User Guide pmg5617 t20b

User’s Guide
PMG5617-T20B
AC1200 WiFi5 GPON VoIP Gateway ONT
Default Login Details Version 5.50 Ed 1, 4/2021

LAN IP Address http://192.168.1.254
Login TELMEX
Password See the device label
Copyright © 2021 Zyxel Communications Corporation

Table of Contents
Table of Contents
Part I: User’s Guide............................................................................................ 4
Chapter 1
Introduction ......................................................................................................................................... 5
1.1 Front Panel ......................................................................................................................................... 5

1.2 Rear Panel ......................................................................................................................................... 6
1.3 Side Panel .......................................................................................................................................... 8
1.4 Reset Button ...................................................................................................................................... 8
1.5 The PMG5617-T20B Does Not Support Wall Mounting .................................................................. 8
Chapter 2
Web Configurator................................................................................................................................ 9
2.1 Login ................................................................................................................................................... 9

2.2 Navigation Panel ............................................................................................................................ 10
2.2.1 Navigation Panel Icons ........................................................................................................ 13
Chapter 3
Tutorials .............................................................................................................................................. 14
3.1 Internet Connection Setup ............................................................................................................ 14

3.2 WiFi Setup ........................................................................................................................................ 17
3.2.1 Connecting Wireless Clients by Pushing a Button ............................................................. 20
3.2.2 Connecting Wireless Clients by PIN .................................................................................... 22
3.2.3 Manually Connecting Wireless Clients ............................................................................... 23
3.2.4 Configuring Guest WiFi ......................................................................................................... 24
3.3 Network Security ............................................................................................................................. 26
3.3.1 Configuring a Firewall Rule .................................................................................................. 26
3.3.2 Parental Control .................................................................................................................... 29
3.3.3 Configuring the MAC Address Filter .................................................................................... 31
3.4 Access the PMG5617-T20B Using DDNS ....................................................................................... 32
3.4.1 Registering a DDNS Account on www.dyndns.org ........................................................... 32
3.4.2 Configuring DDNS on Your PMG5617-T20B ........................................................................ 33
3.4.3 Testing the DDNS Settings ..................................................................................................... 34
3.5 Device Maintenance ..................................................................................................................... 34
3.5.1 Upgrading Firmware ............................................................................................................. 34
3.5.2 Backing Up Configuration .................................................................................................... 35
3.5.3 Restoring Configuration ....................................................................................................... 36
3.5.4 Resetting to Factory Default Settings .................................................................................. 37
PMG5617-T20B User’s Guide
2
Table of Contents
Part II: Technical Reference........................................................................... 40
Chapter 4
WiFi MAC Authentication ................................................................................................................. 41
4.1 WiFi MAC Authentication .............................................................................................................. 41
Chapter 5
Home Networking ............................................................................................................................. 43
5.1 LAN Setup ........................................................................................................................................ 43

5.2 LAN Static DHCP ............................................................................................................................. 44
5.3 UPnP Settings ................................................................................................................................... 45
5.3.1 Turning on UPnP in Windows 10 Example ........................................................................... 46
5.4 Wake on LAN .................................................................................................................................. 48
5.5 Ethernet UNI ..................................................................................................................................... 49
Chapter 6
Network Address Translation (NAT) ................................................................................................. 50
6.1 NAT Overview ................................................................................................................................. 50

6.2 Port Forwarding ............................................................................................................................... 50
6.3 Port Triggering ................................................................................................................................. 52
6.4 DMZ .................................................................................................................................................. 53
6.5 ALG Settings .................................................................................................................................... 54
6.6 Address Mapping ........................................................................................................................... 54
Chapter 7
Log ..................................................................................................................................................... 56
7.1 Log Overview .................................................................................................................................. 56

7.2 System Log ...................................................................................................................................... 56
7.3 Security Log ..................................................................................................................................... 57
Chapter 8
User Account..................................................................................................................................... 58
8.1 User Account .................................................................................................................................. 58
Chapter 9
Diagnostic.......................................................................................................................................... 60
9.1 Ping & TraceRoute & NsLookup .................................................................................................... 60

9.2 Diagnostic Test ................................................................................................................................ 61
Appendix A Legal Information ........................................................................................................ 62
3
P ART I
User’s Guide
4
CHAPTER 1
Introduction
The PMG5617-T20B GPON Internet access gateway provides IEEE 802.11n/ac wireless and a VoIP port for
connecting an analog phone.
1.1 Front Panel
5
Chapter 1 Introduction
See the Quick Start Guide for front panel LED descriptions.
1.2 Rear Panel
6
LABEL DESCRIPTION
RESET Press this button to restore the default configuration.
POWER Connect the power adapter and press the ON/OFF button to start the PMG5617-T20B.
ON/OFF
PHONE Connect an analog phone to the phone port to make phone calls.
USB Reserved.
LAN4 ~ LAN1 Connect computers or other Ethernet devices to these Ethernet ports for Internet access.
WAN Connect an Ethernet cable to the Ethernet WAN port for Internet access.
GPON Connect a fiber cable to the PON port for Internet access.
7
1.3 Side Panel
LABEL DESCRIPTION
WIFI ON/OFF Press this button for two seconds to turn 2.4 GHz and 5 GHz WiFi on or off.
WPS Press the WPS button for five seconds to quickly set up a secure wireless connection between the
PMG5617-T20B and a WPS-compatible client. Then press the client’s WPS button.
1.4 Reset Button

