Zyxel VMG5313-B30 by Iskon

[Ag008]

Dostupna je;

[mauro.stefancic]

...da li se može koristiti kao VPN gateway (server role) ? Naime, kreirao sam Open VPN server na android media box-u (žično spojen na Zyxel), kao privremeno rješenje za spajanje Iphona na lokalnu mrežu (PPTP VPN preko Open VPN klienta). Konekcija na server uredno radi, ali iz nekog razloga nemam pristup WIFI lokalnim uređajima (otvorio sam potrebe VPN portove preko firewall / acces control menija). Jel' netko pokušao nešto slično ? Ukoliko VPN IPSec radi, nema potrebe za dodatnim serverima…

[Ag008]

Pa jesi sam probao? Imaš u službenim uputama od 251-257 stranice kako kreirati to što bi ti htio (valjda). Nije mi ni baš jasno što radiš i što želiš.
ftp://ftp2.zyxel.com/VMG5313-B30A/us...ion%205.00.pdf
Ako još nemaš admina, ovdje je postupak kako ga dobiti;
http://forum.pcekspert.com/showthrea...14#post2762814
Pa se s njime prijaviš i eksperimentiraš

[mauro.stefancic]

...VPN veza mi je potrebana za upravljanje Orvibo Allone WiWo-R1U smart home automation uređaja, preko Iphone aplikacije (uređaj se na lokalnu mrežu spaja bežično). Zatražio sam od ISP-a da mi otvori navedenu opciju, za sada bez rezultata. Izgleda da ću morati kreirati admina...radi i na trio paketu (fw V1.00 (AAUN.1)b2_150507) ?

[doctorow]

Hi, I'm running the latest firmware here (V1.00(AAUN.1)b2_150507). Unfortunately I don't speak Croatian, and I tried following silver_tip's instruction by cut & pasting it to Google Translate. But I am afraid the output was rather gibberish. Could you help me and summarize the steps in English?

Thanks! Andrew

[Nikky]

You are temporarily in Croatia (I see by *.dsl.iskon.hr) ?
In this topic we are talking about a device from the title, and how to bypass idiotic restrictions implemented by isp customization.
If you do not miss any of the hidden options then you do not need fiddle with "unlocking".

[doctorow]

Autor Nikky

You are temporarily in Croatia (I see by *.dsl.iskon.hr) ?
In this topic we are talking about a device from the title, and how to bypass idiotic restrictions implemented by isp customization.
If you do not miss any of the hidden options then you do not need fiddle with "unlocking".

Thanks, yes, temporarily, but for the next one year or so. I'd like to use the ipsec and sip features of the router, and I understand that these features have been restricted/removed for no apparent reason. I looked at the posts here and I understand that, after a hard reset and without the device being attached to the dsl line, I have to create one or two users to be able to get admin rights before being able to SSH/telnet to the device and do the rest... it's just that there are some parts that I didn't understand through Google Translate and I want to avoid any mistakes that I cannot reverse afterwards. Appreciate your help.

[silver_tip]

1. Adding admin does not solve the your problem.
2. After connecting the cable from the ISP, options that you need to be locked - hide.
3. User admin has additional access:

a) Power Management
b) USB Service + Media Server + Print Server
c) Wireless -WDS
d) VoIP Call History
e) VoIP Call Rule

4. Only flesh to the factory fw leaves all options open.
5. With factory fw everything works ok. if you know your SIP data and username and password for DSL connection.

6. All these data can be drawn from the router but no one wants to publish it, because ISPs could change security settings, and then everything would perhaps locked.

[doctorow]

Autor silver_tip

6. All these data can be drawn from the router but no one wants to publish it, because ISPs could change security settings, and then everything would perhaps locked.

This makes sense and is quite unfortunate. I would buy my own router/modem, but as you said, the DSL login data is hidden, so even that option is unavailable. Question, with user admin, is there the possibility to enable something like a bridge mode? I have a Fritzbox as well and I'd be happy if I could hook it up directly to the Internet (rather than in a limited NAT behind the Zyxel).

Andrew

[Nikky]

You said you would like to use the ipsec and sip features, both you could solve this way:
- Define which ports use IPSec (by a version of IPSec)
- In PortForward function of ZyXEL (should you be available), open ports
- Take / get another WAN router with IPSec feature and set IPSec connection
It should work.

In a similar way should work alternative VoIp with additional VoIP Gateway.

Unfortunately you have / you chose an ISP that pushes a lot of restrictions.
I'm not sure if you can get a Bridge mode for Internet connection,
then things would be a little easier.

