADSL/FTTC, Bridge or WAN on port 4 (FTTP)	2015-02-01
Broadband	Configure PPP	Settings as per the service	2015-02-01
Home Network	Configure DHCP	Further Settings on Control Pages, Default=All IPs using AAISP DNS servers or as set on Control Pages	2015-02-01
Home Network	Configure LAN subnet	If line has a block of public IPs use them, else default is 192.168.1.1	2015-02-01
Wireless	Configure WiFi	Further Settings on Control Pages: SSID, Password or disable WiFi	2015-02-01
Wireless	Configure WiFi for 20Mhz	Instead of 40Mhz see VMG1312: WiFi Tips	2015-02-01
Wireless	Configure WiFi for AES only	This disables legacy/insecure TKIP see VMG1312: WiFi Tips	2015-06-16
Firewall	Configure Firewall on/off	Settings on Control Pages, Default=Enabled	2015-02-01
TR-069	Configure TR-069	Allows the router to be managed by AAISP, we give customer the same controls as staff get	2015-02-01
Log	Configure Local logging	Logs: System, PPPoE, XDSL, Internet, Attack, Account.	2015-05-29
Firewall	Add a Firewall rule to allow ICMPv6 to LAN	Helps make IPv6 work!	2015-06-16
Home Network	Disable NAT	If customer has a public IP block	2015-02-01
Maintenance	Disable SNMP	SNMP has a habit of having vulnerabilities, we are not aware of any for the VMG1312 though	2015-02-01
Maintenance	Disable 3G backup	Not usually required	2015-02-01
Firewall	Disable 'DoS Protection Blocking'	It does odd things, like blocking WebUI over WiFi!	2015-06-16
Maintenance	Change NTP servers	time.aa.net.uk and 0.uk.pool.ntp.org	2015-02-01
Maintenance	Change 'supervisor' password	Setting on Control Pages (same as admin)	2015-02-01
Maintenance	Change 'admin' password	Setting on Control Pages	2015-02-01
Firewall	Change Remote Management Options	Further Settings on Control Pages	2015-02-01
QoS	Change QoS	Set to give upstream priority based on 'Packet Length' See: VMG1312: QoS	2015-02-01
Firewall	Change 'Deny Ping Response' to Disable,	Allows the router to reply to pings	2015-02-01
QoS	Disable the default QoS Classes	See: VMG1312: QoS	2015-02-01
Maintenance	Remove the default read-only zyuser user as no need for it		2015-02-01

• Static routes are currently not configured. (Only applicable if you have multiple public IP blocks and need them routed to a secondary router. These can be configured manually though.

This list may not be exhaustive, and may change over time.

WAN Configuration

As mentioned above, the WAN side of the router is configured depending on the Service provided and the settings on the Control Pages.

Service	Bridge	WAN port	Note: WAN	Note: LAN	Note WiFi
FTTP	No	DSL	plugs in to OR modem	Customer LAN	Customer LAN
ADSL	No	DSL	Plugs in to phone line	Customer LAN	Customer LAN
FTTC engineer install	No	Port 4	plugs in to OR modem	Customer LAN	Customer LAN
FTTC wires only	No	DSL	Plugs in to phone line	Customer LAN	Customer LAN
FTTC wires only	with Customer own PPPoE router"	Yes	DSL	Plugs in to phone line	Customer PPPoE router	Disabled
ADSL	with Customer own PPPoE router"	Yes	DSL	Plugs in to phone line	Customer PPPoE router	Disabled