If you forget your password or cannot access the Web Configurator, you can use the RESET button on
the PMG5617-T20B rear panel to reload the factory default system configuration. The PMG5617-T20B
loses all configuration and the LAN IP address and password return to the default.
1 Make sure the Power LED is on and not blinking.
2 Press the RESET button for more than five seconds and release it when the Power LED starts blinking.
3 The PMG5617-T20B restarts with the factory default settings.
1.5 The PMG5617-T20B Does Not Support Wall Mounting
8
CHAPTER 2
Web Configurator
2.1 Login
1 Make sure your PMG5617-T20B hardware is properly connected (refer to the Quick Start Guide).
2 Launch a browser that supports HTML5, such as Internet Explorer 11, Mozilla Firefox, or Google Chrome,
and go to http://192.168.1.254.
3 Select a language. Use username TELMEX and the wireless key on the device label (if you have not
changed the password) to login.
4 Connection Status displays.
9
Chapter 2 Web Configurator
2.2 Navigation Panel

The menu icon ( ) displays the navigation panel of configuration menus and quick link icons.
10
Table 1 Configuration Menus

LINK TAB FUNCTION
Connection Displays the network status of the PMG5617-T20B and connected
Status computers/devices. Configure basic wireless and LAN settings.
Network Setting
Broadband Broadband Configure ISP parameters, WAN IP address assignment, and other
advanced properties. You can also add new WAN connections.
Wireless General Configure the WiFi settings and WLAN security settings.
Guest/More AP Configure multiple BSSs on the PMG5617-T20B.
MAC Block or allow wireless traffic from wireless devices of certain SSIDs and MAC
Authentication addresses to the PMG5617-T20B.
WPS Configure and use WPS (WiFi Protected Setup).
WMM Enable or disable WiFi MultiMedia (WMM).
Others Configure advanced wireless settings.
Channel Status Scan WiFi channel noise.
Home LAN Setup Configure LAN TCP/IP settings and other advanced properties.
Networking
Static DHCP Assign specific IP addresses to individual MAC addresses.
UPnP Turn UPnP and UPnP NAT-T on or off.
Wake on LAN Remotely turn on a device on the local network.
Ethernet UNI Configure LAN port media type and view LAN port speed and duplex state.
11
Table 1 Configuration Menus (continued)

LINK TAB FUNCTION
Routing Static Route Configure static routes to send data to devices not reachable through the
default gateway.
DNS Route Forward DNS queries for certain domain names through a specific WAN
interface to its DNS servers.
Policy Route Configure policy routes to override the default behavior and route packets
based on other criteria, such as the source address.
RIP Configure Routing Information Protocol to exchange routing information
with other routers.
NAT Port Forwarding Make local servers visible to the outside world.
Port Triggering Configure trigger port forwarding to allow LAN computers to dynamically
take turns using a service.
DMZ Configure a default server which receives packets from ports not specified
in the Port Forwarding screen.
ALG Enable the ALG (Application Layer Gateways) to allow applications to
operate through NAT.
Address Map local IP addresses to global IP addresses.
Mapping
Sessions Limit the number of concurrent NAT sessions a client can use so applications
like P2P file sharing do not use up too many of the available NAT sessions.
DNS DNS Entry Configure DNS name and IP address route entries
Dynamic DNS Use a static hostname alias for a dynamic WAN IP address.
Security
Firewall General Configure the firewall security level.
Protocol Add or remove Internet services and configure firewall rules.
Access Control Configure incoming/outgoing filtering rules.
DoS Activate protection against Denial of Service (DoS) attacks.
MAC Filter Block or allow traffic from wired LAN devices with certain MAC addresses.
Parental Configure rules to set Internet access schedules, restrict network services
Control access, and filter URLs.
Scheduler Configure day and time schedule objects to use in configuring features
Rule such as firewall access control.
System Monitor
Log System Log Display, clear, and export event logs.
Security Log Display, clear, export, and email security event logs.
Traffic Status WAN Display WAN traffic statistics.
LAN Display LAN traffic statistics.
NAT Display the LAN clients’ numbers of open connections.
VoIP Status Display VoIP registration, call, and phone status.
Call History Display received, dialed, and missed calls and a call history list.
ARP Table Display the IP-to-MAC address mappings for connected devices.
Routing Table Display IPv4 and IPv6 routing information.
WLAN Station Display the connected wireless clients.
Status
GPON Status Display detailed GPON information.
Maintenance
12
Table 1 Configuration Menus (continued)

LINK TAB FUNCTION
System Set the host name and domain name.
User Account Change the user password and idle timeout.
Time Configure the time and date.
Firmware Upload new firmware.
Upgrade
Backup/ Backup and restore device configuration or reset the factory default
Restore settings.
Reboot Restart the PMG5617-T20B.
Diagnostic Ping & Use Ping, TraceRoute, or Nslookup for troubleshooting.
Traceroute &
Nslookup
Diagnostic Test Perform network tests to diagnose the ISP, PON, and PPPoE connections.
2.2.1 Navigation Panel Icons
ICON DESCRIPTION
Wizard Configure time zone, Internet access, and wireless settings.
Theme Select a screen theme color.
Restart Reboot the PMG5617-T20B.