[doctorow]

Autor Nikky

You said you would like to use the ipsec and sip features, both you could solve this way:
- Define which ports use IPSec (by a version of IPSec)
- In PortForward function of ZyXEL (should you be available), open ports
- Take / get another WAN router with IPSec feature and set IPSec connection
It should work.

Unfortunately it doesn't work. I tried. I have a Fritzbox that I previously used and which is now NATed behind the Zyxel. But the Zyxel doesn't seem to forward ESP packets, at least with the current limited Iskon firmware (only TCP/UDP worked). I also tried putting the Fritzbox in the DMZ zone, but IPsec packets were still not properly forwarded.

Unfortunately you have / you chose an ISP that pushes a lot of restrictions.

I agree. Someone recommended them to me and also handled the ordering and everything. Of course he had no idea, and when I asked him, he said that most Croatian ISPs restrict their routers and the choice of routers.

I'm not sure if you can get a Bridge mode for Internet connection,
then things would be a little easier.

I agree, a bridge mode would solve a lot of problems considering that even port forwarding is kinda limited (see above). I'd basically use the Zyxel just as a modem, and have another router (my Fritzbox) do all the rest.

[MasterX]

send Iskon e-mail to pomoc@iskon.hr and ask them to change (Zyxel) router configuration to BRIDGE MODE, tell them to provide you PPPoE username and password

it works 100%, since I have 4 Iskon VDSL connections on different locations, all of them are in bridge mode with ASUS routers behind Zyxel

I got this setup working for OpenVPN site-to-site tunnels etc. connecting remote offices with the main office (HQ)

did anybody got Moj.Iskon app running on mobile phone (android - playstore)?

[doctorow]

Thanks MasterX, this might be a solution.

[MasterX]

FritzBox is nice for home or small office router, I am running 7390 and 7490 in VPN site-to-site config,
which version do you use?

Downside is mediocre IPSEC throughput.

btw. 3G fail-over mode doesn't work in LAN1=WAN scenario, only on pure xDSL.

[doctorow]

Autor MasterX

FritzBox is nice for home or small office router, I am running 7390 and 7490 in VPN site-to-site config,
which version do you use?

It's a 7390 as well. The 7490 looks much nicer, if it wasn't so expensive.

Downside is mediocre IPSEC throughput.

Is it? I wouldn't know as my bandwidth is the limiting factor.

btw. 3G fail-over mode doesn't work in LAN1=WAN scenario, only on pure xDSL.

Thanks, good to know. I don't use 3G.

I will try calling Iskon tomorrow. Haven't dealt with their support yet, and I am not sure how it works when I can only speak English.

[Nikky]

If language will be a problem, try via e-mail as MasterX suggested.

[MasterX]

I gave this task to IT technician, he has tried to get this info over the phone, 1st support level (students) were not able to provide info, so they have transfered him to 2nd support level (Iskon technicians) they can change mode to Bridge, and tell you PPPoE password, your PPPoE username should be the same one you use for moj.iskon.hr

for other locations I did it over e-mail, just make sure your e-mail is registered in moj.iskon.hr as official contact (kontakt) e-mail address

I have tried FB 7490 <-> FB 7390 with WAN link 75/7,5Mbps on both sides, I am getting about 500-600kb/sec ~ 4Mbps with FritzBox IPSEC VPN tunnel, not bad, maybe it could go a bit faster, but I don't have FB on 10 or 100Mbit link

you should be able to saturate Iskon 5Mbps upload with your FB VPN

[doctorow]

Thanks again, MasterX.

[CyberMuz]

Bok!

Dobio sam prije par dana ovaj router VMG5313-B30A Firmwire V1.00(AAUN.0). Pokušao sam sljediti upute sa stranice #2 kako bi dodao novog usera no ne uspijevam. Nakon što isključim dsl kabel i napravim hard reset routera i dalje ne vidim opciju dodavanja usera u management sučelju. Da li sada Iskon isporučuje routere sa blokiranom ovom opcijom odmah u startu? Ili ja radim nešto krivo.
Postoji li neki alternativni način 'otključavanja' routera?

[Ag008]

Nisi dovoljno dugo držao reset tipku. Znači hard reset je držanje oko 20-30sekundi dok power lampica ne ostane svijetlit zeleno. Isključiti, uključiti (cijelo vrijeme držati reset) i opet dok ne pozeleni. Ukupno ćeš više od minute držati reset tipku pa se pripremi.

[Thoroughbred B]

Koji je prokleti pass za uć u ovaj router???

VMG5313-B30A

probao sve i svasta...

EDIT: uspio Administrator Administrator...