Language Select a screen language.
Logout Exit the Web Configurator.
13
CHAPTER 3
Tutorials
3.1 Internet Connection Setup

Use information from the Internet Service Provider (ISP) to connect to the Internet through a GPON
connection.
1 Click Network Setting > Broadband > Add New WAN Interface.
Example GPON connection settings:
General
Name MyGPONConnect
Type GPON
Mode Routing
Encapsulation PPPoE
PPP Information
PPP User Name 1234@GPON-Ex.com
PPP Password ABCDEF!
Static IP Address 192.168.1.32
Primary DNS server 192.168.5.1
14
Chapter 3 Tutorials
Secondary DNS server 192.168.5.2

Others PPP Connection Trigger: Auto Connect
PPPoE Passthrough: Disabled
Default PPP Credentials: Disabled
VLAN: Disabled
NAT: Enabled
IGMP Proxy: Enabled
Apply as Default Gateway: Enabled
Fullcone NAT: Disabled
6RD: Disabled
2 Enter the General settings as provided above.
2a Enable and name the connection.
2a Set Type to GPON.
2b Set Mode to Routing.
2c Choose the Encapsulation your GPON service provider specifies (PPPoE in this example).
3 Turn off Default PPP Credentials and enter your PPP user name and password.
4 Select Static IP Address and enter the provided IP address (192.168.1.32 in this example).
5 Select Use Following Static DNS Address and enter the provided DNS server addresses (192.168.5.1 and
192.168.5.2 in this example).
6 Enable Apply as Default Gateway to use this rule as your default Internet connection.
7 Leave the default settings for the rest of the fields. Click Apply to save your settings.
15
Chapter 3 Tutorials
2 3
16
Chapter 3 Tutorials
3.2 WiFi Setup

The PMG5617-T20B serves as an access point (AP) for connecting wireless devices.
Example WiFi settings:
SSID Example2.4GHz
Example5GHz
Security Mode WPA3-SAE/WPA2-PSK
Password DoNotStealMyWirelessNetwork1234
1 Click Network Setting > Wireless to open the General screen. Configure the 2.4 GHz band network’s
settings. Select More Secure as the security level and WPA3-SAE/WPA2-PSK as the security mode. Clear
the Generate password automatically option.
17
Chapter 3 Tutorials
18
Chapter 3 Tutorials
2 Select the 5 GHz band and configure its network settings. Click Apply.
19
Chapter 3 Tutorials
3.2.1 Connecting Wireless Clients by Pushing a Button

Windows notebooks and some Android devices support connecting by WPS push button.
1 Push and hold the PMG5617-T20B’s WPS button until the 2.4GHz/WPS and 5GHz/WPS LEDs start blinking.
Alternatively, use the PMG5617-T20B’s Network Setting > Wireless > WPS screen.
1a Enable WPS.
1b Enable Method 1 PBC.
1c Click Apply.
1d Click the WPS button.
b
d
c
2 Within two minutes, find the PMG5617-T20B’s WiFi network on your wireless client and connect to it. For
example, in Windows 10, click on the Network icon in the system tray to list available WiFi networks.
20
Chapter 3 Tutorials
3 Select the PMG5617-T20B’s WiFi network and click Connect.
Example2.4GHz
4 After Windows gets the WiFi network settings using WPS you can connect to the WiFi network securely.
21
Chapter 3 Tutorials
Example2.4GHz
5 With an Android device:
Wireless Client
WITHIN 2 MINUTES
Example2.4GHz
3.2.2 Connecting Wireless Clients by PIN

To connect a wireless client by its PIN number:
1 Enable WiFi on the client and note the client’s WPS PIN.
22
Chapter 3 Tutorials
2 Log into the PMG5617-T20B’s Web Configurator and go to Network Setting > Wireless > WPS.
2a Enable WPS.
2b Enable Method 2 PIN.
2c Click Apply.
2d Enter the WiFi device’s PIN and click Register.
c
3 Within two minutes, enable WPS on the wireless client.
The PMG5617-T20B authenticates the client using the PIN, and sends it the WiFi network settings. This may
take up to two minutes. The WiFi device can then connect to the WiFi network securely.
3.2.3 Manually Connecting Wireless Clients

On the wireless client enable WiFi, select the PMG5617-T20B’s SSID, and enter the password.
23
Chapter 3 Tutorials
3.2.4 Configuring Guest WiFi

Configure a guest WiFi network to grant visitors access to the Internet but not the local network.
Example guest WiFi settings:
SSID Guest
Security Mode WPA2-PSK
Password Guest12345678
1 Click Network Setting > Wireless > Guest/More AP and the “External Guest” wireless network’s Modify
icon.
2 Configure the screen using the desired parameters.
2a Enable Wireless.
2b Name the network.
2c Select Guest WLAN to let clients access the internet but not the local network.
2d Set Access Scenario to External Guest to block clients from connecting to each other directly.
2e Select More Secure as the security level and WPA2-PSK as the security mode. Clear the Generate
password automatically option and enter the guest password.
2f Click OK.
24
Chapter 3 Tutorials
a
b
c
d
f
3 In the Guest/More AP screen, a yellow Status bulb indicates the network is active.
25
Chapter 3 Tutorials
3.3 Network Security
3.3.1 Configuring a Firewall Rule

Use the firewall to protect your LAN devices from attacks from the Internet.
1 Go to Security > Firewall > General.
2 Enable IPv4 Firewall and IPv6 Firewall and click Apply.
3 Click Access Control > Add New ACL Rule.
26
Chapter 3 Tutorials
4 Create the rule to block or allow access.
27
Chapter 3 Tutorials
a
b
e
f
g
4a Filter Name: Name the firewall rule.
4b Source IP Address: Enter the IP address of the computer initializing traffic for the application or
service.
4c Destination IP Address: Enter the IP address of the computer to which traffic for the application or
service is entering.
4d Protocol: Select the protocol (ALL, TCP/UDP, TCP, UDP, ICMP or ICMPv6) used to transport the
packets.
4e Policy: Select whether to (ACCEPT, DROP, or REJECT) the packets.
28
Chapter 3 Tutorials
4f Direction: Select the direction (WAN to LAN, LAN to WAN, WAN to ROUTER, or LAN to ROUTER) of the
traffic to which this rule applies.
4g Click OK.
3.3.2 Parental Control

Configure rules to set Internet access schedules, restrict network services access, and filter URLs. This
example allows a user daytime Internet access (and does not allow nighttime access).
1 Click Security > Parental Control.
1a Select Enable.
1b Click Apply.
1c Click Add New PCP.
a
c
b
2 Select Enable and name the rule.
3 Select the user this rule applies to and click Add.
29
Chapter 3 Tutorials
2
3
4 Select days of the week to allow Internet access.
5 Use the sliders to set the allowed access time (7:00 to 21:00 here).
6 Click OK.
30
Chapter 3 Tutorials
6
3.3.3 Configuring the MAC Address Filter
Use the MAC address filter to exclusively allow or block a wired LAN device’s access. This example allows
only the LAN computer with a specific MAC address to access the PMG5617-T20B’s wired LAN.
1 Go to Security > MAC Filter > MAC Filter.
1a Select Enable.
1b Set MAC Restrict Mode to Allow.
1c Select a LAN host and click Add New Rule.
1d Select Active.
1e Click Apply.
31
Chapter 3 Tutorials
a
b
c
d
e
3.4 Access the PMG5617-T20B Using DDNS

If your PMG5617-T20B uses a dynamic WAN IP address, it is inconvenient for you to manage the
PMG5617-T20B from the Internet because the PMG5617-T20B’s WAN IP address keeps changing.
Dynamic DNS (DDNS) lets you use a domain name to access the PMG5617-T20B.
Apply for DDNS service at www.dyndns.org to use this feature.
Note: You cannot use DDNS with a private WAN IP address.
3.4.1 Registering a DDNS Account on www.dyndns.org
1 Open a browser and type http://www.dyndns.org.
32
Chapter 3 Tutorials
2 Apply for a user account. This tutorial uses UserName1 and 12345 as the username and password.
3 Log into www.dyndns.org using your account.
4 Add a new DDNS host name. This tutorial uses the following settings as an example.
• Hostname: zyxelrouter.dyndns.org
• Service Type: Host with IP address
• IP Address: Enter your PMG5617-T20B’s current WAN IP address from the Web Configurator
Connection Status page.
3.4.2 Configuring DDNS on Your PMG5617-T20B

Configure the same account and host name on the PMG5617-T20B.
1 Go to Network Setting > DNS > Dynamic DNS.
1a Select Enable Dynamic DNS.
1b Select www.DynDNS.com as the service provider.
1c In the Host Name field type zyxelrouter.dyndns.org.
1d Enter the user name (UserName1) and password (12345).
1e Click Apply.
33
Chapter 3 Tutorials
a
b
c
d
e
3.4.3 Testing the DDNS Settings
Now check if you can access the PMG5617-T20B from a computer on the Internet.
1 Open a web browser and type http://zyxelrouter.dyndns.org and press [Enter].
2 The PMG5617-T20B’s login page should appear.
3.5 Device Maintenance
3.5.1 Upgrading Firmware

Upload new firmware to the PMG5617-T20B for feature enhancements.
34
Chapter 3 Tutorials
1 The PMG5617-T20B uses model code ABYX. Download the correct firmware file from your service
provider. Unzip the file.
2 Go to Maintenance > Firmware Upgrade. Click Browse/Choose File and select the file with a ".bin"
extension to upload. Click Upload.
3 Wait two minutes, log in again, and check your new firmware version in the Connection Status screen.
3.5.2 Backing Up Configuration

Save a back up of the PMG5617-T20B’s configuration in case you need to return to your settings later.
1 Go to Maintenance > Backup/Restore.
2 Click Backup and select where to save the Backup_Restore file on your computer.
35
Chapter 3 Tutorials
3.5.3 Restoring Configuration

Restore a previously-saved configuration file from your computer to your PMG5617-T20B to return to the
previous settings.
2 Click Browse/Choose File and select the configuration file to upload. Click Upload.
36
Chapter 3 Tutorials
3 The PMG5617-T20B automatically restarts after the configuration file is successfully uploaded. Wait for
one minute before logging into the PMG5617-T20B again.
3.5.4 Resetting to Factory Default Settings

Reset to factory default settings to clear all user-entered configuration information and return the
PMG5617-T20B to its factory defaults.
2 Click the Restaurar button.
37
Chapter 3 Tutorials
3 The following warning screen appears. Click OK.
4 The PMG5617-T20B resets and automatically restarts. Wait for one minute before logging into the
PMG5617-T20B again.
38
Chapter 3 Tutorials
You can also press the RESET button on the rear panel to reset the factory defaults of your PMG5617-
T20B. Refer to Section 1.4 on page 8 for more information on the RESET button.
39
P ART II
Technical Reference
40
CHAPTER 4
WiFi MAC Authentication
4.1 WiFi MAC Authentication

Use Network Setting > Wireless > General to select the 2.4 GHz or 5 GHz wireless band.
Click the MAC Authentication tab to block or allow wireless client access by MAC addresses.
41
Chapter 4 WiFi MAC Authentication
• SSID: Select the network to filter.