[webstartm]

Kako prebacit wifi u 5ghz mode? Sad je na 2.4 i nemogu minjat

Problem mi je sta na kompu koji se spaja preko wifia neradi wot i torrent, a komp koji se spaja zicom rade
Pa san isprobava razlicite enkripcije,i nista,pa mi je jedan kolega tu na pce predlozia da stavim 5ghz,al roter neda

[Ag008]

Ne možeš prebaciti kada router to ne podržava
http://www.zyxel.com/products_servic...b_series.shtml

[webstartm]

thx... koje smece od rutera
i dalje nemogu rijesit torrent i wot...

[Prki]

Kako podiči jačinu Wi-Fi signala na ovom čudu????

[Nikky]

Teško pogledati stranicu prije ?

[Prki]

Nije teško naravno, al ajde ti pronađi pa meni lijenome pokaži, molim te , jer ja eto ne nađem ništa o pojačavanju signala na routeru niti na zadnjoj niti na predzadnjoj niti na onoj prije nje.

[Ag008]

Evo, ja vidim. Rješenje je da rastaviš Zyxel i sam ugradiš svoje antene unutra. Drugačije ne ide.
Nema postavki za "pojačanje";

Autor lobo64

Evo i fotke VMG5313-B30A iznutra. Nisu baš najbolje, fotić je star a ja nisam Tošo Dabac.

Autor Ag008

Dobra je fotka lobo64.
Zanimljivo, antenice su male (navodno 3dbi), možda bi se dalo staviti vlastite za povećanje dometa.
Koliko vidim na ploči nema predviđeno mjesto za još jedan usb kao na t-comov speedportu.
Ima serial...

Autor lobo64

Antene se lako zamijene: na bočnim stranicama kućišta ima dovoljno mjesta da se dremelom izbuše rupe za RP-SMA. Na board su spojene preko uFL pa ih nije problem otkopčati.

Problem sa vanjskim antenama (većim, npr. onima od TP Linka 9 db) bi mogao biti u stabilnosti samog rutera pošto mu je nogica na kojoj stoji vrlo uska a dvije takve antene su teže od samog uređaja, tj. ruter bi možda trebalo polegnuti da se ne prehiti.
Ako ga se polegne, moguć je problem sa hlađenjem, tj. trebalo bi ga polegnuti na prednju stranu (na onu na kojoj su ledice) pošto se u radu dosta grije tako da vent otvori na zadnjoj strani budu prema gore.
Ili spičiti mali 40x10 vent (Noctua npr.) na hladnjak (ako se negdje na bordu može cvajgati napon od 12 V).

Autor Ag008

Evo i jedan kolega je danas rastavio svog. Nije ga teško otvoriti.
Samo nismo baš našli pogodno mjesto za bušenje rupe, on još od prije ima pigtail i 10dbi antenu. Spojio je i radi, nešto bolje.

Možda si i ja naručim,
potreban je ovaj ufl
http://www.banggood.com/50cm-U_FLIPX...-p-924946.html
i može npr ova antena
http://www.banggood.com/2_4GHz-10dBi...-p-940255.html

Autor silver_tip

Ne treba kupovati bas najjeftinije smece jer krajnji rezultat moze biti i gorji zbog nepromisljenosti...

Ispod RG178 ili RG316 ne treba ici nikako za U.fl/IPX cabel jer dolazi do gubitka u samom startu ditribucije signala.

Imam ih vise komada i naspram ovih po 1-2$ na 300m udaljnosti razlika bude i po 10dBm mjereno sa inSSIDer-om te nikako nije isto ako vam signal "sece" izmedju -60 do -75dBm i -70 do -85dBm.

Ovo je ok a nije preskupo.

http://www.ebay.com/itm/U-fl-IPX-RP-...item233866b5cb

http://www.ebay.com/itm/121282701414...%3AMEBIDX%3AIT

Kvalitetniji cabel od RG316 zbilja nema potrebe...

Sto se antena tice i sa kojima je obavljeno mjerenje i testiranje kamare raznih AP-a i routera, ova se pokazala ok. Dakle kuce udaljene 300m, antene su u tavanu obje i nema opticke vidljivosti no WDS uredno radi bez prekida linka.

http://www.links.hr/?naziv=antena-tp...kl=053.512.281

[Prki]

Ja sam mislio na softwersko pojačavanje signala, koje kako vidim nije moguće.Na routerima prije ovoga sam imao tu opciju pa sam kontao da ima i ovaj.A šta ti je na prvoj slici "Output Power" ???

[Nikky]

Kod ovih kućnih igračaka obično nema "pumpanja" preko norme, a to je vezano sa regijom i mogućnostima pojedinog uređaja.
Kolega ti je kopirao šta trebaš, ako se ove late zamjene pristojnim antenama pojačanje signala / radijusa pokrivenosti bi se moglo poprilično poboljšati.