• MAC Restrict Mode:
• Disable: Turn off MAC filtering.
• Deny: Block access for the listed wireless clients.
• Allow: Allow only the listed wireless clients to connect.
• MAC address List: Manage the list of wireless client MAC addresses in the table.
Click Add new MAC address to select a connected wireless client or manually enter a MAC address.
42
CHAPTER 5
Home Networking
5.1 LAN Setup

Click Network Setting > Home Networking to set your PMG5617-T20B’s Local Area Network (LAN) IP
address and subnet mask. Configure DHCP settings to have the PMG5617-T20B or a DHCP server assign
IP addresses to devices.
43
Chapter 5 Home Networking
LABEL DESCRIPTION
Interface Group
Group Name Select the interface group name for which to configure LAN settings.
LAN IP Setup
IP Address Enter your PMG5617-T20B’s LAN IPv4 IP address in dotted decimal notation, for example,
192.168.1.254 (factory default).
Subnet Mask Type the subnet mask of your network in dotted decimal notation, for example 255.255.255.0
(factory default).
DHCP Server State
DHCP Enable: Have the PMG5617-T20B act as a DHCP server or DHCP relay agent.
Disable: Stop the DHCP server on the PMG5617-T20B.
DHCP Relay: Have the PMG5617-T20B forward DHCP requests to a DHCP server.
DHCP Relay When you select DHCP Relay, enter the IPv4 IP address of the DHCP server here.
Server Address
IP Addressing When you enable DHCP, specify the first and last IP addresses of the IP address pool.
Values
Auto reserve Assigns the same IP address to the same MAC address when the host requests an IP address
IP for the again through DHCP.
same host
DHCP Server When you enable DHCP, specify for how long to use the IP addresses the PMG5617-T20B assigns
Lease Time through DHCP to clients before reusing them for other clients.
DNS Values This displays when you enable DHCP.
DNS Select DNS Proxy if you have the DNS proxy service. The PMG5617-T20B redirects clients’ DNS
queries to a DNS server for resolving domain names.
Select Static if you have the IP address of a DNS server. Enter the first and second DNS (Domain
Name System) server IP addresses in the fields that display below.
Select From ISP if your ISP dynamically assigns DNS server information.
5.2 LAN Static DHCP

Click Network Setting > Home Networking > Static DHCP to assign specific IP addresses to LAN
computers based on their MAC addresses.
Click Static DHCP Configuration to assign a fixed IP address to a device by selecting the interface group
and selecting the device/computer from a list or manually entering its MAC address and assigned IP
address.
44
5.3 UPnP Settings

Click Network Setting > Home Networking > UPnP to turn UPnP and UPnP NAT-T on or off.
45
LABEL DESCRIPTION
UPnP Enable UPnP to allow users to use a UPnP application to open the Web Configurator's login
screen without entering the PMG5617-T20B's IP address (you must still enter the password to log
in). See Section 5.3.1 on page 46 for an example of enabling UPnP on computers.
UPnP NAT-T Enable UPnP NAT traversal (NAT-T) to allow UPnP-enabled applications to automatically
configure the PMG5617-T20B so they can communicate through the PMG5617-T20B. The table
below displays the NAT port forwarding rules added automatically by UPnP NAT-T.
5.3.1 Turning on UPnP in Windows 10 Example
1 Click the Start icon, Settings, and then Network & Internet.
2 Click Network and Sharing Center.
46
3 Click Change advanced sharing settings.
4 Under Domain, select Turn on network discovery and click Save changes. Network discovery allows your
computer to find other computers and devices on the network and other computers on the network to
find your computer. This makes it easier to share files and printers.
47
5.4 Wake on LAN

Click Network Setting > Home Networking > Wake on LAN to remotely turn on a device on the network,
such as a computer, storage device or media server. The remote hardware (for example the network
adapter on a computer) must support Wake On LAN using the ‘Magic Packet’ method.
1 Select a LAN IP address or use Manual Input and enter the IP address or MAC address of the device.
2 Click Wake Up.
48
5.5 Ethernet UNI

Click Network Setting > Home Networking > Ethernet UNI to display the port speed and duplex state of
LAN port connections. If needed, configure the media type of a PMG5617-T20B LAN port to match the
Ethernet port on the connected device.
Select the media type that matches the Ethernet port connected to the LAN port: Auto, 1000FD (Full
Duplex), 100FD, 100HD (Half Duplex), 10FD, or 10HD.
49
CHAPTER 6
Network Address Translation
(NAT)
6.1 NAT Overview

Use NAT (Network Address Translation - NAT, RFC 1631) to translate the IP address of a host in a packet;
for example, the source address of an outgoing packet, used within one network, to a different IP
address known within another network.
Inside/Outside
Inside/outside denotes a host’s location relative to the PMG5617-T20B. For example, your LAN
computers are the inside hosts, while the web servers on the Internet are the outside hosts.
Global/Local
Global/local denotes the IP address of a host in a packet as the packet traverses a router, for example,
the local address refers to the IP address of a host when the packet is in the local network, while the
global address refers to the IP address of the host when the same packet is traveling in the WAN side.
NAT
In the simplest form, NAT changes the source IP address in a packet received from a LAN device (the
inside local address) to another (the inside global address) before forwarding the packet to the WAN
side. When the response comes back, NAT translates the destination address (the inside global address)
back to the inside local address before forwarding it to the original inside host.
Port Forwarding
A port forwarding set is a list of inside (behind NAT on the LAN) servers, for example, web or FTP, that you
can make visible to the outside world even though NAT makes your whole inside network appear as a
single computer to the outside world.
6.2 Port Forwarding

Use Network Setting > NAT > Port Forwarding to forward incoming service requests from the Internet to
servers on your local network. Port forwarding is commonly used when you want to host online gaming,
P2P file sharing, or other servers on your network.
50
Chapter 6 Network Address Translation (NAT)
Click Add New Rule to use the following screen to add a port forwarding or port translation entry.
51
LABEL DESCRIPTION
Active Enable or disable this rule.
Service Name Enter a name to identify this rule using keyboard characters (A-Z, a-z, 1-2 and so on).
WAN Interface Select the WAN interface through which to forward the service. You must have already
configured a WAN connection with NAT enabled.
Start Port Enter the original destination port for the packets. To forward only one port, enter the port
number here and in the End Port field.
End Port Enter the last port of the original destination port range.
Translation Start Use port translation to have the PMG5617-T20B change the ports of packets coming in from the
Port WAN. For a range of ports, enter the first number of the range to which you want the incoming
ports translated.
Translation End Specify the last port of the translated port range.
Port
Server IP Specify the inside IP address of the virtual server.
Address
Configure Select Enable to enter the source IP address of WAN interface.
Originating IP
Originating Enter the source IP address of the packets received on the WAN interface.
IP
Protocol Select the protocol supported by this virtual server. Choices are TCP, UDP, or TCP/UDP.
6.3 Port Triggering

Click Network Setting > NAT > Port Triggering to configure trigger port forwarding to allow LAN
computers to dynamically take turns using a service.
Click Add New Rule to create new port triggering rules. Configure a port or range of ports and protocols
for sending out requests and for receiving responses.
52
LABEL DESCRIPTION
Active Enable or disable this rule.
Service Name Enter a name to identify this rule using keyboard characters (A-Z, a-z, 1-2 and so on).
WAN Interface Select a WAN interface for which to configure port triggering rules.
Trigger Start Port The trigger port is a port (or a range of ports) that causes (or triggers) the PMG5617-T20B to
record the IP address of the LAN computer that sent the traffic to a server on the WAN.
Type a port number or the starting port number in a range of port numbers.
Trigger End Port Type the ending port number in the trigger port range.
Trigger Protocol Select the transport layer protocol from TCP, UDP, or both.
Open Start Port The open port is a port (or a range of ports) that a server on the WAN uses when it sends out a
particular service. The PMG5617-T20B forwards the traffic with this port (or range of ports) to the
client computer on the LAN that requested the service.
Enter the port number or the starting port number in a range of port numbers.
Open End Port Type the ending port number in the open port range.
Open Protocol Select the transport layer protocol from TCP, UDP, or both.
6.4 DMZ
Click Network Setting > NAT > DMZ to configure a default server which receives packets with port
numbers not specified in the Port Forwarding screen.
Select a LAN host or manually enter the server’s IP address.
53
6.5 ALG Settings

Application Layer Gateways (ALGs) allow applications to operate through NAT. Click Network Setting >
NAT > ALG to enable and disable the PMG5617-T20B’s ALGs.
6.6 Address Mapping

Click Network Setting > NAT > Address Mapping to map local IP addresses to global IP addresses.
Ordering your rules is important because the PMG5617-T20B applies the rules in order. When a packet
matches a rule, the PMG5617-T20B takes the corresponding action and ignores the remaining rules.
54
Click Add New Rule to create an address mapping rule. Specify the NAT mapping type, the local and
global IP addresses, and a WAN interface.
LABEL DESCRIPTION
Rule Name Name the rule.
Type One-to-One: Map one local IP address to one global IP address. Note that port numbers do not
change for the One-to-One NAT mapping type.
Many-to-One: Map multiple local IP addresses to one global IP address.
Many-to-Many: Map multiple local IP addresses to shared global IP addresses.

Local Start IP Enter the starting Inside Local IP Address (ILA).
Local End IP Enter the ending Inside Local IP Address (ILA). If the rule is for all local IP addresses, then this field
displays 0.0.0.0 as the Local Start IP address and 255.255.255.255 as the Local End IP address. This
field is blank with the One-to-One type.
Global Start IP With the Many-to-One type, enter the starting Inside Global IP Address (IGA). Enter 0.0.0.0 here if
you have a dynamic IP address from your ISP.
Global End IP Enter the ending Inside Global IP Address (IGA). This field is blank with the One-to-One or Many-
to-One type.
WAN Interface Select the WAN interface to which to apply the address mapping rule.
55
CHAPTER 7
Log
7.1 Log Overview

Alerts and Logs
Alert logs warrant more serious attention. They include system errors, attacks (access control) and
attempted access to blocked web sites. Some categories such as System Errors consist of both logs and
alerts. The log screens display alerts in red and logs in black.
Severity Levels
Emergency The system is unusable.
Alert Action must be taken immediately.
Critical The system condition is critical.
Error There is an error condition on the system.
Warning There is a warning condition on the system.
Notice There is a normal but significant condition on the system.
Informational The log contains an informational message.
Debug The message is intended for debug-level purposes.
7.2 System Log

Click System Monitor > Log > System Log to display, clear, and export event logs. Use the System Log
screen to see the system logs. You can filter the entries by selecting a severity level and/or category.
56
Chapter 7 Log
7.3 Security Log

Click System Monitor > Log > Security Log to display, clear, and export security event logs. Use the
Security Log screen to see the security-related logs for the categories that you select. You can filter the
entries by selecting a severity level and/or category.
57
CHAPTER 8
User Account
8.1 User Account

Click Maintenance > User Account to display the list of user accounts.
Click the Edit icon to open the following screen where you can change the password and idle timeout.
LABEL DESCRIPTION
Active This account is always enabled.
User Name This user name is fixed.
Old Password In order to change the password, first type the default password or the existing password.
58
Chapter 8 User Account
LABEL DESCRIPTION
New Password Type your new system password (6 to 64 characters). Use at least one number and one letter.
After changing the password, use the new password to access the PMG5617-T20B.
Verify New Type the new password again for confirmation.
Password
Idle Timeout Enter the length of inactive time before the PMG5617-T20B automatically logs the user out of the
Web Configurator.
59
CHAPTER 9
Diagnostic
9.1 Ping & TraceRoute & NsLookup

Click Maintenance > Diagnostic > Ping&TraceRoute&NsLookup to open the following screen for
troubleshooting.
• Ping checks if the address you entered is reachable. You can also specify how many pings to send.
• Traceroute displays the route path and transmission delays between the PMG5617-T20B and the
address you entered.
• Nslookup performs a DNS lookup to find the IP address for a host name and vice versa.
60
Chapter 9 Diagnostic
9.2 Diagnostic Test

Click Maintenance > Diagnostic > Diagnostic Test to perform network tests to diagnose the ISP, PON,
and PPPoE connections. The tests display NA if the GPON port is not connected.
61
APPENDIX A
Legal Information
Copyright
Copyright © 2021 by Zyxel Communications Corporation.
The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any
language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or
otherwise, without the prior written permission of Zyxel Communications Corporation.
Published by Zyxel Communications Corporation. All rights reserved.
Disclaimer
Zyxel does not assume any liability arising out of the application or use of any products, or software described herein. Neither does it convey any
license under its patent rights nor the patent rights of others. Zyxel further reserves the right to make changes in any products described herein
without notice. This publication is subject to change without notice.
Certification
Safety Requirement
La operación de este equipo está sujeta a las siguientes dos condiciones:
1 Es posible que este equipo o dispositivo no cause interferencia perjudicial.
2 Este equipo o dispositivo debe aceptar cualquier interferencia. Incluyendo la que pueda causar su
operación no deseada.
Safety Warnings
• To reduce the risk of fire, use only No. 26 AWG or larger (for example, 24 AWG) UL Listed or CSA Certified Telecommunication Line Cord.
• Do not install, use, or service this device during a thunderstorm. There is a remote risk of electric shock from lightning.
• Do not use the device outside, and make sure all the connections are indoors. There may be a remote risk of electric shock from lightning.
• Do not obstruct the device ventilation slots as insufficient airflow may harm your device. For example, do not place the device in an
enclosed space such as a box or on a very soft surface such as a bed or sofa.
• Do not store things on the device.
• Do not expose your device to dampness, dust, or corrosive liquids.
• Connect ONLY suitable accessories to the device.
• Do not open the device or unit. Opening or removing covers can expose you to dangerous high voltage points or other risks.
• Only qualified service personnel should service or disassemble this device. Please contact your vendor for further information.
• Make sure to connect the cables to the correct ports.
• Place connecting cables carefully so that no one will step on them or stumble over them.
• Always disconnect all cables from this device before servicing or disassembling.
• Do not remove the plug and connect it to a power outlet by itself; always attach the plug to the power adaptor first before connecting it to
a power outlet.
• Do not allow anything to rest on the power adaptor or cord and do NOT place the product where anyone can walk on the power adaptor
or cord.
• Please use the provided or designated connection cables/power cables/adaptors. Connect it to the right supply voltage (for example, 110V
AC in North America or 230V AC in Europe). If the power adaptor or cord is damaged, it might cause electrocution. Remove it from the
device and the power source, repairing the power adapter or cord is prohibited. Contact your local vendor to order a new one.
• Do not use the device outside, and make sure all the connections are indoors. There is a remote risk of electric shock from lightning.
• CAUTION: Risk of explosion if battery is replaced by an incorrect type, dispose of used batteries according to the instruction. Dispose them at
the applicable collection point for the recycling of electrical and electronic devices. For detailed information about recycling of this
product, please contact your local city office, your household waste disposal service or the store where you purchased the product.
62
Appendix A Legal Information
• The following warning statements apply, where the disconnect device is not incorporated in the device or where the plug on the power
supply cord is intended to serve as the disconnect device,
- For permanently connected devices, a readily accessible disconnect device shall be incorporated external to the device;
- For pluggable devices, the socket-outlet shall be installed near the device and shall be easily accessible.
• Do not drop or hit the device or allow it to hit anything.
Important Safety Instructions

• Caution! The RJ-45 jacks are not used for telephone line connection.
• Caution! Do not use this product near water, for example a wet basement or near a swimming pool.
• Caution! Avoid using this product (other than a cordless type) during an electrical storm. There may be a remote risk of electric shock from
lightning.
• Caution! Always disconnect all telephone lines from the wall outlet before servicing or disassembling this product.
• Complies with 21 CFR 1040.10 and 1040.11 except for conformance with IEC 60825-1 Ed. 3., as described in Laser Notice No. 56, dated May 8,
2019.
• CLASS 1 LASER PRODUCT & COMPLIES WITH IEC 60825-1:2014
About the Symbols

Various symbols are used in this product to ensure correct usage, to prevent danger to the user and others, and to prevent property damage.
The meaning of these symbols are described below. It is important that you read these descriptions thoroughly and fully understand the
contents.
Explanation of the Symbols
SYMBOL EXPLANATION
Alternating current (AC):

AC is an electric current in which the flow of electric charge periodically reverses direction.
Direct current (DC):

DC if the unidirectional flow or movement of electric charge carriers.
Earth; ground:
A wiring terminal intended for connection of a Protective Earthing Conductor.
Class II equipment:
The method of protection against electric shock in the case of class II equipment is either double insulation or
reinforced insulation.
Viewing Certifications
Go to http://www.zyxel.com to view this product’s documentation and certifications.
Zyxel Limited Warranty

Zyxel warrants to the original end user (purchaser) that this product is free from any defects in material or workmanship for a specific period (the
Warranty Period) from the date of purchase. The Warranty Period varies by region. Check with your vendor and/or the authorized Zyxel local
distributor for details about the Warranty Period of this product. During the warranty period, and upon proof of purchase, should the product
have indications of failure due to faulty workmanship and/or materials, Zyxel will, at its discretion, repair or replace the defective products or
components without charge for either parts or labor, and to whatever extent it shall deem necessary to restore the product or components to
proper operating condition. Any replacement will consist of a new or re-manufactured functionally equivalent product of equal or higher value,
and will be solely at the discretion of Zyxel. This warranty shall not apply if the product has been modified, misused, tampered with, damaged by
an act of God, or subjected to abnormal working conditions.
Note
Repair or replacement, as provided under this warranty, is the exclusive remedy of the purchaser. This warranty is in lieu of all other warranties,
express or implied, including any implied warranty of merchantability or fitness for a particular use or purpose. Zyxel shall in no event be held
liable for indirect or consequential damages of any kind to the purchaser.
To obtain the services of this warranty, contact your vendor. You may also refer to the warranty policy for the region in which you bought the
device at http://www.zyxel.com/web/support_warranty_info.php.
Registration
Register your product online to receive e-mail notices of firmware upgrades and information at www.zyxel.com for global products, or at
www.us.zyxel.com for North American products.
Open Source Licenses

This product contains in part some free software distributed under GPL license terms and/or GPL like licenses. Open source licenses are provided
with the firmware package. You can download the latest firmware at www.zyxel.com. To obtain the source code covered under those Licenses,
please contact support@zyxel.com.tw to get it.
63

User Guide pmg5617 t20b

Uploaded by

Copyright:

Available Formats

User Guide pmg5617 t20b

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

User Guide pmg5617 t20b

Uploaded by

Copyright:

Available Formats

User’s Guide

Default Login Details Version 5.50 Ed 1, 4/2021

Copyright © 2021 Zyxel Communications Corporation

Part I: User’s Guide............................................................................................ 4

1.1 Front Panel ......................................................................................................................................... 5

2.1 Login ................................................................................................................................................... 9

3.1 Internet Connection Setup ............................................................................................................ 14

PMG5617-T20B User’s Guide

Part II: Technical Reference........................................................................... 40

4.1 WiFi MAC Authentication .............................................................................................................. 41

5.1 LAN Setup ........................................................................................................................................ 43

6.1 NAT Overview ................................................................................................................................. 50

7.1 Log Overview .................................................................................................................................. 56

8.1 User Account .................................................................................................................................. 58

9.1 Ping & TraceRoute & NsLookup .................................................................................................... 60

Appendix A Legal Information ........................................................................................................ 62

PMG5617-T20B User’s Guide

1.1 Front Panel

PMG5617-T20B User’s Guide

1.2 Rear Panel

PMG5617-T20B User’s Guide

PMG5617-T20B User’s Guide

1.3 Side Panel

1.4 Reset Button

1 Make sure the Power LED is on and not blinking.

3 The PMG5617-T20B restarts with the factory default settings.

1.5 The PMG5617-T20B Does Not Support Wall Mounting

PMG5617-T20B User’s Guide

4 Connection Status displays.

PMG5617-T20B User’s Guide

2.2 Navigation Panel

PMG5617-T20B User’s Guide

Table 1 Configuration Menus

PMG5617-T20B User’s Guide

Table 1 Configuration Menus (continued)

PMG5617-T20B User’s Guide

Table 1 Configuration Menus (continued)

2.2.1 Navigation Panel Icons

Restart Reboot the PMG5617-T20B.

PMG5617-T20B User’s Guide

3.1 Internet Connection Setup

Example GPON connection settings:

PMG5617-T20B User’s Guide

Secondary DNS server 192.168.5.2

PPPoE Passthrough: Disabled

Default PPP Credentials: Disabled

IGMP Proxy: Enabled

Apply as Default Gateway: Enabled

Fullcone NAT: Disabled

2 Enter the General settings as provided above.

2a Enable and name the connection.

2a Set Type to GPON.

2b Set Mode to Routing.

PMG5617-T20B User’s Guide

PMG5617-T20B User’s Guide

3.2 WiFi Setup

Example WiFi settings:

PMG5617-T20B User’s Guide

PMG5617-T20B User’s Guide